suse/kgraft-patch-SLE12-SP5_Update_21&distro=SUSE Linux Enterprise Live Patching 12 SP5

Vulnerabilities (38)

• CVE-2022-0487Feb 4, 2022
  affected < 10-2.1fixed 10-2.1

  A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host/rtsx_usb_ms.c in memstick in the Linux kernel. In this flaw, a local attacker with a user privilege may impact system Confidentiality. This flaw affects kernel versions prior to 5.14 rc1.

• CVE-2021-4083Jan 18, 2022
  affected < 8-2.2fixed 8-2.2

  A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalat

• CVE-2021-0920KEVDec 15, 2021
  affected < 9-2.1fixed 9-2.1

  In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro

• CVE-2021-0935Oct 25, 2021
  affected < 5-2.2fixed 5-2.2

  In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid

• CVE-2021-0941Oct 25, 2021
  affected < 6-2.1fixed 6-2.1

  In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAn

• CVE-2021-42739Oct 20, 2021
  affected < 7-2.2fixed 7-2.2

  The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandles bounds checking.

• CVE-2021-41864Oct 1, 2021
  affected < 5-2.2fixed 5-2.2

  prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write.

• CVE-2021-3653Sep 29, 2021
  affected < 3-2.2fixed 3-2.2

  A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue co

• CVE-2021-3573Aug 13, 2021
  affected < 4-2.1fixed 4-2.1

  A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add(), hci_sock_blackl

• CVE-2021-38198Aug 8, 2021
  affected < 3-2.2fixed 3-2.2

  arch/x86/kvm/mmu/paging_tmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault.

• CVE-2021-38160Aug 7, 2021
  affected < 4-2.1fixed 4-2.1

  In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size. NOTE: the vendor indicates that the cited data corruption is not a vulnerability in any ex

• CVE-2021-37576Jul 26, 2021
  affected < 2-2.1fixed 2-2.1

  arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e.

• CVE-2021-33909Jul 20, 2021
  affected < 1-8.3.1fixed 1-8.3.1

  fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.

• CVE-2021-3612Jul 9, 2021
  affected < 1-8.3.1fixed 1-8.3.1

  An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in versions before 5.9-rc1, in the way the user calls ioctl JSIOCSBTNMAP. This flaw allows a local user to crash the system or possibly escalate their privileges on the system. The highe

• CVE-2021-22555KEVJul 7, 2021
  affected < 1-8.3.1fixed 1-8.3.1

  A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space

• CVE-2020-36385Jun 7, 2021
  affected < 1-8.3.1fixed 1-8.3.1

  An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called, aka CID-f5449e74802c.

• CVE-2021-22543May 26, 2021
  affected < 2-2.1fixed 2-2.1

  An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pag

• CVE-2020-3702Sep 8, 2020
  affected < 7-2.2fixed 7-2.2

  u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapd