suse/kgraft-patch-SLE12-SP5_Update_24&distro=SUSE Linux Enterprise Live Patching 12 SP5

Vulnerabilities (39)

• CVE-2022-0435Mar 25, 2022
  affected < 5-2.2fixed 5-2.2

  A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate

• CVE-2022-0330Mar 25, 2022
  affected < 10-2.1fixed 10-2.1

  A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system.

• CVE-2022-27666Mar 23, 2022
  affected < 8-2.1fixed 8-2.1

  A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.

• CVE-2022-1011Mar 18, 2022
  affected < 9-2.1fixed 9-2.1

  A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.

• CVE-2022-26490Mar 6, 2022
  affected < 15-2.2fixed 15-2.2

  st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTION buffer overflows because of untrusted length parameters.

• CVE-2021-3744Mar 4, 2022
  affected < 1-8.3.2fixed 1-8.3.2

  A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory consumption). This vulnerability is similar with the older CVE-2019-18808.

• CVE-2022-0492HigKEVMar 3, 2022
  affected < 7-2.1fixed 7-2.1

  A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpecte

• CVE-2020-36516Feb 26, 2022
  affected < 16-2.3fixed 16-2.3

  An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session.

• CVE-2021-20322Feb 18, 2022
  affected < 3-2.1fixed 3-2.1

  A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomizat

• CVE-2021-3752Feb 16, 2022
  affected < 1-8.3.2fixed 1-8.3.2

  A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This flaw allows a user to crash the system or escalate their privileges. The highest threat from this vuln

• CVE-2022-0487Feb 4, 2022
  affected < 7-2.1fixed 7-2.1

  A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host/rtsx_usb_ms.c in memstick in the Linux kernel. In this flaw, a local attacker with a user privilege may impact system Confidentiality. This flaw affects kernel versions prior to 5.14 rc1.

• CVE-2021-4083Jan 18, 2022
  affected < 5-2.2fixed 5-2.2

  A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalat

• CVE-2021-0920KEVDec 15, 2021
  affected < 6-2.1fixed 6-2.1

  In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro

• CVE-2021-0935Oct 25, 2021
  affected < 2-2.2fixed 2-2.2

  In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid

• CVE-2021-0941Oct 25, 2021
  affected < 3-2.1fixed 3-2.1

  In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAn

• CVE-2021-42739Oct 20, 2021
  affected < 4-2.2fixed 4-2.2

  The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandles bounds checking.

• CVE-2021-41864Oct 1, 2021
  affected < 2-2.2fixed 2-2.2

  prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write.

• CVE-2021-40490Sep 3, 2021
  affected < 1-8.3.2fixed 1-8.3.2

  A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.

• CVE-2020-3702Sep 8, 2020
  affected < 1-8.3.2fixed 1-8.3.2

  u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapd