suse/kgraft-patch-SLE12-SP5_Update_30&distro=SUSE Linux Enterprise Live Patching 12 SP5

Vulnerabilities (47)

• CVE-2022-1652May 31, 2022
  affected < 8-2.2fixed 8-2.2

  Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker could exploit this vulnerability to execute arbitrary code or cause a

• CVE-2022-1419May 31, 2022
  affected < 6-2.2fixed 6-2.2

  The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_gem_object *(created in *vgem_gem_dumb_create*) concurrently, and *vgem_gem_dumb_create *will access the freed drm_vgem_gem_object.

• CVE-2022-1734May 18, 2022
  affected < 4-2.2fixed 4-2.2

  A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup routine and firmware download routine.

• CVE-2022-29581May 17, 2022
  affected < 8-2.2fixed 8-2.2

  Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14 and later versions.

• CVE-2022-1679May 16, 2022
  affected < 6-2.2fixed 6-2.2

  A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system.

• CVE-2022-30594May 12, 2022
  affected < 3-2.2fixed 3-2.2

  The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.

• CVE-2022-1048Apr 29, 2022
  affected < 1-8.3.1fixed 1-8.3.1

  A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalat

• CVE-2022-28388Apr 3, 2022
  affected < 1-8.3.1fixed 1-8.3.1

  usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free.

• CVE-2022-28389Apr 3, 2022
  affected < 1-8.3.1fixed 1-8.3.1

  mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double free.

• CVE-2022-28390Apr 3, 2022
  affected < 1-8.3.1fixed 1-8.3.1

  ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.

• CVE-2022-27666Mar 23, 2022
  affected < 1-8.3.1fixed 1-8.3.1

  A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.

• CVE-2021-45868Mar 18, 2022
  affected < 1-8.3.1fixed 1-8.3.1

  In the Linux kernel before 5.15.3, fs/quota/quota_tree.c does not validate the block number in the quota tree (on disk). This can, for example, lead to a kernel/locking/rwsem.c use-after-free if there is a corrupted quota file.

• CVE-2022-1011Mar 18, 2022
  affected < 2-2.1fixed 2-2.1

  A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.

• CVE-2021-39713Mar 16, 2022
  affected < 1-8.3.1fixed 1-8.3.1

  Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel

• CVE-2022-23960Mar 12, 2022
  affected < 1-8.3.1fixed 1-8.3.1

  Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches. Then, cache allocation can allow th

• CVE-2022-26966Mar 12, 2022
  affected < 1-8.3.1fixed 1-8.3.1

  An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device.

• CVE-2022-0002Mar 11, 2022
  affected < 1-8.3.1fixed 1-8.3.1

  Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

• CVE-2022-0001Mar 11, 2022
  affected < 1-8.3.1fixed 1-8.3.1

  Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

• CVE-2022-23042Mar 10, 2022
  affected < 1-8.3.1fixed 1-8.3.1

  Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access

• CVE-2022-23041Mar 10, 2022
  affected < 1-8.3.1fixed 1-8.3.1

  Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access