suse/kgraft-patch-SLE12_Update_2&distro=SUSE Linux Enterprise Live Patching 12

Vulnerabilities (18)

• CVE-2015-8539HigFeb 8, 2016
  affected < 5-2.1fixed 5-2.1

  The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that negatively instantiate a key, related to security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c, and security/key

• CVE-2015-7990MedDec 28, 2015
  affected < 5-2.1fixed 5-2.1

  Race condition in the rds_sendmsg function in net/rds/sendmsg.c in the Linux kernel before 4.3.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound. N

• CVE-2015-7872Nov 16, 2015
  affected < 5-2.1fixed 5-2.1

  The key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 4.2.6 allows local users to cause a denial of service (OOPS) via crafted keyctl commands.

• CVE-2015-2925Nov 16, 2015
  affected < 5-2.1fixed 5-2.1

  The prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to bypass an intended container protection mechanism by renaming a directory, related to a "double-chroot attack."

• CVE-2015-7613Oct 19, 2015
  affected < 4-2.3fixed 4-2.3

  Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipc_addid call that leads to uid and gid comparisons against uninitialized data, related to msg.c, shm.c, and util.c.

• CVE-2015-6937Oct 19, 2015
  affected < 5-2.1fixed 5-2.1

  The __rds_conn_create function in net/rds/connection.c in the Linux kernel through 4.2.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound.

• CVE-2015-5707Oct 19, 2015
  affected < 4-2.3fixed 4-2.3

  Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.

• CVE-2015-5366Aug 31, 2015
  affected < 3-2.1fixed 3-2.1

  The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return values, which allows remote attackers to cause a denial of service (EPOLLET epoll application read outage) via an incorrect checksum in a UDP packet, a differ

• CVE-2015-5364Aug 31, 2015
  affected < 3-2.1fixed 3-2.1

  The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause a denial of service (system hang) via incorrect checksums within a UDP packet flood.

• CVE-2015-4700Aug 31, 2015
  affected < 3-2.1fixed 3-2.1

  The bpf_int_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux kernel before 4.0.6 allows local users to cause a denial of service (system crash) by creating a packet filter and then loading crafted BPF instructions that trigger late convergence by the JIT compiler.

• CVE-2015-1805Aug 8, 2015
  affected < 3-2.1fixed 3-2.1

  The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash)

• CVE-2015-3636Aug 6, 2015
  affected < 3-2.1fixed 3-2.1

  The ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) by leveraging the

• CVE-2015-3339May 27, 2015
  affected < 3-2.1fixed 3-2.1

  Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet strip

• CVE-2015-3331May 27, 2015
  affected < 3-2.1fixed 3-2.1

  The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent attackers to cause a denial of service (buffer overflow and syste

• CVE-2015-1465Apr 5, 2015
  affected < 3-2.1fixed 3-2.1

  The IPv4 implementation in the Linux kernel before 3.18.8 does not properly consider the length of the Read-Copy Update (RCU) grace period for redirecting lookups in the absence of caching, which allows remote attackers to cause a denial of service (memory consumption or system c

• CVE-2015-1421Mar 16, 2015
  affected < 2-3.1fixed 2-3.1

  Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that

• CVE-2014-8159Mar 16, 2015
  affected < 3-2.1fixed 3-2.1

  The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly restrict use of User Verbs for registration of memory regions, which allows local users to access arbitrary physical memory locations, and

• CVE-2014-7822Mar 16, 2015
  affected < 3-2.1fixed 3-2.1

  The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a cra