kernel-devel-5.14.6-1.4 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:10728-1 Final 1 1 2024-06-15T00:00:00Z current 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z kernel-devel-5.14.6-1.4 on GA media These are all security issues fixed in the kernel-devel-5.14.6-1.4 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-10728 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2017-1000251/ SUSE CVE CVE-2017-1000251 page https://www.suse.com/security/cve/CVE-2017-12153/ SUSE CVE CVE-2017-12153 page https://www.suse.com/security/cve/CVE-2017-13080/ SUSE CVE CVE-2017-13080 page https://www.suse.com/security/cve/CVE-2017-14051/ SUSE CVE CVE-2017-14051 page https://www.suse.com/security/cve/CVE-2017-15129/ SUSE CVE CVE-2017-15129 page https://www.suse.com/security/cve/CVE-2017-15265/ SUSE CVE CVE-2017-15265 page https://www.suse.com/security/cve/CVE-2017-16536/ SUSE CVE CVE-2017-16536 page https://www.suse.com/security/cve/CVE-2017-16537/ SUSE CVE CVE-2017-16537 page https://www.suse.com/security/cve/CVE-2017-16645/ SUSE CVE CVE-2017-16645 page https://www.suse.com/security/cve/CVE-2017-16646/ SUSE CVE CVE-2017-16646 page https://www.suse.com/security/cve/CVE-2017-16647/ SUSE CVE CVE-2017-16647 page https://www.suse.com/security/cve/CVE-2017-16648/ SUSE CVE CVE-2017-16648 page https://www.suse.com/security/cve/CVE-2017-16995/ SUSE CVE CVE-2017-16995 page https://www.suse.com/security/cve/CVE-2017-16996/ SUSE CVE CVE-2017-16996 page https://www.suse.com/security/cve/CVE-2017-17448/ SUSE CVE CVE-2017-17448 page https://www.suse.com/security/cve/CVE-2017-17449/ SUSE CVE CVE-2017-17449 page https://www.suse.com/security/cve/CVE-2017-17450/ SUSE CVE CVE-2017-17450 page https://www.suse.com/security/cve/CVE-2017-17852/ SUSE CVE CVE-2017-17852 page https://www.suse.com/security/cve/CVE-2017-17853/ SUSE CVE CVE-2017-17853 page https://www.suse.com/security/cve/CVE-2017-17854/ SUSE CVE CVE-2017-17854 page https://www.suse.com/security/cve/CVE-2017-17855/ SUSE CVE CVE-2017-17855 page https://www.suse.com/security/cve/CVE-2017-17856/ SUSE CVE CVE-2017-17856 page https://www.suse.com/security/cve/CVE-2017-17857/ SUSE CVE CVE-2017-17857 page https://www.suse.com/security/cve/CVE-2017-17862/ SUSE CVE CVE-2017-17862 page https://www.suse.com/security/cve/CVE-2017-5123/ SUSE CVE CVE-2017-5123 page https://www.suse.com/security/cve/CVE-2017-5715/ SUSE CVE CVE-2017-5715 page https://www.suse.com/security/cve/CVE-2017-5753/ SUSE CVE CVE-2017-5753 page https://www.suse.com/security/cve/CVE-2017-5754/ SUSE CVE CVE-2017-5754 page https://www.suse.com/security/cve/CVE-2017-7541/ SUSE CVE CVE-2017-7541 page https://www.suse.com/security/cve/CVE-2017-7542/ SUSE CVE CVE-2017-7542 page https://www.suse.com/security/cve/CVE-2017-8824/ SUSE CVE CVE-2017-8824 page https://www.suse.com/security/cve/CVE-2017-8831/ SUSE CVE CVE-2017-8831 page https://www.suse.com/security/cve/CVE-2018-1000004/ SUSE CVE CVE-2018-1000004 page https://www.suse.com/security/cve/CVE-2018-10322/ SUSE CVE CVE-2018-10322 page https://www.suse.com/security/cve/CVE-2018-10323/ SUSE CVE CVE-2018-10323 page https://www.suse.com/security/cve/CVE-2018-1068/ SUSE CVE CVE-2018-1068 page https://www.suse.com/security/cve/CVE-2018-1118/ SUSE CVE CVE-2018-1118 page https://www.suse.com/security/cve/CVE-2018-12232/ SUSE CVE CVE-2018-12232 page https://www.suse.com/security/cve/CVE-2018-12714/ SUSE CVE CVE-2018-12714 page https://www.suse.com/security/cve/CVE-2018-13053/ SUSE CVE CVE-2018-13053 page https://www.suse.com/security/cve/CVE-2018-18710/ SUSE CVE CVE-2018-18710 page https://www.suse.com/security/cve/CVE-2018-19824/ SUSE CVE CVE-2018-19824 page https://www.suse.com/security/cve/CVE-2018-5332/ SUSE CVE CVE-2018-5332 page https://www.suse.com/security/cve/CVE-2018-5333/ SUSE CVE CVE-2018-5333 page https://www.suse.com/security/cve/CVE-2018-8043/ SUSE CVE CVE-2018-8043 page https://www.suse.com/security/cve/CVE-2018-8087/ SUSE CVE CVE-2018-8087 page https://www.suse.com/security/cve/CVE-2018-8822/ SUSE CVE CVE-2018-8822 page https://www.suse.com/security/cve/CVE-2019-10207/ SUSE CVE CVE-2019-10207 page https://www.suse.com/security/cve/CVE-2019-11477/ SUSE CVE CVE-2019-11477 page https://www.suse.com/security/cve/CVE-2019-11478/ SUSE CVE CVE-2019-11478 page https://www.suse.com/security/cve/CVE-2019-11479/ SUSE CVE CVE-2019-11479 page https://www.suse.com/security/cve/CVE-2019-14615/ SUSE CVE CVE-2019-14615 page https://www.suse.com/security/cve/CVE-2019-14814/ SUSE CVE CVE-2019-14814 page https://www.suse.com/security/cve/CVE-2019-14896/ SUSE CVE CVE-2019-14896 page https://www.suse.com/security/cve/CVE-2019-15030/ SUSE CVE CVE-2019-15030 page https://www.suse.com/security/cve/CVE-2019-15031/ SUSE CVE CVE-2019-15031 page https://www.suse.com/security/cve/CVE-2019-15098/ SUSE CVE CVE-2019-15098 page https://www.suse.com/security/cve/CVE-2019-15099/ SUSE CVE CVE-2019-15099 page https://www.suse.com/security/cve/CVE-2019-15290/ SUSE CVE CVE-2019-15290 page https://www.suse.com/security/cve/CVE-2019-15504/ SUSE CVE CVE-2019-15504 page https://www.suse.com/security/cve/CVE-2019-15902/ SUSE CVE CVE-2019-15902 page https://www.suse.com/security/cve/CVE-2019-16231/ SUSE CVE CVE-2019-16231 page https://www.suse.com/security/cve/CVE-2019-16232/ SUSE CVE CVE-2019-16232 page https://www.suse.com/security/cve/CVE-2019-16234/ SUSE CVE CVE-2019-16234 page https://www.suse.com/security/cve/CVE-2019-17133/ SUSE CVE CVE-2019-17133 page https://www.suse.com/security/cve/CVE-2019-17666/ SUSE CVE CVE-2019-17666 page https://www.suse.com/security/cve/CVE-2019-18808/ SUSE CVE CVE-2019-18808 page https://www.suse.com/security/cve/CVE-2019-18812/ SUSE CVE CVE-2019-18812 page https://www.suse.com/security/cve/CVE-2019-18813/ SUSE CVE CVE-2019-18813 page https://www.suse.com/security/cve/CVE-2019-19252/ SUSE CVE CVE-2019-19252 page https://www.suse.com/security/cve/CVE-2019-19332/ SUSE CVE CVE-2019-19332 page https://www.suse.com/security/cve/CVE-2019-19338/ SUSE CVE CVE-2019-19338 page https://www.suse.com/security/cve/CVE-2019-3016/ SUSE CVE CVE-2019-3016 page https://www.suse.com/security/cve/CVE-2019-3846/ SUSE CVE CVE-2019-3846 page https://www.suse.com/security/cve/CVE-2019-3882/ SUSE CVE CVE-2019-3882 page https://www.suse.com/security/cve/CVE-2019-3887/ SUSE CVE CVE-2019-3887 page https://www.suse.com/security/cve/CVE-2019-6974/ SUSE CVE CVE-2019-6974 page https://www.suse.com/security/cve/CVE-2019-7221/ SUSE CVE CVE-2019-7221 page https://www.suse.com/security/cve/CVE-2019-7222/ SUSE CVE CVE-2019-7222 page https://www.suse.com/security/cve/CVE-2019-8564/ SUSE CVE CVE-2019-8564 page https://www.suse.com/security/cve/CVE-2019-8912/ SUSE CVE CVE-2019-8912 page https://www.suse.com/security/cve/CVE-2019-9500/ SUSE CVE CVE-2019-9500 page https://www.suse.com/security/cve/CVE-2020-10135/ SUSE CVE CVE-2020-10135 page https://www.suse.com/security/cve/CVE-2020-10766/ SUSE CVE CVE-2020-10766 page https://www.suse.com/security/cve/CVE-2020-10767/ SUSE CVE CVE-2020-10767 page https://www.suse.com/security/cve/CVE-2020-10768/ SUSE CVE CVE-2020-10768 page https://www.suse.com/security/cve/CVE-2020-12351/ SUSE CVE CVE-2020-12351 page https://www.suse.com/security/cve/CVE-2020-12352/ SUSE CVE CVE-2020-12352 page https://www.suse.com/security/cve/CVE-2020-14331/ SUSE CVE CVE-2020-14331 page https://www.suse.com/security/cve/CVE-2020-14386/ SUSE CVE CVE-2020-14386 page https://www.suse.com/security/cve/CVE-2020-24586/ SUSE CVE CVE-2020-24586 page https://www.suse.com/security/cve/CVE-2020-24587/ SUSE CVE CVE-2020-24587 page https://www.suse.com/security/cve/CVE-2020-24588/ SUSE CVE CVE-2020-24588 page https://www.suse.com/security/cve/CVE-2020-25639/ SUSE CVE CVE-2020-25639 page https://www.suse.com/security/cve/CVE-2020-25656/ SUSE CVE CVE-2020-25656 page https://www.suse.com/security/cve/CVE-2020-25668/ SUSE CVE CVE-2020-25668 page https://www.suse.com/security/cve/CVE-2020-26141/ SUSE CVE CVE-2020-26141 page https://www.suse.com/security/cve/CVE-2020-2732/ SUSE CVE CVE-2020-2732 page https://www.suse.com/security/cve/CVE-2020-29660/ SUSE CVE CVE-2020-29660 page https://www.suse.com/security/cve/CVE-2020-29661/ SUSE CVE CVE-2020-29661 page https://www.suse.com/security/cve/CVE-2020-8648/ SUSE CVE CVE-2020-8648 page https://www.suse.com/security/cve/CVE-2020-8694/ SUSE CVE CVE-2020-8694 page https://www.suse.com/security/cve/CVE-2021-23133/ SUSE CVE CVE-2021-23133 page https://www.suse.com/security/cve/CVE-2021-26708/ SUSE CVE CVE-2021-26708 page https://www.suse.com/security/cve/CVE-2021-28971/ SUSE CVE CVE-2021-28971 page https://www.suse.com/security/cve/CVE-2021-32606/ SUSE CVE CVE-2021-32606 page https://www.suse.com/security/cve/CVE-2021-33909/ SUSE CVE CVE-2021-33909 page https://www.suse.com/security/cve/CVE-2021-3483/ SUSE CVE CVE-2021-3483 page https://www.suse.com/security/cve/CVE-2021-3489/ SUSE CVE CVE-2021-3489 page https://www.suse.com/security/cve/CVE-2021-3490/ SUSE CVE CVE-2021-3490 page https://www.suse.com/security/cve/CVE-2021-3491/ SUSE CVE CVE-2021-3491 page https://www.suse.com/security/cve/CVE-2021-3640/ SUSE CVE CVE-2021-3640 page https://www.suse.com/security/cve/CVE-2021-3653/ SUSE CVE CVE-2021-3653 page https://www.suse.com/security/cve/CVE-2021-3656/ SUSE CVE CVE-2021-3656 page https://www.suse.com/security/cve/CVE-2021-3744/ SUSE CVE CVE-2021-3744 page https://www.suse.com/security/cve/CVE-2021-3753/ SUSE CVE CVE-2021-3753 page https://www.suse.com/security/cve/CVE-2021-37576/ SUSE CVE CVE-2021-37576 page https://www.suse.com/security/cve/CVE-2021-3759/ SUSE CVE CVE-2021-3759 page https://www.suse.com/security/cve/CVE-2021-38166/ SUSE CVE CVE-2021-38166 page openSUSE Tumbleweed kernel-devel-5.14.6-1.4 kernel-macros-5.14.6-1.4 kernel-source-5.14.6-1.4 kernel-source-vanilla-5.14.6-1.4 kernel-devel-5.14.6-1.4 as a component of openSUSE Tumbleweed kernel-macros-5.14.6-1.4 as a component of openSUSE Tumbleweed kernel-source-5.14.6-1.4 as a component of openSUSE Tumbleweed kernel-source-vanilla-5.14.6-1.4 as a component of openSUSE Tumbleweed The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space. CVE-2017-1000251 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 7.9 AV:A/AC:M/Au:N/C:C/I:C/A:C 7.7 AV:A/AC:L/Au:S/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-1000251.html CVE-2017-1000251 https://bugzilla.suse.com/1057389 SUSE Bug 1057389 https://bugzilla.suse.com/1057950 SUSE Bug 1057950 https://bugzilla.suse.com/1070535 SUSE Bug 1070535 https://bugzilla.suse.com/1072117 SUSE Bug 1072117 https://bugzilla.suse.com/1072162 SUSE Bug 1072162 https://bugzilla.suse.com/1120758 SUSE Bug 1120758 A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not check whether the required attributes are present in a Netlink request. This request can be issued by a user with the CAP_NET_ADMIN capability and may result in a NULL pointer dereference and system crash. CVE-2017-12153 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.6 AV:L/AC:L/Au:S/C:N/I:N/A:C 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-12153.html CVE-2017-12153 https://bugzilla.suse.com/1058410 SUSE Bug 1058410 https://bugzilla.suse.com/1058624 SUSE Bug 1058624 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients. CVE-2017-13080 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 7.8 AV:A/AC:L/Au:N/C:C/I:C/A:N 2.9 AV:A/AC:M/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-13080.html CVE-2017-13080 https://bugzilla.suse.com/1056061 SUSE Bug 1056061 https://bugzilla.suse.com/1063479 SUSE Bug 1063479 https://bugzilla.suse.com/1063667 SUSE Bug 1063667 https://bugzilla.suse.com/1063671 SUSE Bug 1063671 https://bugzilla.suse.com/1066295 SUSE Bug 1066295 https://bugzilla.suse.com/1105108 SUSE Bug 1105108 https://bugzilla.suse.com/1178872 SUSE Bug 1178872 https://bugzilla.suse.com/1179588 SUSE Bug 1179588 An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel through 4.12.10 allows local users to cause a denial of service (memory corruption and system crash) by leveraging root access. CVE-2017-14051 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 6 AV:L/AC:H/Au:S/C:C/I:C/A:C 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-14051.html CVE-2017-14051 https://bugzilla.suse.com/1056588 SUSE Bug 1056588 A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function get_net_ns_by_id() in net/core/net_namespace.c does not check for the net::count value after it has found a peer network in netns_ids idr, which could lead to double free and memory corruption. This vulnerability could allow an unprivileged local user to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is thought to be unlikely. CVE-2017-15129 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-15129.html CVE-2017-15129 https://bugzilla.suse.com/1074839 SUSE Bug 1074839 Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls, related to sound/core/seq/seq_clientmgr.c and sound/core/seq/seq_ports.c. CVE-2017-15265 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-15265.html CVE-2017-15265 https://bugzilla.suse.com/1062520 SUSE Bug 1062520 https://bugzilla.suse.com/1115893 SUSE Bug 1115893 The cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device. CVE-2017-16536 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.7 AV:L/AC:M/Au:N/C:N/I:N/A:C 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-16536.html CVE-2017-16536 https://bugzilla.suse.com/1066606 SUSE Bug 1066606 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1146519 SUSE Bug 1146519 The imon_probe function in drivers/media/rc/imon.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device. CVE-2017-16537 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.7 AV:L/AC:M/Au:N/C:N/I:N/A:C 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-16537.html CVE-2017-16537 https://bugzilla.suse.com/1066573 SUSE Bug 1066573 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1146519 SUSE Bug 1146519 The ims_pcu_get_cdc_union_desc function in drivers/input/misc/ims-pcu.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (ims_pcu_parse_cdc_data out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device. CVE-2017-16645 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.7 AV:L/AC:M/Au:N/C:N/I:N/A:C 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-16645.html CVE-2017-16645 https://bugzilla.suse.com/1067132 SUSE Bug 1067132 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1146519 SUSE Bug 1146519 drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (BUG and system crash) or possibly have unspecified other impact via a crafted USB device. CVE-2017-16646 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.7 AV:L/AC:M/Au:N/C:N/I:N/A:C 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-16646.html CVE-2017-16646 https://bugzilla.suse.com/1067105 SUSE Bug 1067105 https://bugzilla.suse.com/1146519 SUSE Bug 1146519 drivers/net/usb/asix_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device. CVE-2017-16647 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.7 AV:L/AC:M/Au:N/C:N/I:N/A:C 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-16647.html CVE-2017-16647 https://bugzilla.suse.com/1067102 SUSE Bug 1067102 https://bugzilla.suse.com/1146519 SUSE Bug 1146519 The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device. NOTE: the function was later renamed __dvb_frontend_free. CVE-2017-16648 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-16648.html CVE-2017-16648 https://bugzilla.suse.com/1067087 SUSE Bug 1067087 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1146519 SUSE Bug 1146519 The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension. CVE-2017-16995 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-16995.html CVE-2017-16995 https://bugzilla.suse.com/1073928 SUSE Bug 1073928 kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging register truncation mishandling. CVE-2017-16996 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-16996.html CVE-2017-16996 https://bugzilla.suse.com/1073928 SUSE Bug 1073928 net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all net namespaces. CVE-2017-17448 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 3.3 AV:L/AC:M/Au:N/C:P/I:N/A:P 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-17448.html CVE-2017-17448 https://bugzilla.suse.com/1071693 SUSE Bug 1071693 The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict observations of Netlink messages to a single net namespace, which allows local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system. CVE-2017-17449 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 1.9 AV:L/AC:M/Au:N/C:P/I:N/A:N 1.9 AV:L/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-17449.html CVE-2017-17449 https://bugzilla.suse.com/1071694 SUSE Bug 1071694 net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces. CVE-2017-17450 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 3.2 AV:L/AC:L/Au:S/C:P/I:P/A:N 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-17450.html CVE-2017-17450 https://bugzilla.suse.com/1071695 SUSE Bug 1071695 https://bugzilla.suse.com/1074033 SUSE Bug 1074033 https://bugzilla.suse.com/1115893 SUSE Bug 1115893 kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging mishandling of 32-bit ALU ops. CVE-2017-17852 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-17852.html CVE-2017-17852 https://bugzilla.suse.com/1073928 SUSE Bug 1073928 kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect BPF_RSH signed bounds calculations. CVE-2017-17853 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-17853.html CVE-2017-17853 https://bugzilla.suse.com/1073928 SUSE Bug 1073928 kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (integer overflow and memory corruption) or possibly have unspecified other impact by leveraging unrestricted integer values for pointer arithmetic. CVE-2017-17854 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-17854.html CVE-2017-17854 https://bugzilla.suse.com/1073928 SUSE Bug 1073928 kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging improper use of pointers in place of scalars. CVE-2017-17855 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-17855.html CVE-2017-17855 https://bugzilla.suse.com/1073928 SUSE Bug 1073928 kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging the lack of stack-pointer alignment enforcement. CVE-2017-17856 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-17856.html CVE-2017-17856 https://bugzilla.suse.com/1073928 SUSE Bug 1073928 The check_stack_boundary function in kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging mishandling of invalid variable stack read operations. CVE-2017-17857 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-17857.html CVE-2017-17857 https://bugzilla.suse.com/1073928 SUSE Bug 1073928 kernel/bpf/verifier.c in the Linux kernel through 4.14.8 ignores unreachable code, even though it would still be processed by JIT compilers. This behavior, also considered an improper branch-pruning logic issue, could possibly be used by local users for denial of service. CVE-2017-17862 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-17862.html CVE-2017-17862 https://bugzilla.suse.com/1073928 SUSE Bug 1073928 Insufficient data validation in waitid allowed an user to escape sandboxes on Linux. CVE-2017-5123 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-5123.html CVE-2017-5123 https://bugzilla.suse.com/1062473 SUSE Bug 1062473 https://bugzilla.suse.com/1122971 SUSE Bug 1122971 Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. CVE-2017-5715 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 4.7 AV:L/AC:M/Au:N/C:C/I:N/A:N 1.9 AV:L/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-5715.html CVE-2017-5715 https://bugzilla.suse.com/1068032 SUSE Bug 1068032 https://bugzilla.suse.com/1074562 SUSE Bug 1074562 https://bugzilla.suse.com/1074578 SUSE Bug 1074578 https://bugzilla.suse.com/1074701 SUSE Bug 1074701 https://bugzilla.suse.com/1074741 SUSE Bug 1074741 https://bugzilla.suse.com/1074919 SUSE Bug 1074919 https://bugzilla.suse.com/1075006 SUSE Bug 1075006 https://bugzilla.suse.com/1075007 SUSE Bug 1075007 https://bugzilla.suse.com/1075262 SUSE Bug 1075262 https://bugzilla.suse.com/1075419 SUSE Bug 1075419 https://bugzilla.suse.com/1076115 SUSE Bug 1076115 https://bugzilla.suse.com/1076372 SUSE Bug 1076372 https://bugzilla.suse.com/1076606 SUSE Bug 1076606 https://bugzilla.suse.com/1078353 SUSE Bug 1078353 https://bugzilla.suse.com/1080039 SUSE Bug 1080039 https://bugzilla.suse.com/1087887 SUSE Bug 1087887 https://bugzilla.suse.com/1087939 SUSE Bug 1087939 https://bugzilla.suse.com/1088147 SUSE Bug 1088147 https://bugzilla.suse.com/1089055 SUSE Bug 1089055 https://bugzilla.suse.com/1091815 SUSE Bug 1091815 https://bugzilla.suse.com/1095735 SUSE Bug 1095735 https://bugzilla.suse.com/1102517 SUSE Bug 1102517 https://bugzilla.suse.com/1105108 SUSE Bug 1105108 https://bugzilla.suse.com/1126516 SUSE Bug 1126516 https://bugzilla.suse.com/1173489 SUSE Bug 1173489 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1201457 SUSE Bug 1201457 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 https://bugzilla.suse.com/1203236 SUSE Bug 1203236 Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. CVE-2017-5753 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 4.9 AV:L/AC:L/Au:N/C:C/I:N/A:N 4.7 AV:L/AC:M/Au:N/C:C/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-5753.html CVE-2017-5753 https://bugzilla.suse.com/1068032 SUSE Bug 1068032 https://bugzilla.suse.com/1074562 SUSE Bug 1074562 https://bugzilla.suse.com/1074578 SUSE Bug 1074578 https://bugzilla.suse.com/1074701 SUSE Bug 1074701 https://bugzilla.suse.com/1075006 SUSE Bug 1075006 https://bugzilla.suse.com/1075419 SUSE Bug 1075419 https://bugzilla.suse.com/1075748 SUSE Bug 1075748 https://bugzilla.suse.com/1080039 SUSE Bug 1080039 https://bugzilla.suse.com/1087084 SUSE Bug 1087084 https://bugzilla.suse.com/1087939 SUSE Bug 1087939 https://bugzilla.suse.com/1089055 SUSE Bug 1089055 https://bugzilla.suse.com/1136865 SUSE Bug 1136865 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 https://bugzilla.suse.com/1209547 SUSE Bug 1209547 Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache. CVE-2017-5754 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 4.9 AV:L/AC:L/Au:N/C:C/I:N/A:N 4.7 AV:L/AC:M/Au:N/C:C/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-5754.html CVE-2017-5754 https://bugzilla.suse.com/1068032 SUSE Bug 1068032 https://bugzilla.suse.com/1074562 SUSE Bug 1074562 https://bugzilla.suse.com/1074578 SUSE Bug 1074578 https://bugzilla.suse.com/1074701 SUSE Bug 1074701 https://bugzilla.suse.com/1075006 SUSE Bug 1075006 https://bugzilla.suse.com/1075008 SUSE Bug 1075008 https://bugzilla.suse.com/1087939 SUSE Bug 1087939 https://bugzilla.suse.com/1089055 SUSE Bug 1089055 https://bugzilla.suse.com/1115045 SUSE Bug 1115045 https://bugzilla.suse.com/1136865 SUSE Bug 1136865 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 The brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.12.3 allows local users to cause a denial of service (buffer overflow and system crash) or possibly gain privileges via a crafted NL80211_CMD_FRAME Netlink packet. CVE-2017-7541 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-7541.html CVE-2017-7541 https://bugzilla.suse.com/1049645 SUSE Bug 1049645 The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel through 4.12.3 allows local users to cause a denial of service (integer overflow and infinite loop) by leveraging the ability to open a raw socket. CVE-2017-7542 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-7542.html CVE-2017-7542 https://bugzilla.suse.com/1049882 SUSE Bug 1049882 https://bugzilla.suse.com/1061936 SUSE Bug 1061936 The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state. CVE-2017-8824 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-8824.html CVE-2017-8824 https://bugzilla.suse.com/1070771 SUSE Bug 1070771 https://bugzilla.suse.com/1076734 SUSE Bug 1076734 https://bugzilla.suse.com/1092904 SUSE Bug 1092904 https://bugzilla.suse.com/1115893 SUSE Bug 1115893 The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.11.5 allows local users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact by changing a certain sequence-number value, aka a "double fetch" vulnerability. CVE-2017-8831 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 6.6 AV:L/AC:M/Au:S/C:C/I:C/A:C 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2017-8831.html CVE-2017-8831 https://bugzilla.suse.com/1037994 SUSE Bug 1037994 https://bugzilla.suse.com/1061936 SUSE Bug 1061936 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1115893 SUSE Bug 1115893 In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability exists in the sound system, this can lead to a deadlock and denial of service condition. CVE-2018-1000004 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2018-1000004.html CVE-2018-1000004 https://bugzilla.suse.com/1076017 SUSE Bug 1076017 https://bugzilla.suse.com/1091815 SUSE Bug 1091815 The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereference) via a crafted xfs image. CVE-2018-10322 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2018-10322.html CVE-2018-10322 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1090749 SUSE Bug 1090749 The xfs_bmap_extents_to_btree function in fs/xfs/libxfs/xfs_bmap.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_bmapi_write NULL pointer dereference) via a crafted xfs image. CVE-2018-10323 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2018-10323.html CVE-2018-10323 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1090717 SUSE Bug 1090717 A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range of kernel memory. CVE-2018-1068 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2018-1068.html CVE-2018-1068 https://bugzilla.suse.com/1085107 SUSE Bug 1085107 https://bugzilla.suse.com/1085114 SUSE Bug 1085114 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1123903 SUSE Bug 1123903 Linux kernel vhost since version 4.8 does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file. CVE-2018-1118 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2018-1118.html CVE-2018-1118 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1092472 SUSE Bug 1092472 In net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat and close in cases where they target the same socket file descriptor, related to the sock_close and sockfs_setattr functions. fchownat does not increment the file descriptor reference count, which allows close to set the socket to NULL during fchownat's execution, leading to a NULL pointer dereference and system crash. CVE-2018-12232 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2018-12232.html CVE-2018-12232 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1097593 SUSE Bug 1097593 https://bugzilla.suse.com/1125907 SUSE Bug 1125907 https://bugzilla.suse.com/1127757 SUSE Bug 1127757 An issue was discovered in the Linux kernel through 4.17.2. The filter parsing in kernel/trace/trace_events_filter.c could be called with no filter, which is an N=0 case when it expected at least one line to have been read, thus making the N-1 index invalid. This allows attackers to cause a denial of service (slab out-of-bounds write) or possibly have unspecified other impact via crafted perf_event_open and mmap system calls. CVE-2018-12714 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2018-12714.html CVE-2018-12714 https://bugzilla.suse.com/1098933 SUSE Bug 1098933 The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow via a large relative timeout because ktime_add_safe is not used. CVE-2018-13053 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 low 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2018-13053.html CVE-2018-13053 https://bugzilla.suse.com/1099924 SUSE Bug 1099924 https://bugzilla.suse.com/1115893 SUSE Bug 1115893 An issue was discovered in the Linux kernel through 4.19. An information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and CVE-2018-16658. CVE-2018-18710 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2018-18710.html CVE-2018-18710 https://bugzilla.suse.com/1113751 SUSE Bug 1113751 In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c. CVE-2018-19824 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2018-19824.html CVE-2018-19824 https://bugzilla.suse.com/1118152 SUSE Bug 1118152 In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c). CVE-2018-5332 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 low 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2018-5332.html CVE-2018-5332 https://bugzilla.suse.com/1075621 SUSE Bug 1075621 https://bugzilla.suse.com/1091815 SUSE Bug 1091815 https://bugzilla.suse.com/1115893 SUSE Bug 1115893 In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied, leading to an rds_atomic_free_op NULL pointer dereference. CVE-2018-5333 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 low 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2018-5333.html CVE-2018-5333 https://bugzilla.suse.com/1075617 SUSE Bug 1075617 https://bugzilla.suse.com/1091815 SUSE Bug 1091815 The unimac_mdio_probe function in drivers/net/phy/mdio-bcm-unimac.c in the Linux kernel through 4.15.8 does not validate certain resource availability, which allows local users to cause a denial of service (NULL pointer dereference). CVE-2018-8043 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 low 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2018-8043.html CVE-2018-8043 https://bugzilla.suse.com/1084829 SUSE Bug 1084829 Memory leak in the hwsim_new_radio_nl function in drivers/net/wireless/mac80211_hwsim.c in the Linux kernel through 4.15.9 allows local users to cause a denial of service (memory consumption) by triggering an out-of-array error case. CVE-2018-8087 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2018-8087.html CVE-2018-8087 https://bugzilla.suse.com/1085053 SUSE Bug 1085053 Incorrect buffer length handling in the ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c in the Linux kernel through 4.15.11, and in drivers/staging/ncpfs/ncplib_kernel.c in the Linux kernel 4.16-rc through 4.16-rc6, could be exploited by malicious NCPFS servers to crash the kernel or execute code. CVE-2018-8822 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2018-8822.html CVE-2018-8822 https://bugzilla.suse.com/1086162 SUSE Bug 1086162 https://bugzilla.suse.com/1090404 SUSE Bug 1090404 https://bugzilla.suse.com/1091815 SUSE Bug 1091815 A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and kernel 5.x.x. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash. CVE-2019-10207 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-10207.html CVE-2019-10207 https://bugzilla.suse.com/1123959 SUSE Bug 1123959 https://bugzilla.suse.com/1142857 SUSE Bug 1142857 Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff. CVE-2019-11477 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-11477.html CVE-2019-11477 https://bugzilla.suse.com/1132686 SUSE Bug 1132686 https://bugzilla.suse.com/1137586 SUSE Bug 1137586 https://bugzilla.suse.com/1142129 SUSE Bug 1142129 https://bugzilla.suse.com/1153242 SUSE Bug 1153242 Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e. CVE-2019-11478 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-11478.html CVE-2019-11478 https://bugzilla.suse.com/1132686 SUSE Bug 1132686 https://bugzilla.suse.com/1137586 SUSE Bug 1137586 https://bugzilla.suse.com/1142129 SUSE Bug 1142129 https://bugzilla.suse.com/1143542 SUSE Bug 1143542 Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commits 967c05aee439e6e5d7d805e195b3a20ef5c433d6 and 5f3e2bf008c2221478101ee72f5cb4654b9fc363. CVE-2019-11479 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-11479.html CVE-2019-11479 https://bugzilla.suse.com/1132686 SUSE Bug 1132686 https://bugzilla.suse.com/1137586 SUSE Bug 1137586 https://bugzilla.suse.com/1142129 SUSE Bug 1142129 https://bugzilla.suse.com/1143542 SUSE Bug 1143542 Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user to potentially enable information disclosure via local access. CVE-2019-14615 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 1.9 AV:L/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-14615.html CVE-2019-14615 https://bugzilla.suse.com/1160195 SUSE Bug 1160195 https://bugzilla.suse.com/1165881 SUSE Bug 1165881 There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code. CVE-2019-14814 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-14814.html CVE-2019-14814 https://bugzilla.suse.com/1146512 SUSE Bug 1146512 https://bugzilla.suse.com/1173664 SUSE Bug 1173664 https://bugzilla.suse.com/1173665 SUSE Bug 1173665 A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP. CVE-2019-14896 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-14896.html CVE-2019-14896 https://bugzilla.suse.com/1157157 SUSE Bug 1157157 https://bugzilla.suse.com/1160468 SUSE Bug 1160468 In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check. CVE-2019-15030 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 3.6 AV:L/AC:L/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-15030.html CVE-2019-15030 https://bugzilla.suse.com/1149713 SUSE Bug 1149713 In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c. CVE-2019-15031 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 3.6 AV:L/AC:L/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-15031.html CVE-2019-15031 https://bugzilla.suse.com/1149713 SUSE Bug 1149713 drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor. CVE-2019-15098 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-15098.html CVE-2019-15098 https://bugzilla.suse.com/1146378 SUSE Bug 1146378 https://bugzilla.suse.com/1146543 SUSE Bug 1146543 drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor. CVE-2019-15099 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-15099.html CVE-2019-15099 https://bugzilla.suse.com/1146368 SUSE Bug 1146368 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-15098. Reason: This candidate is a duplicate of CVE-2019-15098. Notes: All CVE users should reference CVE-2019-15098 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. CVE-2019-15290 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-15290.html CVE-2019-15290 https://bugzilla.suse.com/1146378 SUSE Bug 1146378 https://bugzilla.suse.com/1146519 SUSE Bug 1146519 https://bugzilla.suse.com/1146543 SUSE Bug 1146543 https://bugzilla.suse.com/1158381 SUSE Bug 1158381 https://bugzilla.suse.com/1158834 SUSE Bug 1158834 drivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic (which may be remote via usbip or usbredir). CVE-2019-15504 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-15504.html CVE-2019-15504 https://bugzilla.suse.com/1147116 SUSE Bug 1147116 https://bugzilla.suse.com/1185852 SUSE Bug 1185852 A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped. CVE-2019-15902 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.7 AV:L/AC:M/Au:N/C:C/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-15902.html CVE-2019-15902 https://bugzilla.suse.com/1149376 SUSE Bug 1149376 https://bugzilla.suse.com/1155131 SUSE Bug 1155131 drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. CVE-2019-16231 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 low 4.7 AV:L/AC:M/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-16231.html CVE-2019-16231 https://bugzilla.suse.com/1150466 SUSE Bug 1150466 drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. CVE-2019-16232 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 low 4.7 AV:L/AC:M/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-16232.html CVE-2019-16232 https://bugzilla.suse.com/1150465 SUSE Bug 1150465 drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. CVE-2019-16234 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 low 4.7 AV:L/AC:M/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-16234.html CVE-2019-16234 https://bugzilla.suse.com/1150452 SUSE Bug 1150452 In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow. CVE-2019-17133 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-17133.html CVE-2019-17133 https://bugzilla.suse.com/1153158 SUSE Bug 1153158 https://bugzilla.suse.com/1153161 SUSE Bug 1153161 rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow. CVE-2019-17666 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 8.3 AV:A/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-17666.html CVE-2019-17666 https://bugzilla.suse.com/1154372 SUSE Bug 1154372 A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247. CVE-2019-18808 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-18808.html CVE-2019-18808 https://bugzilla.suse.com/1156259 SUSE Bug 1156259 https://bugzilla.suse.com/1189884 SUSE Bug 1189884 https://bugzilla.suse.com/1190534 SUSE Bug 1190534 A memory leak in the sof_dfsentry_write() function in sound/soc/sof/debug.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-c0a333d842ef. CVE-2019-18812 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-18812.html CVE-2019-18812 https://bugzilla.suse.com/1156277 SUSE Bug 1156277 A memory leak in the dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering platform_device_add_properties() failures, aka CID-9bbfceea12a8. CVE-2019-18813 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-18813.html CVE-2019-18813 https://bugzilla.suse.com/1156278 SUSE Bug 1156278 vcs_write in drivers/tty/vt/vc_screen.c in the Linux kernel through 5.3.13 does not prevent write access to vcsu devices, aka CID-0c9acb1af77a. CVE-2019-19252 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-19252.html CVE-2019-19252 https://bugzilla.suse.com/1157813 SUSE Bug 1157813 An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system, resulting in a denial of service. CVE-2019-19332 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 5.6 AV:L/AC:L/Au:N/C:N/I:P/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-19332.html CVE-2019-19332 https://bugzilla.suse.com/1158827 SUSE Bug 1158827 A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CPUs handle speculative execution of instructions when a TSX Asynchronous Abort (TAA) error occurs. When a guest is running on a host CPU affected by the TAA flaw (TAA_NO=0), but is not affected by the MDS issue (MDS_NO=1), the guest was to clear the affected buffers by using a VERW instruction mechanism. But when the MDS_NO=1 bit was exported to the guests, the guests did not use the VERW mechanism to clear the affected buffers. This issue affects guests running on Cascade Lake CPUs and requires that host has 'TSX' enabled. Confidentiality of data is the highest threat associated with this vulnerability. CVE-2019-19338 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-19338.html CVE-2019-19338 https://bugzilla.suse.com/1158954 SUSE Bug 1158954 In a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read memory locations from another process in the same guest. This problem is limit to the host running linux kernel 4.10 with a guest running linux kernel 4.16 or later. The problem mainly affects AMD processors but Intel CPUs cannot be ruled out. CVE-2019-3016 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 1.9 AV:L/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-3016.html CVE-2019-3016 https://bugzilla.suse.com/1159281 SUSE Bug 1159281 https://bugzilla.suse.com/1161154 SUSE Bug 1161154 A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network. CVE-2019-3846 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 8.3 AV:A/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-3846.html CVE-2019-3846 https://bugzilla.suse.com/1136424 SUSE Bug 1136424 https://bugzilla.suse.com/1136446 SUSE Bug 1136446 https://bugzilla.suse.com/1156330 SUSE Bug 1156330 A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS). Versions 3.10, 4.14 and 4.18 are vulnerable. CVE-2019-3882 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-3882.html CVE-2019-3882 https://bugzilla.suse.com/1131416 SUSE Bug 1131416 https://bugzilla.suse.com/1131427 SUSE Bug 1131427 https://bugzilla.suse.com/1133319 SUSE Bug 1133319 A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that, L1 guest could access L0's APIC register values via L2 guest, when 'virtualize x2APIC mode' is enabled. A guest could use this flaw to potentially crash the host kernel resulting in DoS issue. Kernel versions from 4.16 and newer are vulnerable to this issue. CVE-2019-3887 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.7 AV:L/AC:M/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-3887.html CVE-2019-3887 https://bugzilla.suse.com/1131800 SUSE Bug 1131800 In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free. CVE-2019-6974 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-6974.html CVE-2019-6974 https://bugzilla.suse.com/1124728 SUSE Bug 1124728 https://bugzilla.suse.com/1124729 SUSE Bug 1124729 The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free. CVE-2019-7221 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-7221.html CVE-2019-7221 https://bugzilla.suse.com/1124732 SUSE Bug 1124732 https://bugzilla.suse.com/1124734 SUSE Bug 1124734 The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak. CVE-2019-7222 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 low 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-7222.html CVE-2019-7222 https://bugzilla.suse.com/1124735 SUSE Bug 1124735 A logic issue was addressed with improved validation. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. An attacker in a privileged network position can modify driver state. CVE-2019-8564 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-8564.html CVE-2019-8564 https://bugzilla.suse.com/1132673 SUSE Bug 1132673 https://bugzilla.suse.com/1132828 SUSE Bug 1132828 In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr. CVE-2019-8912 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-8912.html CVE-2019-8912 https://bugzilla.suse.com/1125907 SUSE Bug 1125907 https://bugzilla.suse.com/1126284 SUSE Bug 1126284 The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be constructed to trigger an heap buffer overflow in the brcmf_wowl_nd_results function. This vulnerability can be exploited with compromised chipsets to compromise the host, or when used in combination with CVE-2019-9503, can be used remotely. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions. CVE-2019-9500 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 7.9 AV:A/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2019-9500.html CVE-2019-9500 https://bugzilla.suse.com/1132681 SUSE Bug 1132681 Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may allow an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent attacker could impersonate a Bluetooth BR/EDR master or slave to pair with a previously paired remote device to successfully complete the authentication procedure without knowing the link key. CVE-2020-10135 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.8 AV:A/AC:L/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-10135.html CVE-2020-10135 https://bugzilla.suse.com/1171988 SUSE Bug 1171988 A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per task/process conditional STIPB switching was added on top of the existing SSBD switching. The highest threat from this vulnerability is to confidentiality. CVE-2020-10766 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-10766.html CVE-2020-10766 https://bugzilla.suse.com/1159281 SUSE Bug 1159281 https://bugzilla.suse.com/1172781 SUSE Bug 1172781 A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB (Indirect Branch Prediction Barrier). The IBPB mitigation will be disabled when STIBP is not available or when the Enhanced Indirect Branch Restricted Speculation (IBRS) is available. This flaw allows a local attacker to perform a Spectre V2 style attack when this configuration is active. The highest threat from this vulnerability is to confidentiality. CVE-2020-10767 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 1.9 AV:L/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-10767.html CVE-2020-10767 https://bugzilla.suse.com/1159281 SUSE Bug 1159281 https://bugzilla.suse.com/1172782 SUSE Bug 1172782 A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as being 'force disabled' when it is not and opens the system to Spectre v2 attacks. The highest threat from this vulnerability is to confidentiality. CVE-2020-10768 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-10768.html CVE-2020-10768 https://bugzilla.suse.com/1159281 SUSE Bug 1159281 https://bugzilla.suse.com/1172783 SUSE Bug 1172783 Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. CVE-2020-12351 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 5.8 AV:A/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-12351.html CVE-2020-12351 https://bugzilla.suse.com/1177724 SUSE Bug 1177724 https://bugzilla.suse.com/1177729 SUSE Bug 1177729 https://bugzilla.suse.com/1178397 SUSE Bug 1178397 Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access. CVE-2020-12352 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 3.3 AV:A/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-12352.html CVE-2020-12352 https://bugzilla.suse.com/1177725 SUSE Bug 1177725 https://bugzilla.suse.com/1178398 SUSE Bug 1178398 A flaw was found in the Linux kernel's implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VT_RESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA console to crash the system, potentially escalating their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. CVE-2020-14331 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-14331.html CVE-2020-14331 https://bugzilla.suse.com/1174205 SUSE Bug 1174205 https://bugzilla.suse.com/1174247 SUSE Bug 1174247 A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity. CVE-2020-14386 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-14386.html CVE-2020-14386 https://bugzilla.suse.com/1176069 SUSE Bug 1176069 https://bugzilla.suse.com/1176072 SUSE Bug 1176072 The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data. CVE-2020-24586 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 2.9 AV:A/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-24586.html CVE-2020-24586 https://bugzilla.suse.com/1185859 SUSE Bug 1185859 https://bugzilla.suse.com/1192868 SUSE Bug 1192868 The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed. CVE-2020-24587 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 1.8 AV:A/AC:H/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-24587.html CVE-2020-24587 https://bugzilla.suse.com/1185859 SUSE Bug 1185859 https://bugzilla.suse.com/1185862 SUSE Bug 1185862 https://bugzilla.suse.com/1192868 SUSE Bug 1192868 The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets. CVE-2020-24588 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 2.9 AV:A/AC:M/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-24588.html CVE-2020-24588 https://bugzilla.suse.com/1185861 SUSE Bug 1185861 https://bugzilla.suse.com/1192868 SUSE Bug 1192868 https://bugzilla.suse.com/1199701 SUSE Bug 1199701 A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system. CVE-2020-25639 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-25639.html CVE-2020-25639 https://bugzilla.suse.com/1176846 SUSE Bug 1176846 A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKBSENT and KDSKBSENT. A local user could use this flaw to get read memory access out of bounds. The highest threat from this vulnerability is to data confidentiality. CVE-2020-25656 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 1.9 AV:L/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-25656.html CVE-2020-25656 https://bugzilla.suse.com/1177766 SUSE Bug 1177766 A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op. CVE-2020-25668 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-25668.html CVE-2020-25668 https://bugzilla.suse.com/1178123 SUSE Bug 1178123 https://bugzilla.suse.com/1178622 SUSE Bug 1178622 https://bugzilla.suse.com/1196914 SUSE Bug 1196914 An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol. CVE-2020-26141 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 3.3 AV:A/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-26141.html CVE-2020-26141 https://bugzilla.suse.com/1185987 SUSE Bug 1185987 A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest. CVE-2020-2732 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 low 2.3 AV:A/AC:M/Au:S/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-2732.html CVE-2020-2732 https://bugzilla.suse.com/1163971 SUSE Bug 1163971 A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may allow a read-after-free attack against TIOCGSID, aka CID-c8bcd9c5be24. CVE-2020-29660 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-29660.html CVE-2020-29660 https://bugzilla.suse.com/1179745 SUSE Bug 1179745 https://bugzilla.suse.com/1179877 SUSE Bug 1179877 A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b. CVE-2020-29661 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-29661.html CVE-2020-29661 https://bugzilla.suse.com/1179745 SUSE Bug 1179745 https://bugzilla.suse.com/1179877 SUSE Bug 1179877 https://bugzilla.suse.com/1214268 SUSE Bug 1214268 https://bugzilla.suse.com/1218966 SUSE Bug 1218966 There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c. CVE-2020-8648 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 3.6 AV:L/AC:L/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-8648.html CVE-2020-8648 https://bugzilla.suse.com/1162928 SUSE Bug 1162928 Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. CVE-2020-8694 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2020-8694.html CVE-2020-8694 https://bugzilla.suse.com/1170415 SUSE Bug 1170415 https://bugzilla.suse.com/1170446 SUSE Bug 1170446 https://bugzilla.suse.com/1178591 SUSE Bug 1178591 https://bugzilla.suse.com/1178700 SUSE Bug 1178700 https://bugzilla.suse.com/1179661 SUSE Bug 1179661 A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock then an element is removed from the auto_asconf_splist list without any proper locking. This can be exploited by an attacker with network service privileges to escalate to root or from the context of an unprivileged user directly if a BPF_CGROUP_INET_SOCK_CREATE is attached which denies creation of some SCTP socket. CVE-2021-23133 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-23133.html CVE-2021-23133 https://bugzilla.suse.com/1184675 SUSE Bug 1184675 https://bugzilla.suse.com/1185901 SUSE Bug 1185901 A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The race conditions were implicitly introduced in the commits that added VSOCK multi-transport support. CVE-2021-26708 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-26708.html CVE-2021-26708 https://bugzilla.suse.com/1181806 SUSE Bug 1181806 https://bugzilla.suse.com/1183298 SUSE Bug 1183298 In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, userspace applications (such as perf-fuzzer) can cause a system crash because the PEBS status in a PEBS record is mishandled, aka CID-d88d05a9e0b6. CVE-2021-28971 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-28971.html CVE-2021-28971 https://bugzilla.suse.com/1184196 SUSE Bug 1184196 In the Linux kernel 5.11 through 5.12.2, isotp_setsockopt in net/can/isotp.c allows privilege escalation to root by leveraging a use-after-free. (This does not affect earlier versions that lack CAN ISOTP SF_BROADCAST support.) CVE-2021-32606 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-32606.html CVE-2021-32606 https://bugzilla.suse.com/1185953 SUSE Bug 1185953 fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05. CVE-2021-33909 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-33909.html CVE-2021-33909 https://bugzilla.suse.com/1188062 SUSE Bug 1188062 https://bugzilla.suse.com/1188063 SUSE Bug 1188063 https://bugzilla.suse.com/1188257 SUSE Bug 1188257 https://bugzilla.suse.com/1189302 SUSE Bug 1189302 https://bugzilla.suse.com/1190859 SUSE Bug 1190859 A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a use-after-free when one of these devices is removed. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Versions before kernel 5.12-rc6 are affected CVE-2021-3483 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-3483.html CVE-2021-3483 https://bugzilla.suse.com/1184393 SUSE Bug 1184393 The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed via commit 4b81ccebaeee ("bpf, ringbuf: Deny reserve of buffers larger than ringbuf") (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced via 457f44363a88 ("bpf: Implement BPF ring buffer and verifier support for it") (v5.8-rc1). CVE-2021-3489 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-3489.html CVE-2021-3489 https://bugzilla.suse.com/1185640 SUSE Bug 1185640 https://bugzilla.suse.com/1185856 SUSE Bug 1185856 The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4e13714e ("bpf: Fix alu32 const subreg bound tracking on bitwise operations") (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. The AND/OR issues were introduced by commit 3f50f132d840 ("bpf: Verifier, do explicit ALU32 bounds tracking") (5.7-rc1) and the XOR variant was introduced by 2921c90d4718 ("bpf:Fix a verifier failure with xor") ( 5.10-rc1). CVE-2021-3490 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-3490.html CVE-2021-3490 https://bugzilla.suse.com/1185641 SUSE Bug 1185641 https://bugzilla.suse.com/1185796 SUSE Bug 1185796 The io_uring subsystem in the Linux kernel allowed the MAX_RW_COUNT limit to be bypassed in the PROVIDE_BUFFERS operation, which led to negative values being usedin mem_rw when reading /proc/<PID>/mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was addressed via commit d1f82808877b ("io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers") (v5.13-rc1) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced in ddf0322db79c ("io_uring: add IORING_OP_PROVIDE_BUFFERS") (v5.7-rc1). CVE-2021-3491 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-3491.html CVE-2021-3491 https://bugzilla.suse.com/1185642 SUSE Bug 1185642 https://bugzilla.suse.com/1187090 SUSE Bug 1187090 A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A privileged local user could use this flaw to crash the system or escalate their privileges on the system. CVE-2021-3640 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-3640.html CVE-2021-3640 https://bugzilla.suse.com/1188172 SUSE Bug 1188172 https://bugzilla.suse.com/1188613 SUSE Bug 1188613 https://bugzilla.suse.com/1191530 SUSE Bug 1191530 https://bugzilla.suse.com/1196810 SUSE Bug 1196810 https://bugzilla.suse.com/1196914 SUSE Bug 1196914 A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7. CVE-2021-3653 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 6.1 AV:L/AC:L/Au:N/C:P/I:P/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-3653.html CVE-2021-3653 https://bugzilla.suse.com/1189399 SUSE Bug 1189399 https://bugzilla.suse.com/1189420 SUSE Bug 1189420 https://bugzilla.suse.com/1196914 SUSE Bug 1196914 A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" field, this issue could allow a malicious L1 to disable both VMLOAD/VMSAVE intercepts and VLS (Virtual VMLOAD/VMSAVE) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. CVE-2021-3656 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-3656.html CVE-2021-3656 https://bugzilla.suse.com/1189400 SUSE Bug 1189400 https://bugzilla.suse.com/1189418 SUSE Bug 1189418 A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory consumption). This vulnerability is similar with the older CVE-2019-18808. CVE-2021-3744 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-3744.html CVE-2021-3744 https://bugzilla.suse.com/1189884 SUSE Bug 1189884 https://bugzilla.suse.com/1190534 SUSE Bug 1190534 A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to vc_mode is not protected by lock-in vt_ioctl (KDSETMDE). The highest threat from this vulnerability is to data confidentiality. CVE-2021-3753 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 low 1.9 AV:L/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-3753.html CVE-2021-3753 https://bugzilla.suse.com/1190025 SUSE Bug 1190025 arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e. CVE-2021-37576 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-37576.html CVE-2021-37576 https://bugzilla.suse.com/1188838 SUSE Bug 1188838 https://bugzilla.suse.com/1188842 SUSE Bug 1188842 https://bugzilla.suse.com/1190276 SUSE Bug 1190276 A memory overflow vulnerability was found in the Linux kernel's ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability. CVE-2021-3759 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-3759.html CVE-2021-3759 https://bugzilla.suse.com/1190115 SUSE Bug 1190115 In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability. CVE-2021-38166 openSUSE Tumbleweed:kernel-devel-5.14.6-1.4 openSUSE Tumbleweed:kernel-macros-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-5.14.6-1.4 openSUSE Tumbleweed:kernel-source-vanilla-5.14.6-1.4 moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2021-38166.html CVE-2021-38166 https://bugzilla.suse.com/1189233 SUSE Bug 1189233