{"kind": "product", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "name": "kernel-zfcpdump", "product": "kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1", "items": [{"id": "SUSE-SU-2021:0118-1", "noindex": false, "published": "2021-01-14T05:16:52Z", "modified": "2026-02-04T02:40:26.259622Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2021:0118-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2020-28374: Fixed a Linux SCSI target issue (bsc#1178372).\n- CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180559).\n- CVE-2020-27825: Fixed a race in the trace_open and buffer resize calls (bsc#1179960).\n- CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180031).\n- CVE-2020-27068: Fixed an out-of-bounds read due to a missing bounds check in the nl80211_policy policy of nl80211.c (bnc#118", "references": ["https://www.suse.com/support/update/announcement/2021/suse-su-20210118-1/", "https://bugzilla.suse.com/1040855", "https://bugzilla.suse.com/1044120"], "fixes": ["4.12.14-197.78.1"], "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}]}, {"id": "SUSE-SU-2020:3718-1", "noindex": false, "published": "2020-12-09T09:31:30Z", "modified": "2026-02-04T03:54:03.046953Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2020:3718-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to gain privileges or cause a denial of service (bsc#1179141).\n- CVE-2020-15437: Fixed a null pointer dereference which could have allowed local users to cause a denial of service(bsc#1179140).\n- CVE-2020-25669: Fixed a use-after-free read in sunkbd_reinit() (bsc#1178182).\n- CVE-2020-27777: Restrict RTAS requests from userspace  (bsc#1179107).\n- CVE-2020-28915: Fixed a buffer over-read in the fbcon co", "references": ["https://www.suse.com/support/update/announcement/2020/suse-su-20203718-1/", "https://bugzilla.suse.com/1050549", "https://bugzilla.suse.com/1067665"], "fixes": ["4.12.14-197.75.1"], "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}]}, {"id": "SUSE-SU-2020:3507-1", "noindex": false, "published": "2020-11-24T16:17:12Z", "modified": "2026-02-04T03:44:40.398111Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2020:3507-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software and services that rely on UDP source port randomization (like DNS) are indirectly affected as well. Kernel versions may be vulnerable to this issue (bsc#1175721, bsc#1178782).\n- CVE-20", "references": ["https://www.suse.com/support/update/announcement/2020/suse-su-20203507-1/", "https://bugzilla.suse.com/1058115", "https://bugzilla.suse.com/1163592"], "fixes": ["4.12.14-197.72.1"], "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}]}, {"id": "SUSE-SU-2020:3272-1", "noindex": false, "published": "2020-11-10T18:39:50Z", "modified": "2025-05-02T04:09:30.782232Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2020:3272-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bug fixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766).\n- CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in mm/hugetlb.c (bnc#1176485).\n- CVE-2020-0430: Fixed an OOB read in skb_headlen of /include/linux/skbuff.h (bnc#1176723).\n- CVE-2020-14351: Fixed a race in the perf_mmap_close() function (bsc#1177086).\n- CVE-2020-16120: Fixed a permissions issue in ovl_path_open() (bsc#1177470).\n- CVE-2020-8694: Restricted energy meter to root access (bsc#1170415", "references": ["https://www.suse.com/support/update/announcement/2020/suse-su-20203272-1/", "https://bugzilla.suse.com/1055014", "https://bugzilla.suse.com/1061843"], "fixes": ["4.12.14-197.67.1"], "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}]}, {"id": "SUSE-SU-2020:2972-1", "noindex": false, "published": "2020-10-20T15:08:23Z", "modified": "2026-02-04T03:41:09.142292Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2020:2972-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724).\n- CVE-2020-12352: Fixed an information leak when processing certain AMP packets aka 'BleedingTooth' aka 'BadChoice' (bsc#1177725).\n- CVE-2020-25645: Fixed an issue which traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypt", "references": ["https://www.suse.com/support/update/announcement/2020/suse-su-20202972-1/", "https://bugzilla.suse.com/1065729", "https://bugzilla.suse.com/1140683"], "fixes": ["4.12.14-197.64.1"], "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}]}, {"id": "SUSE-SU-2020:2905-1", "noindex": false, "published": "2020-10-13T13:49:03Z", "modified": "2026-02-04T04:22:44.984155Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2020:2905-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2020-26088: Fixed an improper CAP_NET_RAW check in NFC socket creation could have been used by local attackers to create raw sockets, bypassing security mechanisms (bsc#1176990).\n- CVE-2020-14390: Fixed an out-of-bounds memory write leading to memory corruption or a denial of service when changing screen size (bnc#1176235).\n- CVE-2020-0432: Fixed an out of bounds write due to an integer overflow (bsc#1176721).\n- CVE-2020-0427: Fixed an out of bounds read due to a use after free (bsc#1176725).\n- CVE-2020", "references": ["https://www.suse.com/support/update/announcement/2020/suse-su-20202905-1/", "https://bugzilla.suse.com/1055186", "https://bugzilla.suse.com/1065600"], "fixes": ["4.12.14-197.61.1"], "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}]}, {"id": "SUSE-SU-2020:2575-1", "noindex": false, "published": "2020-09-09T05:16:14Z", "modified": "2026-02-04T03:52:00.611126Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2020:2575-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2020-1749: Use ip6_dst_lookup_flow instead of ip6_dst_lookup (bsc#1165629).\n- CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798).\n- CVE-2020-14356: Fixed a null pointer dereference in cgroupv2 subsystem which could have led to privilege escalation (bsc#1175213).\n- CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205).\n- CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sen", "references": ["https://www.suse.com/support/update/announcement/2020/suse-su-20202575-1/", "https://bugzilla.suse.com/1058115", "https://bugzilla.suse.com/1065600"], "fixes": ["4.12.14-197.56.1"], "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}]}, {"id": "SUSE-SU-2020:2107-1", "noindex": false, "published": "2020-08-03T14:45:27Z", "modified": "2026-02-04T04:01:39.491115Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2020:2107-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n\n- CVE-2020-15780: A lockdown bypass for loading unsigned modules using ACPI table injection was fixed. (bsc#1173573)\n- CVE-2020-15393: Fixed a memory leak in usbtest_disconnect (bnc#1173514).\n- CVE-2020-12771: An issue was discovered in btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails (bnc#1171732).\n- CVE-2020-12888: The VFIO PCI driver mishandled attempts to access disabled memory space (bnc#1171868).\n- CVE-2020-10773: Fixed a memory leak on s390/s390x, in the cm", "references": ["https://www.suse.com/support/update/announcement/2020/suse-su-20202107-1/", "https://bugzilla.suse.com/1051510", "https://bugzilla.suse.com/1065729"], "fixes": ["4.12.14-197.48.1"], "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}]}, {"id": "SUSE-SU-2020:1599-1", "noindex": false, "published": "2020-06-10T09:12:29Z", "modified": "2026-02-04T02:15:56.759985Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2020:1599-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it.\n  This attack is known as Special Register Buffer Data Sampling (SRBDS) or 'CrossTalk' (bsc#1154824).\n- CVE-2020-13143: Fixed an out-of-bounds read in gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c (bsc#1171982).\n- CVE-2020-12769: Fixed an issue which could have allowed attackers to cause a panic via concurrent calls to dw_spi_irq a", "references": ["https://www.suse.com/support/update/announcement/2020/suse-su-20201599-1/", "https://bugzilla.suse.com/1051510", "https://bugzilla.suse.com/1058115"], "fixes": ["4.12.14-197.45.1"], "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}]}, {"id": "SUSE-SU-2020:1146-1", "noindex": false, "published": "2020-04-29T14:17:21Z", "modified": "2026-02-04T02:24:09.431782Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2020:1146-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability to run code in kernel space of a guest VM can cause the host kernel to panic (bnc#1168276).\n- CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information fro", "references": ["https://www.suse.com/support/update/announcement/2020/suse-su-20201146-1/", "https://bugzilla.suse.com/1051510", "https://bugzilla.suse.com/1065600"], "fixes": ["4.12.14-197.40.1"], "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}]}, {"id": "SUSE-SU-2020:0836-1", "noindex": false, "published": "2020-03-31T16:39:32Z", "modified": "2026-02-04T02:30:49.680013Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2020:0836-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2020-8647: Fixed a use-after-free in the vc_do_resize function in drivers/tty/vt/vt.c (bsc#1162929).\n- CVE-2020-8649: Fixed a use-after-free in the vgacon_invert_region function in drivers/video/console/vgacon.c (bsc#1162931).\n- CVE-2020-8648: Fixed a use-after-free in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bsc#1162928).\n- CVE-2020-9383: Fixed an out-of-bounds read due to improper error condition check of FDC index (bsc#1165111).\n- CVE-2019-19768: Fixed a use-after-free in the __b", "references": ["https://www.suse.com/support/update/announcement/2020/suse-su-20200836-1/", "https://bugzilla.suse.com/1044231", "https://bugzilla.suse.com/1051510"], "fixes": ["4.12.14-197.37.1"], "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}]}, {"id": "SUSE-SU-2020:0560-1", "noindex": false, "published": "2020-03-02T16:01:49Z", "modified": "2026-02-04T03:36:48.995020Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2020:0560-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2020-8992: An issue was discovered in ext4_protect_reserved_inode in fs/ext4/block_validity.c that allowed attackers to cause a soft lockup via a crafted journal size (bnc#1164069).\n- CVE-2020-8648: There was a use-after-free vulnerability in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bnc#1162928).\n- CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c. It did not check the length of variable elements in a beacon head, leading to a buffer overflow (bnc#1152107).\n- CVE-2", "references": ["https://www.suse.com/support/update/announcement/2020/suse-su-20200560-1/", "https://bugzilla.suse.com/1046303", "https://bugzilla.suse.com/1050244"], "fixes": ["4.12.14-197.34.1"], "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}]}, {"id": "SUSE-SU-2019:3317-1", "noindex": false, "published": "2019-12-17T12:09:50Z", "modified": "2026-02-04T02:23:11.733974Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2019:3317-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2019-19531: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1158445).\n- CVE-2019-19543: There was a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c (bnc#1158427).\n- CVE-2019-19525: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver (bnc#1158417).\n- CVE-2019-19530: There was a use-after-free bug that can be caused by a malicious USB devic", "references": ["https://www.suse.com/support/update/announcement/2019/suse-su-20193317-1/", "https://bugzilla.suse.com/1048942", "https://bugzilla.suse.com/1051510"], "fixes": ["4.12.14-197.29.1"], "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}]}, {"id": "SUSE-SU-2019:2947-1", "noindex": false, "published": "2019-11-12T18:08:00Z", "modified": "2026-02-04T02:39:30.926807Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2019:2947-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race\n  condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine\n  Exception during Page Size Change, causing the CPU core to be non-functional.\n\n  The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in\n  executable pages by splitting / merging huge pages into small pages as\n  needed. More information can be found on https://www.suse.com/support/kb/doc/?id=7023735\n\n- CVE-2019-11135: Aborting an as", "references": ["https://www.suse.com/support/update/announcement/2019/suse-su-20192947-1/", "https://bugzilla.suse.com/1046299", "https://bugzilla.suse.com/1046303"], "fixes": ["4.12.14-197.26.1"], "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}]}, {"id": "SUSE-SU-2019:2710-1", "noindex": false, "published": "2019-10-18T08:13:48Z", "modified": "2026-02-04T04:12:24.515942Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2019:2710-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2017-18595: A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c (bnc#1149555).\n- CVE-2019-14821: An out-of-bounds access issue was found in the way Linux kernel's KVM hypervisor implements the coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/de", "references": ["https://www.suse.com/support/update/announcement/2019/suse-su-20192710-1/", "https://bugzilla.suse.com/1051510", "https://bugzilla.suse.com/1054914"], "fixes": ["4.12.14-197.21.1"], "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}]}, {"id": "SUSE-SU-2019:2424-1", "noindex": false, "published": "2019-09-20T15:09:18Z", "modified": "2025-05-02T04:06:42.186179Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2019:2424-1", "title": "Security update for the Linux Kernel", "description": "\n\nThe SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\nThe following new features were implemented:\n\n- jsc#SLE-4875: [CML] New device IDs for CML\n- jsc#SLE-7294: Add cpufreq driver for Raspberry Pi\n- fate#326869: perf: pmu mem_load/store event support\n- fate#327380: KVM: Add hardware CPU Model - kernel part\n- fate#327377: KVM: Support for configurable virtio-crypto\n- fate#327775: vpmem: DRAM backed persistent volumes for improved SAP HANA on POWER restart times\n- fate#326472: Marvell Armada 7K/8K Ethernet (incl. 10G) kernel enablement\n- fate#326416: Hi1620 (Vendor: Huawei): RDMA kernel enablement\n- fa", "references": ["https://www.suse.com/support/update/announcement/2019/suse-su-20192424-1/", "https://bugzilla.suse.com/1047238", "https://bugzilla.suse.com/1050911"], "fixes": ["4.12.14-197.18.1"], "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}]}, {"id": "SUSE-SU-2019:2073-1", "noindex": false, "published": "2019-08-06T22:52:42Z", "modified": "2026-02-04T03:11:43.467679Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2019:2073-1", "title": "Security update for the Linux Kernel", "description": "\n\nThe SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2018-20855: An issue was discovered in the Linux kernel In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace(bsc#1143045).\n- CVE-2019-1125: Exclude ATOMs from speculation through SWAPGS (bsc#1139358).\n- CVE-2019-14283: In the Linux kernel, set_geometry in drivers/block/floppy.c did not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It could be triggered ", "references": ["https://www.suse.com/support/update/announcement/2019/suse-su-20192073-1/", "https://bugzilla.suse.com/1051510", "https://bugzilla.suse.com/1055117"], "fixes": ["4.12.14-197.15.1"], "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}]}, {"id": "SUSE-SU-2019:1854-1", "noindex": false, "published": "2019-07-15T14:16:11Z", "modified": "2026-02-04T02:16:28.129401Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2019:1854-1", "title": "Security update for the Linux Kernel", "description": "\n\nThe SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2019-10638: In the Linux kernel, a device could be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic was sent to multiple destination IP addresses, it was possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may have been conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addre", "references": ["https://www.suse.com/support/update/announcement/2019/suse-su-20191854-1/", "https://bugzilla.suse.com/1051510", "https://bugzilla.suse.com/1071995"], "fixes": ["4.12.14-197.10.1"], "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}]}, {"id": "SUSE-SU-2019:1744-1", "noindex": false, "published": "2019-07-04T08:37:42Z", "modified": "2026-02-04T02:59:06.073759Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2019:1744-1", "title": "Security update for the Linux Kernel", "description": "\n\nThe SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\nThis update adds support for the Hygon Dhyana CPU (fate#327735).\n\nThe following security bugs were fixed:\n\n- CVE-2019-12614: An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c. There was an unchecked kstrdup of prop->name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash) (bnc#1137194).\n- CVE-2018-16871: A NULL pointer dereference due to an anomalized NFS message sequence was fixed. (bnc#1137103).\n- CVE-2019-12817: On the PowerPC architecture, local atta", "references": ["https://www.suse.com/support/update/announcement/2019/suse-su-20191744-1/", "https://bugzilla.suse.com/1051510", "https://bugzilla.suse.com/1071995"], "fixes": ["4.12.14-197.7.1"], "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}]}, {"id": "SUSE-SU-2019:1550-1", "noindex": false, "published": "2019-06-18T16:07:40Z", "modified": "2026-02-04T02:57:53.590348Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2019:1550-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2019-12819: The function __mdiobus_register() called put_device(), which\n  triggered a fixed_mdio_bus_init use-after-free. This would cause a denial of\n  service. (bsc#1138291)\n\n- CVE-2019-12818: The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c\n  may return NULL. If the caller does not check for this, it will trigger a\n  NULL pointer dereference. This will cause denial of service. This used to\n  affect nfc_llcp_build_gb in net/nfc/llcp_core.c. (bsc#1138293)\n\n- CVE-2019-11477: A sequence of SA", "references": ["https://www.suse.com/support/update/announcement/2019/suse-su-20191550-1/", "https://bugzilla.suse.com/1012382", "https://bugzilla.suse.com/1050242"], "fixes": ["4.12.14-197.4.1"], "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}]}], "total": 20, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 1, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "kernel-zfcpdump", "path": "vulns/suse-linux-enterprise-module-for-basesystem-15-sp1/kernel-zfcpdump", "ecosystem": "SUSE:Linux Enterprise Module for Basesystem 15 SP1"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 0, "kev": 0}, "lastmod": "2026-02-04T04:22:44.984155Z", "early_advisories": [], "license": "Sie dürfen die Auswahl von PatchFirst und unsere Ergänzungen (Prioritäten, Frühwarnungen, Texte, Zusammenfassungen und Aggregate) für eigene Zwecke einschließlich interner geschäftlicher Aufgaben frei nutzen. Weiterverkauf, kommerzielle Verbreitung und massenhafte Spiegelung dieser Auswahl oder Ergänzungen erfordern eine schriftliche Vereinbarung mit dem Betreiber. Nennen Sie bei jeder Nutzung oder Veröffentlichung der Auswahl oder unserer Ergänzungen PatchFirst (https://patchfirst.dev/vulns/) mit diesem Link zur Feedseite Ihrer Region als Quelle. Originaleinträge aus offenen Quellen unterliegen weiterhin ihren jeweiligen Lizenzen und Bedingungen. Diese Bedingungen beschränken Ihre Rechte an den Originaldaten nicht, die Sie direkt bei den Quellen beziehen können.", "terms_url": "https://patchfirst.dev/de/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "PatchFirst wählt Einträge aus, normalisiert und kombiniert sie; Zusammenfassungen und Übersetzungen können hinzukommen. Nachrichten werden im jeweiligen Eintrag mit einem Link zur Originalquelle belegt.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Die Lizenzen der Ursprungsdatenbanken unterscheiden sich; siehe Quellenkatalog."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Frei zugängliche Bewertungen; Quellenangabe erbeten (FIRST EPSS, Bewertungen von Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}