{"kind": "product", "path": "vulns/opensuse-leap-15.3/kernel-default", "name": "kernel-default", "product": "kernel-default", "ecosystem": "openSUSE:Leap 15.3", "items": [{"id": "SUSE-SU-2022:4616-1", "noindex": false, "published": "2022-12-23T09:56:07Z", "modified": "2026-02-04T02:48:44.446258Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2022:4616-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).\n- CVE-2022-3635: Fixed a use-after-free in the tst_timer() of the file drivers/atm/idt77252.c (bsc#1204631).\n- CVE-2022-41850: Fixed a race condition in roccat_report_event() in drivers/hid/hid-roccat.c (bsc#1203960).\n- CVE-2022-45934: Fixed a integer wraparound via L2CAP_CONF_REQ packets in l2cap_config_req in net/bluetooth/l2cap_core.c (bsc#1205796).\n- CVE-2022-3628: Fixed potential buffer overflow in brcmf_fweh_event_worker() in wi", "references": ["https://www.suse.com/support/update/announcement/2022/suse-su-20224616-1/", "https://bugzilla.suse.com/1065729", "https://bugzilla.suse.com/1071995"], "fixes": ["5.3.18-150300.59.106.1"], "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}]}, {"id": "SUSE-SU-2022:4574-1", "noindex": false, "published": "2022-12-19T16:57:55Z", "modified": "2026-02-04T03:29:01.675129Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2022:4574-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).\n- CVE-2022-42328: Guests could trigger denial of service via the netback driver (bsc#1206114).\n- CVE-2022-42329: Guests could trigger denial of service via the netback driver (bsc#1206113).\n- CVE-2022-3643: Guests could trigger NIC interface reset/abort/crash via netback driver (bsc#1206113).\n- CVE-2022-3635: Fixed a use-after-free in the tst_timer() of the file drivers/atm/idt77252.c (bsc#1204631).\n- CVE-2022-3424: Fixed use-after-fr", "references": ["https://www.suse.com/support/update/announcement/2022/suse-su-20224574-1/", "https://bugzilla.suse.com/1198702", "https://bugzilla.suse.com/1199365"], "fixes": ["4.12.14-150100.197.131.1"], "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}]}, {"id": "SUSE-SU-2022:4053-1", "noindex": false, "published": "2022-11-17T14:36:16Z", "modified": "2026-02-04T02:24:28.634548Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2022:4053-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2021-4037: Fixed function logic vulnerability that allowed local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set (bnc#1198702).\n- CVE-2022-2153: Fixed vulnerability in KVM that could allow an unprivileged local attacker on the host to cause DoS (bnc#1200788).\n- CVE-2022-2964: Fixed memory corruption issues in ax88179_178a devices (bnc#1202686).\n- CVE-2022-2978: Fixed use-after-free in the NILFS file system that could", "references": ["https://www.suse.com/support/update/announcement/2022/suse-su-20224053-1/", "https://bugzilla.suse.com/1032323", "https://bugzilla.suse.com/1065729"], "fixes": ["5.3.18-150300.59.101.1"], "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}]}, {"id": "SUSE-SU-2022:3775-1", "noindex": false, "published": "2022-10-26T11:08:04Z", "modified": "2026-02-04T03:20:27.342267Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2022:3775-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 15 SP3 kernel was updated.\n\nThe following security bugs were fixed:\n\n- CVE-2022-40768: Fixed information leak in the scsi driver which allowed local users to obtain sensitive information from kernel memory. (bnc#1203514)\n- CVE-2022-3169: Fixed a denial of service flaw which occurs when consecutive requests to NVME_IOCTL_RESET and the NVME_IOCTL_SUBSYS_RESET are sent. (bnc#1203290)\n- CVE-2022-42722: Fixed crash in beacon protection for P2P-device. (bsc#1204125)\n- CVE-2022-42719: Fixed MBSSID parsing use-after-free. (bsc#1204051)\n- CVE-2022-42721: Avoid nontransmitted BSS list corruption. (bsc#1204060)\n- CVE-2022-4272", "references": ["https://www.suse.com/support/update/announcement/2022/suse-su-20223775-1/", "https://bugzilla.suse.com/1177471", "https://bugzilla.suse.com/1185032"], "fixes": ["5.3.18-150300.59.98.1"], "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}]}, {"id": "SUSE-SU-2022:3693-1", "noindex": false, "published": "2022-10-22T09:58:42Z", "modified": "2026-02-04T03:28:15.776877Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2022:3693-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-20008: Fixed local information disclosure due to possibility to read kernel heap memory via mmc_blk_read_single of block.c (bnc#1199564).\n- CVE-2022-2503: Fixed a vulnerability that allowed root to bypass LoadPin and load untrusted and unverified kernel modules and firmware (bnc#1202677).\n- CVE-2022-32296: Fixed vulnerability where TCP servers were allowed to identify clients by observing what source ports are used (bnc#1200288).\n- CVE-2022-3239: Fixed an use-after-free in the video4linux driver ", "references": ["https://www.suse.com/support/update/announcement/2022/suse-su-20223693-1/", "https://bugzilla.suse.com/1199564", "https://bugzilla.suse.com/1200288"], "fixes": ["4.12.14-150100.197.126.1"], "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}]}, {"id": "SUSE-SU-2022:3408-1", "noindex": false, "published": "2022-09-26T16:42:10Z", "modified": "2026-02-04T03:06:16.628145Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2022:3408-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2020-36516: Fixed an issue in the mixed IPID assignment method where an attacker was able to inject data into or terminate a victim's TCP session (bnc#1196616).\n- CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bnc#1194535).\n- CVE-2022-1012: Fixed a memory leak problem that was found in the TCP source port generation algorithm in net/ipv4/tcp.c (bnc#1199482).\n- CVE-2022-20368: Fixed slab-", "references": ["https://www.suse.com/support/update/announcement/2022/suse-su-20223408-1/", "https://bugzilla.suse.com/1177440", "https://bugzilla.suse.com/1180153"], "fixes": ["4.12.14-150100.197.123.1"], "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}]}, {"id": "SUSE-SU-2022:3264-1", "noindex": false, "published": "2022-09-14T04:23:33Z", "modified": "2026-02-04T02:23:18.984629Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2022:3264-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 15 SP3 kernel was updated receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-39190: Fixed an issue that was discovered in net/netfilter/nf_tables_api.c and could cause a denial of service upon binding to an already bound chain (bnc#1203117).\n- CVE-2022-39188: Fixed race condition in include/asm-generic/tlb.h where a device driver can free a page while it still has stale TLB entries (bnc#1203107).\n- CVE-2022-36879: Fixed an issue in xfrm_expand_policies in net/xfrm/xfrm_policy.c where a refcount could be dropped twice (bnc#1201948).\n- CVE-2022-3028: Fixed race condition that ", "references": ["https://www.suse.com/support/update/announcement/2022/suse-su-20223264-1/", "https://bugzilla.suse.com/1023051", "https://bugzilla.suse.com/1065729"], "fixes": ["5.3.18-150300.59.93.1"], "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}]}, {"id": "SUSE-SU-2022:2875-1", "noindex": false, "published": "2022-08-23T11:19:31Z", "modified": "2026-02-04T04:36:11.167391Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2022:2875-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2020-36516: Fixed TCP session data injection vulnerability via the mixed IPID assignment method (bnc#1196616).\n- CVE-2020-36557: Fixed race condition between the VT_DISALLOCATE ioctl and closing/opening of ttys that could lead to a use-after-free (bnc#1201429).\n- CVE-2020-36558: Fixed race condition involving VT_RESIZEX that could lead to a NULL pointer dereference and general protection fault (bnc#1200910).\n- CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635).\n- CVE-", "references": ["https://www.suse.com/support/update/announcement/2022/suse-su-20222875-1/", "https://bugzilla.suse.com/1178134", "https://bugzilla.suse.com/1196616"], "fixes": ["5.3.18-150300.59.90.1"], "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}]}, {"id": "SUSE-SU-2022:2827-1", "noindex": false, "published": "2022-08-16T15:50:13Z", "modified": "2025-05-02T04:30:53.926248Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2022:2827-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2020-36557: Fixed race condition between the VT_DISALLOCATE ioctl and closing/opening of ttys that could lead to a use-after-free (bnc#1201429).\n- CVE-2020-36558: Fixed race condition involving VT_RESIZEX that could lead to a NULL pointer dereference and general protection fault (bnc#1200910).\n- CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635).\n- CVE-2021-33656: Fixed out of bounds write with ioctl PIO_FONT (bnc#1201636).\n- CVE-2022-1462: Fixed an out-of-bounds rea", "references": ["https://www.suse.com/support/update/announcement/2022/suse-su-20222827-1/", "https://bugzilla.suse.com/1195775", "https://bugzilla.suse.com/1195926"], "fixes": ["4.12.14-150100.197.120.1"], "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}]}, {"id": "SUSE-SU-2022:2549-1", "noindex": false, "published": "2022-07-26T11:58:49Z", "modified": "2026-02-04T02:50:09.067910Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2022:2549-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information (bsc#1199657).\n- CVE-2022-34918: Fixed a buffer overflow with nft_set_elem_init() that could be used by a local attacker to escalate privileges (bnc#1201171).\n- CVE-2021-26341: Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage (bsc#1201050).\n- CVE-2022-1679: Fixed a use-after-free in the A", "references": ["https://www.suse.com/support/update/announcement/2022/suse-su-20222549-1/", "https://bugzilla.suse.com/1065729", "https://bugzilla.suse.com/1179195"], "fixes": ["5.3.18-150300.59.87.1"], "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}]}, {"id": "SUSE-SU-2022:2411-1", "noindex": false, "published": "2022-07-15T12:28:01Z", "modified": "2026-02-04T03:48:51.085638Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2022:2411-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information (bsc#1199657).\n- CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487).\n- CVE-2022-20132: Fixed out of bounds read due to improper input validation in lg_probe and related functions of hid-lg.c (bsc#1200619).\n- CVE-2022-33981: Fixed us", "references": ["https://www.suse.com/support/update/announcement/2022/suse-su-20222411-1/", "https://bugzilla.suse.com/1194013", "https://bugzilla.suse.com/1196901"], "fixes": ["4.12.14-150100.197.117.1"], "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}]}, {"id": "SUSE-SU-2022:2173-1", "noindex": false, "published": "2022-06-24T08:52:52Z", "modified": "2026-02-04T04:21:04.633877Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2022:2173-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 15 SP3 kernel was updated.\n\nThe following security bugs were fixed:\n\n- CVE-2022-1966: Fixed an use-after-free bug in the netfilter subsystem. This flaw allowed a local attacker with user access to cause a privilege escalation issue. (bnc#1200015)\n- CVE-2022-1975: Fixed a sleep-in-atomic bug that allows attacker to crash linux kernel by simulating nfc device from user-space. (bsc#1200143)\n- CVE-2022-1974: Fixed an use-after-free that could causes kernel crash by simulating an nfc device from user-space. (bsc#1200144)\n- CVE-2020-26541: Enforce the secure boot forbidden signature database (aka dbx) protection mechanism", "references": ["https://www.suse.com/support/update/announcement/2022/suse-su-20222173-1/", "https://bugzilla.suse.com/1177282", "https://bugzilla.suse.com/1199365"], "fixes": ["5.3.18-150300.59.76.1"], "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}]}, {"id": "SUSE-SU-2022:2111-1", "noindex": false, "published": "2022-06-17T07:22:23Z", "modified": "2026-02-04T04:32:08.714139Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2022:2111-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 15 SP1 kernel was updated.\n\nThe following security bugs were fixed:\n\n- CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)\n- CVE-2022-21123: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)\n- CVE-2022-21125: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)\n- CVE-2022-21180: Fixed a stale MMIO data transient which c", "references": ["https://www.suse.com/support/update/announcement/2022/suse-su-20222111-1/", "https://bugzilla.suse.com/1028340", "https://bugzilla.suse.com/1055710"], "fixes": ["4.12.14-150100.197.114.2"], "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}]}, {"id": "SUSE-SU-2022:2078-1", "noindex": false, "published": "2022-06-14T18:30:22Z", "modified": "2026-02-04T02:31:48.324825Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2022:2078-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 15 SP3 kernel was updated.\n\nThe following security bugs were fixed:\n\n- CVE-2022-0168: Fixed a NULL pointer dereference in smb2_ioctl_query_info. (bsc#1197472)\n- CVE-2022-20008: Fixed bug that allows to read kernel heap memory due to uninitialized data in mmc_blk_read_single of block.c. (bnc#1199564)\n- CVE-2022-1972: Fixed a buffer overflow in nftable that could lead to privilege escalation. (bsc#1200019)\n- CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)\n- CVE-2022-21123: Fixed a stale MMIO data transien", "references": ["https://www.suse.com/support/update/announcement/2022/suse-su-20222078-1/", "https://bugzilla.suse.com/1055117", "https://bugzilla.suse.com/1061840"], "fixes": ["5.3.18-150300.59.71.2"], "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}]}, {"id": "SUSE-SU-2022:1687-1", "noindex": false, "published": "2022-05-16T11:58:53Z", "modified": "2026-02-04T04:30:32.572656Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2022:1687-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-29156: Fixed a double free related to rtrs_clt_dev_release (bnc#1198515).\n- CVE-2022-28893: Ensuring that sockets are in the intended state inside the SUNRPC subsystem (bnc#1198330).\n- CVE-2022-28748: Fixed memory lead over the network by ax88179_178a devices (bsc#1196018).\n- CVE-2022-28356: Fixed a refcount leak bug found in net/llc/af_llc.c (bnc#1197391).\n- CVE-2022-1516: Fixed null-ptr-deref caused by x25_disconnect (bsc#1199012).\n- CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem", "references": ["https://www.suse.com/support/update/announcement/2022/suse-su-20221687-1/", "https://bugzilla.suse.com/1028340", "https://bugzilla.suse.com/1071995"], "fixes": ["5.3.18-150300.59.68.1"], "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}]}, {"id": "SUSE-SU-2022:1256-1", "noindex": false, "published": "2022-04-19T08:22:51Z", "modified": "2026-02-04T02:45:09.259411Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2022:1256-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2022-28356: Fixed a refcount leak bug in net/llc/af_llc.c (bnc#1197391).\n- CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution (bsc#1197227).\n- CVE-2022-28388: Fixed a double free in drivers/net/can/usb/usb_8dev.c vulnerability in the Linux kernel (bnc#1198032).\n- CVE-2022-28389: Fixed a double fr", "references": ["https://www.suse.com/support/update/announcement/2022/suse-su-20221256-1/", "https://bugzilla.suse.com/1189562", "https://bugzilla.suse.com/1193738"], "fixes": ["4.12.14-150100.197.111.1"], "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}]}, {"id": "SUSE-SU-2022:1183-1", "noindex": false, "published": "2022-04-13T14:58:44Z", "modified": "2026-02-04T03:49:13.190441Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/suse-su-2022:1183-1", "title": "Security update for the Linux Kernel", "description": "\nThe SUSE Linux Enterprise 15 SP3 kernel was updated.\n\nThe following security bugs were fixed:\n\n- CVE-2022-0854: Fixed a memory leak flaw was found in the Linux kernels DMA subsystem. This flaw allowed a local user to read random memory from the kernel space. (bnc#1196823)\n- CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution. (bsc#1197227)\n- CVE-2022-28390: Fixed a double free in drivers/net/can/usb/ems_usb.c vulnerability in the Linux", "references": ["https://www.suse.com/support/update/announcement/2022/suse-su-20221183-1/", "https://bugzilla.suse.com/1065729", "https://bugzilla.suse.com/1156395"], "fixes": ["5.3.18-150300.59.63.1"], "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}]}, {"id": "openSUSE-SU-2022:1039-1", "noindex": false, "published": "2022-03-30T07:38:27Z", "modified": "2026-02-04T03:42:40.181307Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2022:1039-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_dup_netdev.c, related to nf_tables_offload (bsc#1196299).\n- CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could trigger crash the system or corrupt system memory (bsc#1196830).\n- CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516).\n- CVE-2022-24448:", "references": ["https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XWMVMDEM47CT6AQ4RWZEZZJSH2G2J4CV/", "https://bugzilla.suse.com/1176447", "https://bugzilla.suse.com/1176774"], "fixes": ["5.3.18-150300.59.60.4"], "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}]}, {"id": "openSUSE-SU-2022:0768-1", "noindex": false, "published": "2022-03-09T09:09:29Z", "modified": "2026-02-04T03:10:18.479826Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2022:0768-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\n\nTransient execution side-channel attacks attacking the Branch History Buffer (BHB),\nnamed 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.\n\nThe following security bugs were fixed:\n\n- CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580).\n- CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580).\n- CVE-2022-0847: Fixed a vulnerability were a local attackers could overwrite data in arbitrary (read-only) files (bsc#1196584).\n- CVE-2022-0617: Fixed a null pointer dere", "references": ["https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MWGLT5YBYSSX5MP2JBKT3N3QV2IWMC5F/", "https://bugzilla.suse.com/1185973", "https://bugzilla.suse.com/1191580"], "fixes": ["4.12.14-197.108.1"], "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}]}, {"id": "openSUSE-SU-2022:0760-1", "noindex": false, "published": "2022-03-08T18:06:58Z", "modified": "2026-02-04T03:47:07.511874Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/opensuse-su-2022:0760-1", "title": "Security update for the Linux Kernel", "description": "The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.\n\n\nTransient execution side-channel attacks attacking the Branch History Buffer (BHB),\nnamed 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.\n\nThe following security bugs were fixed:\n\n- CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580).\n- CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580).\n- CVE-2022-0847: Fixed a vulnerability were a local attackers could overwrite data in arbitrary (read-only) files (bsc#1196584).\n- CVE-2022-25375: The RNDIS USB gadget lac", "references": ["https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GIEQJF6RAZADJBWJQFLIHOBULB4E2C7K/", "https://bugzilla.suse.com/1089644", "https://bugzilla.suse.com/1154353"], "fixes": ["5.3.18-150300.59.54.1"], "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}]}], "total": 35, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 2, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "kernel-default", "path": "vulns/opensuse-leap-15.3/kernel-default", "ecosystem": "openSUSE:Leap 15.3"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 0, "kev": 0}, "lastmod": "2026-02-04T04:36:11.167391Z", "early_advisories": [], "license": "Puedes utilizar libremente la selección de PatchFirst y nuestras aportaciones (prioridades, alertas tempranas, textos, resúmenes y agregados) para tus propios fines, incluido el uso interno de tu empresa. La reventa, la distribución comercial y la creación masiva de réplicas de esta selección o de estas aportaciones requieren un acuerdo escrito con el operador. Siempre que uses o publiques la selección o nuestras aportaciones, cita a PatchFirst (https://patchfirst.dev/vulns/) con este enlace a la página del flujo de tu región. Los registros originales de fuentes abiertas siguen sujetos a sus respectivas licencias y condiciones. Estas condiciones no limitan tus derechos sobre los datos originales, que puedes obtener directamente de esas fuentes.", "terms_url": "https://patchfirst.dev/es/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "PatchFirst selecciona, normaliza y combina los registros; se pueden añadir resúmenes y traducciones. Las noticias incluyen un enlace a la fuente original en cada entrada.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Las licencias de las bases originales varían; consulta el catálogo de fuentes."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Puntuaciones públicas gratuitas; se solicita atribución (FIRST EPSS, puntuaciones generadas por Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}