p PatchFirst

PatchFirst · Latest vulnerabilities

kernel-livepatch-sle15-sp1_update_9 vulnerabilities

Vulnerabilities published for kernel-livepatch-sle15-sp1_update_9 in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 10

  1. SUSE-SU-2021:0853-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_34 fixes several issues. The following security issues were fixed: - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179664). - Fixed an issue where NFS client filesystems got unmounted on fail-over (bsc#1182468). - CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553). - CVE-2020-27786: Fixed a potential user after free which could have led to memory corruption or privilege escalation (

    • Update to 10-2.2
    Published Updated
  2. SUSE-SU-2021:0377-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_34 fixes several issues. The following security issues were fixed: - CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562). - CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180030). - CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. - CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008). - CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allo

    • Update to 9-2.2
    Published Updated
  3. SUSE-SU-2020:3670-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_64 fixes several issues. The following security issues were fixed: - CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178622). - CVE-2020-8694: Fixed an insufficient access control in the Linux kernel driver for some Intel(R) Processors which might have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1178700). - CVE-2020-25705: Fixed a flaw which could have allowed an off-path remote user to effectively bypass source port UDP randomization (bsc#1178783). - Fixed an issue where system was hanging due to a massive amount of sof

    • Update to 8-2.2
    Published Updated
  4. SUSE-SU-2020:3402-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-24_12 fixes several issues. The following security issues were fixed: - CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724, bsc#1177729, bsc#1178397). - CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bnc#1177513).

    • Update to 7-2.2
    Published Updated
  5. SUSE-SU-2020:3180-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_26 fixes several issues. The following security issues were fixed: - CVE-2020-14381: Fixed a use-after-free in the fast user mutex (futex) wait operation, which could have lead to memory corruption and possibly privilege escalation (bsc#1176011). - CVE-2020-0431: In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. (bsc#1176722) - CVE-2020-25212: A TOCTOU mismatch in the NFS client code could be used by lo

    • Update to 6-2.2
    Published Updated
  6. SUSE-SU-2020:2531-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_37 fixes several issues. The following security issues were fixed: - CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247). - CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186). - CVE-2019-9458: Fixed a use-after-free in media/v4l (bsc#1173963). - CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).

    • Update to 5-2.2
    Published Updated
  7. SUSE-SU-2020:1646-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_18 fixes several issues. The following security issues were fixed: - CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437). - CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1171746).

    • Update to 4-2.1
    Published Updated
  8. SUSE-SU-2020:1475-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.178-94_91 fixes several issues. The following security issues were fixed: - CVE-2020-12653: Fixed a buffer overflow in mwifiex_cmd_append_vsie_tlv() which could have allowed local users to gain privileges or cause a denial of service (bsc#1171254). - CVE-2020-12654: Fixed a heap-based buffer overflow in mwifiex_ret_wmm_get_status() which could have been triggered by a remote AP to trigger (bsc#1171252).

    • Update to 3-2.1
    Published Updated
  9. SUSE-SU-2020:0560-1

    Not ratedFix available

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8992: An issue was discovered in ext4_protect_reserved_inode in fs/ext4/block_validity.c that allowed attackers to cause a soft lockup via a crafted journal size (bnc#1164069). - CVE-2020-8648: There was a use-after-free vulnerability in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bnc#1162928). - CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c. It did not check the length of variable elements in a beacon head, leading to a buffer overflow (bnc#1152107). - CVE-2

    • Update to 1-3.5.1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →