Every CVE Search/ Get API key

CVE-2015-1142857

On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control...

8.6 HighFix available

On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f079fa005aae08ee0e1bc32699874ff4f02e11c1, the Linux Kernel i40e/i40evf driver before e7358f54a3954df16d4f87e3cad35063f1c17de5 and the DPDK before commit 3f12b9f23b6499ff66ec8b0de941fb469297e5d0, additionally Multiple vendor NIC firmware is affected.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

2.11%Up 1.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 8.6

On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f079fa005aae08ee0e1bc32699874ff4f02e11c1, the Linux Kernel i40e/i40evf driver before e7358f54a3954df16d4f87e3cad35063f1c17de5 and the DPDK before commit 3f12b9f23b6499ff66ec8b0de941fb469297e5d0, additionally Multiple vendor NIC firmware is affected.

Record
CVE-2015-1142857
CVSS 3.0
8.6 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-254
Updated
2026-11-02
CVE List No score

On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f079fa005aae08ee0e1bc32699874ff4f02e11c1, the Linux Kernel i40e/i40evf driver before e7358f54a3954df16d4f87e3cad35063f1c17de5 and the DPDK before commit 3f12b9f23b6499ff66ec8b0de941fb469297e5d0, additionally Multiple vendor NIC firmware is affected.

Record
CVE-2015-1142857
Updated
2026-11-02
EUVDEUVD-2015-1143 No score

On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f079fa005aae08ee0e1bc32699874ff4f02e11c1, the Linux Kernel i40e/i40evf driver before e7358f54a3954df16d4f87e3cad35063f1c17de5 and the DPDK before commit 3f12b9f23b6499ff66ec8b0de941fb469297e5d0, additionally Multiple vendor NIC firmware is affected.

Record
EUVD-2015-1143
Updated
2026-11-03
GitHub AdvisoriesGHSA-f496-vgq6-3hm4 8.6

On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control...

On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f079fa005aae08ee0e1bc32699874ff4f02e11c1, the Linux Kernel i40e/i40evf driver before e7358f54a3954df16d4f87e3cad35063f1c17de5 and the DPDK before commit 3f12b9f23b6499ff66ec8b0de941fb469297e5d0, additionally Multiple vendor NIC firmware is affected.

Record
GHSA-f496-vgq6-3hm4
CVSS 3.0
8.6 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVSUSE-SU-2018:0437-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 GA LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis (bnc#1068032).

    The previous fix using CPU Microcode has been complemented by building the Linux Kernel with return trampolines aka 'retpolines'.

  • CVE-2017-18079: drivers/input/serio/i8042.c allowed attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact because the port->exists value can change after it is validated (bnc#1077922)

  • CVE-2015-1142857: Prevent guests from sending ethernet flow control pause frames via the PF (bnc#1077355)

  • CVE-2017-17741: KVM allowed attackers to obtain potentially sensitive information from kernel memory, aka a write_mmio stack-based out-of-bounds read (bnc#1073311)

  • CVE-2017-13215: Prevent elevation of privilege (bnc#1075908)

  • CVE-2018-1000004: Prevent race condition in the sound system, this could have lead a deadlock and denial of service condition (bnc#1076017)

  • CVE-2017-17806: The HMAC implementation did not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and the SHA-3 hash algorithm (CONFIG_CRYPTO_SHA3) to cause a kernel stack buffer overflow by executing a crafted sequence of system calls that encounter a missing SHA-3 initialization (bnc#1073874)

  • CVE-2017-17805: The Salsa20 encryption algorithm did not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or have unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 were vulnerable (bnc#1073792)

The following non-security bugs were fixed:

  • bcache allocator: send discards with correct size (bsc#1047626).
  • bcache.txt: standardize document format (bsc#1076110).
  • bcache: Abstract out stuff needed for sorting (bsc#1076110).
  • bcache: Add a cond_resched() call to gc (bsc#1076110).
  • bcache: Add a real GC_MARK_RECLAIMABLE (bsc#1076110).
  • bcache: Add bch_bkey_equal_header() (bsc#1076110).
  • bcache: Add bch_btree_keys_u64s_remaining() (bsc#1076110).
  • bcache: Add bch_keylist_init_single() (bsc#1047626).
  • bcache: Add btree_insert_node() (bnc#951638).
  • bcache: Add btree_map() functions (bsc#1047626).
  • bcache: Add btree_node_write_sync() (bsc#1076110).
  • bcache: Add explicit keylist arg to btree_insert() (bnc#951638).
  • bcache: Add make_btree_freeing_key() (bsc#1076110).
  • bcache: Add on error panic/unregister setting (bsc#1047626).
  • bcache: Add struct bset_sort_state (bsc#1076110).
  • bcache: Add struct btree_keys (bsc#1076110).
  • bcache: Allocate bounce buffers with GFP_NOWAIT (bsc#1076110).
  • bcache: Avoid deadlocking in garbage collection (bsc#1076110).
  • bcache: Avoid nested function definition (bsc#1076110).
  • bcache: Better alloc tracepoints (bsc#1076110).
  • bcache: Better full stripe scanning (bsc#1076110).
  • bcache: Bkey indexing renaming (bsc#1076110).
  • bcache: Break up struct search (bsc#1076110).
  • bcache: Btree verify code improvements (bsc#1076110).
  • bcache: Bypass torture test (bsc#1076110).
  • bcache: Change refill_dirty() to always scan entire disk if necessary (bsc#1076110).
  • bcache: Clean up cache_lookup_fn (bsc#1076110).
  • bcache: Clean up keylist code (bnc#951638).
  • bcache: Convert bch_btree_insert() to bch_btree_map_leaf_nodes() (bsc#1076110).
  • bcache: Convert…
Record
SUSE-SU-2018:0437-1
Updated
2026-11-02
OSVSUSE-SU-2018:0525-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP1 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis (bnc#1068032).

    The previous fix using CPU Microcode has been complemented by building the Linux Kernel with return trampolines aka 'retpolines'.

  • CVE-2017-18079: drivers/input/serio/i8042.c allowed attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact because the port->exists value can change after it is validated (bnc#1077922).

  • CVE-2015-1142857: Prevent guests from sending ethernet flow control pause frames via the PF (bnc#1077355).

  • CVE-2017-17741: KVM allowed attackers to obtain potentially sensitive information from kernel memory, aka a write_mmio stack-based out-of-bounds read (bnc#1073311).

  • CVE-2017-13215: Prevent elevation of privilege (bnc#1075908).

  • CVE-2018-1000004: Prevent race condition in the sound system, this could have lead a deadlock and denial of service condition (bnc#1076017).

  • CVE-2017-17806: The HMAC implementation did not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and the SHA-3 hash algorithm (CONFIG_CRYPTO_SHA3) to cause a kernel stack buffer overflow by executing a crafted sequence of system calls that encounter a missing SHA-3 initialization (bnc#1073874).

  • CVE-2017-17805: The Salsa20 encryption algorithm did not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or have unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 were vulnerable (bnc#1073792).

The following non-security bugs were fixed:

  • NFS: only invalidate dentrys that are clearly invalid (bsc#1047118).
  • bcache.txt: standardize document format (bsc#1076110).
  • bcache: Abstract out stuff needed for sorting (bsc#1076110).
  • bcache: Add a cond_resched() call to gc (bsc#1076110).
  • bcache: Add a real GC_MARK_RECLAIMABLE (bsc#1076110).
  • bcache: Add bch_bkey_equal_header() (bsc#1076110).
  • bcache: Add bch_btree_keys_u64s_remaining() (bsc#1076110).
  • bcache: Add bch_keylist_init_single() (bsc#1047626).
  • bcache: Add btree_insert_node() (bnc#951638).
  • bcache: Add btree_map() functions (bsc#1047626).
  • bcache: Add btree_node_write_sync() (bsc#1076110).
  • bcache: Add explicit keylist arg to btree_insert() (bnc#951638).
  • bcache: Add make_btree_freeing_key() (bsc#1076110).
  • bcache: Add on error panic/unregister setting (bsc#1047626).
  • bcache: Add struct bset_sort_state (bsc#1076110).
  • bcache: Add struct btree_keys (bsc#1076110).
  • bcache: Allocate bounce buffers with GFP_NOWAIT (bsc#1076110).
  • bcache: Avoid deadlocking in garbage collection (bsc#1076110).
  • bcache: Avoid nested function definition (bsc#1076110).
  • bcache: Better alloc tracepoints (bsc#1076110).
  • bcache: Better full stripe scanning (bsc#1076110).
  • bcache: Bkey indexing renaming (bsc#1076110).
  • bcache: Break up struct search (bsc#1076110).
  • bcache: Btree verify code improvements (bsc#1076110).
  • bcache: Bypass torture test (bsc#1076110).
  • bcache: Change refill_dirty() to always scan entire disk if necessary (bsc#1076110).
  • bcache: Clean up cache_lookup_fn (bsc#1076110).
  • bcache: Clean up keylist code (bnc#951638).
  • bcache: Convert bch_btree_insert() to bch_btree_map_leaf_nodes() (bsc#1076110).
  • bcache: Convert…
Record
SUSE-SU-2018:0525-1
Updated
2026-11-02
Show 6 moreShow less
OSVSUSE-SU-2018:0555-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis (bnc#1068032).

    The previous fix using CPU Microcode has been complemented by building the Linux Kernel with return trampolines aka 'retpolines'.

  • CVE-2018-5332: In the Linux kernel the rds_message_alloc_sgs() function did not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c) (bnc#1075621).

  • CVE-2018-5333: In the Linux kernel the rds_cmsg_atomic function in net/rds/rdma.c mishandled cases where page pinning fails or an invalid address is supplied, leading to an rds_atomic_free_op NULL pointer dereference (bnc#1075617).

  • CVE-2017-18017: The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel allowed remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action (bnc#1074488).

  • CVE-2017-18079: drivers/input/serio/i8042.c in the Linux kernel allowed attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact because the port->exists value can change after it is validated (bnc#1077922).

  • CVE-2015-1142857: On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. (bnc#1077355).

  • CVE-2017-17741: The KVM implementation in the Linux kernel allowed attackers to obtain potentially sensitive information from kernel memory, aka a write_mmio stack-based out-of-bounds read, related to arch/x86/kvm/x86.c and include/trace/events/kvm.h (bnc#1073311).

  • CVE-2017-13215: A elevation of privilege vulnerability in the Upstream kernel skcipher. (bnc#1075908).

  • CVE-2018-1000004: In the Linux kernel a race condition vulnerability existed in the sound system, this can lead to a deadlock and denial of service condition (bnc#1076017).

The following non-security bugs were fixed:

  • alsa: aloop: Fix inconsistent format due to incomplete rule (bsc#1045538).
  • alsa: aloop: Fix racy hw constraints adjustment (bsc#1045538).
  • alsa: aloop: Release cable upon open error path (bsc#1045538).
  • alsa: pcm: Abort properly at pending signal in OSS read/write loops (bsc#1045538).
  • alsa: pcm: Add missing error checks in OSS emulation plugin builder (bsc#1045538).
  • alsa: pcm: Allow aborting mutex lock at OSS read/write loops (bsc#1045538).
  • alsa: pcm: Remove incorrect snd_BUG_ON() usages (bsc#1045538).
  • alsa: pcm: Remove yet superfluous WARN_ON() (bsc#1045538).
  • btrfs: cleanup unnecessary assignment when cleaning up all the residual transaction (FATE#325056).
  • btrfs: copy fsid to super_block s_uuid (bsc#1080774).
  • btrfs: do not wait for all the writers circularly during the transaction commit (FATE#325056).
  • btrfs: do not WARN() in btrfs_transaction_abort() for IO errors (bsc#1080363).
  • btrfs: fix two use-after-free bugs with transaction cleanup (FATE#325056).
  • btrfs: make the state of the transaction more readable (FATE#325056).
  • btrfs: qgroup: exit the rescan worker during umount (bsc#1080685).
  • btrfs: qgroup: Fix dead judgement on qgroup_rescan_leaf() return value (bsc#1080685).
  • btrfs: reset intwrite on transaction abort (FATE#325056).
  • btrfs: set qgroup_ulist to be null after calling ulist_free() (bsc#1080359).
  • btrfs: stop waiting on current trans if we aborted (FATE#325056).
  • cdc-acm: apply quirk for card reader (bsc#1060279).
  • cdrom: factor out common open_for_* code (bsc#1048585).
  • cdrom: wait for tray to close (bsc#1048585).
  • delay:…
Record
SUSE-SU-2018:0555-1
Updated
2026-11-02
OSVSUSE-SU-2018:0671-1 No score

Security update for kernel-firmware

This update for kernel-firmware fixes the following issues:

  • CVE-2015-1142857: Add 7.13.1.0 bnx2x firmware files for ethernet flow control vulnerability in SRIOV devices (bsc#1077355)
Record
SUSE-SU-2018:0671-1
Updated
2026-11-02
OSVSUSE-SU-2018:0674-1 No score

Security update for kernel-firmware

This update for kernel-firmware fixes the following issues:

  • CVE-2015-1142857: Add 7.13.1.0 bnx2x firmware files to fix a ethernet flow control vulnerability in SRIOV devices (bsc#1077355)
Record
SUSE-SU-2018:0674-1
Updated
2026-11-02
OSVSUSE-SU-2018:0841-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 Realtime kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis (bnc#1068032).

    The previous fix using CPU Microcode has been complemented by building the Linux Kernel with return trampolines aka 'retpolines'.

  • CVE-2015-1142857: On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver, i40e/i40evf driver and the DPDK, additionally multiple vendor NIC firmware is affected (bnc#1077355).

  • CVE-2017-13215: A elevation of privilege vulnerability in the Upstream kernel skcipher. (bnc#1075908).

  • CVE-2017-17741: The KVM implementation in the Linux kernel allowed attackers to obtain potentially sensitive information from kernel memory, aka a write_mmio stack-based out-of-bounds read, related to arch/x86/kvm/x86.c and include/trace/events/kvm.h (bnc#1073311).

  • CVE-2017-18017: The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel allowed remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action (bnc#1074488).

  • CVE-2017-18079: drivers/input/serio/i8042.c in the Linux kernel allowed attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact because the port->exists value can change after it is validated (bnc#1077922).

  • CVE-2018-1000004: In the Linux kernel a race condition vulnerability exists in the sound system, this can lead to a deadlock and denial of service condition (bnc#1076017).

  • CVE-2018-5332: In the Linux kernel the rds_message_alloc_sgs() function did not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c) (bnc#1075621).

  • CVE-2018-5333: In the Linux kernel rds_cmsg_atomic function in net/rds/rdma.c mishandled cases where page pinning fails or an invalid address is supplied, leading to an rds_atomic_free_op NULL pointer dereference (bnc#1075617).

The following non-security bugs were fixed:

  • Add proper NX hadnling for !NX-capable systems also to kaiser_add_user_map(). (bsc#1076278).
  • alsa: aloop: Fix inconsistent format due to incomplete rule (bsc#1045538).
  • alsa: aloop: Fix racy hw constraints adjustment (bsc#1045538).
  • alsa: aloop: Release cable upon open error path (bsc#1045538).
  • alsa: pcm: Abort properly at pending signal in OSS read/write loops (bsc#1045538).
  • alsa: pcm: Add missing error checks in OSS emulation plugin builder (bsc#1045538).
  • alsa: pcm: Allow aborting mutex lock at OSS read/write loops (bsc#1045538).
  • alsa: pcm: Remove incorrect snd_BUG_ON() usages (bsc#1045538).
  • alsa: pcm: Remove yet superfluous WARN_ON() (bsc#1045538).
  • btrfs: cleanup unnecessary assignment when cleaning up all the residual transaction (FATE#325056).
  • btrfs: copy fsid to super_block s_uuid (bsc#1080774).
  • btrfs: do not wait for all the writers circularly during the transaction commit (FATE#325056).
  • btrfs: do not WARN() in btrfs_transaction_abort() for IO errors (bsc#1080363).
  • btrfs: fix two use-after-free bugs with transaction cleanup (FATE#325056).
  • btrfs: make the state of the transaction more readable (FATE#325056).
  • btrfs: qgroup: exit the rescan worker during umount (bsc#1080685).
  • btrfs: qgroup: Fix dead judgement on qgroup_rescan_leaf() return value (bsc#1080685).
  • btrfs: reset intwrite on transaction abort (FATE#325056).
  • btrfs: set qgroup_ulist to be null after calling ulist_free() (bsc#1080359).
  • btrfs: stop waiting on current trans if we aborted…
Record
SUSE-SU-2018:0841-1
Updated
2026-11-02
OSVSUSE-SU-2018:1567-1 No score

Security update for kernel-firmware

This update for kernel-firmware fixes the following issues:

  • CVE-2015-1142857: Add 7.13.1.0 bnx2x firmware files for ethernet flow control vulnerability in SRIOV devices (bsc#1077355)
  • CVE-2017-5715: Prevent unauthorized disclosure of information to an attacker with local user access caused by speculative execution and indirect branch prediction (bsc#1095735).
Record
SUSE-SU-2018:1567-1
Updated
2026-11-02
OSVSUSE-SU-2018:1570-1 No score

Security update for kernel-firmware

This update for kernel-firmware fixes the following issues:

  • CVE-2015-1142857: Add 7.13.1.0 bnx2x firmware files to fix ethernet flow control vulnerability in SRIOV devices (bsc#1077355)
  • CVE-2017-5715: Prevent unauthorized disclosure of information to an attacker with local user access caused by speculative execution and indirect branch prediction (bsc#1095735).
Record
SUSE-SU-2018:1570-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel-ec2
SUSE:Linux Enterprise Module for Public Cloud 12
 before 3.12.61-52.119.1
3.12.61-52.119.1
kernel-default
SUSE:Linux Enterprise Server 12-LTSS
 before 3.12.61-52.119.1
3.12.61-52.119.1
kernel-source
SUSE:Linux Enterprise Server 12-LTSS
 before 3.12.61-52.119.1
3.12.61-52.119.1
kernel-syms
SUSE:Linux Enterprise Server 12-LTSS
 before 3.12.61-52.119.1
3.12.61-52.119.1
kernel-xen
SUSE:Linux Enterprise Server 12-LTSS
 before 3.12.61-52.119.1
3.12.61-52.119.1
kgraft-patch-SLE12_Update_31
SUSE:Linux Enterprise Server 12-LTSS
 before 1-1.7.1
1-1.7.1
kernel-default
SUSE:OpenStack Cloud 6
 before 3.12.74-60.64.82.1
3.12.74-60.64.82.1
kernel-source
SUSE:OpenStack Cloud 6
 before 3.12.74-60.64.82.1
3.12.74-60.64.82.1
kernel-syms
SUSE:OpenStack Cloud 6
 before 3.12.74-60.64.82.1
3.12.74-60.64.82.1
kernel-xen
SUSE:OpenStack Cloud 6
 before 3.12.74-60.64.82.1
3.12.74-60.64.82.1
Show 56 moreShow less
Affected packages
PackageAffectedFixed
kgraft-patch-SLE12-SP1_Update_25
SUSE:OpenStack Cloud 6
 before 1-2.9.1
1-2.9.1
kernel-ec2
SUSE:Linux Enterprise Module for Public Cloud 12
 before 3.12.74-60.64.82.1
3.12.74-60.64.82.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 3.12.74-60.64.82.1
3.12.74-60.64.82.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 3.12.74-60.64.82.1
3.12.74-60.64.82.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 3.12.74-60.64.82.1
3.12.74-60.64.82.1
kernel-xen
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 3.12.74-60.64.82.1
3.12.74-60.64.82.1
kgraft-patch-SLE12-SP1_Update_25
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 1-2.9.1
1-2.9.1
kernel-default
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 3.12.74-60.64.82.1
3.12.74-60.64.82.1
kernel-source
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 3.12.74-60.64.82.1
3.12.74-60.64.82.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 3.12.74-60.64.82.1
3.12.74-60.64.82.1
kernel-xen
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 3.12.74-60.64.82.1
3.12.74-60.64.82.1
kgraft-patch-SLE12-SP1_Update_25
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 1-2.9.1
1-2.9.1
kernel-docs
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 3.0.101-108.35.1
3.0.101-108.35.1
cluster-network
SUSE:Linux Enterprise High Availability Extension 11 SP4
 before 1.4-2.32.4.6
1.4-2.32.4.6
drbd
SUSE:Linux Enterprise High Availability Extension 11 SP4
 before 8.4.4-0.27.4.2
8.4.4-0.27.4.2
drbd-kmp
SUSE:Linux Enterprise High Availability Extension 11 SP4
 before 8.4.4-0.27.4.6
8.4.4-0.27.4.6
gfs2
SUSE:Linux Enterprise High Availability Extension 11 SP4
 before 2-0.24.4.6
2-0.24.4.6
ocfs2
SUSE:Linux Enterprise High Availability Extension 11 SP4
 before 1.6-0.28.5.6
1.6-0.28.5.6
cluster-network
SUSE:Linux Enterprise Real Time 11 SP4
 before 1.4-2.32.4.6
1.4-2.32.4.6
drbd-kmp
SUSE:Linux Enterprise Real Time 11 SP4
 before 8.4.4-0.27.4.6
8.4.4-0.27.4.6
gfs2
SUSE:Linux Enterprise Real Time 11 SP4
 before 2-0.24.4.6
2-0.24.4.6
ocfs2
SUSE:Linux Enterprise Real Time 11 SP4
 before 1.6-0.28.5.6
1.6-0.28.5.6
kernel-bigmem
SUSE:Linux Enterprise Server 11 SP4
 before 3.0.101-108.35.1
3.0.101-108.35.1
kernel-default
SUSE:Linux Enterprise Server 11 SP4
 before 3.0.101-108.35.1
3.0.101-108.35.1
kernel-ec2
SUSE:Linux Enterprise Server 11 SP4
 before 3.0.101-108.35.1
3.0.101-108.35.1
kernel-pae
SUSE:Linux Enterprise Server 11 SP4
 before 3.0.101-108.35.1
3.0.101-108.35.1
kernel-ppc64
SUSE:Linux Enterprise Server 11 SP4
 before 3.0.101-108.35.1
3.0.101-108.35.1
kernel-source
SUSE:Linux Enterprise Server 11 SP4
 before 3.0.101-108.35.1
3.0.101-108.35.1
kernel-syms
SUSE:Linux Enterprise Server 11 SP4
 before 3.0.101-108.35.1
3.0.101-108.35.1
kernel-trace
SUSE:Linux Enterprise Server 11 SP4
 before 3.0.101-108.35.1
3.0.101-108.35.1
kernel-xen
SUSE:Linux Enterprise Server 11 SP4
 before 3.0.101-108.35.1
3.0.101-108.35.1
kernel-bigmem
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 3.0.101-108.35.1
3.0.101-108.35.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 3.0.101-108.35.1
3.0.101-108.35.1
kernel-ec2
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 3.0.101-108.35.1
3.0.101-108.35.1
kernel-pae
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 3.0.101-108.35.1
3.0.101-108.35.1
kernel-ppc64
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 3.0.101-108.35.1
3.0.101-108.35.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 3.0.101-108.35.1
3.0.101-108.35.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 3.0.101-108.35.1
3.0.101-108.35.1
kernel-trace
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 3.0.101-108.35.1
3.0.101-108.35.1
kernel-xen
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 3.0.101-108.35.1
3.0.101-108.35.1
kernel-firmware
SUSE:Linux Enterprise Server 11 SP4
 before 20110923-0.59.3.1
20110923-0.59.3.1
kernel-firmware
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 20110923-0.59.3.1
20110923-0.59.3.1
kernel-firmware
SUSE:Linux Enterprise Desktop 12 SP2
 before 20170530-21.19.1
20170530-21.19.1
kernel-firmware
SUSE:Linux Enterprise Desktop 12 SP3
 before 20170530-21.19.1
20170530-21.19.1
kernel-firmware
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 20170530-21.19.1
20170530-21.19.1
kernel-firmware
SUSE:Linux Enterprise Server 12 SP2
 before 20170530-21.19.1
20170530-21.19.1
kernel-firmware
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 20170530-21.19.1
20170530-21.19.1
kernel-firmware
SUSE:Linux Enterprise Server 12 SP3
 before 20170530-21.19.1
20170530-21.19.1
kernel-firmware
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 20170530-21.19.1
20170530-21.19.1
kernel-rt
SUSE:Linux Enterprise Real Time 11 SP4
 before 3.0.101.rt130-69.21.1
3.0.101.rt130-69.21.1
kernel-rt_trace
SUSE:Linux Enterprise Real Time 11 SP4
 before 3.0.101.rt130-69.21.1
3.0.101.rt130-69.21.1
kernel-source-rt
SUSE:Linux Enterprise Real Time 11 SP4
 before 3.0.101.rt130-69.21.1
3.0.101.rt130-69.21.1
kernel-syms-rt
SUSE:Linux Enterprise Real Time 11 SP4
 before 3.0.101.rt130-69.21.1
3.0.101.rt130-69.21.1
kernel-firmware
SUSE:Linux Enterprise Server 12-LTSS
 before 20140807git-5.8.1
20140807git-5.8.1
kernel-firmware
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 20160516git-10.13.1
20160516git-10.13.1
kernel-firmware
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 20160516git-10.13.1
20160516git-10.13.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-1142857 is a high vulnerability (CVSS 8.6) in Dpdk, published January 23, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.11%, the 81st percentile. Fixed in kernel-ec2 3.12.61-52.119.1.

References

Show 83 moreShow less
This page doesn't list everything

Left out here: the rest of 4 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open