Every CVE Search/ Get API key

CVE-2019-15239

In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into...

7.8 HighFix available

In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into 4.16.12, was incorrectly backported to the earlier longterm kernels, introducing a new vulnerability that was potentially more severe than the issue that was intended to be fixed by backporting. Specifically, by adding to a write queue between disconnection and re-connection, a local attacker can trigger multiple use-after-free conditions. This can result in a kernel crash, or potentially in privilege escalation. NOTE: this affects (for example) Linux distributions that use 4.9.x longterm kernels before 4.9.190 or 4.14.x longterm kernels before 4.14.139.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.59%Down 0.6 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.8

In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into 4.16.12, was incorrectly backported to the earlier longterm kernels, introducing a new vulnerability that was potentially more severe than the issue that was intended to be fixed by backporting. Specifically, by adding to a write queue between disconnection and re-connection, a local attacker can trigger multiple use-after-free conditions. This can result in a kernel crash, or potentially in privilege escalation. NOTE: this affects (for example) Linux distributions that use 4.9.x longterm kernels before 4.9.190 or 4.14.x longterm kernels before 4.14.139.

Record
CVE-2019-15239
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-416
Updated
2026-11-02
CVE List No score

In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into 4.16.12, was incorrectly backported to the earlier longterm kernels, introducing a new vulnerability that was potentially more severe than the issue that was intended to be fixed by backporting. Specifically, by adding to a write queue between disconnection and re-connection, a local attacker can trigger multiple use-after-free conditions. This can result in a kernel crash, or potentially in privilege escalation. NOTE: this affects (for example) Linux distributions that use 4.9.x longterm kernels before 4.9.190 or 4.14.x longterm kernels before 4.14.139.

Record
CVE-2019-15239
Updated
2026-11-02
EUVDEUVD-2019-6250 No score

In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into 4.16.12, was incorrectly backported to the earlier longterm kernels, introducing a new vulnerability that was potentially more severe than the issue that was intended to be fixed by backporting. Specifically, by adding to a write queue between disconnection and re-connection, a local attacker can trigger multiple use-after-free conditions. This can result in a kernel crash, or potentially in privilege escalation. NOTE: this affects (for example) Linux distributions that use 4.9.x longterm kernels before 4.9.190 or 4.14.x longterm kernels before 4.14.139.

Record
EUVD-2019-6250
Updated
2026-11-03
GitHub AdvisoriesGHSA-7j8w-38v5-7qqp No score

In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into...

In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into 4.16.12, was incorrectly backported to the earlier longterm kernels, introducing a new vulnerability that was potentially more severe than the issue that was intended to be fixed by backporting. Specifically, by adding to a write queue between disconnection and re-connection, a local attacker can trigger multiple use-after-free conditions. This can result in a kernel crash, or potentially in privilege escalation. NOTE: this affects (for example) Linux distributions that use 4.9.x longterm kernels before 4.9.190 or 4.14.x longterm kernels before 4.14.139.

Record
GHSA-7j8w-38v5-7qqp
Updated
2026-11-02
OSVBELL-CVE-2019-15239 7.8

CVE-2019-15239 does not affect BellSoft software

Record
BELL-CVE-2019-15239
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into 4.16.12, was incorrectly backported to the earlier longterm kernels, introducing a new vulnerability that was potentially more severe than the issue that was intended to be fixed by backporting. Specifically, by adding to a write queue between disconnection and re-connection, a local attacker can trigger multiple use-after-free conditions. This can result in a kernel crash, or potentially in privilege escalation. NOTE: this affects (for example) Linux distributions that use 4.9.x longterm kernels before 4.9.190 or 4.14.x longterm kernels before 4.14.139.

Record
CVE-2019-15239
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 21 moreShow less
OSVDEBIAN-CVE-2019-15239 7.8

In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into 4.16.12, was incorrectly backported to the earlier longterm kernels, introducing a new vulnerability that was potentially more severe than the issue that was intended to be fixed by backporting. Specifically, by adding to a write queue between disconnection and re-connection, a local attacker can trigger multiple use-after-free conditions. This can result in a kernel crash, or potentially in privilege escalation. NOTE: this affects (for example) Linux distributions that use 4.9.x longterm kernels before 4.9.190 or 4.14.x longterm kernels before 4.14.139.

Record
DEBIAN-CVE-2019-15239
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:3978 7.4

Red Hat Security Advisory: kernel-rt security and bug fix update

Record
RHSA-2019:3978
CVSS 3.0
7.4 HighCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:3979 7.4

Red Hat Security Advisory: kernel security and bug fix update

Record
RHSA-2019:3979
CVSS 3.0
7.4 HighCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:0027 7.4

Red Hat Security Advisory: kpatch-patch security update

Record
RHSA-2020:0027
CVSS 3.0
7.4 HighCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-15239 7.8

In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into 4.16.12, was incorrectly backported to the earlier longterm kernels, introducing a new vulnerability that was potentially more severe than the issue that was intended to be fixed by backporting. Specifically, by adding to a write queue between disconnection and re-connection, a local attacker can trigger multiple use-after-free conditions. This can result in a kernel crash, or potentially in privilege escalation. NOTE: this affects (for example) Linux distributions that use 4.9.x longterm kernels before 4.9.190 or 4.14.x longterm kernels before 4.14.139.

Record
UBUNTU-CVE-2019-15239
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2019:2173-1 No score

Security update for the Linux Kernel

The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2017-18551: There was an out of bounds write in the function i2c_smbus_xfer_emulated (bnc#1146163).
  • CVE-2018-20976: A use after free exists, related to xfs_fs_fill_super failure (bnc#1146285).
  • CVE-2018-21008: A use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c (bnc#1149591).
  • CVE-2019-14814: A heap overflow in mwifiex_set_uap_rates() function of Marvell was fixed. (bnc#1146512).
  • CVE-2019-14815: A heap overflow in mwifiex_set_wmm_params() function of Marvell Wifi Driver was fixed. (bnc#1146514).
  • CVE-2019-14816: A heap overflow in mwifiex_update_vs_ie() function of Marvell Wifi Driver was fixed. (bnc#1146516).
  • CVE-2019-14835: A vhost/vhost_net kernel buffer overflow could lead to guest to host kernel escape during live migration (bnc#1150112).
  • CVE-2019-15030: In the Linux kernel on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check (bnc#1149713).
  • CVE-2019-15031: In the Linux kernel on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c (bnc#1149713).
  • CVE-2019-15090: In the qedi_dbg_* family of functions, there was an out-of-bounds read (bnc#1146399).
  • CVE-2019-15098: drivers/net/wireless/ath/ath6kl/usb.c had a NULL pointer dereference via an incomplete address in an endpoint descriptor (bnc#1146378).
  • CVE-2019-15117: parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel mishandled a short descriptor, leading to out-of-bounds memory access (bnc#1145920).
  • CVE-2019-15118: check_input_term in sound/usb/mixer.c in the Linux kernel mishandled recursion, leading to kernel stack exhaustion (bnc#1145922).
  • CVE-2019-15211: There was a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c did not properly allocate memory (bnc#1146519).
  • CVE-2019-15212: There was a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver (bnc#1146391).
  • CVE-2019-15214: There was a use-after-free in the sound subsystem because card disconnection causes certain data structures to be deleted too early. This is related to sound/core/init.c and sound/core/info.c (bnc#1146550).
  • CVE-2019-15215: There was a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2_usb.c driver (bnc#1146425).
  • CVE-2019-15216: There was a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1146361).
  • CVE-2019-15217: There was a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver (bnc#1146547).
  • CVE-2019-15218: There was a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb.c driver (bnc#1146413).
  • CVE-2019-15219: There was a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver (bnc#1146524).
  • CVE-2019-15220: There was a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb.c driver…
Record
openSUSE-SU-2019:2173-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2181-1 No score

Security update for the Linux Kernel

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2017-18551: There was an out of bounds write in the function i2c_smbus_xfer_emulated (bnc#1146163).
  • CVE-2018-20976: A use after free exists, related to xfs_fs_fill_super failure (bnc#1146285).
  • CVE-2018-21008: A use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c (bnc#1149591).
  • CVE-2019-14814, CVE-2019-14815, CVE-2019-14816: Fix three heap-based buffer overflows in marvell wifi chip driver kernel, that allowed local users to cause a denial of service (system crash) or possibly execute arbitrary code. (bnc#1146516 bnc#1146512 bnc#1146514)
  • CVE-2019-14835: A buffer overflow flaw was found in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host (bnc#1150112).
  • CVE-2019-15030: In the Linux kernel on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check (bnc#1149713).
  • CVE-2019-15031: In the Linux kernel on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c (bnc#1149713).
  • CVE-2019-15090: In the qedi_dbg_* family of functions, there was an out-of-bounds read (bnc#1146399).
  • CVE-2019-15098: drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel had a NULL pointer dereference via an incomplete address in an endpoint descriptor (bnc#1146378 1146543).
  • CVE-2019-15099: drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel had a NULL pointer dereference via an incomplete address in an endpoint descriptor (bnc#1146368).
  • CVE-2019-15117: parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel mishandled a short descriptor, leading to out-of-bounds memory access (bnc#1145920).
  • CVE-2019-15118: check_input_term in sound/usb/mixer.c in the Linux kernel mishandled recursion, leading to kernel stack exhaustion (bnc#1145922).
  • CVE-2019-15211: There was a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c did not properly allocate memory (bnc#1146519).
  • CVE-2019-15212: There was a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver (bnc#1146391).
  • CVE-2019-15214: There was a use-after-free in the sound subsystem because card disconnection causes certain data structures to be deleted too early. This is related to sound/core/init.c and sound/core/info.c (bnc#1146550).
  • CVE-2019-15215: There was a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2_usb.c driver (bnc#1146425).
  • CVE-2019-15216: There was a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1146361).
  • CVE-2019-15217: There was a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver (bnc#1146547).
  • CVE-2019-15218: There was a NULL pointer dereference caused by a malicious USB device in…
Record
openSUSE-SU-2019:2181-1
Updated
2026-11-02
OSVSUSE-SU-2019:2412-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes.

The following new features were implemented:

  • jsc#SLE-4875: [CML] New device IDs for CML
  • jsc#SLE-7294: Add cpufreq driver for Raspberry Pi
  • fate#322438: Integrate P9 XIVE support (on PowerVM only)
  • fate#322447: Add memory protection keys (MPK) support on POWER (on PowerVM only)
  • fate#322448, fate#321438: P9 hardware counter (performance counters) support (on PowerVM only)
  • fate#325306, fate#321840: Reduce memory required to boot capture kernel while using fadump
  • fate#326869: perf: pmu mem_load/store event support

The following security bugs were fixed:

  • CVE-2017-18551: There was an out of bounds write in the function i2c_smbus_xfer_emulated. (bsc#1146163).
  • CVE-2018-20976: A use after free existed, related to xfs_fs_fill_super failure. (bsc#1146285)
  • CVE-2018-21008: A use-after-free can be caused by the function rsi_mac80211_detach (bsc#1149591).
  • CVE-2019-9456: In Pixel C USB monitor driver there was a possible OOB write due to a missing bounds check. This could have lead to local escalation of privilege with System execution privileges needed. (bsc#1150025 CVE-2019-9456).
  • CVE-2019-10207: Fix a NULL pointer dereference in hci_uart bluetooth driver (bsc#1142857 bsc#1123959).
  • CVE-2019-14814, CVE-2019-14815, CVE-2019-14816: Fix three heap-based buffer overflows in marvell wifi chip driver kernel, that allowed local users to cause a denial of service (system crash) or possibly execute arbitrary code. (bnc#1146516)
  • CVE-2019-14835: Fix QEMU-KVM Guest to Host Kernel Escape. (bsc#1150112).
  • CVE-2019-15030, CVE-2019-15031: On the powerpc platform, a local user could read vector registers of other users' processes via an interrupt. (bsc#1149713)
  • CVE-2019-15090: In the qedi_dbg_* family of functions, there was an out-of-bounds read. (bsc#1146399)
  • CVE-2019-15098: USB driver net/wireless/ath/ath6kl/usb.c had a NULL pointer dereference via an incomplete address in an endpoint descriptor. (bsc#1146378).
  • CVE-2019-15099: drivers/net/wireless/ath/ath10k/usb.c had a NULL pointer dereference via an incomplete address in an endpoint descriptor. (bsc#1146368)
  • CVE-2019-15117: parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel mishandled a short descriptor, leading to out-of-bounds memory access. (bsc#1145920).
  • CVE-2019-15118: check_input_term in sound/usb/mixer.c in the Linux kernel mishandled recursion, leading to kernel stack exhaustion. (bsc#1145922).
  • CVE-2019-15211: There was a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c did not properly allocate memory. (bsc#1146519).
  • CVE-2019-15212: There was a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver. (bsc#1051510 bsc#1146391).
  • CVE-2019-15214: There was a use-after-free in the sound subsystem because card disconnection causes certain data structures to be deleted too early. (bsc#1146550)
  • CVE-2019-15215: There was a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2_usb.c driver. (bsc#1135642 bsc#1146425)
  • CVE-2019-15216: Fix a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver. (bsc#1146361).
  • CVE-2019-15217: There was a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver. (bsc#1146547).
  • CVE-2019-15218: There was a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb.c driver. (bsc#1051510 bsc#1146413)
  • CVE-2019-15219: There was a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver. (bsc#1146524)
  • CVE-2019-15220: There was a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb.c driver. (bsc#1146526)
  • CVE-2019-15221, CVE-2019-15222: There…
Record
SUSE-SU-2019:2412-1
Updated
2026-11-02
OSVSUSE-SU-2019:2414-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes.

The following new features were implemented:

  • jsc#SLE-4875: [CML] New device IDs for CML
  • jsc#SLE-7294: Add cpufreq driver for Raspberry Pi
  • fate#321840: Reduce memory required to boot capture kernel while using fadump
  • fate#326869: perf: pmu mem_load/store event support
  • fate:327775: vpmem: DRAM backed persistent volumes for improved SAP HANA on POWER restart times

The following security bugs were fixed:

  • CVE-2019-14814, CVE-2019-14815, CVE-2019-14816: Fix three heap-based buffer overflows in marvell wifi chip driver kernel, that allowed local users to cause a denial of service (system crash) or possibly execute arbitrary code. (bnc#1146516)
  • CVE-2019-15216: Fix a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver. (bsc#1146361).
  • CVE-2019-14835: Fix QEMU-KVM Guest to Host Kernel Escape. (bsc#1150112).
  • CVE-2019-15924: Fix a NULL pointer dereference because there was no -ENOMEM upon an alloc_workqueue failure. (bsc#1149612).
  • CVE-2019-9456: In Pixel C USB monitor driver there was a possible OOB write due to a missing bounds check. This could have lead to local escalation of privilege with System execution privileges needed. (bsc#1150025 CVE-2019-9456).
  • CVE-2019-15030, CVE-2019-15031: On the powerpc platform, a local user could read vector registers of other users' processes via an interrupt. (bsc#1149713)
  • CVE-2019-15920: SMB2_read in fs/cifs/smb2pdu.c had a use-after-free. (bsc#1149626)
  • CVE-2019-15921: There was a memory leak issue when idr_alloc() failed (bsc#1149602)
  • CVE-2018-21008: A use-after-free can be caused by the function rsi_mac80211_detach (bsc#1149591).
  • CVE-2019-15919: SMB2_write in fs/cifs/smb2pdu.c had a use-after-free. (bsc#1149552)
  • CVE-2019-15917: There was a use-after-free issue when hci_uart_register_dev() failed in hci_uart_set_proto() (bsc#1149539)
  • CVE-2019-15926: Out of bounds access existed in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx (bsc#1149527)
  • CVE-2019-15927: An out-of-bounds access existed in the function build_audio_procunit (bsc#1149522)
  • CVE-2019-15902: A backporting error reintroduced the Spectre vulnerability that it aimed to eliminate. (bnc#1149376)
  • CVE-2019-15666: There was an out-of-bounds array access in __xfrm_policy_unlink, which would cause denial of service, because verify_newpolicy_info mishandled directory validation. (bsc#1148394).
  • CVE-2019-15219: There was a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver. (bsc#1146524)
  • CVE-2019-15220: There was a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb.c driver. (bsc#1146526)
  • CVE-2019-15538: XFS partially wedged when a chgrp failed on account of being out of disk quota. This was primarily a local DoS attack vector, but it could result as well in remote DoS if the XFS filesystem was exported for instance via NFS. (bsc#1148032, bsc#1148093)
  • CVE-2019-15290: There was a NULL pointer dereference caused by a malicious USB device in the ath6kl_usb_alloc_urb_from_pipe function (bsc#1146543).
  • CVE-2019-15098: USB driver net/wireless/ath/ath6kl/usb.c had a NULL pointer dereference via an incomplete address in an endpoint descriptor. (bsc#1146378).
  • CVE-2019-15212: There was a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver. (bsc#1051510 bsc#1146391).
  • CVE-2019-15292: There was a use-after-free in atalk_proc_exit (bsc#1146678)
  • CVE-2019-15217: There was a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver. (bsc#1146547).
  • CVE-2019-15211: There was a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c did not properly allocate memory.…
Record
SUSE-SU-2019:2414-1
Updated
2026-11-02
OSVSUSE-SU-2019:2424-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following new features were implemented:

  • jsc#SLE-4875: [CML] New device IDs for CML
  • jsc#SLE-7294: Add cpufreq driver for Raspberry Pi
  • fate#326869: perf: pmu mem_load/store event support
  • fate#327380: KVM: Add hardware CPU Model - kernel part
  • fate#327377: KVM: Support for configurable virtio-crypto
  • fate#327775: vpmem: DRAM backed persistent volumes for improved SAP HANA on POWER restart times
  • fate#326472: Marvell Armada 7K/8K Ethernet (incl. 10G) kernel enablement
  • fate#326416: Hi1620 (Vendor: Huawei): RDMA kernel enablement
  • fate#326415: Hi1620 (Vendor: Huawei): HNS3 (100G) network kernel enablement

The following security bugs were fixed:

  • CVE-2019-14835: Fix QEMU-KVM Guest to Host Kernel Escape. (bsc#1150112).
  • CVE-2019-15216: Fix a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver. (bsc#1146361).
  • CVE-2019-15924: Fix a NULL pointer dereference because there was no -ENOMEM upon an alloc_workqueue failure. (bsc#1149612).
  • CVE-2019-9456: In Pixel C USB monitor driver there was a possible OOB write due to a missing bounds check. This could have lead to local escalation of privilege with System execution privileges needed. (bsc#1150025 CVE-2019-9456).
  • CVE-2019-15030, CVE-2019-15031: On the powerpc platform, a local user could read vector registers of other users' processes via an interrupt. (bsc#1149713)
  • CVE-2019-15920: SMB2_read in fs/cifs/smb2pdu.c had a use-after-free. (bsc#1149626)
  • CVE-2019-15921: There was a memory leak issue when idr_alloc() failed (bsc#1149602)
  • CVE-2018-21008: A use-after-free can be caused by the function rsi_mac80211_detach (bsc#1149591).
  • CVE-2019-15919: SMB2_write in fs/cifs/smb2pdu.c had a use-after-free. (bsc#1149552)
  • CVE-2019-15917: There was a use-after-free issue when hci_uart_register_dev() failed in hci_uart_set_proto() (bsc#1149539)
  • CVE-2019-15926: Out of bounds access existed in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx (bsc#1149527)
  • CVE-2019-15927: An out-of-bounds access existed in the function build_audio_procunit (bsc#1149522)
  • CVE-2019-15902: A backporting error reintroduced the Spectre vulnerability that it aimed to eliminate. (bnc#1149376)
  • CVE-2019-15666: There was an out-of-bounds array access in __xfrm_policy_unlink, which would cause denial of service, because verify_newpolicy_info mishandled directory validation. (bsc#1148394).
  • CVE-2019-15219: There was a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver. (bsc#1146524)
  • CVE-2019-14814, CVE-2019-14815, CVE-2019-14816: Fix three heap-based buffer overflows in marvell wifi chip driver kernel, that allowed local users to cause a denial of service (system crash) or possibly execute arbitrary code. (bnc#1146516)
  • CVE-2019-15220: There was a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb.c driver. (bsc#1146526)
  • CVE-2019-15538: XFS partially wedged when a chgrp failed on account of being out of disk quota. This was primarily a local DoS attack vector, but it could result as well in remote DoS if the XFS filesystem was exported for instance via NFS. (bsc#1148032, bsc#1148093)
  • CVE-2019-15290: There was a NULL pointer dereference caused by a malicious USB device in the ath6kl_usb_alloc_urb_from_pipe function (bsc#1146543).
  • CVE-2019-15098: USB driver net/wireless/ath/ath6kl/usb.c had a NULL pointer dereference via an incomplete address in an endpoint descriptor. (bsc#1146378).
  • CVE-2019-15221, CVE-2019-15222: There was a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver. (bsc#1146529, bsc#1146531)
  • CVE-2019-10207: Fix a NULL pointer dereference in hci_uart bluetooth driver (bsc#1142857 bsc#1123959).
  • CVE-2019-15117: parse_audio_mixer_unit in sound/usb/mixer.c in…
Record
SUSE-SU-2019:2424-1
Updated
2026-11-02
OSVSUSE-SU-2019:2648-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 for Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2019-15291: There was a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver (bnc#1146540).
  • CVE-2019-14821: An out-of-bounds access issue was found in the way Linux kernel's KVM hypervisor implements the coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system (bnc#1151350).
  • CVE-2017-18595: A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c (bnc#1149555).
  • CVE-2019-9506: The Bluetooth BR/EDR specification up to and including version 5.1 permitted sufficiently low encryption key length and did not prevent an attacker from influencing the key length negotiation. This allowed practical brute-force attacks (aka 'KNOB') that could decrypt traffic and injected arbitrary ciphertext without the victim noticing (bnc#1137865 bnc#1146042).
  • CVE-2019-14835: A buffer overflow flaw was found in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could have used this flaw to increase their privileges on the host (bnc#1150112).
  • CVE-2019-15216: There was a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1146361).
  • CVE-2019-15924: fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c had a NULL pointer dereference because there was no -ENOMEM upon an alloc_workqueue failure (bnc#1149612).
  • CVE-2019-9456: In the Pixel C USB monitor driver there was a possible OOB write due to a missing bounds check. This could have led to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1150025).
  • CVE-2019-15031: In the Linux kernel on the powerpc platform, a local user could have read vector registers of other users' processes via an interrupt. To exploit the vulnerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE was misused in arch/powerpc/kernel/process.c (bnc#1149713).
  • CVE-2019-15030: In the Linux kernel on the powerpc platform, a local user could have read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check (bnc#1149713).
  • CVE-2019-15920: SMB2_read in fs/cifs/smb2pdu.c had a use-after-free. (bnc#1149626).
  • CVE-2019-15921: There was a memory leak issue when idr_alloc() fails in genl_register_family() in net/netlink/genetlink.c (bnc#1149602).
  • CVE-2018-21008: A use-after-free could have been caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c (bnc#1149591).
  • CVE-2019-15919: SMB2_write in fs/cifs/smb2pdu.c had a use-after-free (bnc#1149552).
  • CVE-2019-15917: There was a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in…
Record
SUSE-SU-2019:2648-1
Updated
2026-11-02
OSVSUSE-SU-2019:2651-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 for Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2017-18551: An issue was discovered in drivers/i2c/i2c-core-smbus.c. There was an out of bounds write in the function i2c_smbus_xfer_emulated (bnc#1146163).
  • CVE-2017-18595: A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c (bnc#1149555).
  • CVE-2018-20976: An issue was discovered in fs/xfs/xfs_super.c. A use after free exists, related to xfs_fs_fill_super failure (bnc#1146285).
  • CVE-2018-21008: A use-after-free could have been caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c (bnc#1149591).
  • CVE-2019-9456: In the Pixel C USB monitor driver there was a possible OOB write due to a missing bounds check. This could have led to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1150025).
  • CVE-2019-9506: The Bluetooth BR/EDR specification up to and including version 5.1 permitted sufficiently low encryption key length and did not prevent an attacker from influencing the key length negotiation. This allowed practical brute-force attacks (aka 'KNOB') that could decrypt traffic and injected arbitrary ciphertext without the victim noticing (bnc#1137865 bnc#1146042).
  • CVE-2019-14814: There was a heap-based buffer overflow in the Marvell wifi chip driver, that allowed local users to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1146512).
  • CVE-2019-14814: There was a heap-based buffer overflow in the Marvell wifi chip driver, that allowed local users to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1146512).
  • CVE-2019-14816: There was a heap-based buffer overflow in the Marvell wifi chip driver, that allowed local users to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1146516).
  • CVE-2019-14821: An out-of-bounds access issue was found in the way Linux kernel's KVM hypervisor implements the coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system (bnc#1151350).
  • CVE-2019-14835: A buffer overflow flaw was found in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could have used this flaw to increase their privileges on the host (bnc#1150112).
  • CVE-2019-15030: In the Linux kernel on the powerpc platform, a local user could have read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check (bnc#1149713).
  • CVE-2019-15031: In the Linux kernel on the powerpc platform, a local user could have read vector registers of other users' processes via an interrupt. To exploit the vulnerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE was misused in arch/powerpc/kernel/process.c (bnc#1149713).
  • CVE-2019-15090: An issue was discovered in…
Record
SUSE-SU-2019:2651-1
Updated
2026-11-02
OSVSUSE-SU-2019:2658-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2017-18551: An issue was discovered in drivers/i2c/i2c-core-smbus.c. There was an out of bounds write in the function i2c_smbus_xfer_emulated (bnc#1146163).
  • CVE-2017-18595: A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c (bnc#1149555).
  • CVE-2018-20976: An issue was discovered in fs/xfs/xfs_super.c. A use after free exists, related to xfs_fs_fill_super failure (bnc#1146285).
  • CVE-2018-21008: A use-after-free could have been caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c (bnc#1149591).
  • CVE-2019-10207: A local denial of service using HCIUARTSETPROTO/HCI_UART_MRVL was fixed (bnc#1123959 bnc#1142857).
  • CVE-2019-11477: Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. (bnc#1132686 bnc#1137586).
  • CVE-2019-14814: There was a heap-based buffer overflow in the Marvell wifi chip driver, that allowed local users to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1146512).
  • CVE-2019-14814: There was a heap-based buffer overflow in the Marvell wifi chip driver, that allowed local users to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1146512).
  • CVE-2019-14816: There was a heap-based buffer overflow in the Marvell wifi chip driver, that allowed local users to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1146516).
  • CVE-2019-14821: An out-of-bounds access issue was found in the way Linux kernel's KVM hypervisor implements the coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system (bnc#1151350).
  • CVE-2019-14835: A buffer overflow flaw was found in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could have used this flaw to increase their privileges on the host (bnc#1150112).
  • CVE-2019-15030: In the Linux kernel on the powerpc platform, a local user could have read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check (bnc#1149713).
  • CVE-2019-15031: In the Linux kernel on the powerpc platform, a local user could have read vector registers of other users' processes via an interrupt. To exploit the vulnerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE was misused in arch/powerpc/kernel/process.c (bnc#1149713).
  • CVE-2019-15090: An issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the qedi_dbg_* family of functions, there is an out-of-bounds read (bnc#1146399).
  • CVE-2019-15098: drivers/net/wireless/ath/ath6kl/usb.c had a NULL pointer dereference via an incomplete address in an endpoint…
Record
SUSE-SU-2019:2658-1
Updated
2026-11-02
OSVSUSE-SU-2019:2738-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2019-14835: A buffer overflow flaw was found in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could have used this flaw to increase their privileges on the host (bnc#1150112).
  • CVE-2019-15216: There was a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1146361).
  • CVE-2019-15924: fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c had a NULL pointer dereference because there was no -ENOMEM upon an alloc_workqueue failure (bnc#1149612).
  • CVE-2019-9456: In the Pixel C USB monitor driver there was a possible OOB write due to a missing bounds check. This could have led to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1150025).
  • CVE-2019-15031: In the Linux kernel on the powerpc platform, a local user could have read vector registers of other users' processes via an interrupt. To exploit the vulnerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE was misused in arch/powerpc/kernel/process.c (bnc#1149713).
  • CVE-2019-15030: In the Linux kernel on the powerpc platform, a local user could have read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check (bnc#1149713).
  • CVE-2019-15920: SMB2_read in fs/cifs/smb2pdu.c had a use-after-free. (bnc#1149626).
  • CVE-2019-15921: There was a memory leak issue when idr_alloc() fails in genl_register_family() in net/netlink/genetlink.c (bnc#1149602).
  • CVE-2018-21008: A use-after-free could have been caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c (bnc#1149591).
  • CVE-2019-15919: SMB2_write in fs/cifs/smb2pdu.c had a use-after-free (bnc#1149552).
  • CVE-2019-15917: There was a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c (bnc#1149539).
  • CVE-2019-15926: An out-of-bounds access existed in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx in the file drivers/net/wireless/ath/ath6kl/wmi.c (bnc#1149527).
  • CVE-2019-15927: An out-of-bounds access existed in the function build_audio_procunit in the file sound/usb/mixer.c (bnc#1149522).
  • CVE-2019-15902: Misuse of the upstream 'x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()' commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped (bnc#1149376).
  • CVE-2019-15666: There was an out-of-bounds array access in __xfrm_policy_unlink, which will cause denial of service, because verify_newpolicy_info in net/xfrm/xfrm_user.c mishandled directory validation (bnc#1148394).
  • CVE-2019-15219: There was a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver (bnc#1146524).
  • CVE-2019-14814: There was a heap-based buffer overflow in the Marvell wifi chip driver, that allowed local users to cause a denial of service (system crash) or possibly execute arbitrary…
Record
SUSE-SU-2019:2738-1
Updated
2026-11-02
OSVSUSE-SU-2019:2756-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2019-15291: There was a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver (bnc#1146540).
  • CVE-2019-14821: An out-of-bounds access issue was found in the way Linux kernel's KVM hypervisor implements the coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system (bnc#1151350).
  • CVE-2017-18595: A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c (bnc#1149555).
  • CVE-2019-9506: The Bluetooth BR/EDR specification up to and including version 5.1 permitted sufficiently low encryption key length and did not prevent an attacker from influencing the key length negotiation. This allowed practical brute-force attacks (aka 'KNOB') that could decrypt traffic and injected arbitrary ciphertext without the victim noticing (bnc#1137865 bnc#1146042).
  • CVE-2019-14835: A buffer overflow flaw was found in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could have used this flaw to increase their privileges on the host (bnc#1150112).
  • CVE-2019-15216: There was a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1146361).
  • CVE-2019-15924: fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c had a NULL pointer dereference because there was no -ENOMEM upon an alloc_workqueue failure (bnc#1149612).
  • CVE-2019-9456: In the Pixel C USB monitor driver there was a possible OOB write due to a missing bounds check. This could have led to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1150025).
  • CVE-2019-15031: In the Linux kernel on the powerpc platform, a local user could have read vector registers of other users' processes via an interrupt. To exploit the vulnerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE was misused in arch/powerpc/kernel/process.c (bnc#1149713).
  • CVE-2019-15030: In the Linux kernel on the powerpc platform, a local user could have read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check (bnc#1149713).
  • CVE-2019-15920: SMB2_read in fs/cifs/smb2pdu.c had a use-after-free. (bnc#1149626).
  • CVE-2019-15921: There was a memory leak issue when idr_alloc() fails in genl_register_family() in net/netlink/genetlink.c (bnc#1149602).
  • CVE-2018-21008: A use-after-free could have been caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c (bnc#1149591).
  • CVE-2019-15919: SMB2_write in fs/cifs/smb2pdu.c had a use-after-free (bnc#1149552).
  • CVE-2019-15917: There was a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c…
Record
SUSE-SU-2019:2756-1
Updated
2026-11-02
OSVSUSE-SU-2019:2949-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12-SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional.

    The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in executable pages by splitting / merging huge pages into small pages as needed. More information can be found on https://www.suse.com/support/kb/doc/?id=7023735

  • CVE-2019-16995: Fix a memory leak in hsr_dev_finalize() if hsr_add_port failed to add a port, which may have caused denial of service (bsc#1152685).

  • CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described 'Microarchitectural Data Sampling' attack.

    The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW).

    The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251

  • CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150457).

  • CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903).

  • CVE-2019-17666: rtlwifi: Fix potential overflow in P2P code (bsc#1154372).

  • CVE-2019-17133: cfg80211 wireless extension did not reject a long SSID IE, leading to a Buffer Overflow (bsc#1153158).

  • CVE-2019-16232: Fix a potential NULL pointer dereference in the Marwell libertas driver (bsc#1150465).

  • CVE-2019-16234: iwlwifi pcie driver did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150452).

  • CVE-2019-17055: The AF_ISDN network module in the Linux kernel did not enforce CAP_NET_RAW, which meant that unprivileged users could create a raw socket (bnc#1152782).

  • CVE-2019-17056: The AF_NFC network module did not enforce CAP_NET_RAW, which meant that unprivileged users could create a raw socket (bsc#1152788).

  • CVE-2019-16413: The 9p filesystem did not protect i_size_write() properly, which caused an i_size_read() infinite loop and denial of service on SMP systems (bnc#1151347).

  • CVE-2019-15902: A backporting issue was discovered that re-introduced the Spectre vulnerability it had aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped (bnc#1149376).

  • CVE-2019-15291: Fixed a NULL pointer dereference issue that could be caused by a malicious USB device (bnc#1146519).

  • CVE-2019-15807: Fixed a memory leak in the SCSI module that could be abused to cause denial of service (bnc#1148938).

  • CVE-2019-13272: Fixed a mishandled the recording of the credentials of a process that wants to create a ptrace relationship, which allowed local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). (bnc#1140671).

  • CVE-2019-14821: An out-of-bounds access issue was fixed in the kernel's KVM hypervisor. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system (bnc#1151350).

  • CVE-2019-15505: An out-of-bounds issue had been fixed that could be caused by crafted USB device traffic (bnc#1147122).

  • CVE-2017-18595: A double free in allocate_trace_buffer was fixed …

Record
SUSE-SU-2019:2949-1
Updated
2026-11-02
OSVSUSE-SU-2019:3215-1 No score

Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-197_15 fixes several issues.

The following security issues were fixed:

  • CVE-2019-15239: Fixed a vulnerability where a local attacker could have triggered multiple use-after-free conditions resulted in privilege escalation (bsc#1156317).
  • CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists (bsc#1153108).

The following bugs were fixed:

  • Fixed boot up hang revealed by int3 self test (bsc#1157770).
Record
SUSE-SU-2019:3215-1
Updated
2026-11-02
OSVSUSE-SU-2019:3228-1 No score

Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP3)

This update for the Linux Kernel 4.4.180-94_100 fixes several issues.

The following security issues were fixed:

  • CVE-2018-20856: Fixed a use-after-free in __blk_drain_queue() due to an improper error handling (bsc#1156331).
  • CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent-child process relationship (bsc#1156321).
  • CVE-2019-15239: Fixed a vulnerability where a local attacker could have triggered multiple use-after-free conditions resulted in privilege escalation (bsc#1156317).
  • CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists (bsc#1153108).

The following bugs were fixed:

  • Fixed boot up hang revealed by int3 self test (bsc#1157770).
Record
SUSE-SU-2019:3228-1
Updated
2026-11-02
OSVSUSE-SU-2019:3230-1 No score

Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP3)

This update for the Linux Kernel 4.4.180-94_103 fixes several issues.

The following security issues were fixed:

  • CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent-child process relationship (bsc#1156321).
  • CVE-2019-15239: Fixed a vulnerability where a local attacker could have triggered multiple use-after-free conditions resulted in privilege escalation (bsc#1156317).
  • CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists (bsc#1153108).

The following bugs were fixed:

  • Fixed boot up hang revealed by int3 self test (bsc#1157770).
Record
SUSE-SU-2019:3230-1
Updated
2026-11-02
OSVSUSE-SU-2019:3249-1 No score

Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-197_4 fixes several issues.

The following security issues were fixed:

  • CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent-child process relationship (bsc#1156321).
  • CVE-2019-15239: Fixed a vulnerability where a local attacker could have triggered multiple use-after-free conditions resulted in privilege escalation (bsc#1156317).
  • CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists (bsc#1153108).

The following bugs were fixed:

  • Fixed boot up hang revealed by int3 self test (bsc#1157770).
Record
SUSE-SU-2019:3249-1
Updated
2026-11-02
OSVSUSE-SU-2019:3258-1 No score

Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP3)

This update for the Linux Kernel 4.4.178-94_91 fixes several issues.

The following security issues were fixed:

  • CVE-2018-20856: Fixed a use-after-free in block/blk-core.c due to improper error handling (bsc#1156331).
  • CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent-child process relationship (bsc#1156321).
  • CVE-2019-15239: Fixed a vulnerability where a local attacker could have triggered multiple use-after-free conditions resulted in privilege escalation (bsc#1156317).
  • CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists (bsc#1153108).
Record
SUSE-SU-2019:3258-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux
Debian:12
 before 4.15.4-1
4.15.4-1
linux
Debian:13
 before 4.15.4-1
4.15.4-1
linux
Debian:14
 before 4.15.4-1
4.15.4-1
linux
Debian:8
From an advisory covering 12 CVEs
 before 3.16.72-1, plus listed versions
3.16.36-13.16.36-1+deb8u13.16.36-1+deb8u1~bpo70+13.16.36-1+deb8u23.16.36-1+deb8u2~bpo70+1
Show 45 moreShow less
3.16.39-13.16.39-1+deb8u13.16.39-1+deb8u1~bpo70+13.16.39-1+deb8u1~bpo70+1+gcc4.43.16.39-1+deb8u23.16.39-1~bpo70+13.16.43-13.16.43-23.16.43-2+deb8u13.16.43-2+deb8u23.16.43-2+deb8u33.16.43-2+deb8u43.16.43-2+deb8u53.16.48-13.16.51-13.16.51-23.16.51-33.16.51-3+deb8u13.16.56-13.16.56-1+deb8u13.16.57-13.16.57-23.16.59-13.16.64-13.16.64-23.16.68-13.16.68-23.16.7-ckt11-13.16.7-ckt11-1+deb8u13.16.7-ckt11-1+deb8u23.16.7-ckt11-1+deb8u2~bpo70+13.16.7-ckt11-1+deb8u33.16.7-ckt11-1+deb8u3~bpo70+13.16.7-ckt11-1+deb8u43.16.7-ckt11-1+deb8u4~bpo70+13.16.7-ckt11-1+deb8u53.16.7-ckt11-1+deb8u63.16.7-ckt11-1+deb8u6~bpo70+13.16.7-ckt11-1~bpo70+13.16.7-ckt17-13.16.7-ckt20-13.16.7-ckt20-1+deb8u13.16.7-ckt20-1+deb8u23.16.7-ckt20-1+deb8u2~bpo70+13.16.7-ckt20-1+deb8u3
3.16.72-1
linux
Debian:9
From an advisory covering 16 CVEs
 before 4.9.168-1+deb9u5, plus listed versions
4.9.107-14.9.110-14.9.110-24.9.110-34.9.110-3+deb9u1
Show 45 moreShow less
4.9.110-3+deb9u24.9.110-3+deb9u34.9.110-3+deb9u44.9.110-3+deb9u54.9.110-3+deb9u64.9.130-14.9.130-24.9.135-14.9.144-14.9.144-24.9.144-34.9.144-3.14.9.161-14.9.168-14.9.168-1+deb9u24.9.168-1+deb9u34.9.168-1+deb9u44.9.30-24.9.30-2+deb9u14.9.30-2+deb9u24.9.30-2+deb9u2~bpo8+14.9.30-2+deb9u34.9.30-2+deb9u44.9.30-2+deb9u54.9.30-2+deb9u5~bpo8+14.9.47-14.9.51-14.9.51-1~bpo8+14.9.65-14.9.65-24.9.65-34.9.65-3+deb9u14.9.65-3+deb9u1~bpo8+14.9.65-3+deb9u24.9.65-3+deb9u2~bpo8+14.9.65-3~bpo8+14.9.80-14.9.80-24.9.82-1+deb9u24.9.82-1+deb9u34.9.82-1+deb9u3~bpo8+14.9.88-14.9.88-1+deb9u14.9.88-1+deb9u1~bpo8+14.9.88-1~bpo8+1
4.9.168-1+deb9u5
kernel-rt
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.rt56.1030.el7
0:3.10.0-1062.7.1.rt56.1030.el7
kernel-rt-debug
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.rt56.1030.el7
0:3.10.0-1062.7.1.rt56.1030.el7
kernel-rt-debug-debuginfo
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.rt56.1030.el7
0:3.10.0-1062.7.1.rt56.1030.el7
kernel-rt-debug-devel
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.rt56.1030.el7
0:3.10.0-1062.7.1.rt56.1030.el7
kernel-rt-debug-kvm
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.rt56.1030.el7
0:3.10.0-1062.7.1.rt56.1030.el7
Show 249 moreShow less
Affected packages
PackageAffectedFixed
kernel-rt-debug-kvm-debuginfo
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.rt56.1030.el7
0:3.10.0-1062.7.1.rt56.1030.el7
kernel-rt-debuginfo
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.rt56.1030.el7
0:3.10.0-1062.7.1.rt56.1030.el7
kernel-rt-debuginfo-common-x86_64
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.rt56.1030.el7
0:3.10.0-1062.7.1.rt56.1030.el7
kernel-rt-devel
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.rt56.1030.el7
0:3.10.0-1062.7.1.rt56.1030.el7
kernel-rt-doc
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.rt56.1030.el7
0:3.10.0-1062.7.1.rt56.1030.el7
kernel-rt-kvm
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.rt56.1030.el7
0:3.10.0-1062.7.1.rt56.1030.el7
kernel-rt-kvm-debuginfo
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.rt56.1030.el7
0:3.10.0-1062.7.1.rt56.1030.el7
kernel-rt-trace
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.rt56.1030.el7
0:3.10.0-1062.7.1.rt56.1030.el7
kernel-rt-trace-debuginfo
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.rt56.1030.el7
0:3.10.0-1062.7.1.rt56.1030.el7
kernel-rt-trace-devel
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.rt56.1030.el7
0:3.10.0-1062.7.1.rt56.1030.el7
kernel-rt-trace-kvm
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.rt56.1030.el7
0:3.10.0-1062.7.1.rt56.1030.el7
kernel-rt-trace-kvm-debuginfo
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.rt56.1030.el7
0:3.10.0-1062.7.1.rt56.1030.el7
bpftool
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
bpftool-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debug
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-doc
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-tools
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
perf
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
perf-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
python-perf
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
bpftool
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
bpftool-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debug
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-doc
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-tools
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
perf
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
perf-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
python-perf
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
bpftool
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
bpftool-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-bootwrapper
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debuginfo-common-ppc64
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-doc
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-kdump
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-kdump-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-kdump-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-tools
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
perf
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
perf-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
python-perf
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
bpftool
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
bpftool-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debug
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-doc
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-tools
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
perf
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
perf-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
python-perf
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.7.1.el7
0:3.10.0-1062.7.1.el7
kpatch-patch-3_10_0-1062
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1-11.el7
0:1-11.el7
kpatch-patch-3_10_0-1062-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1-11.el7
0:1-11.el7
kpatch-patch-3_10_0-1062_1_1
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1-10.el7
0:1-10.el7
kpatch-patch-3_10_0-1062_1_1-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1-10.el7
0:1-10.el7
kpatch-patch-3_10_0-1062_1_2
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1-9.el7
0:1-9.el7
kpatch-patch-3_10_0-1062_1_2-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1-9.el7
0:1-9.el7
kpatch-patch-3_10_0-1062_4_1
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1-6.el7
0:1-6.el7
kpatch-patch-3_10_0-1062_4_1-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1-6.el7
0:1-6.el7
kpatch-patch-3_10_0-1062_4_2
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1-3.el7
0:1-3.el7
kpatch-patch-3_10_0-1062_4_3
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1-3.el7
0:1-3.el7
kernel-default
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 40 CVEs
 before 4.12.14-95.32.1
4.12.14-95.32.1
kernel-source
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 40 CVEs
 before 4.12.14-95.32.1
4.12.14-95.32.1
kernel-syms
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 40 CVEs
 before 4.12.14-95.32.1
4.12.14-95.32.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 12 SP4
From an advisory covering 40 CVEs
 before 4.12.14-95.32.1
4.12.14-95.32.1
kgraft-patch-SLE12-SP4_Update_8
SUSE:Linux Enterprise Live Patching 12 SP4
From an advisory covering 40 CVEs
 before 1-6.3.1
1-6.3.1
kernel-docs
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 40 CVEs
 before 4.12.14-95.32.1
4.12.14-95.32.1
kernel-obs-build
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 40 CVEs
 before 4.12.14-95.32.1
4.12.14-95.32.1
kernel-default
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 40 CVEs
 before 4.12.14-95.32.1
4.12.14-95.32.1
kernel-source
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 40 CVEs
 before 4.12.14-95.32.1
4.12.14-95.32.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 40 CVEs
 before 4.12.14-95.32.1
4.12.14-95.32.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 40 CVEs
 before 4.12.14-95.32.1
4.12.14-95.32.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 40 CVEs
 before 4.12.14-95.32.1
4.12.14-95.32.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 40 CVEs
 before 4.12.14-95.32.1
4.12.14-95.32.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 12 SP4
From an advisory covering 40 CVEs
 before 4.12.14-95.32.1
4.12.14-95.32.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 39 CVEs
 before 4.12.14-150.35.1
4.12.14-150.35.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 39 CVEs
 before 4.12.14-150.35.1
4.12.14-150.35.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 39 CVEs
 before 4.12.14-150.35.1
4.12.14-150.35.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15
From an advisory covering 39 CVEs
 before 4.12.14-150.35.1
4.12.14-150.35.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15
From an advisory covering 39 CVEs
 before 4.12.14-150.35.1
4.12.14-150.35.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15
From an advisory covering 39 CVEs
 before 4.12.14-150.35.1
4.12.14-150.35.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15
From an advisory covering 39 CVEs
 before 4.12.14-150.35.1
4.12.14-150.35.1
kernel-vanilla
SUSE:Linux Enterprise Module for Development Tools 15
From an advisory covering 39 CVEs
 before 4.12.14-150.35.1
4.12.14-150.35.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15
From an advisory covering 39 CVEs
 before 4.12.14-150.35.1
4.12.14-150.35.1
kernel-default
SUSE:Linux Enterprise Live Patching 15
From an advisory covering 39 CVEs
 before 4.12.14-150.35.1
4.12.14-150.35.1
kernel-livepatch-SLE15_Update_14
SUSE:Linux Enterprise Live Patching 15
From an advisory covering 39 CVEs
 before 1-1.3.1
1-1.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15
From an advisory covering 39 CVEs
 before 4.12.14-150.35.1
4.12.14-150.35.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15
From an advisory covering 39 CVEs
 before 4.12.14-150.35.1
4.12.14-150.35.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 40 CVEs
 before 4.12.14-197.18.1
4.12.14-197.18.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 40 CVEs
 before 4.12.14-197.18.1
4.12.14-197.18.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 40 CVEs
 before 4.12.14-197.18.1
4.12.14-197.18.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 40 CVEs
 before 4.12.14-197.18.1
4.12.14-197.18.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 40 CVEs
 before 4.12.14-197.18.1
4.12.14-197.18.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 40 CVEs
 before 4.12.14-197.18.1
4.12.14-197.18.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 40 CVEs
 before 4.12.14-197.18.1
4.12.14-197.18.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP1
From an advisory covering 40 CVEs
 before 4.12.14-197.18.1
4.12.14-197.18.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP1
From an advisory covering 40 CVEs
 before 4.12.14-197.18.1
4.12.14-197.18.1
kernel-livepatch-SLE15-SP1_Update_5
SUSE:Linux Enterprise Live Patching 15 SP1
From an advisory covering 40 CVEs
 before 1-3.3.1
1-3.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP1
From an advisory covering 40 CVEs
 before 4.12.14-197.18.1
4.12.14-197.18.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP1
From an advisory covering 40 CVEs
 before 4.12.14-197.18.1
4.12.14-197.18.1
kernel-azure
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 43 CVEs
 before 4.12.14-6.26.1
4.12.14-6.26.1
kernel-source-azure
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 43 CVEs
 before 4.12.14-6.26.1
4.12.14-6.26.1
kernel-syms-azure
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 43 CVEs
 before 4.12.14-6.26.1
4.12.14-6.26.1
kernel-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 43 CVEs
 before 4.12.14-6.26.1
4.12.14-6.26.1
kernel-source-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 43 CVEs
 before 4.12.14-6.26.1
4.12.14-6.26.1
kernel-syms-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 43 CVEs
 before 4.12.14-6.26.1
4.12.14-6.26.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15
From an advisory covering 42 CVEs
 before 4.12.14-5.41.1
4.12.14-5.41.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15
From an advisory covering 42 CVEs
 before 4.12.14-5.41.1
4.12.14-5.41.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15
From an advisory covering 42 CVEs
 before 4.12.14-5.41.1
4.12.14-5.41.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
From an advisory covering 45 CVEs
 before 4.12.14-8.16.1
4.12.14-8.16.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
From an advisory covering 45 CVEs
 before 4.12.14-8.16.1
4.12.14-8.16.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
From an advisory covering 45 CVEs
 before 4.12.14-8.16.1
4.12.14-8.16.1
kernel-rt
SUSE:Real Time Module 15 SP1
From an advisory covering 40 CVEs
 before 4.12.14-14.11.1
4.12.14-14.11.1
kernel-rt_debug
SUSE:Real Time Module 15 SP1
From an advisory covering 40 CVEs
 before 4.12.14-14.11.1
4.12.14-14.11.1
kernel-source-rt
SUSE:Real Time Module 15 SP1
From an advisory covering 40 CVEs
 before 4.12.14-14.11.1
4.12.14-14.11.1
kernel-syms-rt
SUSE:Real Time Module 15 SP1
From an advisory covering 40 CVEs
 before 4.12.14-14.11.1
4.12.14-14.11.1
kernel-rt
SUSE:Linux Enterprise Real Time 12 SP4
From an advisory covering 44 CVEs
 before 4.12.14-8.6.1
4.12.14-8.6.1
kernel-rt_debug
SUSE:Linux Enterprise Real Time 12 SP4
From an advisory covering 44 CVEs
 before 4.12.14-8.6.1
4.12.14-8.6.1
kernel-source-rt
SUSE:Linux Enterprise Real Time 12 SP4
From an advisory covering 44 CVEs
 before 4.12.14-8.6.1
4.12.14-8.6.1
kernel-syms-rt
SUSE:Linux Enterprise Real Time 12 SP4
From an advisory covering 44 CVEs
 before 4.12.14-8.6.1
4.12.14-8.6.1
kernel-default
SUSE:HPE Helion OpenStack 8
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kernel-source
SUSE:HPE Helion OpenStack 8
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kernel-syms
SUSE:HPE Helion OpenStack 8
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kgraft-patch-SLE12-SP3_Update_29
SUSE:HPE Helion OpenStack 8
From an advisory covering 49 CVEs
 before 1-4.3.1
1-4.3.1
kernel-default
SUSE:OpenStack Cloud 8
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kernel-source
SUSE:OpenStack Cloud 8
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kernel-syms
SUSE:OpenStack Cloud 8
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kgraft-patch-SLE12-SP3_Update_29
SUSE:OpenStack Cloud 8
From an advisory covering 49 CVEs
 before 1-4.3.1
1-4.3.1
kernel-default
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kernel-source
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kernel-syms
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kgraft-patch-SLE12-SP3_Update_29
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 49 CVEs
 before 1-4.3.1
1-4.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 12 SP3
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kgraft-patch-SLE12-SP3_Update_29
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 49 CVEs
 before 1-4.3.1
1-4.3.1
kernel-default
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kernel-source
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kgraft-patch-SLE12-SP3_Update_29
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 49 CVEs
 before 1-4.3.1
1-4.3.1
kernel-default
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kernel-source
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kernel-default
SUSE:Enterprise Storage 5
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kernel-source
SUSE:Enterprise Storage 5
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kernel-syms
SUSE:Enterprise Storage 5
From an advisory covering 49 CVEs
 before 4.4.180-94.107.1
4.4.180-94.107.1
kgraft-patch-SLE12-SP3_Update_29
SUSE:Enterprise Storage 5
From an advisory covering 49 CVEs
 before 1-4.3.1
1-4.3.1
kgraft-patch-SLE12-SP4_Update_7
SUSE:Linux Enterprise Live Patching 12 SP4
From an advisory covering 2 CVEs
 before 4-2.1
4-2.1
kernel-livepatch-SLE15_Update_12
SUSE:Linux Enterprise Live Patching 15
From an advisory covering 2 CVEs
 before 4-2.1
4-2.1
kernel-livepatch-SLE15_Update_13
SUSE:Linux Enterprise Live Patching 15
From an advisory covering 2 CVEs
 before 4-2.1
4-2.1
kernel-livepatch-SLE15-SP1_Update_3
SUSE:Linux Enterprise Live Patching 15 SP1
From an advisory covering 2 CVEs
 before 4-2.1
4-2.1
kernel-livepatch-SLE15-SP1_Update_4
SUSE:Linux Enterprise Live Patching 15 SP1
From an advisory covering 2 CVEs
 before 4-2.1
4-2.1
kgraft-patch-SLE12-SP3_Update_26
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 4 CVEs
 before 6-2.1
6-2.1
kgraft-patch-SLE12-SP3_Update_27
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 4 CVEs
 before 4-2.1
4-2.1
kgraft-patch-SLE12-SP3_Update_26
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 4 CVEs
 before 6-2.1
6-2.1
kgraft-patch-SLE12-SP3_Update_27
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 4 CVEs
 before 4-2.1
4-2.1
kgraft-patch-SLE12-SP4_Update_5
SUSE:Linux Enterprise Live Patching 12 SP4
From an advisory covering 3 CVEs
 before 5-2.1
5-2.1
kernel-livepatch-SLE15-SP1_Update_2
SUSE:Linux Enterprise Live Patching 15 SP1
From an advisory covering 3 CVEs
 before 6-2.1
6-2.1
kgraft-patch-SLE12-SP3_Update_28
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 3 CVEs
 before 4-2.1
4-2.1
kgraft-patch-SLE12-SP3_Update_28
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 3 CVEs
 before 4-2.1
4-2.1
kgraft-patch-SLE12-SP4_Update_6
SUSE:Linux Enterprise Live Patching 12 SP4
From an advisory covering 3 CVEs
 before 4-2.1
4-2.1
kernel-livepatch-SLE15_Update_11
SUSE:Linux Enterprise Live Patching 15
From an advisory covering 3 CVEs
 before 5-2.1
5-2.1
kernel-livepatch-SLE15-SP1_Update_1
SUSE:Linux Enterprise Live Patching 15 SP1
From an advisory covering 3 CVEs
 before 7-2.1
7-2.1
kgraft-patch-SLE12-SP3_Update_23
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 4 CVEs
 before 7-2.5
7-2.5
kgraft-patch-SLE12-SP3_Update_24
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 4 CVEs
 before 6-2.5
6-2.5
kgraft-patch-SLE12-SP3_Update_25
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 4 CVEs
 before 6-2.5
6-2.5
kgraft-patch-SLE12-SP3_Update_23
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 4 CVEs
 before 7-2.5
7-2.5
kgraft-patch-SLE12-SP3_Update_24
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 4 CVEs
 before 6-2.5
6-2.5
kgraft-patch-SLE12-SP3_Update_25
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 4 CVEs
 before 6-2.5
6-2.5
linux-aws
Ubuntu:Pro:14.04:LTS
 before 4.4.0-1055.59, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 30 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.58
4.4.0-1055.59
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 before 4.4.0-165.193~14.04.1, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
4.4.0-165.193~14.04.1
linux
Ubuntu:16.04:LTS
 before 4.4.0-165.193, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
4.4.0-165.193
linux-aws
Ubuntu:16.04:LTS
 before 4.4.0-1095.106, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
4.4.0-1095.106
linux-kvm
Ubuntu:16.04:LTS
 before 4.4.0-1059.66, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 31 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.65
4.4.0-1059.66
linux-raspi2
Ubuntu:16.04:LTS
 before 4.4.0-1123.132, plus listed versions
4.2.0-1013.194.2.0-1014.214.3.0-1006.64.4.0-1003.44.4.0-1004.5
Show 45 moreShow less
4.4.0-1009.104.4.0-1010.124.4.0-1010.134.4.0-1012.164.4.0-1016.224.4.0-1017.234.4.0-1019.254.4.0-1021.274.4.0-1023.294.4.0-1027.334.4.0-1029.364.4.0-1034.414.4.0-1038.454.4.0-1040.474.4.0-1042.494.4.0-1044.514.4.0-1046.534.4.0-1048.554.4.0-1050.574.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1055.624.4.0-1057.644.4.0-1059.674.4.0-1061.694.4.0-1065.734.4.0-1067.754.4.0-1069.774.4.0-1070.784.4.0-1071.794.4.0-1074.824.4.0-1075.834.4.0-1076.844.4.0-1077.854.4.0-1079.874.4.0-1080.884.4.0-1082.904.4.0-1085.934.4.0-1086.944.4.0-1087.954.4.0-1089.974.4.0-1090.984.4.0-1091.994.4.0-1092.100
4.4.0-1123.132
linux-snapdragon
Ubuntu:16.04:LTS
 before 4.4.0-1127.135, plus listed versions
4.4.0-1012.124.4.0-1013.144.4.0-1013.154.4.0-1015.184.4.0-1019.22
Show 45 moreShow less
4.4.0-1020.234.4.0-1022.254.4.0-1024.274.4.0-1026.294.4.0-1030.334.4.0-1032.364.4.0-1035.394.4.0-1039.434.4.0-1042.464.4.0-1044.484.4.0-1046.504.4.0-1047.514.4.0-1048.524.4.0-1050.544.4.0-1051.554.4.0-1053.574.4.0-1054.584.4.0-1055.594.4.0-1057.614.4.0-1058.624.4.0-1059.634.4.0-1061.664.4.0-1063.684.4.0-1067.724.4.0-1069.744.4.0-1071.764.4.0-1072.774.4.0-1073.784.4.0-1076.814.4.0-1077.824.4.0-1078.834.4.0-1079.844.4.0-1081.864.4.0-1082.874.4.0-1084.894.4.0-1087.924.4.0-1088.934.4.0-1090.954.4.0-1092.974.4.0-1093.984.4.0-1094.994.4.0-1095.1004.4.0-1096.1014.4.0-1098.1034.4.0-1099.104
4.4.0-1127.135
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 before 4.4.0-1022.27, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 7 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.26
4.4.0-1022.27
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-intel-iot-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1073.75
 None known
linux-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1032.35
 None known
linux-riscv
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4
Show 18 moreShow less
5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32
 None known
linux-raspi-realtime
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.8.0-2019.20
 None known
kernel-debug
openSUSE:Leap 15.0
From an advisory covering 38 CVEs
 before 4.12.14-lp150.12.73.1
4.12.14-lp150.12.73.1
kernel-default
openSUSE:Leap 15.0
From an advisory covering 38 CVEs
 before 4.12.14-lp150.12.73.1
4.12.14-lp150.12.73.1
kernel-docs
openSUSE:Leap 15.0
From an advisory covering 38 CVEs
 before 4.12.14-lp150.12.73.1
4.12.14-lp150.12.73.1
kernel-kvmsmall
openSUSE:Leap 15.0
From an advisory covering 38 CVEs
 before 4.12.14-lp150.12.73.1
4.12.14-lp150.12.73.1
kernel-obs-build
openSUSE:Leap 15.0
From an advisory covering 38 CVEs
 before 4.12.14-lp150.12.73.1
4.12.14-lp150.12.73.1
kernel-obs-qa
openSUSE:Leap 15.0
From an advisory covering 38 CVEs
 before 4.12.14-lp150.12.73.1
4.12.14-lp150.12.73.1
kernel-source
openSUSE:Leap 15.0
From an advisory covering 38 CVEs
 before 4.12.14-lp150.12.73.1
4.12.14-lp150.12.73.1
kernel-syms
openSUSE:Leap 15.0
From an advisory covering 38 CVEs
 before 4.12.14-lp150.12.73.1
4.12.14-lp150.12.73.1
kernel-vanilla
openSUSE:Leap 15.0
From an advisory covering 38 CVEs
 before 4.12.14-lp150.12.73.1
4.12.14-lp150.12.73.1
kernel-debug
openSUSE:Leap 15.1
From an advisory covering 39 CVEs
 before 4.12.14-lp151.28.16.1
4.12.14-lp151.28.16.1
kernel-default
openSUSE:Leap 15.1
From an advisory covering 39 CVEs
 before 4.12.14-lp151.28.16.1
4.12.14-lp151.28.16.1
kernel-docs
openSUSE:Leap 15.1
From an advisory covering 39 CVEs
 before 4.12.14-lp151.28.16.1
4.12.14-lp151.28.16.1
kernel-kvmsmall
openSUSE:Leap 15.1
From an advisory covering 39 CVEs
 before 4.12.14-lp151.28.16.1
4.12.14-lp151.28.16.1
kernel-obs-build
openSUSE:Leap 15.1
From an advisory covering 39 CVEs
 before 4.12.14-lp151.28.16.1
4.12.14-lp151.28.16.1
kernel-obs-qa
openSUSE:Leap 15.1
From an advisory covering 39 CVEs
 before 4.12.14-lp151.28.16.1
4.12.14-lp151.28.16.1
kernel-source
openSUSE:Leap 15.1
From an advisory covering 39 CVEs
 before 4.12.14-lp151.28.16.1
4.12.14-lp151.28.16.1
kernel-syms
openSUSE:Leap 15.1
From an advisory covering 39 CVEs
 before 4.12.14-lp151.28.16.1
4.12.14-lp151.28.16.1
kernel-vanilla
openSUSE:Leap 15.1
From an advisory covering 39 CVEs
 before 4.12.14-lp151.28.16.1
4.12.14-lp151.28.16.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-15239 is a high vulnerability (CVSS 7.8) in Debian Linux, published August 13, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.59%, the 48th percentile. Fixed in linux 4.15.4-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 136 versions, 417 references and the rest of 11 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open