CVE-2019-16995

In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device...

7.5 HighFix available

In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

3.53%Up 1.7 points since Apr 14, 2021

What each source reports

NVD Score used 7.5

In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.

Record: CVE-2019-16995
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0: 7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Weakness: CWE-401
Updated: 2026-11-02

CVE List No score

In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.

Record: CVE-2019-16995
Updated: 2026-11-02

EUVDEUVD-2019-7471 No score

In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.

Record: EUVD-2019-7471
Updated: 2026-11-03

GitHub AdvisoriesGHSA-m4c2-gjmw-g8gc No score

In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device...

In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.

Record: GHSA-m4c2-gjmw-g8gc
Weakness: CWE-772
Updated: 2026-11-02

OSV 7.5

In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.

Record: CVE-2019-16995
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2019-16995 7.5

In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.

Record: DEBIAN-CVE-2019-16995
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 14 moreShow less

OSVUBUNTU-CVE-2019-16995 7.5

In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.

Record: UBUNTU-CVE-2019-16995
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVopenSUSE-SU-2019:2444-1 No score

Security update for the Linux Kernel

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2019-16995: A memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c. if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d (bnc#1152685).
CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150457).
CVE-2019-17666: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c lacked a certain upper-bound check, leading to a buffer overflow (bnc#1154372).
CVE-2019-16232: drivers/net/wireless/marvell/libertas/if_sdio.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150465).
CVE-2019-16234: drivers/net/wireless/intel/iwlwifi/pcie/trans.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150452).
CVE-2019-17133: cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c did not reject a long SSID IE, leading to a Buffer Overflow (bnc#1153158).
CVE-2019-17056: llcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC network module did not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176 (bnc#1152788).

The following non-security bugs were fixed:

9p: avoid attaching writeback_fid on mmap with type PRIVATE (bsc#1051510).
ACPI / CPPC: do not require the _PSD method (bsc#1051510).
ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bsc#1051510).
ACPI / processor: do not print errors for processorIDs == 0xff (bsc#1051510).
act_mirred: Fix mirred_init_module error handling (bsc#1051510).
Add Acer Aspire Ethos 8951G model quirk (bsc#1051510).
Add kernel module compression support (bsc#1135854)
ALSA: hda - Add a quirk model for fixing Huawei Matebook X right speaker (bsc#1051510).
ALSA: hda: Add Elkhart Lake PCI ID (bsc#1051510).
ALSA: hda - Add laptop imic fixup for ASUS M9V laptop (bsc#1051510).
ALSA: hda: Add support of Zhaoxin controller (bsc#1051510).
ALSA: hda: Add Tigerlake/Jasperlake PCI ID (bsc#1051510).
ALSA: hda - Apply AMD controller workaround for Raven platform (bsc#1051510).
ALSA: hda - Define a fallback_pin_fixup_tbl for alc269 family (bsc#1051510).
ALSA: hda - Drop unsol event handler for Intel HDMI codecs (bsc#1051510).
ALSA: hda - Expand pin_match function to match upcoming new tbls (bsc#1051510).
ALSA: hda: Flush interrupts on disabling (bsc#1051510).
ALSA: hda - Force runtime PM on Nvidia HDMI codecs (bsc#1051510).
ALSA: hda/hdmi - Do not report spurious jack state changes (bsc#1051510).
ALSA: hda/hdmi: remove redundant assignment to variable pcm_idx (bsc#1051510).
ALSA: hda - Inform too slow responses (bsc#1051510).
ALSA: hda/realtek - Add support for ALC711 (bsc#1051510).
ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93 (bsc#1051510).
ALSA: hda/realtek - Check beep whitelist before assigning in all codecs (bsc#1051510).
ALSA: hda/realtek - Enable headset mic on Asus MJ401TA (bsc#1051510).
ALSA: hda/realtek - Fix alienware headset mic (bsc#1051510).
ALSA: hda/realtek - PCI quirk for Medion E4254 (bsc#1051510).
ALSA: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360 (bsc#1051510).
ALSA: hda: Set fifo_size for both playback and capture streams (bsc#1051510).
ALSA: hda - Show the fatal CORB/RIRB error more clearly (bsc#1051510).
ALSA: hda/sigmatel - remove unused variable 'stac9200_core_init' (bsc#1051510).
ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() (bsc#1051510).
ALSA: line6: sizeof (byte) is always 1, use that fact (bsc#1051510).
ALSA: usb-audio: Add DSD support for EVGA NU Audio (bsc#1051510).
ALSA: usb-audio: Add Hiby device family to quirks for native DSD support (bsc#1051510).
ALSA: usb-audio: Add Pioneer DDJ-SX3 PCM quirck (bsc#1051510).…

Record: openSUSE-SU-2019:2444-1
Updated: 2026-11-02

OSVopenSUSE-SU-2019:2503-1 No score

Security update for the Linux Kernel

The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2019-0154: An unprotected read access to i915 registers has been fixed that could have been abused to facilitate a local denial-of-service attack. (bsc#1135966)
CVE-2019-0155: A privilege escalation vulnerability has been fixed in the i915 module that allowed batch buffers from user mode to gain super user privileges. (bsc#1135967)
CVE-2019-16231: drivers/net/fjes/fjes_main.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150466).
CVE-2019-18805: There was a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6 (bnc#1156187).
CVE-2019-17055: base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module did not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21 (bnc#1152782).
CVE-2019-16995: A memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c, if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d (bnc#1152685).
CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described 'Microarchitectural Data Sampling' attack.

The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW).

The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251
CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150457).
CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional.

The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in executable pages by splitting / merging huge pages into small pages as needed.

More information can be found on https://www.suse.com/support/kb/doc/?id=7023735
CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903).

The following non-security bugs were fixed:

ALSA: bebob: Fix prototype of helper function to return negative value (bsc#1051510).
ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series (git-fixes).
ALSA: hda: Add Elkhart Lake PCI ID (bsc#1051510).
ALSA: hda: Add Tigerlake/Jasperlake PCI ID (bsc#1051510).
ALSA: hda/ca0132 - Fix possible workqueue stall (bsc#1155836).
ALSA: hda/realtek - Add support for ALC623 (bsc#1051510).
ALSA: hda/realtek - Add support for ALC711 (bsc#1051510).
ALSA: hda/realtek - Fix 2 front mics of codec 0x623 (bsc#1051510).
ALSA: timer: Fix incorrectly assigned timer instance (git-fixes).
ALSA: timer: Fix mutex deadlock at releasing card (bsc#1051510).
arcnet: provide a buffer big enough to actually receive packets (networking-stable-19_09_30).
ASoc: rockchip: i2s: Fix RPM imbalance (bsc#1051510).
ASoC: rsnd: Reinitialize bit clock inversion flag for every format setting (bsc#1051510).
bpf: fix use after free in prog symbol exposure (bsc#1083647).
btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() (bsc#1155178).
btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() (bsc#1155179).
btrfs: tracepoints: Fix bad entry members of qgroup events (bsc#1155186).
btrfs: tracepoints: Fix wrong parameter…

Record: openSUSE-SU-2019:2503-1
Updated: 2026-11-02

OSVSUSE-SU-2019:2946-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional.

The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in executable pages by splitting / merging huge pages into small pages as needed. More information can be found on https://www.suse.com/support/kb/doc/?id=7023735

CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described 'Microarchitectural Data Sampling' attack.

The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW).

The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251

CVE-2019-0154: Fix a local denial of service via read of unprotected i915 registers. (bsc#1135966)
CVE-2019-0155: Fix privilege escalation in the i915 driver. Batch buffers from usermode could have escalated privileges via blitter command stream. (bsc#1135967)
CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150457).
CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903).
CVE-2019-16995: Fix a memory leak in hsr_dev_finalize() if hsr_add_port failed to add a port, which may have caused denial of service (bsc#1152685).
CVE-2019-17666: rtlwifi: Fix potential overflow in P2P code (bsc#1154372).
CVE-2019-16232: Fix a potential NULL pointer dereference in the Marwell libertas driver (bsc#1150465)
CVE-2019-16234: iwlwifi pcie driver did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150452).
CVE-2019-17133: cfg80211 wireless extension did not reject a long SSID IE, leading to a Buffer Overflow (bsc#1153158).
CVE-2019-17056: The AF_NFC network module did not enforce CAP_NET_RAW, which meant that unprivileged users could create a raw socket (bsc#1152788).

The following non-security bugs were fixed:

9p: avoid attaching writeback_fid on mmap with type PRIVATE (bsc#1051510).
acpi / CPPC: do not require the _PSD method (bsc#1051510).
acpi / processor: do not print errors for processorIDs == 0xff (bsc#1051510).
acpi: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bsc#1051510).
act_mirred: Fix mirred_init_module error handling (bsc#1051510).
alsa: bebob: Fix prototype of helper function to return negative value (bsc#1051510).
alsa: hda - Add laptop imic fixup for ASUS M9V laptop (bsc#1051510).
alsa: hda - Apply AMD controller workaround for Raven platform (bsc#1051510).
alsa: hda - Define a fallback_pin_fixup_tbl for alc269 family (bsc#1051510).
alsa: hda - Drop unsol event handler for Intel HDMI codecs (bsc#1051510).
alsa: hda - Expand pin_match function to match upcoming new tbls (bsc#1051510).
alsa: hda - Inform too slow responses (bsc#1051510).
alsa: hda - Show the fatal CORB/RIRB error more clearly (bsc#1051510).
alsa: hda/hdmi: remove redundant assignment to variable pcm_idx (bsc#1051510).
alsa: hda/realtek - Add support for ALC623 (bsc#1051510).
alsa: hda/realtek - Add support for ALC711 (bsc#1051510).
alsa: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93 (bsc#1051510).
alsa: hda/realtek - Check beep whitelist before assigning in all codecs (bsc#1051510).
alsa: hda/realtek - Fix 2 front mics of codec 0x623 (bsc#1051510).
alsa: hda/realtek - Fix alienware headset mic (bsc#1051510).
alsa: hda/realtek: Reduce…

Record: SUSE-SU-2019:2946-1
Updated: 2026-11-02

OSVSUSE-SU-2019:2947-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional.

The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in executable pages by splitting / merging huge pages into small pages as needed. More information can be found on https://www.suse.com/support/kb/doc/?id=7023735
CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described 'Microarchitectural Data Sampling' attack.

The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW).

The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251
CVE-2019-16995: Fix a memory leak in hsr_dev_finalize() if hsr_add_port failed to add a port, which may have caused denial of service (bsc#1152685).
CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150457).
CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903).
CVE-2019-17666: rtlwifi: Fix potential overflow in P2P code (bsc#1154372).
CVE-2019-16232: Fix a potential NULL pointer dereference in the Marwell libertas driver (bsc#1150465).
CVE-2019-16234: iwlwifi pcie driver did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150452).
CVE-2019-17133: cfg80211 wireless extension did not reject a long SSID IE, leading to a Buffer Overflow (bsc#1153158).
CVE-2019-17056: The AF_NFC network module did not enforce CAP_NET_RAW, which meant that unprivileged users could create a raw socket (bsc#1152788).

The following non-security bugs were fixed:

9p: avoid attaching writeback_fid on mmap with type PRIVATE (bsc#1051510).
acpi: cppc: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bsc#1051510).
acpi: cppc: do not require the _PSD method (bsc#1051510).
acpi: processor: do not print errors for processorIDs == 0xff (bsc#1051510).
act_mirred: Fix mirred_init_module error handling (bsc#1051510).
alsa: bebob: Fix prototype of helper function to return negative value (bsc#1051510).
alsa: firewire-motu: add support for MOTU 4pre (bsc#1111666).
alsa: hda/hdmi: Do not report spurious jack state changes (bsc#1051510).
alsa: hda/hdmi: remove redundant assignment to variable pcm_idx (bsc#1051510).
alsa: hda/realtek: Add support for ALC623 (bsc#1051510).
alsa: hda/realtek: Add support for ALC711 (bsc#1051510).
alsa: hda/realtek: Check beep whitelist before assigning in all codecs (bsc#1051510).
alsa: hda/realtek: Enable headset mic on Asus MJ401TA (bsc#1051510).
alsa: hda/realtek: Fix 2 front mics of codec 0x623 (bsc#1051510).
alsa: hda/realtek: Fix alienware headset mic (bsc#1051510).
alsa: hda/realtek: PCI quirk for Medion E4254 (bsc#1051510).
alsa: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360 (bsc#1051510).
alsa: hda/sigmatel: remove unused variable 'stac9200_core_init' (bsc#1051510).
alsa: hda: Add Elkhart Lake PCI ID (bsc#1051510).
alsa: hda: Add Tigerlake/Jasperlake PCI ID (bsc#1051510).
alsa: hda: Add a quirk model for fixing Huawei Matebook X right speaker (bsc#1051510).
alsa: hda: Add laptop imic fixup for ASUS M9V laptop (bsc#1051510).
alsa: hda: Add support of Zhaoxin controller (bsc#1051510).
alsa: hda: Apply AMD controller workaround for Raven platform…

Record: SUSE-SU-2019:2947-1
Updated: 2026-11-02

OSVSUSE-SU-2019:2949-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12-SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional.

The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in executable pages by splitting / merging huge pages into small pages as needed. More information can be found on https://www.suse.com/support/kb/doc/?id=7023735
CVE-2019-16995: Fix a memory leak in hsr_dev_finalize() if hsr_add_port failed to add a port, which may have caused denial of service (bsc#1152685).
CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described 'Microarchitectural Data Sampling' attack.

The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW).

The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251
CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150457).
CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903).
CVE-2019-17666: rtlwifi: Fix potential overflow in P2P code (bsc#1154372).
CVE-2019-17133: cfg80211 wireless extension did not reject a long SSID IE, leading to a Buffer Overflow (bsc#1153158).
CVE-2019-16232: Fix a potential NULL pointer dereference in the Marwell libertas driver (bsc#1150465).
CVE-2019-16234: iwlwifi pcie driver did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150452).
CVE-2019-17055: The AF_ISDN network module in the Linux kernel did not enforce CAP_NET_RAW, which meant that unprivileged users could create a raw socket (bnc#1152782).
CVE-2019-17056: The AF_NFC network module did not enforce CAP_NET_RAW, which meant that unprivileged users could create a raw socket (bsc#1152788).
CVE-2019-16413: The 9p filesystem did not protect i_size_write() properly, which caused an i_size_read() infinite loop and denial of service on SMP systems (bnc#1151347).
CVE-2019-15902: A backporting issue was discovered that re-introduced the Spectre vulnerability it had aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped (bnc#1149376).
CVE-2019-15291: Fixed a NULL pointer dereference issue that could be caused by a malicious USB device (bnc#1146519).
CVE-2019-15807: Fixed a memory leak in the SCSI module that could be abused to cause denial of service (bnc#1148938).
CVE-2019-13272: Fixed a mishandled the recording of the credentials of a process that wants to create a ptrace relationship, which allowed local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). (bnc#1140671).
CVE-2019-14821: An out-of-bounds access issue was fixed in the kernel's KVM hypervisor. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system (bnc#1151350).
CVE-2019-15505: An out-of-bounds issue had been fixed that could be caused by crafted USB device traffic (bnc#1147122).
CVE-2017-18595: A double free in allocate_trace_buffer was fixed …

Record: SUSE-SU-2019:2949-1
Updated: 2026-11-02

OSVSUSE-SU-2019:2951-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional.

The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in executable pages by splitting / merging huge pages into small pages as needed. More information can be found on https://www.suse.com/support/kb/doc/?id=7023735
CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described 'Microarchitectural Data Sampling' attack.

The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW).

The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251
CVE-2019-16995: Fix a memory leak in hsr_dev_finalize() if hsr_add_port failed to add a port, which may have caused denial of service (bsc#1152685).
CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150457).
CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903).
CVE-2019-17666: rtlwifi: Fix potential overflow in P2P code (bsc#1154372).
CVE-2019-16232: Fix a potential NULL pointer dereference in the Marwell libertas driver (bsc#1150465).
CVE-2019-16234: iwlwifi pcie driver did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150452).
CVE-2019-17133: cfg80211 wireless extension did not reject a long SSID IE, leading to a Buffer Overflow (bsc#1153158).
CVE-2019-17056: The AF_NFC network module did not enforce CAP_NET_RAW, which meant that unprivileged users could create a raw socket (bsc#1152788).
CVE-2019-18805: Fix signed integer overflow in tcp_ack_update_rtt() that could have lead to a denial of service or possibly unspecified other impact (bsc#1156187)
CVE-2019-17055: The AF_ISDN network module did not enforce CAP_NET_RAW, which meant that unprivileged users could create a raw socket (bnc#1152782)

The following non-security bugs were fixed:

9p: avoid attaching writeback_fid on mmap with type PRIVATE (bsc#1051510).
Add kernel module compression support (bsc#1135854) For enabling the kernel module compress, add the item COMPRESS_MODULES='xz' in config.sh, then mkspec will pass it to the spec file.
acpi / CPPC: do not require the _PSD method (bsc#1051510).
acpi / processor: do not print errors for processorIDs == 0xff (bsc#1051510).
acpi: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bsc#1051510).
act_mirred: Fix mirred_init_module error handling (bsc#1051510).
alsa: bebob: Fix prototype of helper function to return negative value (bsc#1051510).
alsa: hda - Add laptop imic fixup for ASUS M9V laptop (bsc#1051510).
alsa: hda - Apply AMD controller workaround for Raven platform (bsc#1051510).
alsa: hda - Define a fallback_pin_fixup_tbl for alc269 family (bsc#1051510).
alsa: hda - Drop unsol event handler for Intel HDMI codecs (bsc#1051510).
alsa: hda - Expand pin_match function to match upcoming new tbls (bsc#1051510).
alsa: hda - Inform too slow responses (bsc#1051510).
alsa: hda - Show the fatal CORB/RIRB error more clearly (bsc#1051510).
alsa: hda/ca0132 - Fix possible workqueue stall (bsc#1155836).
alsa: hda/hdmi: remove redundant assignment to variable pcm_idx (bsc#1051510).
alsa: hda/realtek - Add support for ALC623 (bsc#1051510).
alsa: hda/realtek - Add…

Record: SUSE-SU-2019:2951-1
Updated: 2026-11-02

OSVSUSE-SU-2019:2952-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15-SP1 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional.

The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in executable pages by splitting / merging huge pages into small pages as More information can be found on https://www.suse.com/support/kb/doc/?id=7023735
CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described 'Microarchitectural Data Sampling' attack.

The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW).

The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251
CVE-2019-16995: Fix a memory leak in hsr_dev_finalize() if hsr_add_port failed to add a port, which may have caused denial of service (bsc#1152685).
CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150457).
CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903).
CVE-2019-17666: rtlwifi: Fix potential overflow in P2P code (bsc#1154372).
CVE-2019-16232: Fix a potential NULL pointer dereference in the Marwell libertas driver (bsc#1150465).
CVE-2019-16234: iwlwifi pcie driver did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150452).
CVE-2019-17133: cfg80211 wireless extension did not reject a long SSID IE, leading to a Buffer Overflow (bsc#1153158).
CVE-2019-17056: The AF_NFC network module did not enforce CAP_NET_RAW, which meant that unprivileged users could create a raw socket (bsc#1152788).

The following non-security bugs were fixed:

9p: avoid attaching writeback_fid on mmap with type PRIVATE (bsc#1051510).
Add kernel module compression support (bsc#1135854)
acpi / CPPC: do not require the _PSD method (bsc#1051510).
acpi / processor: do not print errors for processorIDs == 0xff (bsc#1051510).
acpi: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bsc#1051510).
act_mirred: Fix mirred_init_module error handling (bsc#1051510).
alsa: bebob: Fix prototype of helper function to return negative value (bsc#1051510).
alsa: firewire-motu: add support for MOTU 4pre (bsc#1111666).
alsa: hda - Add a quirk model for fixing Huawei Matebook X right speaker (bsc#1051510).
alsa: hda - Add laptop imic fixup for ASUS M9V laptop (bsc#1051510).
alsa: hda - Apply AMD controller workaround for Raven platform (bsc#1051510).
alsa: hda - Define a fallback_pin_fixup_tbl for alc269 family (bsc#1051510).
alsa: hda - Drop unsol event handler for Intel HDMI codecs (bsc#1051510).
alsa: hda - Expand pin_match function to match upcoming new tbls (bsc#1051510).
alsa: hda - Force runtime PM on Nvidia HDMI codecs (bsc#1051510).
alsa: hda - Inform too slow responses (bsc#1051510).
alsa: hda - Show the fatal CORB/RIRB error more clearly (bsc#1051510).
alsa: hda/hdmi - Do not report spurious jack state changes (bsc#1051510).
alsa: hda/hdmi: remove redundant assignment to variable pcm_idx (bsc#1051510).
alsa: hda/realtek - Add support for ALC623 (bsc#1051510).
alsa: hda/realtek - Add support for ALC711 (bsc#1051510).
alsa: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93 (bsc#1051510).
alsa: hda/realtek - Check beep whitelist before assigning in all codecs (bsc#1051510).
alsa: hda/realtek -…

Record: SUSE-SU-2019:2952-1
Updated: 2026-11-02

OSVSUSE-SU-2019:2953-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15-SP1 Azure Kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional.

The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in executable pages by splitting / merging huge pages into small pages as More information can be found on https://www.suse.com/support/kb/doc/?id=7023735 (bnc#1117665 1152505 1155812 1155817 1155945)
CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described 'Microarchitectural Data Sampling' attack.

The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW).

The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251 (bnc#1139073 1152497 1152505 1152506).
CVE-2019-18805: There was a signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6 (bnc#1156187).
CVE-2019-17055: The AF_NFC network module did not enforce CAP_NET_RAW, which meant that unprivileged users could create a raw socket (bnc#1152782).
CVE-2019-16995: Fix a memory leak in hsr_dev_finalize() if hsr_add_port failed to add a port, which may have caused denial of service (bsc#1152685).
CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150457).
CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903).
CVE-2019-17666: rtlwifi: Fix potential overflow in P2P code (bsc#1154372).
CVE-2019-16232: Fix a potential NULL pointer dereference in the Marwell libertas driver (bsc#1150465).
CVE-2019-16234: iwlwifi pcie driver did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150452).
CVE-2019-17133: cfg80211 wireless extension did not reject a long SSID IE, leading to a Buffer Overflow (bsc#1153158).
CVE-2019-17056: The AF_NFC network module did not enforce CAP_NET_RAW, which meant that unprivileged users could create a raw socket (bsc#1152788).

The following non-security bugs were fixed:

/dev/mem: Bail out upon SIGKILL (git-fixes).
9p: avoid attaching writeback_fid on mmap with type PRIVATE (bsc#1051510).
ACPI / CPPC: do not require the _PSD method (bsc#1051510).
ACPI / processor: do not print errors for processorIDs == 0xff (bsc#1051510).
ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bsc#1051510).
act_mirred: Fix mirred_init_module error handling (bsc#1051510).
Add kernel module compression support (bsc#1135854) For enabling the kernel module compress, add the item COMPRESS_MODULES='xz' in config.sh, then mkspec will pass it to the spec file.
alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
ALSA: bebob: Fix prototype of helper function to return negative value (bsc#1051510).
ALSA: hda - Add laptop imic fixup for ASUS M9V laptop (bsc#1051510).
ALSA: hda - Apply AMD controller workaround for Raven platform (bsc#1051510).
ALSA: hda - Define a fallback_pin_fixup_tbl for alc269 family (bsc#1051510).
ALSA: hda - Drop unsol event handler for Intel HDMI codecs (bsc#1051510).
ALSA: hda - Expand pin_match function to match upcoming new tbls (bsc#1051510).
ALSA: hda - Inform too slow responses (bsc#1051510).
ALSA:…

Record: SUSE-SU-2019:2953-1
Updated: 2026-11-02

OSVSUSE-SU-2019:2984-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional.

The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in executable pages by splitting / merging huge pages into small pages as needed. More information can be found on https://www.suse.com/support/kb/doc/?id=7023735
CVE-2019-16995: Fix a memory leak in hsr_dev_finalize() if hsr_add_port failed to add a port, which may have caused denial of service (bsc#1152685).
CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described 'Microarchitectural Data Sampling' attack.

The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW).

The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251
CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150457).
CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903).
CVE-2019-17666: rtlwifi: Fix potential overflow in P2P code (bsc#1154372).
CVE-2019-17133: cfg80211 wireless extension did not reject a long SSID IE, leading to a Buffer Overflow (bsc#1153158).
CVE-2019-16232: Fix a potential NULL pointer dereference in the Marwell libertas driver (bsc#1150465).
CVE-2019-16234: iwlwifi pcie driver did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150452).
CVE-2019-17055: The AF_ISDN network module in the Linux kernel did not enforce CAP_NET_RAW, which meant that unprivileged users could create a raw socket (bnc#1152782).
CVE-2019-17056: The AF_NFC network module did not enforce CAP_NET_RAW, which meant that unprivileged users could create a raw socket (bsc#1152788).
CVE-2019-16413: The 9p filesystem did not protect i_size_write() properly, which caused an i_size_read() infinite loop and denial of service on SMP systems (bnc#1151347).
CVE-2019-15902: A backporting issue was discovered that re-introduced the Spectre vulnerability it had aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped (bnc#1149376).
CVE-2019-15291: Fixed a NULL pointer dereference issue that could be caused by a malicious USB device (bnc#1146519).
CVE-2019-15807: Fixed a memory leak in the SCSI module that could be abused to cause denial of service (bnc#1148938).
CVE-2019-13272: Fixed a mishandled the recording of the credentials of a process that wants to create a ptrace relationship, which allowed local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). (bnc#1140671).
CVE-2019-14821: An out-of-bounds access issue was fixed in the kernel's kvm hypervisor. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system (bnc#1151350).
CVE-2019-15505: An out-of-bounds issue had been fixed that could be caused by crafted USB device traffic (bnc#1147122).
CVE-2017-18595: A double free in allocate_trace_buffer was fixed …

Record: SUSE-SU-2019:2984-1
Updated: 2026-11-02

OSVSUSE-SU-2019:3200-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2019-19081: Fixed a memory leak in the nfp_flower_spawn_vnic_reprs() could have allowed attackers to cause a denial of service (bsc#1157045).
CVE-2019-19080: Fixed four memory leaks in the nfp_flower_spawn_phy_reprs() could have allowed attackers to cause a denial of service (bsc#1157044).
CVE-2019-19052: Fixed a memory leak in the gs_can_open() which could have led to denial of service (bsc#1157324).
CVE-2019-19067: Fixed multiple memory leaks in acp_hw_init (bsc#1157180).
CVE-2019-19060: Fixed a memory leak in the adis_update_scan_mode() which could have led to denial of service (bsc#1157178).
CVE-2019-19049: Fixed a memory leak in unittest_data_add (bsc#1157173).
CVE-2019-19075: Fixed a memory leak in the ca8210_probe() which could have led to denial of service by triggering ca8210_get_platform_data() failures (bsc#1157162).
CVE-2019-19058: Fixed a memory leak in the alloc_sgtable() which could have led to denial of service by triggering alloc_page() failures (bsc#1157145).
CVE-2019-19074: Fixed a memory leak in the ath9k_wmi_cmd() function which could have led to denial of service (bsc#1157143).
CVE-2019-19073: Fixed multiple memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c which could have led to denial of service by triggering wait_for_completion_timeout() failures (bsc#1157070).
CVE-2019-19083: Fixed multiple memory leaks in *clock_source_create() functions which could have led to denial of service (bsc#1157049).
CVE-2019-19082: Fixed multiple memory leaks in *create_resource_pool() which could have led to denial of service (bsc#1157046).
CVE-2019-15916: Fixed a memory leak in register_queue_kobjects() which might have led denial of service (bsc#1149448).
CVE-2019-0154: Fixed an improper access control in subsystem for Intel (R) processor graphics whichs may have allowed an authenticated user to potentially enable denial of service via local access (bsc#1135966).
CVE-2019-0155: Fixed an improper access control in subsystem for Intel (R) processor graphics whichs may have allowed an authenticated user to potentially enable escalation of privilege via local access (bsc#1135967).
CVE-2019-16231: Fixed a NULL pointer dereference due to lack of checking the alloc_workqueue return value (bsc#1150466).
CVE-2019-18805: Fixed an integer overflow in tcp_ack_update_rtt() leading to a denial of service or possibly unspecified other impact (bsc#1156187).
CVE-2019-17055: Enforced CAP_NET_RAW in the AF_ISDN network module to restrict unprivileged users to create a raw socket (bsc#1152782).
CVE-2019-16995: Fixed a memory leak in hsr_dev_finalize() which may have caused denial of service (bsc#1152685).
CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150457).
CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903)
CVE-2019-17666: rtlwifi: Fix potential overflow in P2P code (bsc#1154372).
CVE-2019-17056: The AF_NFC network module did not enforce CAP_NET_RAW, which meant that unprivileged users could create a raw socket (bsc#1152788).
CVE-2019-14821: An out-of-bounds access issue was fixed in the kernel's kvm hypervisor. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system (bnc#1151350).
CVE-2017-18595: A double free in allocate_trace_buffer was fixed (bnc#1149555).
CVE-2019-9506: The Bluetooth BR/EDR specification used to permit sufficiently low encryption key length and did not prevent an attacker from influencing the key length negotiation. This allowed practical brute-force attacks (aka 'KNOB') that…

Record: SUSE-SU-2019:3200-1
Updated: 2026-11-02

OSVSUSE-SU-2019:3294-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2019-15916: Fixed a memory leak in register_queue_kobjects() which might have led denial of service (bsc#1149448).
CVE-2019-0154: Fixed an improper access control in subsystem for Intel (R) processor graphics whichs may have allowed an authenticated user to potentially enable denial of service via local access (bsc#1135966).
CVE-2019-0155: Fixed an improper access control in subsystem for Intel (R) processor graphics whichs may have allowed an authenticated user to potentially enable escalation of privilege via local access (bsc#1135967).
CVE-2019-16231: Fixed a NULL pointer dereference due to lack of checking the alloc_workqueue return value (bsc#1150466).
CVE-2019-18805: Fixed an integer overflow in tcp_ack_update_rtt() leading to a denial of service or possibly unspecified other impact (bsc#1156187).
CVE-2019-17055: Enforced CAP_NET_RAW in the AF_ISDN network module to restrict unprivileged users to create a raw socket (bsc#1152782).
CVE-2019-16995: Fixed a memory leak in hsr_dev_finalize() which may have caused denial of service (bsc#1152685).
CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described 'Microarchitectural Data Sampling' attack.(bsc#1139073). The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW). The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251
CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150457).
CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional.
CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903)
CVE-2019-17666: rtlwifi: Fix potential overflow in P2P code (bsc#1154372).
CVE-2019-16232: Fix a potential NULL pointer dereference in the Marwell libertas driver (bsc#1150465).
CVE-2019-16234: iwlwifi pcie driver did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150452).
CVE-2019-17133: cfg80211 wireless extension did not reject a long SSID IE, leading to a Buffer Overflow (bsc#1153158).
CVE-2019-17056: The AF_NFC network module did not enforce CAP_NET_RAW, which meant that unprivileged users could create a raw socket (bsc#1152788).

The following non-security bugs were fixed:

9p: avoid attaching writeback_fid on mmap with type PRIVATE (bsc#1051510).
ACPI / CPPC: do not require the _PSD method (bsc#1051510).
ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bsc#1051510).
ACPI / processor: do not print errors for processorIDs == 0xff (bsc#1051510).
act_mirred: Fix mirred_init_module error handling (bsc#1051510).
Add kernel module compression support (bsc#1135854) For enabling the kernel module compress, add the item COMPRESS_MODULES='xz' in config.sh, then mkspec will pass it to the spec file.
alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
ALSA: bebob: Fix prototype of helper function to return negative value (bsc#1051510).
ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series (git-fixes).
ALSA: hda: Add Cometlake-S PCI ID (git-fixes).
ALSA: hda: Add Elkhart Lake PCI ID (bsc#1051510).
ALSA: hda - Add laptop imic fixup for ASUS M9V laptop (bsc#1051510).
ALSA: hda: Add…

Record: SUSE-SU-2019:3294-1
Updated: 2026-11-02

OSVSUSE-SU-2019:3295-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2019-15916: Fixed a memory leak in register_queue_kobjects() which might have led denial of service (bsc#1149448).
CVE-2019-0154: Fixed an improper access control in subsystem for Intel (R) processor graphics whichs may have allowed an authenticated user to potentially enable denial of service via local access (bsc#1135966).
CVE-2019-0155: Fixed an improper access control in subsystem for Intel (R) processor graphics whichs may have allowed an authenticated user to potentially enable escalation of privilege via local access (bsc#1135967).
CVE-2019-16231: Fixed a NULL pointer dereference due to lack of checking the alloc_workqueue return value (bsc#1150466).
CVE-2019-18805: Fixed an integer overflow in tcp_ack_update_rtt() leading to a denial of service or possibly unspecified other impact (bsc#1156187).
CVE-2019-17055: Enforced CAP_NET_RAW in the AF_ISDN network module to restrict unprivileged users to create a raw socket (bsc#1152782).
CVE-2019-16995: Fixed a memory leak in hsr_dev_finalize() which may have caused denial of service (bsc#1152685).
CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described 'Microarchitectural Data Sampling' attack.(bsc#1139073). The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW). The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251
CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150457).
CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional.
CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903)
CVE-2019-17666: rtlwifi: Fix potential overflow in P2P code (bsc#1154372).
CVE-2019-16232: Fix a potential NULL pointer dereference in the Marwell libertas driver (bsc#1150465).
CVE-2019-16234: iwlwifi pcie driver did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150452).
CVE-2019-17133: cfg80211 wireless extension did not reject a long SSID IE, leading to a Buffer Overflow (bsc#1153158).
CVE-2019-17056: The AF_NFC network module did not enforce CAP_NET_RAW, which meant that unprivileged users could create a raw socket (bsc#1152788).
CVE-2019-15291: Fixed a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function (bsc#1146519).
CVE-2019-14821: Fixed an out-of-bounds access resulting in a denial of service or potentially escalating privileges on the system (bnc#1151350).
CVE-2017-18595: Fixed a double free which caused by the function allocate_trace_buffer (bsc#1149555).
CVE-2019-9506: Fixed an issue with Bluetooth which permited low encryption key length and did not prevent an attacker from influencing the key length negotiation allowing brute-force attacks (bsc#1137865).

The following non-security bugs were fixed:

9p: avoid attaching writeback_fid on mmap with type PRIVATE (bsc#1051510).
ACPI / CPPC: do not require the _PSD method (bsc#1051510).
ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bsc#1051510).
ACPI: custom_method: fix memory leaks (bsc#1051510).
ACPI / PCI: fix acpi_pci_irq_enable() memory leak (bsc#1051510).
ACPI / processor: do not print errors for…

Record: SUSE-SU-2019:3295-1
Updated: 2026-11-02

OSVSUSE-SU-2020:0093-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2019-20095: mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c had some error-handling cases that did not free allocated hostcmd memory. This will cause a memory leak and denial of service (bnc#1159909).
CVE-2019-20054: Fixed a a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links (bnc#1159910).
CVE-2019-20096: Fixed a memory leak in __feat_register_sp() in net/dccp/feat.c, which may cause denial of service (bnc#1159908).
CVE-2019-19966: Fixed a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service (bnc#1159841).
CVE-2019-19447: Mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c (bnc#1158819).
CVE-2019-19319: A setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call (bnc#1158021).
CVE-2019-19767: Fixed mishandling of ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c (bnc#1159297).
CVE-2019-18808: A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c allowed attackers to cause a denial of service (memory consumption) (bnc#1156259).
CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c where the length of variable elements in a beacon head were not checked, leading to a buffer overflow (bnc#1152107).
CVE-2019-19066: A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c allowed attackers to cause a denial of service (memory consumption) by triggering bfa_port_get_stats() failures (bnc#1157303).
CVE-2019-19051: There was a memory leak in the i2400m_op_rfkill_sw_toggle() function in drivers/net/wimax/i2400m/op-rfkill.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1159024).
CVE-2019-19338: There was an incomplete fix for Transaction Asynchronous Abort (TAA) (bnc#1158954).
CVE-2019-19332: There was an OOB memory write via kvm_dev_ioctl_get_cpuid (bnc#1158827).
CVE-2019-19537: There was a race condition bug that can be caused by a malicious USB device in the USB character device driver layer (bnc#1158904).
CVE-2019-19535: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver (bnc#1158903).
CVE-2019-19527: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver (bnc#1158900).
CVE-2019-19526: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver (bnc#1158893).
CVE-2019-19533: There was an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver (bnc#1158834).
CVE-2019-19532: There were multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers (bnc#1158824).
CVE-2019-19523: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79 (bnc#1158381 1158823 1158834).
CVE-2019-15213: There was a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver (bnc#1146544).
CVE-2019-19531: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1158445).
CVE-2019-19543: There was a use-after-free in serial_ir_init_module() in…

Record: SUSE-SU-2020:0093-1
Updated: 2026-11-02

Affected products

Show 5 moreShow less

Affected packages

Affected packages
Package	Affected	Fixed
`linux` Debian:12	before 4.19.37-1	4.19.37-1
`linux` Debian:13	before 4.19.37-1	4.19.37-1
`linux` Debian:14	before 4.19.37-1	4.19.37-1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15	before 4.12.14-150.41.1	4.12.14-150.41.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15	before 4.12.14-150.41.1	4.12.14-150.41.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15	before 4.12.14-150.41.1	4.12.14-150.41.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15	before 4.12.14-150.41.1	4.12.14-150.41.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15	before 4.12.14-150.41.1	4.12.14-150.41.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15	before 4.12.14-150.41.1	4.12.14-150.41.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15	before 4.12.14-150.41.1	4.12.14-150.41.1

Show 155 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-vanilla` SUSE:Linux Enterprise Module for Development Tools 15	before 4.12.14-150.41.1	4.12.14-150.41.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15	before 4.12.14-150.41.1	4.12.14-150.41.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15	before 4.12.14-150.41.1	4.12.14-150.41.1
`kernel-livepatch-SLE15_Update_16` SUSE:Linux Enterprise Live Patching 15	before 1-1.3.1	1-1.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15	before 4.12.14-150.41.1	4.12.14-150.41.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15	before 4.12.14-150.41.1	4.12.14-150.41.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP1	before 4.12.14-197.26.1	4.12.14-197.26.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP1	before 4.12.14-197.26.1	4.12.14-197.26.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP1	before 4.12.14-197.26.1	4.12.14-197.26.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP1	before 4.12.14-197.26.1	4.12.14-197.26.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP1	before 4.12.14-197.26.1	4.12.14-197.26.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP1	before 4.12.14-197.26.1	4.12.14-197.26.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP1	before 4.12.14-197.26.1	4.12.14-197.26.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP1	before 4.12.14-197.26.1	4.12.14-197.26.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP1	before 4.12.14-197.26.1	4.12.14-197.26.1
`kernel-livepatch-SLE15-SP1_Update_7` SUSE:Linux Enterprise Live Patching 15 SP1	before 1-3.5.1	1-3.5.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP1	before 4.12.14-197.26.1	4.12.14-197.26.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP1	before 4.12.14-197.26.1	4.12.14-197.26.1
`kernel-default` SUSE:HPE Helion OpenStack 8	before 4.4.180-94.107.1	4.4.180-94.107.1
`kernel-source` SUSE:HPE Helion OpenStack 8	before 4.4.180-94.107.1	4.4.180-94.107.1
`kernel-syms` SUSE:HPE Helion OpenStack 8	before 4.4.180-94.107.1	4.4.180-94.107.1
`kgraft-patch-SLE12-SP3_Update_29` SUSE:HPE Helion OpenStack 8	before 1-4.3.1	1-4.3.1
`kernel-default` SUSE:OpenStack Cloud 8	before 4.4.180-94.107.1	4.4.180-94.107.1
`kernel-source` SUSE:OpenStack Cloud 8	before 4.4.180-94.107.1	4.4.180-94.107.1
`kernel-syms` SUSE:OpenStack Cloud 8	before 4.4.180-94.107.1	4.4.180-94.107.1
`kgraft-patch-SLE12-SP3_Update_29` SUSE:OpenStack Cloud 8	before 1-4.3.1	1-4.3.1
`kernel-default` SUSE:OpenStack Cloud Crowbar 8	before 4.4.180-94.107.1	4.4.180-94.107.1
`kernel-source` SUSE:OpenStack Cloud Crowbar 8	before 4.4.180-94.107.1	4.4.180-94.107.1
`kernel-syms` SUSE:OpenStack Cloud Crowbar 8	before 4.4.180-94.107.1	4.4.180-94.107.1
`kgraft-patch-SLE12-SP3_Update_29` SUSE:OpenStack Cloud Crowbar 8	before 1-4.3.1	1-4.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 12 SP3	before 4.4.180-94.107.1	4.4.180-94.107.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 12 SP3	before 4.4.180-94.107.1	4.4.180-94.107.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 12 SP3	before 4.4.180-94.107.1	4.4.180-94.107.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 12 SP3	before 4.4.180-94.107.1	4.4.180-94.107.1
`kgraft-patch-SLE12-SP3_Update_29` SUSE:Linux Enterprise Server for SAP Applications 12 SP3	before 1-4.3.1	1-4.3.1
`kernel-default` SUSE:Linux Enterprise Server 12 SP3-LTSS	before 4.4.180-94.107.1	4.4.180-94.107.1
`kernel-source` SUSE:Linux Enterprise Server 12 SP3-LTSS	before 4.4.180-94.107.1	4.4.180-94.107.1
`kernel-syms` SUSE:Linux Enterprise Server 12 SP3-LTSS	before 4.4.180-94.107.1	4.4.180-94.107.1
`kgraft-patch-SLE12-SP3_Update_29` SUSE:Linux Enterprise Server 12 SP3-LTSS	before 1-4.3.1	1-4.3.1
`kernel-default` SUSE:Linux Enterprise Server 12 SP3-BCL	before 4.4.180-94.107.1	4.4.180-94.107.1
`kernel-source` SUSE:Linux Enterprise Server 12 SP3-BCL	before 4.4.180-94.107.1	4.4.180-94.107.1
`kernel-syms` SUSE:Linux Enterprise Server 12 SP3-BCL	before 4.4.180-94.107.1	4.4.180-94.107.1
`kernel-default` SUSE:Enterprise Storage 5	before 4.4.180-94.107.1	4.4.180-94.107.1
`kernel-source` SUSE:Enterprise Storage 5	before 4.4.180-94.107.1	4.4.180-94.107.1
`kernel-syms` SUSE:Enterprise Storage 5	before 4.4.180-94.107.1	4.4.180-94.107.1
`kgraft-patch-SLE12-SP3_Update_29` SUSE:Enterprise Storage 5	before 1-4.3.1	1-4.3.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15	before 4.12.14-5.44.1	4.12.14-5.44.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15	before 4.12.14-5.44.1	4.12.14-5.44.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15	before 4.12.14-5.44.1	4.12.14-5.44.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP1	before 4.12.14-8.19.1	4.12.14-8.19.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP1	before 4.12.14-8.19.1	4.12.14-8.19.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP1	before 4.12.14-8.19.1	4.12.14-8.19.1
`kernel-azure` SUSE:Linux Enterprise Server 12 SP4	before 4.12.14-6.29.1	4.12.14-6.29.1
`kernel-source-azure` SUSE:Linux Enterprise Server 12 SP4	before 4.12.14-6.29.1	4.12.14-6.29.1
`kernel-syms-azure` SUSE:Linux Enterprise Server 12 SP4	before 4.12.14-6.29.1	4.12.14-6.29.1
`kernel-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP4	before 4.12.14-6.29.1	4.12.14-6.29.1
`kernel-source-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP4	before 4.12.14-6.29.1	4.12.14-6.29.1
`kernel-syms-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP4	before 4.12.14-6.29.1	4.12.14-6.29.1
`kernel-default` SUSE:OpenStack Cloud 7	before 4.4.121-92.125.1	4.4.121-92.125.1
`kernel-source` SUSE:OpenStack Cloud 7	before 4.4.121-92.125.1	4.4.121-92.125.1
`kernel-syms` SUSE:OpenStack Cloud 7	before 4.4.121-92.125.1	4.4.121-92.125.1
`kgraft-patch-SLE12-SP2_Update_33` SUSE:OpenStack Cloud 7	before 1-3.5.1	1-3.5.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 12 SP2	before 4.4.121-92.125.1	4.4.121-92.125.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 12 SP2	before 4.4.121-92.125.1	4.4.121-92.125.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 12 SP2	before 4.4.121-92.125.1	4.4.121-92.125.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 12 SP2	before 4.4.121-92.125.1	4.4.121-92.125.1
`kgraft-patch-SLE12-SP2_Update_33` SUSE:Linux Enterprise Server for SAP Applications 12 SP2	before 1-3.5.1	1-3.5.1
`kernel-default` SUSE:Linux Enterprise Server 12 SP2-LTSS	before 4.4.121-92.125.1	4.4.121-92.125.1
`kernel-source` SUSE:Linux Enterprise Server 12 SP2-LTSS	before 4.4.121-92.125.1	4.4.121-92.125.1
`kernel-syms` SUSE:Linux Enterprise Server 12 SP2-LTSS	before 4.4.121-92.125.1	4.4.121-92.125.1
`kgraft-patch-SLE12-SP2_Update_33` SUSE:Linux Enterprise Server 12 SP2-LTSS	before 1-3.5.1	1-3.5.1
`kernel-default` SUSE:Linux Enterprise Server 12 SP2-BCL	before 4.4.121-92.125.1	4.4.121-92.125.1
`kernel-source` SUSE:Linux Enterprise Server 12 SP2-BCL	before 4.4.121-92.125.1	4.4.121-92.125.1
`kernel-syms` SUSE:Linux Enterprise Server 12 SP2-BCL	before 4.4.121-92.125.1	4.4.121-92.125.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 12 SP5	before 4.12.14-122.7.1	4.12.14-122.7.1
`kernel-default` SUSE:Linux Enterprise Live Patching 12 SP5	before 4.12.14-122.7.1	4.12.14-122.7.1
`kgraft-patch-SLE12-SP5_Update_1` SUSE:Linux Enterprise Live Patching 12 SP5	before 1-8.7.1	1-8.7.1
`kernel-docs` SUSE:Linux Enterprise Software Development Kit 12 SP5	before 4.12.14-122.7.1	4.12.14-122.7.1
`kernel-obs-build` SUSE:Linux Enterprise Software Development Kit 12 SP5	before 4.12.14-122.7.1	4.12.14-122.7.1
`kernel-default` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-122.7.1	4.12.14-122.7.1
`kernel-source` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-122.7.1	4.12.14-122.7.1
`kernel-syms` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-122.7.1	4.12.14-122.7.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-122.7.1	4.12.14-122.7.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-122.7.1	4.12.14-122.7.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-122.7.1	4.12.14-122.7.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 12 SP5	before 4.12.14-122.7.1	4.12.14-122.7.1
`kernel-rt` SUSE:Linux Enterprise Real Time 12 SP4	before 4.12.14-8.9.3	4.12.14-8.9.3
`kernel-rt_debug` SUSE:Linux Enterprise Real Time 12 SP4	before 4.12.14-8.9.3	4.12.14-8.9.3
`kernel-source-rt` SUSE:Linux Enterprise Real Time 12 SP4	before 4.12.14-8.9.3	4.12.14-8.9.3
`kernel-syms-rt` SUSE:Linux Enterprise Real Time 12 SP4	before 4.12.14-8.9.3	4.12.14-8.9.3
`kernel-rt` SUSE:Real Time Module 15 SP1	before 4.12.14-14.14.3	4.12.14-14.14.3
`kernel-rt_debug` SUSE:Real Time Module 15 SP1	before 4.12.14-14.14.3	4.12.14-14.14.3
`kernel-source-rt` SUSE:Real Time Module 15 SP1	before 4.12.14-14.14.2	4.12.14-14.14.2
`kernel-syms-rt` SUSE:Real Time Module 15 SP1	before 4.12.14-14.14.2	4.12.14-14.14.2
`kernel-azure` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-16.7.1	4.12.14-16.7.1
`kernel-source-azure` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-16.7.1	4.12.14-16.7.1
`kernel-syms-azure` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-16.7.1	4.12.14-16.7.1
`kernel-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-16.7.1	4.12.14-16.7.1
`kernel-source-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-16.7.1	4.12.14-16.7.1
`kernel-syms-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-16.7.1	4.12.14-16.7.1
`linux-aws` Ubuntu:14.04:LTS	before 4.4.0-1044.47, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 23 moreShow less 4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.45	4.4.0-1044.47
`linux-lts-xenial` Ubuntu:14.04:LTS	before 4.4.0-148.174~14.04.1, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less 4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1	4.4.0-148.174~14.04.1
`linux-azure` Ubuntu:Pro:14.04:LTS	before 4.15.0-1059.64~14.04.1, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 16 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.1	4.15.0-1059.64~14.04.1
`linux` Ubuntu:16.04:LTS	before 4.4.0-148.174, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less 4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96	4.4.0-148.174
`linux-aws` Ubuntu:16.04:LTS	before 4.4.0-1083.93, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 44 moreShow less 4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.91	4.4.0-1083.93
`linux-aws-hwe` Ubuntu:16.04:LTS	before 4.15.0-1047.49~16.04.1, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 7 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.1	4.15.0-1047.49~16.04.1
`linux-azure` Ubuntu:16.04:LTS	before 4.15.0-1056.61, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 37 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.60	4.15.0-1056.61
`linux-gcp` Ubuntu:16.04:LTS	before 4.15.0-1041.43, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 30 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.1	4.15.0-1041.43
`linux-hwe` Ubuntu:16.04:LTS	before 4.15.0-60.67~16.04.1, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	4.15.0-60.67~16.04.1
`linux-kvm` Ubuntu:16.04:LTS	before 4.4.0-1046.52, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 23 moreShow less 4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.50	4.4.0-1046.52
`linux-oracle` Ubuntu:16.04:LTS	before 4.15.0-1022.25~16.04.1, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 6 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.1	4.15.0-1022.25~16.04.1
`linux-raspi2` Ubuntu:16.04:LTS	before 4.4.0-1107.115, plus listed versions 4.2.0-1013.194.2.0-1014.214.3.0-1006.64.4.0-1003.44.4.0-1004.5 Show 45 moreShow less 4.4.0-1009.104.4.0-1010.124.4.0-1010.134.4.0-1012.164.4.0-1016.224.4.0-1017.234.4.0-1019.254.4.0-1021.274.4.0-1023.294.4.0-1027.334.4.0-1029.364.4.0-1034.414.4.0-1038.454.4.0-1040.474.4.0-1042.494.4.0-1044.514.4.0-1046.534.4.0-1048.554.4.0-1050.574.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1055.624.4.0-1057.644.4.0-1059.674.4.0-1061.694.4.0-1065.734.4.0-1067.754.4.0-1069.774.4.0-1070.784.4.0-1071.794.4.0-1074.824.4.0-1075.834.4.0-1076.844.4.0-1077.854.4.0-1079.874.4.0-1080.884.4.0-1082.904.4.0-1085.934.4.0-1086.944.4.0-1087.954.4.0-1089.974.4.0-1090.984.4.0-1091.994.4.0-1092.100	4.4.0-1107.115
`linux-snapdragon` Ubuntu:16.04:LTS	before 4.4.0-1111.116, plus listed versions 4.4.0-1012.124.4.0-1013.144.4.0-1013.154.4.0-1015.184.4.0-1019.22 Show 45 moreShow less 4.4.0-1020.234.4.0-1022.254.4.0-1024.274.4.0-1026.294.4.0-1030.334.4.0-1032.364.4.0-1035.394.4.0-1039.434.4.0-1042.464.4.0-1044.484.4.0-1046.504.4.0-1047.514.4.0-1048.524.4.0-1050.544.4.0-1051.554.4.0-1053.574.4.0-1054.584.4.0-1055.594.4.0-1057.614.4.0-1058.624.4.0-1059.634.4.0-1061.664.4.0-1063.684.4.0-1067.724.4.0-1069.744.4.0-1071.764.4.0-1072.774.4.0-1073.784.4.0-1076.814.4.0-1077.824.4.0-1078.834.4.0-1079.844.4.0-1081.864.4.0-1082.874.4.0-1084.894.4.0-1087.924.4.0-1088.934.4.0-1090.954.4.0-1092.974.4.0-1093.984.4.0-1094.994.4.0-1095.1004.4.0-1096.1014.4.0-1098.1034.4.0-1099.104	4.4.0-1111.116
`linux-fips` Ubuntu:Pro:FIPS-updates:16.04:LTS	before 4.4.0-1008.10, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.6	4.4.0-1008.10
`linux` Ubuntu:18.04:LTS	before 4.15.0-60.67, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 29 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.64	4.15.0-60.67
`linux-aws` Ubuntu:18.04:LTS	before 4.15.0-1047.49, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 24 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.47	4.15.0-1047.49
`linux-azure` Ubuntu:18.04:LTS	before 5.0.0-1014.14~18.04.1, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 25 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.1	5.0.0-1014.14~18.04.1
`linux-gcp` Ubuntu:18.04:LTS	before 4.15.0-1042.45, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 22 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.42	4.15.0-1042.45
`linux-gke-4.15` Ubuntu:18.04:LTS	before 4.15.0-1041.43, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.42	4.15.0-1041.43
`linux-hwe` Ubuntu:18.04:LTS	before 5.0.0-23.24~18.04.1, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 6 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.1	5.0.0-23.24~18.04.1
`linux-kvm` Ubuntu:18.04:LTS	before 4.15.0-1043.43, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 23 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.42	4.15.0-1043.43
`linux-oem` Ubuntu:18.04:LTS	before 4.15.0-1056.65, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 19 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.57	4.15.0-1056.65
`linux-oracle` Ubuntu:18.04:LTS	before 4.15.0-1022.25, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 6 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.23	4.15.0-1022.25
`linux-raspi2` Ubuntu:18.04:LTS	before 4.15.0-1044.47, plus listed versions 4.13.0-1005.54.13.0-1006.64.13.0-1008.84.15.0-1006.74.15.0-1009.10 Show 25 moreShow less 4.15.0-1010.114.15.0-1011.124.15.0-1012.134.15.0-1013.144.15.0-1017.184.15.0-1018.194.15.0-1020.224.15.0-1021.234.15.0-1022.244.15.0-1024.264.15.0-1026.284.15.0-1027.294.15.0-1028.304.15.0-1029.314.15.0-1030.324.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1038.404.15.0-1040.434.15.0-1041.444.15.0-1043.46	4.15.0-1044.47
`linux-snapdragon` Ubuntu:18.04:LTS	before 4.15.0-1062.69, plus listed versions 4.4.0-1077.824.4.0-1078.834.4.0-1079.844.4.0-1081.864.15.0-1053.57 Show 5 moreShow less 4.15.0-1054.584.15.0-1055.594.15.0-1057.624.15.0-1058.644.15.0-1060.66	4.15.0-1062.69
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2018.18, plus listed versions 4.15.0-2000.4	4.15.0-2018.18
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2006.7, plus listed versions 4.15.0-1002.2	4.15.0-2006.7
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1001.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-intel-iot-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1073.75	None known
`linux-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1032.35	None known
`linux-riscv` Ubuntu:22.04:LTS	All versions, plus listed versions 5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4 Show 18 moreShow less 5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32	None known
`linux-raspi-realtime` Ubuntu:24.04:LTS	All versions, plus listed versions 6.8.0-2019.20	None known
`kernel-debug` openSUSE:Leap 15.1	before 4.12.14-lp151.28.25.1	4.12.14-lp151.28.25.1
`kernel-default` openSUSE:Leap 15.1	before 4.12.14-lp151.28.25.1	4.12.14-lp151.28.25.1
`kernel-docs` openSUSE:Leap 15.1	before 4.12.14-lp151.28.25.1	4.12.14-lp151.28.25.1
`kernel-kvmsmall` openSUSE:Leap 15.1	before 4.12.14-lp151.28.25.1	4.12.14-lp151.28.25.1
`kernel-obs-build` openSUSE:Leap 15.1	before 4.12.14-lp151.28.25.1	4.12.14-lp151.28.25.1
`kernel-obs-qa` openSUSE:Leap 15.1	before 4.12.14-lp151.28.25.1	4.12.14-lp151.28.25.1
`kernel-source` openSUSE:Leap 15.1	before 4.12.14-lp151.28.25.1	4.12.14-lp151.28.25.1
`kernel-syms` openSUSE:Leap 15.1	before 4.12.14-lp151.28.25.1	4.12.14-lp151.28.25.1
`kernel-vanilla` openSUSE:Leap 15.1	before 4.12.14-lp151.28.25.1	4.12.14-lp151.28.25.1
`kernel-debug` openSUSE:Leap 15.0	before 4.12.14-lp150.12.82.1	4.12.14-lp150.12.82.1
`kernel-default` openSUSE:Leap 15.0	before 4.12.14-lp150.12.82.1	4.12.14-lp150.12.82.1
`kernel-docs` openSUSE:Leap 15.0	before 4.12.14-lp150.12.82.1	4.12.14-lp150.12.82.1
`kernel-kvmsmall` openSUSE:Leap 15.0	before 4.12.14-lp150.12.82.1	4.12.14-lp150.12.82.1
`kernel-obs-build` openSUSE:Leap 15.0	before 4.12.14-lp150.12.82.1	4.12.14-lp150.12.82.1
`kernel-obs-qa` openSUSE:Leap 15.0	before 4.12.14-lp150.12.82.1	4.12.14-lp150.12.82.1
`kernel-source` openSUSE:Leap 15.0	before 4.12.14-lp150.12.82.1	4.12.14-lp150.12.82.1
`kernel-syms` openSUSE:Leap 15.0	before 4.12.14-lp150.12.82.1	4.12.14-lp150.12.82.1
`kernel-vanilla` openSUSE:Leap 15.0	before 4.12.14-lp150.12.82.1	4.12.14-lp150.12.82.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-16995 is a high vulnerability (CVSS 7.5) in Linux Kernel, published September 30, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.53%, the 89th percentile. Fixed in linux 4.19.37-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 84 versions, 386 references and the rest of 13 source descriptions. The JSON record has them.