Every CVE Search/ Get API key

CVE-2019-19528

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious...

6.1 MediumFix available

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka CID-edc4746f253d.

Attack profile

How easy it is to exploit

Attack vector
Physical
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
High

Exploit likelihood

0.49%Down 0.8 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.1

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka CID-edc4746f253d.

Record
CVE-2019-19528
CVSS 3.1
6.1 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS 2.0
5.6 MediumAV:L/AC:L/Au:N/C:P/I:N/A:C
Weakness
CWE-416
Updated
2026-11-02
CVE List No score

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka CID-edc4746f253d.

Record
CVE-2019-19528
Updated
2026-11-02
EUVDEUVD-2019-9146 No score

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka CID-edc4746f253d.

Record
EUVD-2019-9146
Updated
2026-11-03
GitHub AdvisoriesGHSA-5869-5hjv-gvqp No score

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious...

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka CID-edc4746f253d.

Record
GHSA-5869-5hjv-gvqp
Updated
2026-11-02
OSV 6.1

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka CID-edc4746f253d.

Record
CVE-2019-19528
CVSS 3.1
6.1 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2019-19528 6.1

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka CID-edc4746f253d.

Record
DEBIAN-CVE-2019-19528
CVSS 3.1
6.1 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
Show 15 moreShow less
OSVRHSA-2021:1578 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2021:1578
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:1739 7.8

Red Hat Security Advisory: kernel-rt security and bug fix update

Record
RHSA-2021:1739
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-19528 6.1

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka CID-edc4746f253d.

Record
UBUNTU-CVE-2019-19528
CVSS 3.1
6.1 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-06
OSVALSA-2021:1578 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Integer overflow in Intel(R) Graphics Drivers (CVE-2020-12362)

  • kernel: memory leak in sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c (CVE-2019-18811)

  • kernel: use-after-free caused by a malicious USB device in the drivers/usb/misc/adutux.c driver (CVE-2019-19523)

  • kernel: use-after-free bug caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver (CVE-2019-19528)

  • kernel: possible out of bounds write in kbd_keycode of keyboard.c (CVE-2020-0431)

  • kernel: DoS by corrupting mountpoint reference counter (CVE-2020-12114)

  • kernel: use-after-free in usb_sg_cancel function in drivers/usb/core/message.c (CVE-2020-12464)

  • kernel: buffer uses out of index in ext3/4 filesystem (CVE-2020-14314)

  • kernel: Use After Free vulnerability in cgroup BPF component (CVE-2020-14356)

  • kernel: NULL pointer dereference in serial8250_isa_init_ports function in drivers/tty/serial/8250/8250_core.c (CVE-2020-15437)

  • kernel: umask not applied on filesystem without ACL support (CVE-2020-24394)

  • kernel: TOCTOU mismatch in the NFS client code (CVE-2020-25212)

  • kernel: incomplete permission checking for access to rbd devices (CVE-2020-25284)

  • kernel: race condition between hugetlb sysctl handlers in mm/hugetlb.c (CVE-2020-25285)

  • kernel: improper input validation in ppp_cp_parse_cr function leads to memory corruption and read overflow (CVE-2020-25643)

  • kernel: perf_event_parse_addr_filter memory (CVE-2020-25704)

  • kernel: use-after-free in kernel midi subsystem (CVE-2020-27786)

  • kernel: child process is able to access parent mm through hfi dev file handle (CVE-2020-27835)

  • kernel: slab-out-of-bounds read in fbcon (CVE-2020-28974)

  • kernel: fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent (CVE-2020-35508)

  • kernel: fuse: fuse_do_getattr() calls make_bad_inode() in inappropriate situations (CVE-2020-36322)

  • kernel: use after free in tun_get_user of tun.c could lead to local escalation of privilege (CVE-2021-0342)

  • kernel: NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs in drivers/media/usb/gspca/ov519.c (CVE-2020-11608)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2021:1578
Updated
2026-11-02
OSVopenSUSE-SU-2019:2675-1 No score

Security update for the Linux Kernel

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2019-15211: There was a use-after-free caused by a malicious USB device in drivers/media/v4l2-core/v4l2-dev.c (bnc#1146519).
  • CVE-2019-15213: There was a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver (bnc#1146544).
  • CVE-2019-19531: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver, aka CID-fc05481b2fca (bnc#1158427 1158445).
  • CVE-2019-19543: There is a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c (bnc#1158427).
  • CVE-2019-19525: There is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver, aka CID-7fd25e6fc035 (bnc#1158417).
  • CVE-2019-19530: There is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef (bnc#1158410).
  • CVE-2019-19536: There is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver, aka CID-ead16e53c2f0 (bnc#1158394).
  • CVE-2019-19524: There is a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver, aka CID-fa3a5a1880c9 (bnc#1158413).
  • CVE-2019-19528: There is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka CID-edc4746f253d (bnc#1158407).
  • CVE-2019-19534: There is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver, aka CID-f7a1337f0d29 (bnc#1158398).
  • CVE-2019-19529: There is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver, aka CID-4d6636498c41 (bnc#1158381).
  • CVE-2019-14901: A heap overflow flaw was found in the Marvell WiFi chip driver. The vulnerability allowed a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system (bnc#1157042).
  • CVE-2019-14895: A heap-based buffer overflow was discovered in the Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allowed the remote device to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1157158).
  • CVE-2019-18660: The Linux kernel on powerpc allowed Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c (bnc#1157038).
  • CVE-2019-18683: An issue was discovered in drivers/media/platform/vivid, which was exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free (bnc#1155897).
  • CVE-2019-18809: A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c allowed attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559 (bnc#1156258).
  • CVE-2019-19046: A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c was fixed (bnc#1157304).
  • CVE-2019-19078: A…
Record
openSUSE-SU-2019:2675-1
Updated
2026-11-02
OSVSUSE-SU-2019:3289-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel-azure was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2019-19531: Fixed a use-after-free due to a malicious USB device in the drivers/usb/misc/yurex.c driver, aka CID-fc05481b2fca (bsc#1158445).
  • CVE-2019-19543: Fixed a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c (bsc#1158427).
  • CVE-2019-19525: Fixed a use-after-free due to a malicious USB device in the drivers/net/ieee802154/atusb.c driver, aka CID-7fd25e6fc035 (bsc#1158417).
  • CVE-2019-19530: Fixed a use-after-free due to a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef (bsc#1158410).
  • CVE-2019-19536: Fixed a potential information leak due to a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver, aka CID-ead16e53c2f0 (bsc#1158394).
  • CVE-2019-19524: Fixed a use-after-free due to a malicious USB device in the drivers/input/ff-memless.c driver, aka CID-fa3a5a1880c9 (bsc#1158413).
  • CVE-2019-19528: Fixed a use-after-free due to a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka CID-edc4746f253d (bsc#1158407).
  • CVE-2019-19534: Fixed a potential information leak due to a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver, aka CID-f7a1337f0d29 (bsc#1158398).
  • CVE-2019-19529: Fixed a use-after-free due to a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver, aka CID-4d6636498c41 (bsc#1158381).
  • CVE-2019-14901: Fixed a heap overflow in Marvell WiFi chip driver which could have allowed a remote attacker to cause denial of service or execute arbitrary code (bsc#1157042).
  • CVE-2019-14895: Fixed a heap-based buffer overflow in Marvell WiFi chip driver which may occur when the station attempts a connection negotiation during the handling of the remote devices country settings leading to denial of service (bsc#1157158).
  • CVE-2019-18660: Fixed a potential information leak on powerpc because the Spectre-RSB mitigation was not in place for all applicable CPUs, aka CID-39e72bf96f58 (bsc#1157038).
  • CVE-2019-18683: Fixed a privilege escalation due to multiple race conditions (bsc#1155897).
  • CVE-2019-18809: Fixed a memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c aka CID-2289adbfa559 (bsc#1156258).
  • CVE-2019-19062: Fixed a memory leak in the crypto_report() function in crypto/crypto_user_base.c aka CID-ffdde5932042 (bsc#1157333).
  • CVE-2019-19057: Fixed two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c aka CID-d10dcb615c8e (bsc#1157193).
  • CVE-2019-19056: Fixed a memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c aka CID-db8fd2cde932 (bsc#1157197).
  • CVE-2019-19068: Fixed a memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c aka CID-a2cdd07488e6 (bsc#1157307).
  • CVE-2019-19063: Fixed two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c aka CID-3f9361695113 (bsc#1157298).
  • CVE-2019-19227: Fixed a potential null pointer dereference in the AppleTalk subsystem leadind to denial of service in net/appletalk/aarp.c and net/appletalk/ddp.c aka CID-9804501fa122 (bsc#1157678).
  • CVE-2019-19065: Fixed a memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c aka CID-34b3be18a04e (bsc#1157191).
  • CVE-2019-19077: Fixed a memory leak in the bnxt_re_create_srq() function in drivers/infiniband/hw/bnxt_re/ib_verbs.c aka CID-4a9d46a9fe14 (bsc#1157171).
  • CVE-2019-19052: Fixed a memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c aka CID-fb5be6a7b486 (bsc#1157324).
  • CVE-2019-19067: Fixed multiple memory leaks in acp_hw_init (bsc#1157180).
  • CVE-2019-19060: Fixed a memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c aka…
Record
SUSE-SU-2019:3289-1
Updated
2026-11-02
OSVSUSE-SU-2019:3316-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 kernel-azure was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2019-19051: There was a memory leak in the i2400m_op_rfkill_sw_toggle() function in drivers/net/wimax/i2400m/op-rfkill.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1159024).
  • CVE-2019-19338: There was an incomplete fix for Transaction Asynchronous Abort (TAA) (bnc#1158954).
  • CVE-2019-19332: There was an OOB memory write via kvm_dev_ioctl_get_cpuid (bnc#1158827).
  • CVE-2019-19537: There was a race condition bug that can be caused by a malicious USB device in the USB character device driver layer (bnc#1158904).
  • CVE-2019-19535: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver (bnc#1158903).
  • CVE-2019-19527: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver (bnc#1158900).
  • CVE-2019-19526: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver (bnc#1158893).
  • CVE-2019-19533: There was an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver (bnc#1158834).
  • CVE-2019-19532: There were multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers (bnc#1158824).
  • CVE-2019-19523: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79 (bnc#1158381 1158823 1158834).
  • CVE-2019-15213: There was a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver (bnc#1146544).
  • CVE-2019-19531: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1158445).
  • CVE-2019-19543: There was a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c (bnc#1158427).
  • CVE-2019-19525: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver (bnc#1158417).
  • CVE-2019-19530: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver (bnc#1158410).
  • CVE-2019-19536: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver (bnc#1158394).
  • CVE-2019-19524: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver (bnc#1158413).
  • CVE-2019-19528: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver (bnc#1158407).
  • CVE-2019-19534: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver (bnc#1158398).
  • CVE-2019-19529: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver (bnc#1158381).
  • CVE-2019-14901: A heap overflow flaw was found in the Linux kernel in Marvell WiFi chip driver. The vulnerability allowed a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system (bnc#1157042).
  • CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could have allowed the remote device to cause a denial of service (system crash) or possibly…
Record
SUSE-SU-2019:3316-1
Updated
2026-11-02
OSVSUSE-SU-2019:3317-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2019-19531: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1158445).
  • CVE-2019-19543: There was a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c (bnc#1158427).
  • CVE-2019-19525: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver (bnc#1158417).
  • CVE-2019-19530: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver (bnc#1158410).
  • CVE-2019-19536: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver (bnc#1158394).
  • CVE-2019-19524: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver (bnc#1158413).
  • CVE-2019-19528: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver (bnc#1158407).
  • CVE-2019-19534: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver (bnc#1158398).
  • CVE-2019-19529: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver (bnc#1158381).
  • CVE-2019-14901: A heap overflow flaw was found in the Linux kernel in Marvell WiFi chip driver. The vulnerability allowed a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system (bnc#1157042).
  • CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could have allowed the remote device to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1157158).
  • CVE-2019-18660: The Linux kernel on powerpc allowed Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c (bnc#1157038).
  • CVE-2019-18683: An issue was discovered in drivers/media/platform/vivid in the Linux kernel. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free (bnc#1155897).
  • CVE-2019-18809: A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1156258).
  • CVE-2019-19046: A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure (bnc#1157304).
  • CVE-2019-19078: A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157032).
  • CVE-2019-19062: A memory leak in the crypto_report() function in…
Record
SUSE-SU-2019:3317-1
Updated
2026-11-02
OSVSUSE-SU-2019:3372-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2019-15213: An issue was discovered in the Linux kernel, there was a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver (bnc#1146544).
  • CVE-2019-19531: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1158445).
  • CVE-2019-19543: There was a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c (bnc#1158427).
  • CVE-2019-19525: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver (bnc#1158417).
  • CVE-2019-19530: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver (bnc#1158410).
  • CVE-2019-19536: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver (bnc#1158394).
  • CVE-2019-19524: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver (bnc#1158413).
  • CVE-2019-19528: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver (bnc#1158407).
  • CVE-2019-19534: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver (bnc#1158398).
  • CVE-2019-19529: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver (bnc#1158381).
  • CVE-2019-14901: A heap overflow flaw was found in the Linux kernel in Marvell WiFi chip driver. The vulnerability allowed a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system (bnc#1157042).
  • CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could have allowed the remote device to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1157158).
  • CVE-2019-18660: The Linux kernel on powerpc allowed Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c (bnc#1157038).
  • CVE-2019-18683: An issue was discovered in drivers/media/platform/vivid in the Linux kernel. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free (bnc#1155897).
  • CVE-2019-18809: A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1156258).
  • CVE-2019-19046: A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure (bnc#1157304).
  • CVE-2019-19078: A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux…
Record
SUSE-SU-2019:3372-1
Updated
2026-11-02
OSVSUSE-SU-2019:3381-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2019-19767: Fixed ext4_expand_extra_isize mishandles, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c (bnc#1159297).
  • CVE-2019-18808: Fixed a memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c allowed attackers to cause a denial of service (memory consumption) (bnc#1156259).
  • CVE-2019-19066: Fixed memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c that allowed attackers to cause a denial of service (memory consumption) by triggering bfa_port_get_stats() failures (bnc#1157303).
  • CVE-2019-19051: Fixed memory leak in the i2400m_op_rfkill_sw_toggle() function in drivers/net/wimax/i2400m/op-rfkill.c that allowed attackers to cause a denial of service (memory consumption) (bnc#1159024).
  • CVE-2019-19338: There was an incomplete fix for Transaction Asynchronous Abort (TAA) (bsc#1158954).
  • CVE-2019-19332: There was an OOB memory write via kvm_dev_ioctl_get_cpuid (bsc#1158827).
  • CVE-2019-19537: There was a race condition bug that could have been caused by a malicious USB device in the USB character device driver layer (bnc#1158904).
  • CVE-2019-19535: There was an info-leak bug that could have been caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver (bnc#1158903).
  • CVE-2019-19527: There was a use-after-free bug that could have been caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver (bnc#1158900).
  • CVE-2019-19526: There was a use-after-free bug that could have been caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver (bnc#1158893).
  • CVE-2019-19533: There was an info-leak bug that could have been caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver (bnc#1158834).
  • CVE-2019-19532: There were multiple out-of-bounds write bugs that could have been caused by a malicious USB device in the Linux kernel HID drivers (bnc#1158824).
  • CVE-2019-19523: There was a use-after-free bug that could have been caused by a malicious USB device in the drivers/usb/misc/adutux.c driver (bnc#1158823).
  • CVE-2019-15213: An issue was discovered in the Linux kernel, there was a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver (bnc#1146544).
  • CVE-2019-19531: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1158445).
  • CVE-2019-19543: There was a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c (bnc#1158427).
  • CVE-2019-19525: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver (bnc#1158417).
  • CVE-2019-19530: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver (bnc#1158410).
  • CVE-2019-19536: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver (bnc#1158394).
  • CVE-2019-19524: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver (bnc#1158413).
  • CVE-2019-19528: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver (bnc#1158407).
  • CVE-2019-19534: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver (bnc#1158398).
  • CVE-2019-19529: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver (bnc#1158381).
  • CVE-2019-14901: A heap overflow flaw was found in the Linux kernel in Marvell WiFi chip driver. The vulnerability allowed a remote…
Record
SUSE-SU-2019:3381-1
Updated
2026-11-02
OSVSUSE-SU-2019:3389-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2019-16746: There was an issue in net/wireless/nl80211.c where the kernel did not check the length of variable elements in a beacon head, leading to a buffer overflow (bnc#1152107).
  • CVE-2019-19066: Fixed memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c that allowed attackers to cause a denial of service (memory consumption) by triggering bfa_port_get_stats() failures (bnc#1157303).
  • CVE-2019-19051: Fixed memory leak in the i2400m_op_rfkill_sw_toggle() function in drivers/net/wimax/i2400m/op-rfkill.c that allowed attackers to cause a denial of service (memory consumption) (bnc#1159024).
  • CVE-2019-19338: There was an incomplete fix for Transaction Asynchronous Abort (TAA) (bsc#1158954).
  • CVE-2019-19332: There was an OOB memory write via kvm_dev_ioctl_get_cpuid (bsc#1158827).
  • CVE-2019-19537: There was a race condition bug that could have been caused by a malicious USB device in the USB character device driver layer (bnc#1158904).
  • CVE-2019-19535: There was an info-leak bug that could have been caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver (bnc#1158903).
  • CVE-2019-19527: There was a use-after-free bug that could have been caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver (bnc#1158900).
  • CVE-2019-19526: There was a use-after-free bug that could have been caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver (bnc#1158893).
  • CVE-2019-19533: There was an info-leak bug that could have been caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver (bnc#1158834).
  • CVE-2019-19532: There were multiple out-of-bounds write bugs that could have been caused by a malicious USB device in the Linux kernel HID drivers (bnc#1158824).
  • CVE-2019-19523: There was a use-after-free bug that could have been caused by a malicious USB device in the drivers/usb/misc/adutux.c driver (bnc#1158823).
  • CVE-2019-15213: An issue was discovered in the Linux kernel, there was a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver (bnc#1146544).
  • CVE-2019-19531: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1158445).
  • CVE-2019-19543: There was a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c (bnc#1158427).
  • CVE-2019-19525: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver (bnc#1158417).
  • CVE-2019-19530: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver (bnc#1158410).
  • CVE-2019-19536: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver (bnc#1158394).
  • CVE-2019-19524: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver (bnc#1158413).
  • CVE-2019-19528: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver (bnc#1158407).
  • CVE-2019-19534: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver (bnc#1158398).
  • CVE-2019-19529: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver (bnc#1158381).
  • CVE-2019-14901: A heap overflow flaw was found in the Linux kernel in Marvell WiFi chip driver. The vulnerability allowed a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will…
Record
SUSE-SU-2019:3389-1
Updated
2026-11-02
OSVSUSE-SU-2020:0093-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2019-20095: mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c had some error-handling cases that did not free allocated hostcmd memory. This will cause a memory leak and denial of service (bnc#1159909).
  • CVE-2019-20054: Fixed a a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links (bnc#1159910).
  • CVE-2019-20096: Fixed a memory leak in __feat_register_sp() in net/dccp/feat.c, which may cause denial of service (bnc#1159908).
  • CVE-2019-19966: Fixed a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service (bnc#1159841).
  • CVE-2019-19447: Mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c (bnc#1158819).
  • CVE-2019-19319: A setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call (bnc#1158021).
  • CVE-2019-19767: Fixed mishandling of ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c (bnc#1159297).
  • CVE-2019-18808: A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c allowed attackers to cause a denial of service (memory consumption) (bnc#1156259).
  • CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c where the length of variable elements in a beacon head were not checked, leading to a buffer overflow (bnc#1152107).
  • CVE-2019-19066: A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c allowed attackers to cause a denial of service (memory consumption) by triggering bfa_port_get_stats() failures (bnc#1157303).
  • CVE-2019-19051: There was a memory leak in the i2400m_op_rfkill_sw_toggle() function in drivers/net/wimax/i2400m/op-rfkill.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1159024).
  • CVE-2019-19338: There was an incomplete fix for Transaction Asynchronous Abort (TAA) (bnc#1158954).
  • CVE-2019-19332: There was an OOB memory write via kvm_dev_ioctl_get_cpuid (bnc#1158827).
  • CVE-2019-19537: There was a race condition bug that can be caused by a malicious USB device in the USB character device driver layer (bnc#1158904).
  • CVE-2019-19535: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver (bnc#1158903).
  • CVE-2019-19527: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver (bnc#1158900).
  • CVE-2019-19526: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver (bnc#1158893).
  • CVE-2019-19533: There was an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver (bnc#1158834).
  • CVE-2019-19532: There were multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers (bnc#1158824).
  • CVE-2019-19523: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79 (bnc#1158381 1158823 1158834).
  • CVE-2019-15213: There was a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver (bnc#1146544).
  • CVE-2019-19531: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1158445).
  • CVE-2019-19543: There was a use-after-free in serial_ir_init_module() in…
Record
SUSE-SU-2020:0093-1
Updated
2026-11-02
OSVSUSE-SU-2020:0584-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-2732: Fixed an issue affecting Intel CPUs where an L2 guest may trick the L0 hypervisor into accessing sensitive L1 resources (bsc#1163971).
  • CVE-2019-19338: There was an incomplete fix for an issue with Transactional Synchronisation Extensions in the KVM code (bsc#1158954).
  • CVE-2019-14615: An information disclosure vulnerability existed due to insufficient control flow in certain data structures for some Intel(R) Processors (bnc#1160195).
  • CVE-2019-14896: A heap overflow was found in the add_ie_rates() function of the Marvell Wifi Driver (bsc#1157157).
  • CVE-2019-14897: A stack overflow was found in the lbs_ibss_join_existing() function of the Marvell Wifi Driver (bsc#1157155).
  • CVE-2019-15213: A use-after-free bug caused by a malicious USB device was found in drivers/media/usb/dvb-usb/dvb-usb-init.c (bsc#1146544).
  • CVE-2019-16994: A memory leak existed in sit_init_net() in net/ipv6/sit.c which might have caused denial of service, aka CID-07f12b26e21a (bnc#1161523).
  • CVE-2019-18808: A memory leak in drivers/crypto/ccp/ccp-ops.c allowed attackers to cause a denial of service (memory consumption), aka CID-128c66429247 (bnc#1156259).
  • CVE-2019-19036: An issue discovered in btrfs_root_node in fs/btrfs/ctree.c allowed a NULL pointer dereference because rcu_dereference(root->node) can be zero (bnc#1157692).
  • CVE-2019-19045: A memory leak in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c allowed attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7 (bnc#1161522).
  • CVE-2019-19051: A memory leak in drivers/net/wimax/i2400m/op-rfkill.c allowed attackers to cause a denial of service (memory consumption), aka CID-6f3ef5c25cc7 (bnc#1159024).
  • CVE-2019-19054: A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c allowed attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b (bnc#1161518).
  • CVE-2019-19066: A memory leak in drivers/scsi/bfa/bfad_attr.c allowed attackers to cause a denial of service (memory consumption), aka CID-0e62395da2bd (bnc#1157303).
  • CVE-2019-19318: Mounting a crafted btrfs image twice could have caused a use-after-free (bnc#1158026).
  • CVE-2019-19319: A slab-out-of-bounds write access could have occured when setxattr was called after mounting of a specially crafted ext4 image (bnc#1158021).
  • CVE-2019-19332: An out-of-bounds memory write issue was found in the way the KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could have used this flaw to crash the system (bnc#1158827).
  • CVE-2019-19447: Mounting a crafted ext4 filesystem image, performing some operations, and unmounting could have led to a use-after-free in fs/ext4/super.c (bnc#1158819).
  • CVE-2019-19523: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79 (bsc#1158823).
  • CVE-2019-19524: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver, aka CID-fa3a5a1880c9 (bsc#1158413).
  • CVE-2019-19525: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver, aka CID-7fd25e6fc035 (bsc#1158417).
  • CVE-2019-19526: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver, aka CID-6af3aa57a098 (bsc#1158893).
  • CVE-2019-19527: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e (bsc#1158900).
  • CVE-2019-19528: There was a use-after-free bug that can be caused by a…
Record
SUSE-SU-2020:0584-1
Updated
2026-11-02
OSVSUSE-SU-2020:0599-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 real-time kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2019-14615: An information disclosure vulnerability existed due to insufficient control flow in certain data structures for some Intel(R) Processors (bnc#1160195).
  • CVE-2019-14895: A heap-based buffer overflow was discovered in the Marvell WiFi driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service or possibly execute arbitrary code (bnc#1157158).
  • CVE-2019-14896: A heap overflow was found in the add_ie_rates() function of the Marvell Wifi Driver (bsc#1157157).
  • CVE-2019-14897: A stack overflow was found in the lbs_ibss_join_existing() function of the Marvell Wifi Driver (bsc#1157155).
  • CVE-2019-14901: A heap overflow flaw was found in the Marvell WiFi driver. The vulnerability allowed a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code (bnc#1157042).
  • CVE-2019-15213: A use-after-free bug caused by a malicious USB device was found in drivers/media/usb/dvb-usb/dvb-usb-init.c (bsc#1146544).
  • CVE-2019-16994: A memory leak existed in sit_init_net() in net/ipv6/sit.c which might have caused denial of service, aka CID-07f12b26e21a (bnc#1161523).
  • CVE-2019-18660: An information disclosure bug occured because the Spectre-RSB mitigation were not in place for all applicable CPUs, aka CID-39e72bf96f58 (bnc#1157038).
  • CVE-2019-18683: Multiple race conditions were discovered in drivers/media/platform/vivid. It was exploitable for privilege escalation if local users had access to /dev/video0, but only if the driver happened to be loaded. At least one of these race conditions led to a use-after-free (bnc#1155897).
  • CVE-2019-18808: A memory leak in drivers/crypto/ccp/ccp-ops.c allowed attackers to cause a denial of service (memory consumption), aka CID-128c66429247 (bnc#1156259).
  • CVE-2019-18809: A memory leak in drivers/media/usb/dvb-usb/af9005.c allowed attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559 (bnc#1156258).
  • CVE-2019-19036: An issue discovered in btrfs_root_node in fs/btrfs/ctree.c allowed a NULL pointer dereference because rcu_dereference(root->node) can be zero (bnc#1157692).
  • CVE-2019-19045: A memory leak in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c allowed attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7 (bnc#1161522).
  • CVE-2019-19051: A memory leak in drivers/net/wimax/i2400m/op-rfkill.c allowed attackers to cause a denial of service (memory consumption), aka CID-6f3ef5c25cc7 (bnc#1159024).
  • CVE-2019-19052: A memory leak in drivers/net/can/usb/gs_usb.c allowed attackers to cause a denial of service (memory consumption), aka CID-fb5be6a7b486 (bnc#1157324).
  • CVE-2019-19054: A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c allowed attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b (bnc#1161518).
  • CVE-2019-19056: A memory leak in drivers/net/wireless/marvell/mwifiex/pcie.c allowed attackers to cause a denial of service (memory consumption), aka CID-db8fd2cde932 (bnc#1157197).
  • CVE-2019-19057: Two memory leaks in drivers/net/wireless/marvell/mwifiex/pcie.c allowed attackers to cause a denial of service (memory consumption), aka CID-d10dcb615c8e (bnc#1157193 bsc#1157197).
  • CVE-2019-19058: A memory leak in drivers/net/wireless/intel/iwlwifi/fw/dbg.c allowed attackers to cause a denial of service (memory consumption), aka CID-b4b814fec1a5 (bnc#1157145).
  • CVE-2019-19060: A memory leak in drivers/iio/imu/adis_buffer.c allowed attackers to cause a denial of service (memory consumption), aka CID-ab612b1daf41 (bnc#1157178).
  • CVE-2019-19062: A memory…
Record
SUSE-SU-2020:0599-1
Updated
2026-11-02
OSVSUSE-SU-2020:0613-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 real-time kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2019-14615: An information disclosure vulnerability existed due to insufficient control flow in certain data structures for some Intel(R) Processors (bnc#1160195).
  • CVE-2019-14895: A heap-based buffer overflow was discovered in the Marvell WiFi driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service or possibly execute arbitrary code (bnc#1157158).
  • CVE-2019-14896: A heap overflow was found in the add_ie_rates() function of the Marvell Wifi Driver (bsc#1157157).
  • CVE-2019-14897: A stack overflow was found in the lbs_ibss_join_existing() function of the Marvell Wifi Driver (bsc#1157155).
  • CVE-2019-14901: A heap overflow flaw was found in the Marvell WiFi driver. The vulnerability allowed a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code (bnc#1157042).
  • CVE-2019-15213: A use-after-free bug caused by a malicious USB device was found in drivers/media/usb/dvb-usb/dvb-usb-init.c (bsc#1146544).
  • CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c. The check for the length of variable elements in a beacon head was insufficient, leading to a buffer overflow (bnc#1152107).
  • CVE-2019-16994: A memory leak existed in sit_init_net() in net/ipv6/sit.c which might have caused denial of service, aka CID-07f12b26e21a (bnc#1161523).
  • CVE-2019-18660: An information disclosure bug occured because the Spectre-RSB mitigation were not in place for all applicable CPUs, aka CID-39e72bf96f58 (bnc#1157038).
  • CVE-2019-18683: Multiple race conditions were discovered in drivers/media/platform/vivid. It was exploitable for privilege escalation if local users had access to /dev/video0, but only if the driver happened to be loaded. At least one of these race conditions led to a use-after-free (bnc#1155897).
  • CVE-2019-18808: A memory leak in drivers/crypto/ccp/ccp-ops.c allowed attackers to cause a denial of service (memory consumption), aka CID-128c66429247 (bnc#1156259).
  • CVE-2019-18809: A memory leak in drivers/media/usb/dvb-usb/af9005.c allowed attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559 (bnc#1156258).
  • CVE-2019-19036: An issue discovered in btrfs_root_node in fs/btrfs/ctree.c allowed a NULL pointer dereference because rcu_dereference(root->node) can be zero (bnc#1157692).
  • CVE-2019-19045: A memory leak in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c allowed attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7 (bnc#1161522).
  • CVE-2019-19046: There was a memory leak in __ipmi_bmc_register (bsc#1157304).
  • CVE-2019-19049: There was an unlikely memory leak in unittest_data_add (bsc#1157173).
  • CVE-2019-19051: A memory leak in drivers/net/wimax/i2400m/op-rfkill.c allowed attackers to cause a denial of service (memory consumption), aka CID-6f3ef5c25cc7 (bnc#1159024).
  • CVE-2019-19052: A memory leak in drivers/net/can/usb/gs_usb.c allowed attackers to cause a denial of service (memory consumption), aka CID-fb5be6a7b486 (bnc#1157324).
  • CVE-2019-19054: A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c allowed attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b (bnc#1161518).
  • CVE-2019-19056: A memory leak in drivers/net/wireless/marvell/mwifiex/pcie.c allowed attackers to cause a denial of service (memory consumption), aka CID-db8fd2cde932 (bnc#1157197).
  • CVE-2019-19057: Two memory leaks in drivers/net/wireless/marvell/mwifiex/pcie.c allowed attackers to cause a denial of service (memory consumption), aka CID-d10dcb615c8e (bnc#1157193 bsc#1157197).
  • CVE-2019-19058:…
Record
SUSE-SU-2020:0613-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel-tools-libs-devel
AlmaLinux:8
From an advisory covering 26 CVEs
 before 4.18.0-305.el8
4.18.0-305.el8
linux
Debian:12
 before 5.3.7-1
5.3.7-1
linux
Debian:13
 before 5.3.7-1
5.3.7-1
linux
Debian:14
 before 5.3.7-1
5.3.7-1
bpftool
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
bpftool-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-abi-stablelists
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-debug
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
Show 196 moreShow less
Affected packages
PackageAffectedFixed
kernel-debug-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-debug-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-debug-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-debug-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-doc
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-tools
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-tools-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-zfcpdump
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-zfcpdump-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-zfcpdump-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-zfcpdump-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-zfcpdump-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
python3-perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
python3-perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
bpftool-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::crb
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::crb
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::crb
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-tools-libs-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
python3-perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 31 CVEs
 before 0:4.18.0-305.el8
0:4.18.0-305.el8
kernel-rt
Red Hat:enterprise_linux:8::nfv
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-debug
Red Hat:enterprise_linux:8::nfv
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-debug-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-debug-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::nfv
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt
Red Hat:enterprise_linux:8::realtime
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-debug
Red Hat:enterprise_linux:8::realtime
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-debug-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::realtime
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::realtime
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::realtime
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::realtime
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-devel
Red Hat:enterprise_linux:8::realtime
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-modules
Red Hat:enterprise_linux:8::realtime
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::realtime
From an advisory covering 27 CVEs
 before 0:4.18.0-305.rt7.72.el8
0:4.18.0-305.rt7.72.el8
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15
From an advisory covering 34 CVEs
 before 4.12.14-5.47.1
4.12.14-5.47.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15
From an advisory covering 34 CVEs
 before 4.12.14-5.47.1
4.12.14-5.47.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15
From an advisory covering 34 CVEs
 before 4.12.14-5.47.1
4.12.14-5.47.1
kernel-azure
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 44 CVEs
 before 4.12.14-6.34.1
4.12.14-6.34.1
kernel-source-azure
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 44 CVEs
 before 4.12.14-6.34.1
4.12.14-6.34.1
kernel-syms-azure
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 44 CVEs
 before 4.12.14-6.34.1
4.12.14-6.34.1
kernel-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 44 CVEs
 before 4.12.14-6.34.1
4.12.14-6.34.1
kernel-source-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 44 CVEs
 before 4.12.14-6.34.1
4.12.14-6.34.1
kernel-syms-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 44 CVEs
 before 4.12.14-6.34.1
4.12.14-6.34.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 41 CVEs
 before 4.12.14-197.29.1
4.12.14-197.29.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 41 CVEs
 before 4.12.14-197.29.1
4.12.14-197.29.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 41 CVEs
 before 4.12.14-197.29.1
4.12.14-197.29.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 41 CVEs
 before 4.12.14-197.29.2
4.12.14-197.29.2
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 41 CVEs
 before 4.12.14-197.29.1
4.12.14-197.29.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 41 CVEs
 before 4.12.14-197.29.1
4.12.14-197.29.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 41 CVEs
 before 4.12.14-197.29.1
4.12.14-197.29.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP1
From an advisory covering 41 CVEs
 before 4.12.14-197.29.1
4.12.14-197.29.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP1
From an advisory covering 41 CVEs
 before 4.12.14-197.29.1
4.12.14-197.29.1
kernel-livepatch-SLE15-SP1_Update_8
SUSE:Linux Enterprise Live Patching 15 SP1
From an advisory covering 41 CVEs
 before 1-3.3.1
1-3.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP1
From an advisory covering 41 CVEs
 before 4.12.14-197.29.1
4.12.14-197.29.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP1
From an advisory covering 41 CVEs
 before 4.12.14-197.29.1
4.12.14-197.29.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
From an advisory covering 42 CVEs
 before 4.12.14-8.22.1
4.12.14-8.22.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
From an advisory covering 42 CVEs
 before 4.12.14-8.22.1
4.12.14-8.22.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
From an advisory covering 42 CVEs
 before 4.12.14-8.22.1
4.12.14-8.22.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 48 CVEs
 before 4.12.14-150.47.1
4.12.14-150.47.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 48 CVEs
 before 4.12.14-150.47.1
4.12.14-150.47.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 48 CVEs
 before 4.12.14-150.47.1
4.12.14-150.47.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15
From an advisory covering 48 CVEs
 before 4.12.14-150.47.1
4.12.14-150.47.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15
From an advisory covering 48 CVEs
 before 4.12.14-150.47.1
4.12.14-150.47.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15
From an advisory covering 48 CVEs
 before 4.12.14-150.47.1
4.12.14-150.47.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15
From an advisory covering 48 CVEs
 before 4.12.14-150.47.1
4.12.14-150.47.1
kernel-vanilla
SUSE:Linux Enterprise Module for Development Tools 15
From an advisory covering 48 CVEs
 before 4.12.14-150.47.1
4.12.14-150.47.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15
From an advisory covering 48 CVEs
 before 4.12.14-150.47.1
4.12.14-150.47.1
kernel-default
SUSE:Linux Enterprise Live Patching 15
From an advisory covering 48 CVEs
 before 4.12.14-150.47.1
4.12.14-150.47.1
kernel-livepatch-SLE15_Update_17
SUSE:Linux Enterprise Live Patching 15
From an advisory covering 48 CVEs
 before 1-1.3.2
1-1.3.2
kernel-default
SUSE:Linux Enterprise High Availability Extension 15
From an advisory covering 48 CVEs
 before 4.12.14-150.47.1
4.12.14-150.47.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15
From an advisory covering 48 CVEs
 before 4.12.14-150.47.1
4.12.14-150.47.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 12 SP5
From an advisory covering 24 CVEs
 before 4.12.14-122.12.1
4.12.14-122.12.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 24 CVEs
 before 4.12.14-122.12.1
4.12.14-122.12.1
kgraft-patch-SLE12-SP5_Update_2
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 24 CVEs
 before 1-8.5.1
1-8.5.1
kernel-docs
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 24 CVEs
 before 4.12.14-122.12.1
4.12.14-122.12.1
kernel-obs-build
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 24 CVEs
 before 4.12.14-122.12.1
4.12.14-122.12.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 24 CVEs
 before 4.12.14-122.12.1
4.12.14-122.12.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 24 CVEs
 before 4.12.14-122.12.1
4.12.14-122.12.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 24 CVEs
 before 4.12.14-122.12.1
4.12.14-122.12.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 24 CVEs
 before 4.12.14-122.12.1
4.12.14-122.12.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 24 CVEs
 before 4.12.14-122.12.1
4.12.14-122.12.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 24 CVEs
 before 4.12.14-122.12.1
4.12.14-122.12.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 12 SP5
From an advisory covering 24 CVEs
 before 4.12.14-122.12.1
4.12.14-122.12.1
kernel-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 80 CVEs
 before 4.12.14-16.7.1
4.12.14-16.7.1
kernel-source-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 80 CVEs
 before 4.12.14-16.7.1
4.12.14-16.7.1
kernel-syms-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 80 CVEs
 before 4.12.14-16.7.1
4.12.14-16.7.1
kernel-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 80 CVEs
 before 4.12.14-16.7.1
4.12.14-16.7.1
kernel-source-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 80 CVEs
 before 4.12.14-16.7.1
4.12.14-16.7.1
kernel-syms-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 80 CVEs
 before 4.12.14-16.7.1
4.12.14-16.7.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 12 SP4
From an advisory covering 43 CVEs
 before 4.12.14-95.48.1
4.12.14-95.48.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP4
From an advisory covering 43 CVEs
 before 4.12.14-95.48.1
4.12.14-95.48.1
kgraft-patch-SLE12-SP4_Update_12
SUSE:Linux Enterprise Live Patching 12 SP4
From an advisory covering 43 CVEs
 before 1-6.3.1
1-6.3.1
kernel-docs
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 43 CVEs
 before 4.12.14-95.48.1
4.12.14-95.48.1
kernel-obs-build
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 43 CVEs
 before 4.12.14-95.48.1
4.12.14-95.48.1
kernel-default
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 43 CVEs
 before 4.12.14-95.48.1
4.12.14-95.48.1
kernel-source
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 43 CVEs
 before 4.12.14-95.48.1
4.12.14-95.48.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 43 CVEs
 before 4.12.14-95.48.1
4.12.14-95.48.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 43 CVEs
 before 4.12.14-95.48.1
4.12.14-95.48.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 43 CVEs
 before 4.12.14-95.48.1
4.12.14-95.48.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 43 CVEs
 before 4.12.14-95.48.1
4.12.14-95.48.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 12 SP4
From an advisory covering 43 CVEs
 before 4.12.14-95.48.1
4.12.14-95.48.1
kernel-rt
SUSE:Linux Enterprise Real Time 12 SP4
From an advisory covering 60 CVEs
 before 4.12.14-8.12.1
4.12.14-8.12.1
kernel-rt_debug
SUSE:Linux Enterprise Real Time 12 SP4
From an advisory covering 60 CVEs
 before 4.12.14-8.12.1
4.12.14-8.12.1
kernel-source-rt
SUSE:Linux Enterprise Real Time 12 SP4
From an advisory covering 60 CVEs
 before 4.12.14-8.12.1
4.12.14-8.12.1
kernel-syms-rt
SUSE:Linux Enterprise Real Time 12 SP4
From an advisory covering 60 CVEs
 before 4.12.14-8.12.1
4.12.14-8.12.1
kernel-rt
SUSE:Real Time Module 15 SP1
From an advisory covering 69 CVEs
 before 4.12.14-14.17.1
4.12.14-14.17.1
kernel-rt_debug
SUSE:Real Time Module 15 SP1
From an advisory covering 69 CVEs
 before 4.12.14-14.17.1
4.12.14-14.17.1
kernel-source-rt
SUSE:Real Time Module 15 SP1
From an advisory covering 69 CVEs
 before 4.12.14-14.17.1
4.12.14-14.17.1
kernel-syms-rt
SUSE:Real Time Module 15 SP1
From an advisory covering 69 CVEs
 before 4.12.14-14.17.1
4.12.14-14.17.1
linux-aws
Ubuntu:Pro:14.04:LTS
 before 4.4.0-1058.62, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 32 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.60
4.4.0-1058.62
linux-azure
Ubuntu:Pro:14.04:LTS
 before 4.15.0-1064.69~14.04.1, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 20 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.1
4.15.0-1064.69~14.04.1
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 before 4.4.0-168.197~14.04.1, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
4.4.0-168.197~14.04.1
linux
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8
Show 45 moreShow less
3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70
 None known
linux
Ubuntu:16.04:LTS
 before 4.4.0-168.197, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
4.4.0-168.197
linux-aws
Ubuntu:16.04:LTS
 before 4.4.0-1098.109, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
4.4.0-1098.109
linux-aws-hwe
Ubuntu:16.04:LTS
 before 4.15.0-1056.58~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 13 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.1
4.15.0-1056.58~16.04.1
linux-azure
Ubuntu:16.04:LTS
 before 4.15.0-1064.69, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 43 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.68
4.15.0-1064.69
linux-gcp
Ubuntu:16.04:LTS
 before 4.15.0-1050.53, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 36 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.52
4.15.0-1050.53
linux-hwe
Ubuntu:16.04:LTS
 before 4.15.0-72.81~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-72.81~16.04.1
linux-kvm
Ubuntu:16.04:LTS
 before 4.4.0-1062.69, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 33 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.67
4.4.0-1062.69
linux-oracle
Ubuntu:16.04:LTS
 before 4.15.0-1030.33~16.04.1, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 12 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.1
4.15.0-1030.33~16.04.1
linux-raspi2
Ubuntu:16.04:LTS
 before 4.4.0-1125.134, plus listed versions
4.2.0-1013.194.2.0-1014.214.3.0-1006.64.4.0-1003.44.4.0-1004.5
Show 45 moreShow less
4.4.0-1009.104.4.0-1010.124.4.0-1010.134.4.0-1012.164.4.0-1016.224.4.0-1017.234.4.0-1019.254.4.0-1021.274.4.0-1023.294.4.0-1027.334.4.0-1029.364.4.0-1034.414.4.0-1038.454.4.0-1040.474.4.0-1042.494.4.0-1044.514.4.0-1046.534.4.0-1048.554.4.0-1050.574.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1055.624.4.0-1057.644.4.0-1059.674.4.0-1061.694.4.0-1065.734.4.0-1067.754.4.0-1069.774.4.0-1070.784.4.0-1071.794.4.0-1074.824.4.0-1075.834.4.0-1076.844.4.0-1077.854.4.0-1079.874.4.0-1080.884.4.0-1082.904.4.0-1085.934.4.0-1086.944.4.0-1087.954.4.0-1089.974.4.0-1090.984.4.0-1091.994.4.0-1092.100
4.4.0-1125.134
linux-snapdragon
Ubuntu:16.04:LTS
 before 4.4.0-1129.137, plus listed versions
4.4.0-1012.124.4.0-1013.144.4.0-1013.154.4.0-1015.184.4.0-1019.22
Show 45 moreShow less
4.4.0-1020.234.4.0-1022.254.4.0-1024.274.4.0-1026.294.4.0-1030.334.4.0-1032.364.4.0-1035.394.4.0-1039.434.4.0-1042.464.4.0-1044.484.4.0-1046.504.4.0-1047.514.4.0-1048.524.4.0-1050.544.4.0-1051.554.4.0-1053.574.4.0-1054.584.4.0-1055.594.4.0-1057.614.4.0-1058.624.4.0-1059.634.4.0-1061.664.4.0-1063.684.4.0-1067.724.4.0-1069.744.4.0-1071.764.4.0-1072.774.4.0-1073.784.4.0-1076.814.4.0-1077.824.4.0-1078.834.4.0-1079.844.4.0-1081.864.4.0-1082.874.4.0-1084.894.4.0-1087.924.4.0-1088.934.4.0-1090.954.4.0-1092.974.4.0-1093.984.4.0-1094.994.4.0-1095.1004.4.0-1096.1014.4.0-1098.1034.4.0-1099.104
4.4.0-1129.137
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 before 4.4.0-1025.30, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 9 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.28
4.4.0-1025.30
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux
Ubuntu:18.04:LTS
 before 4.15.0-72.81, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 36 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.79
4.15.0-72.81
linux-aws
Ubuntu:18.04:LTS
 before 4.15.0-1056.58, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 30 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.56
4.15.0-1056.58
linux-aws-5.0
Ubuntu:18.04:LTS
 before 5.0.0-1022.25~18.04.1, plus listed versions
5.0.0-1021.24~18.04.1
5.0.0-1022.25~18.04.1
linux-azure
Ubuntu:18.04:LTS
 before 5.0.0-1027.29~18.04.1, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 32 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.1
5.0.0-1027.29~18.04.1
linux-gcp
Ubuntu:18.04:LTS
 before 5.0.0-1026.27~18.04.1, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 27 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.1
5.0.0-1026.27~18.04.1
linux-gke-4.15
Ubuntu:18.04:LTS
 before 4.15.0-1049.52, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 8 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.51
4.15.0-1049.52
linux-gke-5.0
Ubuntu:18.04:LTS
 before 5.0.0-1026.27~18.04.2, plus listed versions
5.0.0-1011.11~18.04.15.0.0-1013.13~18.04.15.0.0-1015.15~18.04.15.0.0-1017.17~18.04.15.0.0-1020.20~18.04.15.0.0-1022.22~18.04.35.0.0-1023.23~18.04.25.0.0-1025.26~18.04.1
5.0.0-1026.27~18.04.2
linux-hwe
Ubuntu:18.04:LTS
 before 5.0.0-37.40~18.04.1, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 14 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.1
5.0.0-37.40~18.04.1
linux-kvm
Ubuntu:18.04:LTS
 before 4.15.0-1051.51, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 29 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.50
4.15.0-1051.51
linux-oem
Ubuntu:18.04:LTS
 before 4.15.0-1065.75, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 24 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.73
4.15.0-1065.75
linux-oem-osp1
Ubuntu:18.04:LTS
 before 5.0.0-1030.34, plus listed versions
5.0.0-1010.115.0.0-1012.135.0.0-1015.165.0.0-1018.205.0.0-1020.22
Show 5 moreShow less
5.0.0-1022.245.0.0-1024.275.0.0-1025.285.0.0-1027.315.0.0-1028.32
5.0.0-1030.34
linux-oracle
Ubuntu:18.04:LTS
 before 4.15.0-1030.33, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 12 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.32
4.15.0-1030.33
linux-oracle-5.0
Ubuntu:18.04:LTS
 before 5.0.0-1008.13~18.04.1, plus listed versions
5.0.0-1007.12~18.04.1
5.0.0-1008.13~18.04.1
linux-raspi2
Ubuntu:18.04:LTS
 before 4.15.0-1052.56, plus listed versions
4.13.0-1005.54.13.0-1006.64.13.0-1008.84.15.0-1006.74.15.0-1009.10
Show 31 moreShow less
4.15.0-1010.114.15.0-1011.124.15.0-1012.134.15.0-1013.144.15.0-1017.184.15.0-1018.194.15.0-1020.224.15.0-1021.234.15.0-1022.244.15.0-1024.264.15.0-1026.284.15.0-1027.294.15.0-1028.304.15.0-1029.314.15.0-1030.324.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1038.404.15.0-1040.434.15.0-1041.444.15.0-1043.464.15.0-1044.474.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1049.534.15.0-1050.54
4.15.0-1052.56
linux-snapdragon
Ubuntu:18.04:LTS
 before 4.15.0-1069.76, plus listed versions
4.4.0-1077.824.4.0-1078.834.4.0-1079.844.4.0-1081.864.15.0-1053.57
Show 10 moreShow less
4.15.0-1054.584.15.0-1055.594.15.0-1057.624.15.0-1058.644.15.0-1060.664.15.0-1062.694.15.0-1064.714.15.0-1065.724.15.0-1066.734.15.0-1067.74
4.15.0-1069.76
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1004.5~18.04.14.18.0-1005.6~18.04.14.18.0-1006.7~18.04.14.18.0-1007.8~18.04.14.18.0-1008.9~18.04.1
Show 7 moreShow less
4.18.0-1009.10~18.04.14.18.0-1011.12~18.04.14.18.0-1012.13~18.04.14.18.0-1013.14~18.04.14.18.0-1015.16~18.04.15.0.0-1011.11~18.04.15.0.0-1013.13~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2018.18, plus listed versions
4.15.0-2000.4
4.15.0-2018.18
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2006.7, plus listed versions
4.15.0-1002.2
4.15.0-2006.7
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-intel-iot-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1073.75
 None known
linux-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1032.35
 None known
linux-riscv
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4
Show 18 moreShow less
5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32
 None known
linux-raspi-realtime
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.8.0-2019.20
 None known
kernel-debug
openSUSE:Leap 15.1
From an advisory covering 38 CVEs
 before 4.12.14-lp151.28.36.1
4.12.14-lp151.28.36.1
kernel-default
openSUSE:Leap 15.1
From an advisory covering 38 CVEs
 before 4.12.14-lp151.28.36.1
4.12.14-lp151.28.36.1
kernel-docs
openSUSE:Leap 15.1
From an advisory covering 38 CVEs
 before 4.12.14-lp151.28.36.1
4.12.14-lp151.28.36.1
kernel-kvmsmall
openSUSE:Leap 15.1
From an advisory covering 38 CVEs
 before 4.12.14-lp151.28.36.1
4.12.14-lp151.28.36.1
kernel-obs-build
openSUSE:Leap 15.1
From an advisory covering 38 CVEs
 before 4.12.14-lp151.28.36.1
4.12.14-lp151.28.36.1
kernel-obs-qa
openSUSE:Leap 15.1
From an advisory covering 38 CVEs
 before 4.12.14-lp151.28.36.1
4.12.14-lp151.28.36.1
kernel-source
openSUSE:Leap 15.1
From an advisory covering 38 CVEs
 before 4.12.14-lp151.28.36.1
4.12.14-lp151.28.36.1
kernel-syms
openSUSE:Leap 15.1
From an advisory covering 38 CVEs
 before 4.12.14-lp151.28.36.1
4.12.14-lp151.28.36.1
kernel-vanilla
openSUSE:Leap 15.1
From an advisory covering 38 CVEs
 before 4.12.14-lp151.28.36.1
4.12.14-lp151.28.36.1

History

History
RecordedChangedSources
affectedOSV
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-19528 is a medium vulnerability (CVSS 6.1) in Linux Kernel, published December 3, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.49%, the 42nd percentile. Fixed in linux 5.3.7-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 286 versions, 630 references and the rest of 11 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open