Every CVE Search/ Get API key

CVE-2020-0430

In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory...

7.8 HighFix available

In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153881554

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.18%Up 0.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.8

In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153881554

Record
CVE-2020-0430
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-125
Updated
2026-11-02
CVE List No score

In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153881554

Record
CVE-2020-0430
Updated
2026-11-02
EUVDEUVD-2020-1932 No score

In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153881554

Record
EUVD-2020-1932
Updated
2026-11-03
GitHub AdvisoriesGHSA-56rg-qq2g-389g No score

In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory...

In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153881554

Record
GHSA-56rg-qq2g-389g
Updated
2026-11-02
OSV 7.8

In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153881554

Record
CVE-2020-0430
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2020-0430 7.8

In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153881554

Record
DEBIAN-CVE-2020-0430
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 11 moreShow less
OSVUBUNTU-CVE-2020-0430 7.8

In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153881554

Record
UBUNTU-CVE-2020-0430
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVSUSE-SU-2020:3272-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bug fixes.

The following security bugs were fixed:

  • CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766).
  • CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in mm/hugetlb.c (bnc#1176485).
  • CVE-2020-0430: Fixed an OOB read in skb_headlen of /include/linux/skbuff.h (bnc#1176723).
  • CVE-2020-14351: Fixed a race in the perf_mmap_close() function (bsc#1177086).
  • CVE-2020-16120: Fixed a permissions issue in ovl_path_open() (bsc#1177470).
  • CVE-2020-8694: Restricted energy meter to root access (bsc#1170415).
  • CVE-2020-27673: Fixed an issue where rogue guests could have caused denial of service of Dom0 via high frequency events (XSA-332 bsc#1177411)
  • CVE-2020-27675: Fixed a race condition in event handler which may crash dom0 (XSA-331 bsc#1177410).

The following non-security bugs were fixed:

  • ALSA: bebob: potential info leak in hwdep_read() (git-fixes).
  • ALSA: compress_offload: remove redundant initialization (git-fixes).
  • ALSA: core: init: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes).
  • ALSA: core: pcm: simplify locking for timers (git-fixes).
  • ALSA: core: timer: clarify operator precedence (git-fixes).
  • ALSA: core: timer: remove redundant assignment (git-fixes).
  • ALSA: ctl: Workaround for lockdep warning wrt card->ctl_files_rwlock (git-fixes).
  • ALSA: hda - Do not register a cb func if it is registered already (git-fixes).
  • ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7 (git-fixes).
  • ALSA: hda/realtek - The front Mic on a HP machine does not work (git-fixes).
  • ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (git-fixes).
  • ALSA: hda: auto_parser: remove shadowed variable declaration (git-fixes).
  • ALSA: hda: use semicolons rather than commas to separate statements (git-fixes).
  • ALSA: mixart: Correct comment wrt obsoleted tasklet usage (git-fixes).
  • ALSA: rawmidi: (cosmetic) align function parameters (git-fixes).
  • ALSA: seq: oss: Avoid mutex lock for a long-time ioctl (git-fixes).
  • ALSA: usb-audio: Add mixer support for Pioneer DJ DJM-250MK2 (git-fixes).
  • ALSA: usb-audio: endpoint.c: fix repeated word 'there' (git-fixes).
  • ALSA: usb-audio: fix spelling mistake 'Frequence' -> 'Frequency' (git-fixes).
  • ASoC: qcom: lpass-cpu: fix concurrency issue (git-fixes).
  • ASoC: qcom: lpass-platform: fix memory leak (git-fixes).
  • ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() (git-fixes).
  • ath10k: Fix the size used in a 'dma_free_coherent()' call in an error handling path (git-fixes).
  • ath10k: provide survey info as accumulated data (git-fixes).
  • ath6kl: prevent potential array overflow in ath6kl_add_new_sta() (git-fixes).
  • ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb() (git-fixes).
  • ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() (git-fixes).
  • backlight: sky81452-backlight: Fix refcount imbalance on error (git-fixes).
  • blk-mq: order adding requests to hctx->dispatch and checking SCHED_RESTART (bsc#1177750).
  • block: ensure bdi->io_pages is always initialized (bsc#1177749).
  • Bluetooth: MGMT: Fix not checking if BT_HS is enabled (git-fixes).
  • Bluetooth: Only mark socket zapped after unlocking (git-fixes).
  • bnxt: do not enable NAPI until rings are ready (networking-stable-20_09_11).
  • bnxt_en: Check for zero dir entries in NVRAM (networking-stable-20_09_11).
  • brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach (git-fixes).
  • brcmfmac: check ndev pointer (git-fixes).
  • brcmsmac: fix memory leak in wlc_phy_attach_lcnphy (git-fixes).
  • btrfs: check the right error variable in btrfs_del_dir_entries_in_log (bsc#1177687).
  • btrfs: do not force read-only after error in drop snapshot (bsc#1176354).
  • btrfs: do not set the full sync flag on the inode during page release (bsc#1177687).
  • btrfs: fix incorrect updating of log root tree (bsc#1177687).
  • btrfs: fix race…
Record
SUSE-SU-2020:3272-1
Updated
2026-11-02
OSVSUSE-SU-2020:3281-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel Azure was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766).
  • CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in mm/hugetlb.c (bnc#1176485).
  • CVE-2020-0430: Fixed an OOB read in skb_headlen of /include/linux/skbuff.h (bnc#1176723).
  • CVE-2020-14351: Fixed a race in the perf_mmap_close() function (bsc#1177086).
  • CVE-2020-16120: Fixed a permissions issue in ovl_path_open() (bsc#1177470).
  • CVE-2020-12351: Implemented a kABI workaround for bluetooth l2cap_ops filter addition (bsc#1177724).
  • CVE-2020-12352: Fixed an information leak when processing certain AMP packets aka 'BleedingTooth' (bsc#1177725).
  • CVE-2020-25212: Fixed a TOCTOU mismatch in the NFS client code (bnc#1176381).
  • CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bnc#1177511).
  • CVE-2020-27673: Fixed an issue where rogue guests could have caused denial of service of Dom0 via high frequency events (XSA-332 bsc#1177411)
  • CVE-2020-27675: Fixed a race condition in event handler which may crash dom0 (XSA-331 bsc#1177410).
  • CVE-2020-25705: A ICMP global rate limiting side-channel was removed which could lead to e.g. the SADDNS attack (bsc#1175721)

The following non-security bugs were fixed:

  • ACPI: dock: fix enum-conversion warning (git-fixes).
  • ALSA: bebob: potential info leak in hwdep_read() (git-fixes).
  • ALSA: compress_offload: remove redundant initialization (git-fixes).
  • ALSA: core: init: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes).
  • ALSA: core: pcm: simplify locking for timers (git-fixes).
  • ALSA: core: timer: clarify operator precedence (git-fixes).
  • ALSA: core: timer: remove redundant assignment (git-fixes).
  • ALSA: ctl: Workaround for lockdep warning wrt card->ctl_files_rwlock (git-fixes).
  • ALSA: hda: auto_parser: remove shadowed variable declaration (git-fixes).
  • ALSA: hda - Do not register a cb func if it is registered already (git-fixes).
  • ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7 (git-fixes).
  • ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (git-fixes).
  • ALSA: hda/realtek - The front Mic on a HP machine does not work (git-fixes).
  • ALSA: hda: use semicolons rather than commas to separate statements (git-fixes).
  • ALSA: mixart: Correct comment wrt obsoleted tasklet usage (git-fixes).
  • ALSA: rawmidi: (cosmetic) align function parameters (git-fixes).
  • ALSA: seq: oss: Avoid mutex lock for a long-time ioctl (git-fixes).
  • ALSA: usb-audio: Add mixer support for Pioneer DJ DJM-250MK2 (git-fixes).
  • ALSA: usb-audio: endpoint.c: fix repeated word 'there' (git-fixes).
  • ALSA: usb-audio: fix spelling mistake 'Frequence' -> 'Frequency' (git-fixes).
  • amd-xgbe: Add a check for an skb in the timestamp path (git-fixes).
  • amd-xgbe: Add additional dynamic debug messages (git-fixes).
  • amd-xgbe: Add additional ethtool statistics (git-fixes).
  • amd-xgbe: Add ethtool show/set channels support (git-fixes).
  • amd-xgbe: Add ethtool show/set ring parameter support (git-fixes).
  • amd-xgbe: Add ethtool support to retrieve SFP module info (git-fixes).
  • amd-xgbe: Add hardware features debug output (git-fixes).
  • amd-xgbe: Add NUMA affinity support for IRQ hints (git-fixes).
  • amd-xgbe: Add NUMA affinity support for memory allocations (git-fixes).
  • amd-xgbe: Add per queue Tx and Rx statistics (git-fixes).
  • amd-xgbe: Advertise FEC support with the KR re-driver (git-fixes).
  • amd-xgbe: Always attempt link training in KR mode (git-fixes).
  • amd-xgbe: Be sure driver shuts down cleanly on module removal (git-fixes).
  • amd-xgbe: Convert to generic power management (git-fixes).
  • amd-xgbe: Fix debug output of max channel counts (git-fixes).
  • amd-xgbe: Fix error path in xgbe_mod_init() (git-fixes).
  • amd-xgbe: Fixes for working with PHYs that support 2.5GbE (git-fixes).…
Record
SUSE-SU-2020:3281-1
Updated
2026-11-02
OSVSUSE-SU-2020:3326-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bug fixes.

The following security bugs were fixed:

  • CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766).
  • CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in mm/hugetlb.c (bnc#1176485).
  • CVE-2020-0430: Fixed an OOB read in skb_headlen of /include/linux/skbuff.h (bnc#1176723).
  • CVE-2020-14351: Fixed a race in the perf_mmap_close() function (bsc#1177086).
  • CVE-2020-16120: Fixed a permissions issue in ovl_path_open() (bsc#1177470).
  • CVE-2020-8694: Restricted energy meter to root access (bsc#1170415).
  • CVE-2020-25705: A ICMP global rate limiting side-channel was removed which could lead to e.g. the SADDNS attack (bsc#1175721)

The following non-security bugs were fixed:

  • ACPI: dock: fix enum-conversion warning (git-fixes).
  • ALSA: bebob: potential info leak in hwdep_read() (git-fixes).
  • ALSA: compress_offload: remove redundant initialization (git-fixes).
  • ALSA: core: init: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes).
  • ALSA: core: pcm: simplify locking for timers (git-fixes).
  • ALSA: core: timer: clarify operator precedence (git-fixes).
  • ALSA: core: timer: remove redundant assignment (git-fixes).
  • ALSA: ctl: Workaround for lockdep warning wrt card->ctl_files_rwlock (git-fixes).
  • ALSA: hda: auto_parser: remove shadowed variable declaration (git-fixes).
  • ALSA: hda - Do not register a cb func if it is registered already (git-fixes).
  • ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7 (git-fixes).
  • ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (git-fixes).
  • ALSA: hda/realtek - The front Mic on a HP machine does not work (git-fixes).
  • ALSA: hda: use semicolons rather than commas to separate statements (git-fixes).
  • ALSA: mixart: Correct comment wrt obsoleted tasklet usage (git-fixes).
  • ALSA: rawmidi: (cosmetic) align function parameters (git-fixes).
  • ALSA: seq: oss: Avoid mutex lock for a long-time ioctl (git-fixes).
  • ALSA: usb-audio: Add mixer support for Pioneer DJ DJM-250MK2 (git-fixes).
  • ALSA: usb-audio: endpoint.c: fix repeated word 'there' (git-fixes).
  • ALSA: usb-audio: fix spelling mistake 'Frequence' -> 'Frequency' (git-fixes).
  • ASoC: qcom: lpass-cpu: fix concurrency issue (git-fixes).
  • ASoC: qcom: lpass-platform: fix memory leak (git-fixes).
  • ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() (git-fixes).
  • ath10k: Fix the size used in a 'dma_free_coherent()' call in an error handling path (git-fixes).
  • ath10k: provide survey info as accumulated data (git-fixes).
  • ath6kl: prevent potential array overflow in ath6kl_add_new_sta() (git-fixes).
  • ath6kl: wmi: prevent a shift wrapping bug in ath6kl_wmi_delete_pstream_cmd() (git-fixes).
  • ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb() (git-fixes).
  • ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() (git-fixes).
  • blk-mq: order adding requests to hctx->dispatch and checking SCHED_RESTART (bsc#1177750).
  • block: ensure bdi->io_pages is always initialized (bsc#1177749).
  • Bluetooth: MGMT: Fix not checking if BT_HS is enabled (git-fixes).
  • Bluetooth: Only mark socket zapped after unlocking (git-fixes).
  • bnxt: do not enable NAPI until rings are ready (networking-stable-20_09_11).
  • bnxt_en: Check for zero dir entries in NVRAM (networking-stable-20_09_11).
  • brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach (git-fixes).
  • brcmfmac: check ndev pointer (git-fixes).
  • brcmsmac: fix memory leak in wlc_phy_attach_lcnphy (git-fixes).
  • btrfs: do not force read-only after error in drop snapshot (bsc#1176354).
  • btrfs: qgroup: fix qgroup meta rsv leak for subvolume operations (bsc#1177856).
  • btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode (bsc#1177855).
  • btrfs: remove root usage from can_overcommit (bsc#1131277).
  • btrfs: take overcommit into account in inc_block_group_ro (bsc#1176560). -…
Record
SUSE-SU-2020:3326-1
Updated
2026-11-02
OSVSUSE-SU-2020:3441-1 No score

Security update for the Linux Kernel (Live Patch 17 for SLE 15)

This update for the Linux Kernel 4.12.14-150_47 fixes several issues.

The following security issues were fixed:

  • CVE-2020-0430: Fixed an OOB read in skb_headlen of /include/linux/skbuff.h (bsc#1176723, bsc#1178003).
  • CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724, bsc#1177729, bsc#1178397).
  • CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bnc#1177513).
Record
SUSE-SU-2020:3441-1
Updated
2026-11-02
OSVSUSE-SU-2020:3449-1 No score

Security update for the Linux Kernel (Live Patch 16 for SLE 15)

This update for the Linux Kernel 4.12.14-150_41 fixes several issues.

The following security issues were fixed:

  • CVE-2017-1000405: Fixed a bug in the THP CoW support that could have been used by local attackers to corrupt memory of other processes and cause them to crash (bsc#1178264, bsc#1069496, bsc#1070307).
  • CVE-2020-0430: Fixed an OOB read in skb_headlen of /include/linux/skbuff.h (bsc#1176723, bsc#1178003).
  • CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724, bsc#1177729, bsc#1178397).
  • CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bnc#1177513).
Record
SUSE-SU-2020:3449-1
Updated
2026-11-02
OSVSUSE-SU-2020:3484-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bug fixes.

The following security bugs were fixed:

  • CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software and services that rely on UDP source port randomization (like DNS) are indirectly affected as well. Kernel versions may be vulnerable to this issue (bsc#1175721, bsc#1178782).
  • CVE-2020-8694: Insufficient access control for some Intel(R) Processors may have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1170415).
  • CVE-2020-25668: Fixed a use-after-free in con_font_op() (bsc#1178123).
  • CVE-2020-25704: Fixed a memory leak in perf_event_parse_addr_filter() (bsc#1178393).
  • CVE-2020-25669: Fixed a use-after-free read in sunkbd_reinit() (bsc#1178182).
  • CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766).
  • CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in mm/hugetlb.c (bnc#1176485).
  • CVE-2020-0430: Fixed an OOB read in skb_headlen of /include/linux/skbuff.h (bnc#1176723).
  • CVE-2020-14351: Fixed a race in the perf_mmap_close() function (bsc#1177086).
  • CVE-2020-16120: Fixed a permissions issue in ovl_path_open() (bsc#1177470).
  • CVE-2020-12351: Implemented a kABI workaround for bluetooth l2cap_ops filter addition (bsc#1177724).
  • CVE-2020-12352: Fixed an information leak when processing certain AMP packets aka 'BleedingTooth' (bsc#1177725).
  • CVE-2020-25212: Fixed a TOCTOU mismatch in the NFS client code (bnc#1176381).
  • CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bnc#1177511).

The following non-security bugs were fixed:

  • 9P: Cast to loff_t before multiplying (git-fixes).
  • acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (git-fixes).
  • ACPI: debug: do not allow debugging when ACPI is disabled (git-fixes).
  • ACPI: dock: fix enum-conversion warning (git-fixes).
  • ACPI / extlog: Check for RDMSR failure (git-fixes).
  • ACPI: NFIT: Fix comparison to '-ENXIO' (git-fixes).
  • ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
  • ALSA: bebob: potential info leak in hwdep_read() (git-fixes).
  • ALSA: compress_offload: remove redundant initialization (git-fixes).
  • ALSA: core: init: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes).
  • ALSA: core: pcm: simplify locking for timers (git-fixes).
  • ALSA: core: timer: clarify operator precedence (git-fixes).
  • ALSA: core: timer: remove redundant assignment (git-fixes).
  • ALSA: ctl: Workaround for lockdep warning wrt card->ctl_files_rwlock (git-fixes).
  • ALSA: hda: auto_parser: remove shadowed variable declaration (git-fixes).
  • ALSA: hda - Do not register a cb func if it is registered already (git-fixes).
  • ALSA: hda - Fix the return value if cb func is already registered (git-fixes).
  • ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (git-fixes).
  • ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7 (git-fixes).
  • ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (git-fixes).
  • ALSA: hda/realtek - The front Mic on a HP machine does not work (git-fixes).
  • ALSA: hda: use semicolons rather than commas to separate statements (git-fixes).
  • ALSA: mixart: Correct comment wrt obsoleted tasklet usage (git-fixes).
  • ALSA: rawmidi: (cosmetic) align function parameters (git-fixes).
  • ALSA: seq: oss: Avoid mutex lock for a long-time ioctl (git-fixes).
  • ALSA: usb-audio: Add mixer support for Pioneer DJ DJM-250MK2 (git-fixes).
  • ALSA: usb-audio: endpoint.c: fix repeated word 'there' (git-fixes).
  • ALSA: usb-audio: fix spelling mistake 'Frequence' -> 'Frequency' (git-fixes).
  • amd-xgbe: Add a check for…
Record
SUSE-SU-2020:3484-1
Updated
2026-11-02
OSVSUSE-SU-2020:3512-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 realtime kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software and services that rely on UDP source port randomization (like DNS) are indirectly affected as well. Kernel versions may be vulnerable to this issue (bsc#1175721, bsc#1178782).
  • CVE-2020-8694: Insufficient access control for some Intel(R) Processors may have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1170415).
  • CVE-2020-25668: Fixed a use-after-free in con_font_op() (bsc#1178123).
  • CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766).
  • CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in mm/hugetlb.c (bnc#1176485).
  • CVE-2020-0430: Fixed an OOB read in skb_headlen of /include/linux/skbuff.h (bnc#1176723).
  • CVE-2020-14351: Fixed a race in the perf_mmap_close() function (bsc#1177086).
  • CVE-2020-16120: Fixed permission check to open real file when using overlayfs. It was possible to have a file not readable by an unprivileged user be copied to a mountpoint controlled by that user and then be able to access the file (bsc#1177470).
  • CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724).
  • CVE-2020-12352: Fixed an information leak when processing certain AMP packets aka 'BleedingTooth' (bsc#1177725).

The following non-security bugs were fixed:

  • 9P: Cast to loff_t before multiplying (git-fixes).
  • acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (git-fixes).
  • ACPI: debug: do not allow debugging when ACPI is disabled (git-fixes).
  • ACPI: dock: fix enum-conversion warning (git-fixes).
  • ACPI / extlog: Check for RDMSR failure (git-fixes).
  • ACPI: NFIT: Fix comparison to '-ENXIO' (git-fixes).
  • ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
  • ALSA: bebob: potential info leak in hwdep_read() (git-fixes).
  • ALSA: compress_offload: remove redundant initialization (git-fixes).
  • ALSA: core: init: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes).
  • ALSA: core: pcm: simplify locking for timers (git-fixes).
  • ALSA: core: timer: clarify operator precedence (git-fixes).
  • ALSA: core: timer: remove redundant assignment (git-fixes).
  • ALSA: ctl: Workaround for lockdep warning wrt card->ctl_files_rwlock (git-fixes).
  • ALSA: hda: auto_parser: remove shadowed variable declaration (git-fixes).
  • ALSA: hda - Do not register a cb func if it is registered already (git-fixes).
  • ALSA: hda - Fix the return value if cb func is already registered (git-fixes).
  • ALSA: hda - Fix the return value if cb func is already registered (git-fixes).
  • ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (git-fixes).
  • ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7 (git-fixes).
  • ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (git-fixes).
  • ALSA: hda/realtek - The front Mic on a HP machine does not work (git-fixes).
  • ALSA: hda: use semicolons rather than commas to separate statements (git-fixes).
  • ALSA: mixart: Correct comment wrt obsoleted tasklet usage (git-fixes).
  • ALSA: rawmidi: (cosmetic) align function parameters (git-fixes).
  • ALSA: seq: oss: Avoid mutex lock for a long-time ioctl (git-fixes).
  • ALSA: usb-audio: Add mixer support for Pioneer DJ DJM-250MK2 (git-fixes).
  • ALSA: usb-audio: endpoint.c: fix repeated word 'there' (git-fixes).
  • ALSA: usb-audio: Fix potential use-after-free of streams (gix-fixes).
  • ALSA: usb-audio: fix spelling mistake 'Frequence' -> 'Frequency' (git-fixes).
  • arm64: Run ARCH_WORKAROUND_1 enabling code on all CPUs…
Record
SUSE-SU-2020:3512-1
Updated
2026-11-02
OSVSUSE-SU-2020:3513-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 RT kernel was updated to receive various security and bug fixes.

The following security bugs were fixed:

  • CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software and services that rely on UDP source port randomization (like DNS) are indirectly affected as well. Kernel versions may be vulnerable to this issue (bsc#1175721, bsc#1178782).
  • CVE-2020-8694: Insufficient access control for some Intel(R) Processors may have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1170415).
  • CVE-2020-25704: Fixed a memory leak in perf_event_parse_addr_filter() (bsc#1178393).
  • CVE-2020-25668: Fixed a use-after-free in con_font_op() (bsc#1178123).
  • CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766).
  • CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in mm/hugetlb.c (bnc#1176485).
  • CVE-2020-0430: Fixed an OOB read in skb_headlen of /include/linux/skbuff.h (bnc#1176723).
  • CVE-2020-14351: Fixed a race in the perf_mmap_close() function (bsc#1177086).
  • CVE-2020-16120: Fixed permission check to open real file when using overlayfs. It was possible to have a file not readable by an unprivileged user be copied to a mountpoint controlled by that user and then be able to access the file (bsc#1177470).
  • CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724).
  • CVE-2020-12352: Fixed an information leak when processing certain AMP packets aka 'BleedingTooth' (bsc#1177725).

The following non-security bugs were fixed:

  • 9P: Cast to loff_t before multiplying (git-fixes).
  • acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (git-fixes).
  • ACPI: debug: do not allow debugging when ACPI is disabled (git-fixes).
  • ACPI: dock: fix enum-conversion warning (git-fixes).
  • ACPI / extlog: Check for RDMSR failure (git-fixes).
  • ACPI: NFIT: Fix comparison to '-ENXIO' (git-fixes).
  • ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
  • ALSA: bebob: potential info leak in hwdep_read() (git-fixes).
  • ALSA: compress_offload: remove redundant initialization (git-fixes).
  • ALSA: core: init: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes).
  • ALSA: core: pcm: simplify locking for timers (git-fixes).
  • ALSA: core: timer: clarify operator precedence (git-fixes).
  • ALSA: core: timer: remove redundant assignment (git-fixes).
  • ALSA: ctl: Workaround for lockdep warning wrt card->ctl_files_rwlock (git-fixes).
  • ALSA: hda: auto_parser: remove shadowed variable declaration (git-fixes).
  • ALSA: hda - Do not register a cb func if it is registered already (git-fixes).
  • ALSA: hda - Fix the return value if cb func is already registered (git-fixes).
  • ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (git-fixes).
  • ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7 (git-fixes).
  • ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (git-fixes).
  • ALSA: hda/realtek - The front Mic on a HP machine does not work (git-fixes).
  • ALSA: hda: use semicolons rather than commas to separate statements (git-fixes).
  • ALSA: mixart: Correct comment wrt obsoleted tasklet usage (git-fixes).
  • ALSA: rawmidi: (cosmetic) align function parameters (git-fixes).
  • ALSA: seq: oss: Avoid mutex lock for a long-time ioctl (git-fixes).
  • ALSA: usb-audio: Add mixer support for Pioneer DJ DJM-250MK2 (git-fixes).
  • ALSA: usb-audio: endpoint.c: fix repeated word 'there' (git-fixes).
  • ALSA: usb-audio: fix spelling mistake 'Frequence' -> 'Frequency' (git-fixes).
  • ASoC: qcom: lpass-cpu: fix concurrency issue (git-fixes).
  • ASoC: qcom: lpass-platform: fix memory leak (git-fixes).
  • ata:…
Record
SUSE-SU-2020:3513-1
Updated
2026-11-02
OSVSUSE-SU-2020:3532-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 LTSS kernel was updated to receive various security and bug fixes.

The following security bugs were fixed:

  • CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software and services that rely on UDP source port randomization (like DNS) are indirectly affected as well. Kernel versions may be vulnerable to this issue (bsc#1175721, bsc#1178782).
  • CVE-2020-25704: Fixed a memory leak in perf_event_parse_addr_filter() (bsc#1178393).
  • CVE-2020-25668: Fixed a use-after-free in con_font_op() (bnc#1178123).
  • CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766).
  • CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in mm/hugetlb.c (bnc#1176485).
  • CVE-2020-0430: Fixed an OOB read in skb_headlen of /include/linux/skbuff.h (bnc#1176723).
  • CVE-2020-14351: Fixed a race in the perf_mmap_close() function (bsc#1177086).
  • CVE-2020-16120: Fixed permission check to open real file when using overlayfs. It was possible to have a file not readable by an unprivileged user be copied to a mountpoint controlled by that user and then be able to access the file (bsc#1177470).
  • CVE-2020-8694: Restricted energy meter to root access (bsc#1170415).
  • CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724).
  • CVE-2020-12352: Fixed an information leak when processing certain AMP packets aka 'BleedingTooth' (bsc#1177725).
  • CVE-2020-25212: Fixed getxattr kernel panic and memory overflow (bsc#1176381).
  • CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bnc#1177511).
  • CVE-2020-2521: Fixed getxattr kernel panic and memory overflow (bsc#1176381).
  • CVE-2020-14381: Fixed a use-after-free in the fast user mutex (futex) wait operation, which could have lead to memory corruption and possibly privilege escalation (bsc#1176011).
  • CVE-2020-25643: Fixed a memory corruption and a read overflow which could have caused by improper input validation in the ppp_cp_parse_cr function (bsc#1177206).
  • CVE-2020-25641: Fixed a zero-length biovec request issued by the block subsystem could have caused the kernel to enter an infinite loop, causing a denial of service (bsc#1177121).
  • CVE-2020-26088: Fixed an improper CAP_NET_RAW check in NFC socket creation could have been used by local attackers to create raw sockets, bypassing security mechanisms (bsc#1176990).
  • CVE-2020-14390: Fixed an out-of-bounds memory write leading to memory corruption or a denial of service when changing screen size (bnc#1176235).
  • CVE-2020-0432: Fixed an out of bounds write due to an integer overflow (bsc#1176721).
  • CVE-2020-0427: Fixed an out of bounds read due to a use after free (bsc#1176725).
  • CVE-2020-0431: Fixed an out of bounds write due to a missing bounds check (bsc#1176722).
  • CVE-2020-0404: Fixed a linked list corruption due to an unusual root cause (bsc#1176423).
  • CVE-2020-25284: Fixed an incomplete permission checking for access to rbd devices, which could have been leveraged by local attackers to map or unmap rbd block devices (bsc#1176482).
  • CVE-2020-27673: Fixed an issue where rogue guests could have caused denial of service of Dom0 via high frequency events (XSA-332 bsc#1177411)
  • CVE-2020-27675: Fixed a race condition in event handler which may crash dom0 (XSA-331 bsc#1177410).

The following non-security bugs were fixed:

  • btrfs: cleanup root usage by btrfs_get_alloc_profile (bsc#1131277).
  • btrfs: reloc: clear DEAD_RELOC_TREE bit for orphan roots to prevent runaway balance (bsc#1171417 bsc#1160947 bsc#1172366 bsc#1176922).
  • btrfs: reloc: fix reloc root leak and NULL pointer dereference (bsc#1171417…
Record
SUSE-SU-2020:3532-1
Updated
2026-11-02
OSVSUSE-SU-2020:3544-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bug fixes.

The following security bugs were fixed:

  • CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software and services that rely on UDP source port randomization (like DNS) are indirectly affected as well. Kernel versions may be vulnerable to this issue (bsc#1175721, bsc#1178782).
  • CVE-2020-25704: Fixed a memory leak in perf_event_parse_addr_filter() (bsc#1178393).
  • CVE-2020-25668: Fixed a use-after-free in con_font_op() (bnc#1178123).
  • CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766).
  • CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in mm/hugetlb.c (bnc#1176485).
  • CVE-2020-0430: Fixed an OOB read in skb_headlen of /include/linux/skbuff.h (bnc#1176723).
  • CVE-2020-14351: Fixed a race in the perf_mmap_close() function (bsc#1177086).
  • CVE-2020-16120: Fixed a permissions issue in ovl_path_open() (bsc#1177470).
  • CVE-2020-8694: Restricted energy meter to root access (bsc#1170415).
  • CVE-2020-12351: Implemented a kABI workaround for bluetooth l2cap_ops filter addition (bsc#1177724).
  • CVE-2020-12352: Fixed an information leak when processing certain AMP packets aka 'BleedingTooth' (bsc#1177725).
  • CVE-2020-25212: Fixed a TOCTOU mismatch in the NFS client code (bnc#1176381).
  • CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bnc#1177511).
  • CVE-2020-14381: Fixed a UAF in the fast user mutex (futex) wait operation (bsc#1176011).
  • CVE-2020-25643: Fixed an improper input validation in the ppp_cp_parse_cr function of the HDLC_PPP module (bnc#1177206).
  • CVE-2020-25641: Fixed a zero-length biovec request issued by the block subsystem could have caused the kernel to enter an infinite loop, causing a denial of service (bsc#1177121).
  • CVE-2020-26088: Fixed an improper CAP_NET_RAW check in NFC socket creation could have been used by local attackers to create raw sockets, bypassing security mechanisms (bsc#1176990).
  • CVE-2020-14390: Fixed an out-of-bounds memory write leading to memory corruption or a denial of service when changing screen size (bnc#1176235).
  • CVE-2020-0432: Fixed an out of bounds write due to an integer overflow (bsc#1176721).
  • CVE-2020-0427: Fixed an out of bounds read due to a use after free (bsc#1176725).
  • CVE-2020-0431: Fixed an out of bounds write due to a missing bounds check (bsc#1176722).
  • CVE-2020-0404: Fixed a linked list corruption due to an unusual root cause (bsc#1176423).
  • CVE-2020-25284: Fixed an incomplete permission checking for access to rbd devices, which could have been leveraged by local attackers to map or unmap rbd block devices (bsc#1176482).
  • CVE-2020-27673: Fixed an issue where rogue guests could have caused denial of service of Dom0 via high frequency events (XSA-332 bsc#1177411)
  • CVE-2020-27675: Fixed a race condition in event handler which may crash dom0 (XSA-331 bsc#1177410).

The following non-security bugs were fixed:

  • btrfs: remove root usage from can_overcommit (bsc#1131277).
  • hv: vmbus: Add timeout to vmbus_wait_for_unload (bsc#1177816).
  • hyperv_fb: disable superfluous VERSION_WIN10_V5 case (bsc#1175306).
  • hyperv_fb: Update screen_info after removing old framebuffer (bsc#1175306).
  • livepatch: Add -fdump-ipa-clones to build (). Add support for -fdump-ipa-clones GCC option. Update config files accordingly.
  • livepatch: Test if -fdump-ipa-clones is really available As of now we add -fdump-ipa-clones unconditionally. It does not cause a trouble if the kernel is build with the supported toolchain. Otherwise it could fail easily. Do the correct thing and test for the availability.
  • NFS: On fatal…
Record
SUSE-SU-2020:3544-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux
Debian:12
 before 4.17.8-1
4.17.8-1
linux
Debian:13
 before 4.17.8-1
4.17.8-1
linux
Debian:14
 before 4.17.8-1
4.17.8-1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 8 CVEs
 before 4.12.14-197.67.1
4.12.14-197.67.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 8 CVEs
 before 4.12.14-197.67.1
4.12.14-197.67.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 8 CVEs
 before 4.12.14-197.67.1
4.12.14-197.67.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 8 CVEs
 before 4.12.14-197.67.1
4.12.14-197.67.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 8 CVEs
 before 4.12.14-197.67.1
4.12.14-197.67.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 8 CVEs
 before 4.12.14-197.67.1
4.12.14-197.67.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 8 CVEs
 before 4.12.14-197.67.1
4.12.14-197.67.1
Show 117 moreShow less
Affected packages
PackageAffectedFixed
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP1
From an advisory covering 8 CVEs
 before 4.12.14-197.67.1
4.12.14-197.67.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP1
From an advisory covering 8 CVEs
 before 4.12.14-197.67.1
4.12.14-197.67.1
kernel-livepatch-SLE15-SP1_Update_18
SUSE:Linux Enterprise Live Patching 15 SP1
From an advisory covering 8 CVEs
 before 1-3.3.1
1-3.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP1
From an advisory covering 8 CVEs
 before 4.12.14-197.67.1
4.12.14-197.67.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP1
From an advisory covering 8 CVEs
 before 4.12.14-197.67.1
4.12.14-197.67.1
kernel-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 12 CVEs
 before 4.12.14-16.34.1
4.12.14-16.34.1
kernel-source-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 12 CVEs
 before 4.12.14-16.34.1
4.12.14-16.34.1
kernel-syms-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 12 CVEs
 before 4.12.14-16.34.1
4.12.14-16.34.1
kernel-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 12 CVEs
 before 4.12.14-16.34.1
4.12.14-16.34.1
kernel-source-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 12 CVEs
 before 4.12.14-16.34.1
4.12.14-16.34.1
kernel-syms-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 12 CVEs
 before 4.12.14-16.34.1
4.12.14-16.34.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 12 SP5
From an advisory covering 7 CVEs
 before 4.12.14-122.51.2
4.12.14-122.51.2
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 7 CVEs
 before 4.12.14-122.51.2
4.12.14-122.51.2
kgraft-patch-SLE12-SP5_Update_12
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 7 CVEs
 before 1-8.5.2
1-8.5.2
kernel-docs
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 7 CVEs
 before 4.12.14-122.51.2
4.12.14-122.51.2
kernel-obs-build
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 7 CVEs
 before 4.12.14-122.51.2
4.12.14-122.51.2
kernel-default
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 7 CVEs
 before 4.12.14-122.51.2
4.12.14-122.51.2
kernel-source
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 7 CVEs
 before 4.12.14-122.51.2
4.12.14-122.51.2
kernel-syms
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 7 CVEs
 before 4.12.14-122.51.2
4.12.14-122.51.2
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 7 CVEs
 before 4.12.14-122.51.2
4.12.14-122.51.2
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 7 CVEs
 before 4.12.14-122.51.2
4.12.14-122.51.2
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 7 CVEs
 before 4.12.14-122.51.2
4.12.14-122.51.2
kernel-default
SUSE:Linux Enterprise Workstation Extension 12 SP5
From an advisory covering 7 CVEs
 before 4.12.14-122.51.2
4.12.14-122.51.2
kgraft-patch-SLE12-SP4_Update_16
SUSE:Linux Enterprise Live Patching 12 SP4
From an advisory covering 3 CVEs
 before 3-2.1
3-2.1
kgraft-patch-SLE12-SP4_Update_15
SUSE:Linux Enterprise Live Patching 12 SP4
From an advisory covering 3 CVEs
 before 4-2.1
4-2.1
kgraft-patch-SLE12-SP4_Update_14
SUSE:Linux Enterprise Live Patching 12 SP4
From an advisory covering 3 CVEs
 before 4-2.2
4-2.2
kgraft-patch-SLE12-SP4_Update_13
SUSE:Linux Enterprise Live Patching 12 SP4
From an advisory covering 3 CVEs
 before 6-2.2
6-2.2
kgraft-patch-SLE12-SP4_Update_12
SUSE:Linux Enterprise Live Patching 12 SP4
From an advisory covering 3 CVEs
 before 7-2.2
7-2.2
kgraft-patch-SLE12-SP4_Update_11
SUSE:Linux Enterprise Live Patching 12 SP4
From an advisory covering 3 CVEs
 before 8-2.2
8-2.2
kernel-livepatch-SLE15_Update_20
SUSE:Linux Enterprise Live Patching 15
From an advisory covering 3 CVEs
 before 3-2.1
3-2.1
kernel-livepatch-SLE15_Update_19
SUSE:Linux Enterprise Live Patching 15
From an advisory covering 3 CVEs
 before 4-2.1
4-2.1
kernel-livepatch-SLE15_Update_18
SUSE:Linux Enterprise Live Patching 15
From an advisory covering 3 CVEs
 before 4-2.2
4-2.2
kernel-livepatch-SLE15_Update_17
SUSE:Linux Enterprise Live Patching 15
From an advisory covering 3 CVEs
 before 8-2.2
8-2.2
kgraft-patch-SLE12-SP4_Update_10
SUSE:Linux Enterprise Live Patching 12 SP4
From an advisory covering 4 CVEs
 before 8-2.2
8-2.2
kernel-livepatch-SLE15_Update_16
SUSE:Linux Enterprise Live Patching 15
From an advisory covering 4 CVEs
 before 8-2.2
8-2.2
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
From an advisory covering 14 CVEs
 before 4.12.14-8.52.1
4.12.14-8.52.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
From an advisory covering 14 CVEs
 before 4.12.14-8.52.1
4.12.14-8.52.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
From an advisory covering 14 CVEs
 before 4.12.14-8.52.1
4.12.14-8.52.1
kernel-rt
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 11 CVEs
 before 4.12.14-10.22.1
4.12.14-10.22.1
kernel-rt_debug
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 11 CVEs
 before 4.12.14-10.22.1
4.12.14-10.22.1
kernel-source-rt
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 11 CVEs
 before 4.12.14-10.22.1
4.12.14-10.22.1
kernel-syms-rt
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 11 CVEs
 before 4.12.14-10.22.1
4.12.14-10.22.1
kernel-rt
SUSE:Real Time Module 15 SP1
From an advisory covering 11 CVEs
 before 4.12.14-14.41.2
4.12.14-14.41.2
kernel-rt_debug
SUSE:Real Time Module 15 SP1
From an advisory covering 11 CVEs
 before 4.12.14-14.41.2
4.12.14-14.41.2
kernel-source-rt
SUSE:Real Time Module 15 SP1
From an advisory covering 11 CVEs
 before 4.12.14-14.41.2
4.12.14-14.41.2
kernel-syms-rt
SUSE:Real Time Module 15 SP1
From an advisory covering 11 CVEs
 before 4.12.14-14.41.2
4.12.14-14.41.2
kernel-default
SUSE:Linux Enterprise Live Patching 15
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-livepatch-SLE15_Update_21
SUSE:Linux Enterprise Live Patching 15
From an advisory covering 25 CVEs
 before 1-1.5.1
1-1.5.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-vanilla
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-vanilla
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-default
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-docs
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-obs-build
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-source
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-syms
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-vanilla
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-vanilla
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 25 CVEs
 before 4.12.14-150.63.1
4.12.14-150.63.1
kernel-default
SUSE:OpenStack Cloud 9
From an advisory covering 25 CVEs
 before 4.12.14-95.65.1
4.12.14-95.65.1
kernel-source
SUSE:OpenStack Cloud 9
From an advisory covering 25 CVEs
 before 4.12.14-95.65.1
4.12.14-95.65.1
kernel-syms
SUSE:OpenStack Cloud 9
From an advisory covering 25 CVEs
 before 4.12.14-95.65.1
4.12.14-95.65.1
kernel-default
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 25 CVEs
 before 4.12.14-95.65.1
4.12.14-95.65.1
kernel-source
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 25 CVEs
 before 4.12.14-95.65.1
4.12.14-95.65.1
kernel-syms
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 25 CVEs
 before 4.12.14-95.65.1
4.12.14-95.65.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 12 SP4
From an advisory covering 25 CVEs
 before 4.12.14-95.65.1
4.12.14-95.65.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP4
From an advisory covering 25 CVEs
 before 4.12.14-95.65.1
4.12.14-95.65.1
kgraft-patch-SLE12-SP4_Update_17
SUSE:Linux Enterprise Live Patching 12 SP4
From an advisory covering 25 CVEs
 before 1-6.5.1
1-6.5.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 25 CVEs
 before 4.12.14-95.65.1
4.12.14-95.65.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 25 CVEs
 before 4.12.14-95.65.1
4.12.14-95.65.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 25 CVEs
 before 4.12.14-95.65.1
4.12.14-95.65.1
kernel-default
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 25 CVEs
 before 4.12.14-95.65.1
4.12.14-95.65.1
kernel-source
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 25 CVEs
 before 4.12.14-95.65.1
4.12.14-95.65.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 25 CVEs
 before 4.12.14-95.65.1
4.12.14-95.65.1
linux
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8
Show 45 moreShow less
3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70
 None known
linux-aws
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
 None known
linux-azure
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
 None known
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
 None known
linux-aws-hwe
Ubuntu:16.04:LTS
 before 4.15.0-1032.34~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.1
4.15.0-1032.34~16.04.1
linux-azure
Ubuntu:16.04:LTS
 before 4.15.0-1037.39~16.04.1, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 24 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.1
4.15.0-1037.39~16.04.1
linux-gcp
Ubuntu:16.04:LTS
 before 4.15.0-1027.28~16.04.1, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 20 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.1
4.15.0-1027.28~16.04.1
linux-hwe
Ubuntu:16.04:LTS
 before 4.15.0-45.48~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 40 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.1
4.15.0-45.48~16.04.1
linux-oracle
Ubuntu:16.04:LTS
 before 4.15.0-1008.10~16.04.1, plus listed versions
4.15.0-1007.9~16.04.1
4.15.0-1008.10~16.04.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux
Ubuntu:18.04:LTS
 before 4.15.0-44.47, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 18 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.46
4.15.0-44.47
linux-aws
Ubuntu:18.04:LTS
 before 4.15.0-1032.34, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 13 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.33
4.15.0-1032.34
linux-kvm
Ubuntu:18.04:LTS
 before 4.15.0-1029.29, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 13 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.28
4.15.0-1029.29
linux-oem
Ubuntu:18.04:LTS
 before 4.15.0-1033.38, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 10 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.35
4.15.0-1033.38
linux-oracle
Ubuntu:18.04:LTS
 before 4.15.0-1008.10, plus listed versions
4.15.0-1007.9
4.15.0-1008.10
linux-raspi2
Ubuntu:18.04:LTS
 before 4.15.0-1031.33, plus listed versions
4.13.0-1005.54.13.0-1006.64.13.0-1008.84.15.0-1006.74.15.0-1009.10
Show 15 moreShow less
4.15.0-1010.114.15.0-1011.124.15.0-1012.134.15.0-1013.144.15.0-1017.184.15.0-1018.194.15.0-1020.224.15.0-1021.234.15.0-1022.244.15.0-1024.264.15.0-1026.284.15.0-1027.294.15.0-1028.304.15.0-1029.314.15.0-1030.32
4.15.0-1031.33
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1004.5~18.04.14.18.0-1005.6~18.04.14.18.0-1006.7~18.04.14.18.0-1007.8~18.04.14.18.0-1008.9~18.04.1
Show 7 moreShow less
4.18.0-1009.10~18.04.14.18.0-1011.12~18.04.14.18.0-1012.13~18.04.14.18.0-1013.14~18.04.14.18.0-1015.16~18.04.15.0.0-1011.11~18.04.15.0.0-1013.13~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known

History

History
RecordedChangedSources
affectedOSV
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-0430 is a high vulnerability (CVSS 7.8) in Google Android, published September 17, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 8th percentile. Fixed in linux 4.17.8-1.

References

Show 178 moreShow less
This page doesn't list everything

Left out here: 415 versions and the rest of 8 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open