Every CVE Search/ Get API key

CVE-2020-8834

Linux kernel KVM Power8 conflicting use of HSTATE_HOST_R1

6.5 MediumFix available

KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability run code in kernel space of a guest VM can cause the host kernel to panic. There were two commits that, according to the reporter, introduced the vulnerability: f024ee098476 ("KVM: PPC: Book3S HV: Pull out TM state save/restore into separate procedures") 87a11bb6a7f7 ("KVM: PPC: Book3S HV: Work around XER[SO] bug in fake suspend mode") The former landed in 4.8, the latter in 4.17. This was fixed without realizing the impact in 4.18 with the following three commits, though it's believed the first is the only strictly necessary commit: 6f597c6b63b6 ("KVM: PPC: Book3S PR: Add guest MSR parameter for kvmppc_save_tm()/kvmppc_restore_tm()") 7b0e827c6970 ("KVM: PPC: Book3S HV: Factor fake-suspend handling out of kvmppc_save/restore_tm") 009c872a8bc4 ("KVM: PPC: Book3S PR: Move kvmppc_save_tm/kvmppc_restore_tm to separate file")

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.35%Down 8.7 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 6.5

Linux kernel KVM Power8 conflicting use of HSTATE_HOST_R1

KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability run code in kernel space of a guest VM can cause the host kernel to panic. There were two commits that, according to the reporter, introduced the vulnerability: f024ee098476 ("KVM: PPC: Book3S HV: Pull out TM state save/restore into separate procedures") 87a11bb6a7f7 ("KVM: PPC: Book3S HV: Work around XER[SO] bug in fake suspend mode") The former landed in 4.8, the latter in 4.17. This was fixed without realizing the impact in 4.18 with the following three commits, though it's believed the first is the only strictly necessary commit: 6f597c6b63b6 ("KVM: PPC: Book3S PR: Add guest MSR parameter for kvmppc_save_tm()/kvmppc_restore_tm()") 7b0e827c6970 ("KVM: PPC: Book3S HV: Factor fake-suspend handling out of kvmppc_save/restore_tm") 009c872a8bc4 ("KVM: PPC: Book3S PR: Move kvmppc_save_tm/kvmppc_restore_tm to separate file")

Record
CVE-2020-8834
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Weakness
CWE-368
Updated
2026-11-02
EUVDEUVD-2020-29677 6.5

KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability run code in kernel space of a guest VM can cause the host kernel to panic. There were two commits that, according to the reporter, introduced the vulnerability: f024ee098476 ("KVM: PPC: Book3S HV: Pull out TM state save/restore into separate procedures") 87a11bb6a7f7 ("KVM: PPC: Book3S HV: Work around XER[SO] bug in fake suspend mode") The former landed in 4.8, the latter in 4.17. This was fixed without realizing the impact in 4.18 with the following three commits, though it's believed the first is the only strictly necessary commit: 6f597c6b63b6 ("KVM: PPC: Book3S PR: Add guest MSR parameter for kvmppc_save_tm()/kvmppc_restore_tm()") 7b0e827c6970 ("KVM: PPC: Book3S HV: Factor fake-suspend handling out of kvmppc_save/restore_tm") 009c872a8bc4 ("KVM: PPC: Book3S PR: Move kvmppc_save_tm/kvmppc_restore_tm to separate file")

Record
EUVD-2020-29677
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-7fx7-755p-qmjj 6.5

KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1...

KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability run code in kernel space of a guest VM can cause the host kernel to panic. There were two commits that, according to the reporter, introduced the vulnerability: f024ee098476 ("KVM: PPC: Book3S HV: Pull out TM state save/restore into separate procedures") 87a11bb6a7f7 ("KVM: PPC: Book3S HV: Work around XER[SO] bug in fake suspend mode") The former landed in 4.8, the latter in 4.17. This was fixed without realizing the impact in 4.18 with the following three commits, though it's believed the first is the only strictly necessary commit: 6f597c6b63b6 ("KVM: PPC: Book3S PR: Add guest MSR parameter for kvmppc_save_tm()/kvmppc_restore_tm()") 7b0e827c6970 ("KVM: PPC: Book3S HV: Factor fake-suspend handling out of kvmppc_save/restore_tm") 009c872a8bc4 ("KVM: PPC: Book3S PR: Move kvmppc_save_tm/kvmppc_restore_tm to separate file")

Record
GHSA-7fx7-755p-qmjj
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Weakness
CWE-362
Updated
2026-11-02
NVD 6.5

KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability run code in kernel space of a guest VM can cause the host kernel to panic. There were two commits that, according to the reporter, introduced the vulnerability: f024ee098476 ("KVM: PPC: Book3S HV: Pull out TM state save/restore into separate procedures") 87a11bb6a7f7 ("KVM: PPC: Book3S HV: Work around XER[SO] bug in fake suspend mode") The former landed in 4.8, the latter in 4.17. This was fixed without realizing the impact in 4.18 with the following three commits, though it's believed the first is the only strictly necessary commit: 6f597c6b63b6 ("KVM: PPC: Book3S PR: Add guest MSR parameter for kvmppc_save_tm()/kvmppc_restore_tm()") 7b0e827c6970 ("KVM: PPC: Book3S HV: Factor fake-suspend handling out of kvmppc_save/restore_tm") 009c872a8bc4 ("KVM: PPC: Book3S PR: Move kvmppc_save_tm/kvmppc_restore_tm to separate file")

Record
CVE-2020-8834
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-368, CWE-362
Updated
2026-11-02
OSV 6.5

KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability run code in kernel space of a guest VM can cause the host kernel to panic. There were two commits that, according to the reporter, introduced the vulnerability: f024ee098476 ("KVM: PPC: Book3S HV: Pull out TM state save/restore into separate procedures") 87a11bb6a7f7 ("KVM: PPC: Book3S HV: Work around XER[SO] bug in fake suspend mode") The former landed in 4.8, the latter in 4.17. This was fixed without realizing the impact in 4.18 with the following three commits, though it's believed the first is the only strictly necessary commit: 6f597c6b63b6 ("KVM: PPC: Book3S PR: Add guest MSR parameter for kvmppc_save_tm()/kvmppc_restore_tm()") 7b0e827c6970 ("KVM: PPC: Book3S HV: Factor fake-suspend handling out of kvmppc_save/restore_tm") 009c872a8bc4 ("KVM: PPC: Book3S PR: Move kvmppc_save_tm/kvmppc_restore_tm to separate file")

Record
CVE-2020-8834
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2020-8834 6.5

KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability run code in kernel space of a guest VM can cause the host kernel to panic. There were two commits that, according to the reporter, introduced the vulnerability: f024ee098476 ("KVM: PPC: Book3S HV: Pull out TM state save/restore into separate procedures") 87a11bb6a7f7 ("KVM: PPC: Book3S HV: Work around XER[SO] bug in fake suspend mode") The former landed in 4.8, the latter in 4.17. This was fixed without realizing the impact in 4.18 with the following three commits, though it's believed the first is the only strictly necessary commit: 6f597c6b63b6 ("KVM: PPC: Book3S PR: Add guest MSR parameter for kvmppc_save_tm()/kvmppc_restore_tm()") 7b0e827c6970 ("KVM: PPC: Book3S HV: Factor fake-suspend handling out of kvmppc_save/restore_tm") 009c872a8bc4 ("KVM: PPC: Book3S PR: Move kvmppc_save_tm/kvmppc_restore_tm to separate file")

Record
DEBIAN-CVE-2020-8834
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
Show 14 moreShow less
OSVRHSA-2020:2854 7.0

Red Hat Security Advisory: kernel-alt security and bug fix update

Record
RHSA-2020:2854
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-8834 6.5

KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability run code in kernel space of a guest VM can cause the host kernel to panic. There were two commits that, according to the reporter, introduced the vulnerability: f024ee098476 ("KVM: PPC: Book3S HV: Pull out TM state save/restore into separate procedures") 87a11bb6a7f7 ("KVM: PPC: Book3S HV: Work around XER[SO] bug in fake suspend mode") The former landed in 4.8, the latter in 4.17. This was fixed without realizing the impact in 4.18 with the following three commits, though it's believed the first is the only strictly necessary commit: 6f597c6b63b6 ("KVM: PPC: Book3S PR: Add guest MSR parameter for kvmppc_save_tm()/kvmppc_restore_tm()") 7b0e827c6970 ("KVM: PPC: Book3S HV: Factor fake-suspend handling out of kvmppc_save/restore_tm") 009c872a8bc4 ("KVM: PPC: Book3S PR: Move kvmppc_save_tm/kvmppc_restore_tm to separate file")

Record
UBUNTU-CVE-2020-8834
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2020:0543-1 No score

Security update for the Linux Kernel

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-11669: An issue was discovered on the powerpc platform. arch/powerpc/kernel/idle_book3s.S did not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR, aka CID-53a712bae5dd (bnc#1169390).
  • CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability run code in kernel space of a guest VM can cause the host kernel to panic. There were two commits that, according to the reporter, introduced the vulnerability: f024ee098476 ('KVM: PPC: Book3S HV: Pull out TM state save/restore into separate procedures') 87a11bb6a7f7 ('KVM: PPC: Book3S HV: Work around XER[SO] bug in fake suspend mode') (bnc#1168276).
  • CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL, aka CID-b9258a2cece4 (bnc#1168424).
  • CVE-2019-9458: In the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (bnc#1168295).
  • CVE-2019-3701: An issue was discovered in can_can_gw_rcv in net/can/gw.c. The CAN frame modification rules allow bitwise logical operations that can be also applied to the can_dlc field. The privileged user 'root' with CAP_NET_ADMIN can create a CAN frame modification rule that made the data length code a higher value than the available CAN frame data size. In combination with a configured checksum calculation where the result is stored relatively to the end of the data (e.g. cgw_csum_xor_rel) the tail of the skb (e.g. frag_list pointer in skb_shared_info) can be rewritten which finally can cause a system crash. Because of a missing check, the CAN drivers may write arbitrary content beyond the data registers in the CAN controller's I/O memory when processing can-gw manipulated outgoing frames (bnc#1120386).
  • CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacked validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).
  • CVE-2019-19770: A use-after-free in the debugfs_remove function in fs/debugfs/inode.c was fixed. (bnc#1159198).

The following non-security bugs were fixed:

  • ACPI: watchdog: Fix gas->access_width usage (bsc#1051510).
  • ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro (bsc#1051510).
  • ALSA: ali5451: remove redundant variable capture_flag (bsc#1051510).
  • ALSA: core: Add snd_device_get_state() helper (bsc#1051510).
  • ALSA: core: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: emu10k1: Fix endianness annotations (bsc#1051510).
  • ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated sound on EVGA X99 Classified motherboard (bsc#1051510).
  • ALSA: hda/ca0132 - Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 (git-fixes).
  • ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 (git-fixes).
  • ALSA: hda/realtek - Remove now-unnecessary XPS 13 headphone noise fixups (bsc#1051510).
  • ALSA: hda/realtek - Set principled PC Beep configuration for ALC256 (bsc#1051510).
  • ALSA: hda/realtek - a fake key event is triggered by running shutup (bsc#1051510).
  • ALSA: hda/realtek: Enable mute LED on an HP system (bsc#1051510).
  • ALSA: hda/realtek: Fix pop noise on ALC225 (git-fixes).
  • ALSA: hda: Fix potential access overflow in beep helper (bsc#1051510).
  • ALSA: hda: Use scnprintf() for string truncation (bsc#1051510).
  • ALSA: hda:…
Record
openSUSE-SU-2020:0543-1
Updated
2026-11-02
OSVSUSE-SU-2020:1084-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability to run code in kernel space of a guest VM can cause the host kernel to panic (bnc#1168276).
  • CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424).
  • CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).
  • CVE-2020-8647: Fixed a use-after-free vulnerability in the vc_do_resize function in drivers/tty/vt/vt.c (bnc#1162929).
  • CVE-2020-8649: Fixed a use-after-free vulnerability in the vgacon_invert_region function in drivers/video/console/vgacon.c (bnc#1162931).
  • CVE-2020-9383: Fixed an issue in set_fdc in drivers/block/floppy.c, which leads to a wait_til_ready out-of-bounds read (bnc#1165111).
  • CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295).
  • CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386).
  • CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285).
  • CVE-2019-19770: Fixed a use-after-free in the debugfs_remove function (bsc#1159198).
  • CVE-2018-20836: Fixed a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, which potentially cloud have led to a use-after-free (bnc#1134395).

The following non-security bugs were fixed:

  • ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro (bsc#1051510).
  • ACPI: watchdog: Fix gas->access_width usage (bsc#1051510).
  • ALSA: ali5451: remove redundant variable capture_flag (bsc#1051510).
  • ALSA: core: Add snd_device_get_state() helper (bsc#1051510).
  • ALSA: core: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: emu10k1: Fix endianness annotations (bsc#1051510).
  • ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated sound on EVGA X99 Classified motherboard (bsc#1051510).
  • ALSA: hda/ca0132 - Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda_codec: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda: default enable CA0132 DSP support (bsc#1051510).
  • ALSA: hda/realtek - Add Headset Button supported for ThinkPad X1 (bsc#1111666).
  • ALSA: hda/realtek - Add Headset Mic supported (bsc#1111666).
  • ALSA: hda/realtek - Add more codec supported Headset Button (bsc#1111666).
  • ALSA: hda/realtek - a fake key event is triggered by running shutup (bsc#1051510).
  • ALSA: hda/realtek - Apply quirk for MSI GP63, too (bsc#1111666).
  • ALSA: hda/realtek - Apply quirk for yet another MSI laptop (bsc#1111666).
  • ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 (git-fixes).
  • ALSA: hda/realtek: Enable mute LED on an HP system (bsc#1051510).
  • ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 (git-fixes).
  • ALSA: hda/realtek - Enable the headset of ASUS B9450FA with ALC294 (bsc#1111666).
  • ALSA: hda/realtek - Fix a regression for mute led on Lenovo Carbon X1 (bsc#1111666).
  • ALSA: hda/realtek: Fix pop noise on ALC225 (git-fixes).
  • ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master (bsc#1111666).
  • ALSA: hda/realtek - Remove now-unnecessary XPS 13 headphone noise fixups (bsc#1051510).
  • ALSA: hda/realtek - Set principled PC Beep configuration for ALC256…
Record
SUSE-SU-2020:1084-1
Updated
2026-11-02
OSVSUSE-SU-2020:1085-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 RT kernel was updated to 3.12.31 to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability to run code in kernel space of a guest VM can cause the host kernel to panic (bnc#1168276).
  • CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424).
  • CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).
  • CVE-2020-8647: Fixed a use-after-free vulnerability in the vc_do_resize function in drivers/tty/vt/vt.c (bnc#1162929).
  • CVE-2020-8649: Fixed a use-after-free vulnerability in the vgacon_invert_region function in drivers/video/console/vgacon.c (bnc#1162931).
  • CVE-2020-9383: Fixed an issue in set_fdc in drivers/block/floppy.c, which leads to a wait_til_ready out-of-bounds read (bnc#1165111).
  • CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295).
  • CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386).
  • CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285).
  • CVE-2019-19770: Fixed a use-after-free in the debugfs_remove function (bsc#1159198).

The following non-security bugs were fixed:

  • ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro (bsc#1051510).
  • ACPI: watchdog: Fix gas->access_width usage (bsc#1051510).
  • ALSA: ali5451: remove redundant variable capture_flag (bsc#1051510).
  • ALSA: core: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: emu10k1: Fix endianness annotations (bsc#1051510).
  • ALSA: hda/ca0132 - Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda_codec: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda: Fix potential access overflow in beep helper (bsc#1051510).
  • ALSA: hda/realtek: Fix pop noise on ALC225 (git-fixes).
  • ALSA: hda/realtek - Set principled PC Beep configuration for ALC256 (bsc#1051510).
  • ALSA: hda: remove redundant assignment to variable timeout (bsc#1051510).
  • ALSA: hda: Use scnprintf() for string truncation (bsc#1051510).
  • ALSA: hdsp: remove redundant assignment to variable err (bsc#1051510).
  • ALSA: ice1724: Fix invalid access for enumerated ctl items (bsc#1051510).
  • ALSA: info: remove redundant assignment to variable c (bsc#1051510).
  • ALSA: korg1212: fix if-statement empty body warnings (bsc#1051510).
  • ALSA: line6: Fix endless MIDI read loop (git-fixes).
  • ALSA: pcm: oss: Avoid plugin buffer overflow (git-fixes).
  • ALSA: pcm: oss: Fix regression by buffer overflow fix (bsc#1051510).
  • ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc() checks (git-fixes).
  • ALSA: seq: oss: Fix running status after receiving sysex (git-fixes).
  • ALSA: seq: virmidi: Fix running status after receiving sysex (git-fixes).
  • ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status (bsc#1051510).
  • ALSA: via82xx: Fix endianness annotations (bsc#1051510).
  • ASoC: dapm: Correct DAPM handling of active widgets during shutdown (bsc#1051510).
  • ASoC: Intel: atom: Take the drv->lock mutex before calling sst_send_slot_map() (bsc#1051510).
  • ASoC: Intel: mrfld: fix incorrect check on p->sink (bsc#1051510).
  • ASoC: Intel: mrfld: return error codes when an error occurs (bsc#1051510).
  • ASoC: jz4740-i2s: Fix divider written at incorrect offset in…
Record
SUSE-SU-2020:1085-1
Updated
2026-11-02
OSVSUSE-SU-2020:1087-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability to run code in kernel space of a guest VM can cause the host kernel to panic (bnc#1168276).
  • CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424).
  • CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).
  • CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295).
  • CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386).
  • CVE-2019-19770: Fixed a use-after-free in the debugfs_remove function (bsc#1159198).
  • CVE-2020-11669: Fixed an issue where arch/powerpc/kernel/idle_book3s.S did not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR (bnc#1169390).
  • CVE-2020-8647: There was a use-after-free vulnerability in the vc_do_resize function in drivers/tty/vt/vt.c (bnc#1162929).
  • CVE-2020-8649: There was a use-after-free vulnerability in the vgacon_invert_region function in drivers/video/console/vgacon.c (bnc#1162931).
  • CVE-2020-9383: An issue was discovered set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it (bnc#1165111).
  • CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285).
  • CVE-2020-2732: Fixed a flaw in the KVM hypervisor instruction emulation for L2 guests. Under some circumstances, an L2 guest may have tricked the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest (bnc#1163971).

The following non-security bugs were fixed:

  • ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro (bsc#1051510).
  • ACPI: watchdog: Fix gas->access_width usage (bsc#1051510).
  • ahci: Add support for Amazon's Annapurna Labs SATA controller (bsc#1169013).
  • ALSA: ali5451: remove redundant variable capture_flag (bsc#1051510).
  • ALSA: core: Add snd_device_get_state() helper (bsc#1051510).
  • ALSA: core: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: emu10k1: Fix endianness annotations (bsc#1051510).
  • ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated sound on EVGA X99 Classified motherboard (bsc#1051510).
  • ALSA: hda/ca0132 - Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda_codec: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda: default enable CA0132 DSP support (bsc#1051510).
  • ALSA: hda: Fix potential access overflow in beep helper (bsc#1051510).
  • ALSA: hda/realtek - Add Headset Button supported for ThinkPad X1 (bsc#1111666).
  • ALSA: hda/realtek - Add Headset Mic supported (bsc#1111666).
  • ALSA: hda/realtek - Add more codec supported Headset Button (bsc#1111666).
  • ALSA: hda/realtek - a fake key event is triggered by running shutup (bsc#1051510).
  • ALSA: hda/realtek - Apply quirk for MSI GP63, too (bsc#1111666).
  • ALSA: hda/realtek - Apply quirk for yet another MSI laptop (bsc#1111666).
  • ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 (git-fixes).
  • ALSA: hda/realtek: Enable mute LED on an HP system (bsc#1051510).
  • ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662…
Record
SUSE-SU-2020:1087-1
Updated
2026-11-02
OSVSUSE-SU-2020:1118-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability to run code in kernel space of a guest VM can cause the host kernel to panic (bnc#1168276).
  • CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424).
  • CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).
  • CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295).
  • CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386).
  • CVE-2019-19770: Fixed a use-after-free in the debugfs_remove function (bsc#1159198).
  • CVE-2020-11669: Fixed an issue where arch/powerpc/kernel/idle_book3s.S did not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR (bnc#1169390).
  • CVE-2020-8647: There was a use-after-free vulnerability in the vc_do_resize function in drivers/tty/vt/vt.c (bnc#1162929).
  • CVE-2020-8649: There was a use-after-free vulnerability in the vgacon_invert_region function in drivers/video/console/vgacon.c (bnc#1162931).
  • CVE-2020-9383: An issue was discovered set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it (bnc#1165111).
  • CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285).
  • CVE-2018-20836: Fixed an issue where a race condition in smp_task_timedout() and smp_task_done() could lead to a use-after-free (bnc#1134395).

The following non-security bugs were fixed:

  • ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro (bsc#1051510).
  • ACPI: watchdog: Fix gas->access_width usage (bsc#1051510).
  • ahci: Add support for Amazon's Annapurna Labs SATA controller (bsc#1169013).
  • ALSA: ali5451: remove redundant variable capture_flag (bsc#1051510).
  • ALSA: core: Add snd_device_get_state() helper (bsc#1051510).
  • ALSA: core: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: emu10k1: Fix endianness annotations (bsc#1051510).
  • ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated sound on EVGA X99 Classified motherboard (bsc#1051510).
  • ALSA: hda/ca0132 - Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda_codec: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda: default enable CA0132 DSP support (bsc#1051510).
  • ALSA: hda: Fix potential access overflow in beep helper (bsc#1051510).
  • ALSA: hda/realtek - Add Headset Button supported for ThinkPad X1 (bsc#1111666).
  • ALSA: hda/realtek - Add Headset Mic supported (bsc#1111666).
  • ALSA: hda/realtek - Add more codec supported Headset Button (bsc#1111666).
  • ALSA: hda/realtek - a fake key event is triggered by running shutup (bsc#1051510).
  • ALSA: hda/realtek - Apply quirk for MSI GP63, too (bsc#1111666).
  • ALSA: hda/realtek - Apply quirk for yet another MSI laptop (bsc#1111666).
  • ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 (git-fixes).
  • ALSA: hda/realtek: Enable mute LED on an HP system (bsc#1051510).
  • ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 (git-fixes).
  • ALSA: hda/realtek - Enable the headset of ASUS B9450FA with ALC294 (bsc#1111666).
  • ALSA: hda/realtek…
Record
SUSE-SU-2020:1118-1
Updated
2026-11-02
OSVSUSE-SU-2020:1119-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability to run code in kernel space of a guest VM can cause the host kernel to panic (bnc#1168276).
  • CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424).
  • CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).
  • CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295).
  • CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386).
  • CVE-2019-19770: Fixed a use-after-free in the debugfs_remove function (bsc#1159198).
  • CVE-2020-11669: Fixed an issue where arch/powerpc/kernel/idle_book3s.S did not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR (bnc#1169390).
  • CVE-2020-8647: There was a use-after-free vulnerability in the vc_do_resize function in drivers/tty/vt/vt.c (bnc#1162929).
  • CVE-2020-8649: There was a use-after-free vulnerability in the vgacon_invert_region function in drivers/video/console/vgacon.c (bnc#1162931).
  • CVE-2020-9383: An issue was discovered set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it (bnc#1165111).
  • CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285).

The following non-security bugs were fixed:

  • ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro (bsc#1051510).
  • ACPI: watchdog: Fix gas->access_width usage (bsc#1051510).
  • ALSA: ali5451: remove redundant variable capture_flag (bsc#1051510).
  • ALSA: core: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: dummy: Fix PCM format loop in proc output (bsc#1111666).
  • ALSA: emu10k1: Fix endianness annotations (bsc#1051510).
  • ALSA: hda/ca0132 - Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda_codec: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda: Fix potential access overflow in beep helper (bsc#1051510).
  • ALSA: hda/realtek: Fix pop noise on ALC225 (git-fixes).
  • ALSA: hda/realtek - Set principled PC Beep configuration for ALC256 (bsc#1051510).
  • ALSA: hda: remove redundant assignment to variable timeout (bsc#1051510).
  • ALSA: hda: Use scnprintf() for string truncation (bsc#1051510).
  • ALSA: hdsp: remove redundant assignment to variable err (bsc#1051510).
  • ALSA: ice1724: Fix invalid access for enumerated ctl items (bsc#1051510).
  • ALSA: info: remove redundant assignment to variable c (bsc#1051510).
  • ALSA: korg1212: fix if-statement empty body warnings (bsc#1051510).
  • ALSA: line6: Fix endless MIDI read loop (git-fixes).
  • ALSA: pcm: oss: Avoid plugin buffer overflow (git-fixes).
  • ALSA: pcm: oss: Fix regression by buffer overflow fix (bsc#1051510).
  • ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc() checks (git-fixes).
  • ALSA: seq: oss: Fix running status after receiving sysex (git-fixes).
  • ALSA: seq: virmidi: Fix running status after receiving sysex (git-fixes).
  • ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status (bsc#1051510).
  • ALSA: via82xx: Fix endianness annotations (bsc#1051510).
  • ASoC: dapm: Correct DAPM handling of active widgets…
Record
SUSE-SU-2020:1119-1
Updated
2026-11-02
OSVSUSE-SU-2020:1123-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability to run code in kernel space of a guest VM can cause the host kernel to panic (bnc#1168276).
  • CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424).
  • CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).
  • CVE-2020-8647: Fixed a use-after-free vulnerability in the vc_do_resize function in drivers/tty/vt/vt.c (bnc#1162929).
  • CVE-2020-8649: Fixed a use-after-free vulnerability in the vgacon_invert_region function in drivers/video/console/vgacon.c (bnc#1162931).
  • CVE-2020-9383: Fixed an issue in set_fdc in drivers/block/floppy.c, which leads to a wait_til_ready out-of-bounds read (bnc#1165111).
  • CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295).
  • CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386).
  • CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285).
  • CVE-2019-19770: Fixed a use-after-free in the debugfs_remove function (bsc#1159198).

The following non-security bugs were fixed:

  • ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro (bsc#1051510).
  • ACPI: watchdog: Fix gas->access_width usage (bsc#1051510).
  • ahci: Add support for Amazon's Annapurna Labs SATA controller (bsc#1169013).
  • ALSA: ali5451: remove redundant variable capture_flag (bsc#1051510).
  • ALSA: core: Add snd_device_get_state() helper (bsc#1051510).
  • ALSA: core: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: emu10k1: Fix endianness annotations (bsc#1051510).
  • ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated sound on EVGA X99 Classified motherboard (bsc#1051510).
  • ALSA: hda/ca0132 - Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda_codec: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda: default enable CA0132 DSP support (bsc#1051510).
  • ALSA: hda/realtek - Add Headset Button supported for ThinkPad X1 (bsc#1111666).
  • ALSA: hda/realtek - Add Headset Mic supported (bsc#1111666).
  • ALSA: hda/realtek - Add more codec supported Headset Button (bsc#1111666).
  • ALSA: hda/realtek - a fake key event is triggered by running shutup (bsc#1051510).
  • ALSA: hda/realtek - Apply quirk for MSI GP63, too (bsc#1111666).
  • ALSA: hda/realtek - Apply quirk for yet another MSI laptop (bsc#1111666).
  • ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 (git-fixes).
  • ALSA: hda/realtek: Enable mute LED on an HP system (bsc#1051510).
  • ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 (git-fixes).
  • ALSA: hda/realtek - Enable the headset of ASUS B9450FA with ALC294 (bsc#1111666).
  • ALSA: hda/realtek - Fix a regression for mute led on Lenovo Carbon X1 (bsc#1111666).
  • ALSA: hda/realtek: Fix pop noise on ALC225 (git-fixes).
  • ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master (bsc#1111666).
  • ALSA: hda/realtek - Remove now-unnecessary XPS 13 headphone noise fixups (bsc#1051510).
  • ALSA: hda/realtek - Set principled PC Beep configuration for ALC256 (bsc#1051510).
  • ALSA: hda: remove redundant assignment to variable timeout (bsc#1051510).
  • ALSA: hda: Use scnprintf()…
Record
SUSE-SU-2020:1123-1
Updated
2026-11-02
OSVSUSE-SU-2020:1141-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability to run code in kernel space of a guest VM can cause the host kernel to panic (bnc#1168276).
  • CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424).
  • CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).
  • CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295).
  • CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386).
  • CVE-2019-19770: Fixed a use-after-free in the debugfs_remove function (bsc#1159198).
  • CVE-2020-11669: Fixed an issue where arch/powerpc/kernel/idle_book3s.S did not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR (bnc#1169390).
  • CVE-2020-8647: There was a use-after-free vulnerability in the vc_do_resize function in drivers/tty/vt/vt.c (bnc#1162929).
  • CVE-2020-8649: There was a use-after-free vulnerability in the vgacon_invert_region function in drivers/video/console/vgacon.c (bnc#1162931).
  • CVE-2020-9383: An issue was discovered set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it (bnc#1165111).
  • CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285).

The following non-security bugs were fixed:

  • ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro (bsc#1051510).
  • ACPI: watchdog: Fix gas->access_width usage (bsc#1051510).
  • ALSA: ali5451: remove redundant variable capture_flag (bsc#1051510).
  • ALSA: core: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: emu10k1: Fix endianness annotations (bsc#1051510).
  • ALSA: hda/ca0132 - Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda_codec: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda: Fix potential access overflow in beep helper (bsc#1051510).
  • ALSA: hda/realtek: Fix pop noise on ALC225 (git-fixes).
  • ALSA: hda/realtek - Set principled PC Beep configuration for ALC256 (bsc#1051510).
  • ALSA: hda: remove redundant assignment to variable timeout (bsc#1051510).
  • ALSA: hda: Use scnprintf() for string truncation (bsc#1051510).
  • ALSA: hdsp: remove redundant assignment to variable err (bsc#1051510).
  • ALSA: ice1724: Fix invalid access for enumerated ctl items (bsc#1051510).
  • ALSA: info: remove redundant assignment to variable c (bsc#1051510).
  • ALSA: korg1212: fix if-statement empty body warnings (bsc#1051510).
  • ALSA: line6: Fix endless MIDI read loop (git-fixes).
  • ALSA: pcm: oss: Avoid plugin buffer overflow (git-fixes).
  • ALSA: pcm: oss: Fix regression by buffer overflow fix (bsc#1051510).
  • ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc() checks (git-fixes).
  • ALSA: seq: oss: Fix running status after receiving sysex (git-fixes).
  • ALSA: seq: virmidi: Fix running status after receiving sysex (git-fixes).
  • ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status (bsc#1051510).
  • ALSA: via82xx: Fix endianness annotations (bsc#1051510).
  • ASoC: dapm: Correct DAPM handling of active widgets during shutdown (bsc#1051510).
  • ASoC: Intel: atom: Take the drv->lock mutex…
Record
SUSE-SU-2020:1141-1
Updated
2026-11-02
OSVSUSE-SU-2020:1142-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability to run code in kernel space of a guest VM can cause the host kernel to panic (bnc#1168276).
  • CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424).
  • CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).
  • CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295).
  • CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386).
  • CVE-2019-19770: Fixed a use-after-free in the debugfs_remove function (bsc#1159198).
  • CVE-2020-11669: Fixed an issue where arch/powerpc/kernel/idle_book3s.S did not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR (bnc#1169390).
  • CVE-2020-2732: Fixed an issue where under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest (bnc#1163971).
  • CVE-2020-8647: There was a use-after-free vulnerability in the vc_do_resize function in drivers/tty/vt/vt.c (bnc#1162929 1164078).
  • CVE-2020-8649: There was a use-after-free vulnerability in the vgacon_invert_region function in drivers/video/console/vgacon.c (bnc#1162929 1162931).
  • CVE-2020-9383: An issue was discovered set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it (bnc#1165111).
  • CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285).
  • CVE-2018-20836: Fixed an issue where a race condition in smp_task_timedout() and smp_task_done() cloud lead to a use-after-free (bnc#1134395).

The following non-security bugs were fixed:

  • ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro (bsc#1051510).
  • ACPI: watchdog: Fix gas->access_width usage (bsc#1051510).
  • ahci: Add support for Amazon's Annapurna Labs SATA controller (bsc#1169013).
  • ALSA: ali5451: remove redundant variable capture_flag (bsc#1051510).
  • ALSA: core: Add snd_device_get_state() helper (bsc#1051510).
  • ALSA: core: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: emu10k1: Fix endianness annotations (bsc#1051510).
  • ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated sound on EVGA X99 Classified motherboard (bsc#1051510).
  • ALSA: hda/ca0132 - Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda_codec: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda: default enable CA0132 DSP support (bsc#1051510).
  • ALSA: hda: Fix potential access overflow in beep helper (bsc#1051510).
  • ALSA: hda/realtek - Add Headset Button supported for ThinkPad X1 (bsc#1111666).
  • ALSA: hda/realtek - Add Headset Mic supported (bsc#1111666).
  • ALSA: hda/realtek - Add more codec supported Headset Button (bsc#1111666).
  • ALSA: hda/realtek - a fake key event is triggered by running shutup (bsc#1051510).
  • ALSA: hda/realtek - Apply quirk for MSI GP63, too (bsc#1111666).
  • ALSA: hda/realtek - Apply quirk for yet another MSI laptop (bsc#1111666).
  • ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 (git-fixes).
  • ALSA: hda/realtek: Enable mute LED on an HP…
Record
SUSE-SU-2020:1142-1
Updated
2026-11-02
OSVSUSE-SU-2020:1146-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability to run code in kernel space of a guest VM can cause the host kernel to panic (bnc#1168276).
  • CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424).
  • CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).
  • CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295).
  • CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386).
  • CVE-2019-19770: Fixed a use-after-free in the debugfs_remove function (bsc#1159198).
  • CVE-2020-11669: Fixed an issue where arch/powerpc/kernel/idle_book3s.S did not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR (bnc#1169390).

The following non-security bugs were fixed:

  • ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro (bsc#1051510).
  • ACPI: watchdog: Fix gas->access_width usage (bsc#1051510).
  • ahci: Add support for Amazon's Annapurna Labs SATA controller (bsc#1169013).
  • ALSA: ali5451: remove redundant variable capture_flag (bsc#1051510).
  • ALSA: core: Add snd_device_get_state() helper (bsc#1051510).
  • ALSA: core: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: emu10k1: Fix endianness annotations (bsc#1051510).
  • ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated sound on EVGA X99 Classified motherboard (bsc#1051510).
  • ALSA: hda/ca0132 - Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda_codec: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda: default enable CA0132 DSP support (bsc#1051510).
  • ALSA: hda: Fix potential access overflow in beep helper (bsc#1051510).
  • ALSA: hda/realtek - a fake key event is triggered by running shutup (bsc#1051510).
  • ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 (git-fixes).
  • ALSA: hda/realtek: Enable mute LED on an HP system (bsc#1051510).
  • ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 (git-fixes).
  • ALSA: hda/realtek: Fix pop noise on ALC225 (git-fixes).
  • ALSA: hda/realtek - Remove now-unnecessary XPS 13 headphone noise fixups (bsc#1051510).
  • ALSA: hda/realtek - Set principled PC Beep configuration for ALC256 (bsc#1051510).
  • ALSA: hda: remove redundant assignment to variable timeout (bsc#1051510).
  • ALSA: hda: Use scnprintf() for string truncation (bsc#1051510).
  • ALSA: hdsp: remove redundant assignment to variable err (bsc#1051510).
  • ALSA: ice1724: Fix invalid access for enumerated ctl items (bsc#1051510).
  • ALSA: info: remove redundant assignment to variable c (bsc#1051510).
  • ALSA: korg1212: fix if-statement empty body warnings (bsc#1051510).
  • ALSA: line6: Fix endless MIDI read loop (git-fixes).
  • ALSA: pcm: Fix superfluous snprintf() usage (bsc#1051510).
  • ALSA: pcm.h: add for_each_pcm_streams() (bsc#1051510).
  • ALSA: pcm: oss: Avoid plugin buffer overflow (git-fixes).
  • ALSA: pcm: oss: Fix regression by buffer overflow fix (bsc#1051510).
  • ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc() checks (git-fixes).
  • ALSA: pcm: oss: Unlock mutex temporarily for sleeping at read/write (bsc#1051510).
  • ALSA: pcm: Use a macro for parameter masks to reduce the needed cast…
Record
SUSE-SU-2020:1146-1
Updated
2026-11-02
OSVSUSE-SU-2020:1663-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel was updated receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it. This attack is known as Special Register Buffer Data Sampling (SRBDS) or 'CrossTalk' (bsc#1154824).
  • CVE-2020-9383: Fixed an out-of-bounds read due to improper error condition check of FDC index (bsc#1165111).
  • CVE-2020-8992: Fixed an issue which could have allowed attackers to cause a soft lockup via a crafted journal size (bsc#1164069).
  • CVE-2020-8834: Fixed a stack corruption which could have lead to kernel panic (bsc#1168276).
  • CVE-2020-8649: Fixed a use-after-free in the vgacon_invert_region function in drivers/video/console/vgacon.c (bsc#1162931).
  • CVE-2020-8648: Fixed a use-after-free in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bsc#1162928).
  • CVE-2020-8647: Fixed a use-after-free in the vc_do_resize function in drivers/tty/vt/vt.c (bsc#1162929).
  • CVE-2020-8428: Fixed a use-after-free which could have allowed local users to cause a denial of service (bsc#1162109).
  • CVE-2020-7053: Fixed a use-after-free in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c (bsc#1160966).
  • CVE-2020-2732: Fixed an issue affecting Intel CPUs where an L2 guest may trick the L0 hypervisor into accessing sensitive L1 resources (bsc#1163971).
  • CVE-2020-13143: Fixed an out-of-bounds read in gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c (bsc#1171982).
  • CVE-2020-12769: Fixed an issue which could have allowed attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one (bsc#1171983).
  • CVE-2020-12657: An a use-after-free in block/bfq-iosched.c (bsc#1171205).
  • CVE-2020-12656: Fixed an improper handling of certain domain_release calls leadingch could have led to a memory leak (bsc#1171219).
  • CVE-2020-12655: Fixed an issue which could have allowed attackers to trigger a sync of excessive duration via an XFS v5 image with crafted metadata (bsc#1171217).
  • CVE-2020-12654: Fixed an issue in he wifi driver which could have allowed a remote AP to trigger a heap-based buffer overflow (bsc#1171202).
  • CVE-2020-12653: Fixed an issue in the wifi driver which could have allowed local users to gain privileges or cause a denial of service (bsc#1171195).
  • CVE-2020-12652: Fixed an issue which could have allowed local users to hold an incorrect lock during the ioctl operation and trigger a race condition (bsc#1171218).
  • CVE-2020-12464: Fixed a use-after-free due to a transfer without a reference (bsc#1170901).
  • CVE-2020-12114: Fixed a pivot_root race condition which could have allowed local users to cause a denial of service (panic) by corrupting a mountpoint reference counter (bsc#1171098).
  • CVE-2020-11669: Fixed an issue where arch/powerpc/kernel/idle_book3s.S did not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR (bnc#1169390).
  • CVE-2020-11609: Fixed a null pointer dereference due to improper handling of descriptors (bsc#1168854).
  • CVE-2020-11608: Fixed a null pointer dereferences via a crafted USB (bsc#1168829).
  • CVE-2020-11494: Fixed an issue which could have allowed attackers to read uninitialized can_frame data (bsc#1168424).
  • CVE-2020-10942: Fixed a kernel stack corruption via crafted system calls (bsc#1167629).
  • CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172317).
  • CVE-2020-10751: Fixed an improper implementation in SELinux LSM hook where it was assumed that an skb would only contain a single netlink message (bsc#1171189).
  • CVE-2020-10732: Fixed kernel data leak in userspace coredumps due to uninitialized data (bsc#1171220).
  • CVE-2020-10720: Fixed a use-after-free read in napi_gro_frags() (bsc#1170778).
  • CVE-2020-10711: Fixed a null pointer…
Record
SUSE-SU-2020:1663-1
Updated
2026-11-02
OSVUSN-4318-1 No score

linux, linux-hwe vulnerabilities

Al Viro discovered that the vfs layer in the Linux kernel contained a use- after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information (kernel memory). (CVE-2020-8428)

Gustavo Romero and Paul Mackerras discovered that the KVM implementation in the Linux kernel for PowerPC processors did not properly keep guest state separate from host state. A local attacker in a KVM guest could use this to cause a denial of service (host system crash). (CVE-2020-8834)

Shijie Luo discovered that the ext4 file system implementation in the Linux kernel did not properly check for a too-large journal size. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (soft lockup). (CVE-2020-8992)

Record
USN-4318-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux
Debian:12
 before 4.18.6-1
4.18.6-1
linux
Debian:13
 before 4.18.6-1
4.18.6-1
linux
Debian:14
 before 4.18.6-1
4.18.6-1
kernel
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:4.14.0-115.26.1.el7a
0:4.14.0-115.26.1.el7a
kernel-abi-whitelists
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:4.14.0-115.26.1.el7a
0:4.14.0-115.26.1.el7a
kernel-alt
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:4.14.0-115.26.1.el7a
0:4.14.0-115.26.1.el7a
kernel-bootwrapper
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:4.14.0-115.26.1.el7a
0:4.14.0-115.26.1.el7a
kernel-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:4.14.0-115.26.1.el7a
0:4.14.0-115.26.1.el7a
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:4.14.0-115.26.1.el7a
0:4.14.0-115.26.1.el7a
kernel-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:4.14.0-115.26.1.el7a
0:4.14.0-115.26.1.el7a
Show 132 moreShow less
Affected packages
PackageAffectedFixed
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:4.14.0-115.26.1.el7a
0:4.14.0-115.26.1.el7a
kernel-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:4.14.0-115.26.1.el7a
0:4.14.0-115.26.1.el7a
kernel-doc
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:4.14.0-115.26.1.el7a
0:4.14.0-115.26.1.el7a
kernel-tools
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:4.14.0-115.26.1.el7a
0:4.14.0-115.26.1.el7a
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:4.14.0-115.26.1.el7a
0:4.14.0-115.26.1.el7a
kernel-tools-libs
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:4.14.0-115.26.1.el7a
0:4.14.0-115.26.1.el7a
perf
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:4.14.0-115.26.1.el7a
0:4.14.0-115.26.1.el7a
perf-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:4.14.0-115.26.1.el7a
0:4.14.0-115.26.1.el7a
python-perf
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:4.14.0-115.26.1.el7a
0:4.14.0-115.26.1.el7a
python-perf-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:4.14.0-115.26.1.el7a
0:4.14.0-115.26.1.el7a
kernel-debug-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:4.14.0-115.26.1.el7a
0:4.14.0-115.26.1.el7a
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 12 CVEs
 before 0:4.14.0-115.26.1.el7a
0:4.14.0-115.26.1.el7a
kernel-rt
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 11 CVEs
 before 4.12.14-10.8.1
4.12.14-10.8.1
kernel-rt_debug
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 11 CVEs
 before 4.12.14-10.8.1
4.12.14-10.8.1
kernel-source-rt
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 11 CVEs
 before 4.12.14-10.8.1
4.12.14-10.8.1
kernel-syms-rt
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 11 CVEs
 before 4.12.14-10.8.1
4.12.14-10.8.1
kernel-rt
SUSE:Linux Enterprise Real Time 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-8.18.1
4.12.14-8.18.1
kernel-rt_debug
SUSE:Linux Enterprise Real Time 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-8.18.1
4.12.14-8.18.1
kernel-source-rt
SUSE:Linux Enterprise Real Time 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-8.18.1
4.12.14-8.18.1
kernel-syms-rt
SUSE:Linux Enterprise Real Time 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-8.18.1
4.12.14-8.18.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
From an advisory covering 12 CVEs
 before 4.12.14-8.30.1
4.12.14-8.30.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
From an advisory covering 12 CVEs
 before 4.12.14-8.30.1
4.12.14-8.30.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
From an advisory covering 12 CVEs
 before 4.12.14-8.30.1
4.12.14-8.30.1
kernel-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 12 CVEs
 before 4.12.14-16.13.1
4.12.14-16.13.1
kernel-source-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 12 CVEs
 before 4.12.14-16.13.1
4.12.14-16.13.1
kernel-syms-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 12 CVEs
 before 4.12.14-16.13.1
4.12.14-16.13.1
kernel-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 12 CVEs
 before 4.12.14-16.13.1
4.12.14-16.13.1
kernel-source-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 12 CVEs
 before 4.12.14-16.13.1
4.12.14-16.13.1
kernel-syms-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 12 CVEs
 before 4.12.14-16.13.1
4.12.14-16.13.1
kernel-azure
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-6.40.1
4.12.14-6.40.1
kernel-source-azure
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-6.40.1
4.12.14-6.40.1
kernel-syms-azure
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-6.40.1
4.12.14-6.40.1
kernel-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-6.40.1
4.12.14-6.40.1
kernel-source-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-6.40.1
4.12.14-6.40.1
kernel-syms-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-6.40.1
4.12.14-6.40.1
kernel-rt
SUSE:Real Time Module 15 SP1
From an advisory covering 10 CVEs
 before 4.12.14-14.23.1
4.12.14-14.23.1
kernel-rt_debug
SUSE:Real Time Module 15 SP1
From an advisory covering 10 CVEs
 before 4.12.14-14.23.1
4.12.14-14.23.1
kernel-source-rt
SUSE:Real Time Module 15 SP1
From an advisory covering 10 CVEs
 before 4.12.14-14.23.1
4.12.14-14.23.1
kernel-syms-rt
SUSE:Real Time Module 15 SP1
From an advisory covering 10 CVEs
 before 4.12.14-14.23.1
4.12.14-14.23.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-95.51.1
4.12.14-95.51.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-95.51.1
4.12.14-95.51.1
kgraft-patch-SLE12-SP4_Update_13
SUSE:Linux Enterprise Live Patching 12 SP4
From an advisory covering 11 CVEs
 before 1-6.3.1
1-6.3.1
kernel-docs
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-95.51.1
4.12.14-95.51.1
kernel-obs-build
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-95.51.1
4.12.14-95.51.1
kernel-default
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-95.51.1
4.12.14-95.51.1
kernel-source
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-95.51.1
4.12.14-95.51.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-95.51.1
4.12.14-95.51.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-95.51.1
4.12.14-95.51.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-95.51.1
4.12.14-95.51.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-95.51.1
4.12.14-95.51.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 12 SP4
From an advisory covering 11 CVEs
 before 4.12.14-95.51.1
4.12.14-95.51.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 12 SP5
From an advisory covering 13 CVEs
 before 4.12.14-122.20.1
4.12.14-122.20.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 13 CVEs
 before 4.12.14-122.20.1
4.12.14-122.20.1
kgraft-patch-SLE12-SP5_Update_4
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 13 CVEs
 before 1-8.3.1
1-8.3.1
kernel-docs
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 13 CVEs
 before 4.12.14-122.20.1
4.12.14-122.20.1
kernel-obs-build
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 13 CVEs
 before 4.12.14-122.20.1
4.12.14-122.20.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 13 CVEs
 before 4.12.14-122.20.1
4.12.14-122.20.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 13 CVEs
 before 4.12.14-122.20.1
4.12.14-122.20.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 13 CVEs
 before 4.12.14-122.20.1
4.12.14-122.20.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 13 CVEs
 before 4.12.14-122.20.1
4.12.14-122.20.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 13 CVEs
 before 4.12.14-122.20.1
4.12.14-122.20.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 13 CVEs
 before 4.12.14-122.20.1
4.12.14-122.20.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 12 SP5
From an advisory covering 13 CVEs
 before 4.12.14-122.20.1
4.12.14-122.20.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 7 CVEs
 before 4.12.14-197.40.1
4.12.14-197.40.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 7 CVEs
 before 4.12.14-197.40.1
4.12.14-197.40.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 7 CVEs
 before 4.12.14-197.40.1
4.12.14-197.40.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 7 CVEs
 before 4.12.14-197.40.1
4.12.14-197.40.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 7 CVEs
 before 4.12.14-197.40.1
4.12.14-197.40.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 7 CVEs
 before 4.12.14-197.40.1
4.12.14-197.40.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 7 CVEs
 before 4.12.14-197.40.1
4.12.14-197.40.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP1
From an advisory covering 7 CVEs
 before 4.12.14-197.40.1
4.12.14-197.40.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP1
From an advisory covering 7 CVEs
 before 4.12.14-197.40.1
4.12.14-197.40.1
kernel-livepatch-SLE15-SP1_Update_11
SUSE:Linux Enterprise Live Patching 15 SP1
From an advisory covering 7 CVEs
 before 1-3.3.1
1-3.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP1
From an advisory covering 7 CVEs
 before 4.12.14-197.40.1
4.12.14-197.40.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP1
From an advisory covering 7 CVEs
 before 4.12.14-197.40.1
4.12.14-197.40.1
kernel-default
SUSE:Linux Enterprise Live Patching 15
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-livepatch-SLE15_Update_18
SUSE:Linux Enterprise Live Patching 15
From an advisory covering 55 CVEs
 before 1-1.5.1
1-1.5.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-vanilla
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-vanilla
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-default
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-docs
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-obs-build
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-source
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-syms
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-vanilla
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
kernel-vanilla
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 55 CVEs
 before 4.12.14-150.52.1
4.12.14-150.52.1
linux-hwe
Ubuntu:16.04:LTS
 before 4.15.0-96.97~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-96.97~16.04.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 All versions, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
 None known
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux
Ubuntu:18.04:LTS
 before 4.15.0-96.97, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 41 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.92
4.15.0-96.97
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2018.18, plus listed versions
4.15.0-2000.4
4.15.0-2018.18
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2006.7, plus listed versions
4.15.0-1002.2
4.15.0-2006.7
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-1029.34, plus listed versions
4.15.0-1027.32
4.15.0-1029.34
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-intel-iot-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1073.75
 None known
linux-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1032.35
 None known
linux-riscv
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4
Show 18 moreShow less
5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32
 None known
linux-raspi-realtime
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.8.0-2019.20
 None known
linux-hwe
Ubuntu:16.04:LTS
From an advisory covering 3 CVEs
 before 4.15.0-96.97~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-96.97~16.04.1
linux
Ubuntu:18.04:LTS
From an advisory covering 3 CVEs
 before 4.15.0-96.97, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 41 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.92
4.15.0-96.97
kernel-debug
openSUSE:Leap 15.1
From an advisory covering 7 CVEs
 before 4.12.14-lp151.28.48.1
4.12.14-lp151.28.48.1
kernel-default
openSUSE:Leap 15.1
From an advisory covering 7 CVEs
 before 4.12.14-lp151.28.48.1
4.12.14-lp151.28.48.1
kernel-docs
openSUSE:Leap 15.1
From an advisory covering 7 CVEs
 before 4.12.14-lp151.28.48.1
4.12.14-lp151.28.48.1
kernel-kvmsmall
openSUSE:Leap 15.1
From an advisory covering 7 CVEs
 before 4.12.14-lp151.28.48.1
4.12.14-lp151.28.48.1
kernel-obs-build
openSUSE:Leap 15.1
From an advisory covering 7 CVEs
 before 4.12.14-lp151.28.48.1
4.12.14-lp151.28.48.1
kernel-obs-qa
openSUSE:Leap 15.1
From an advisory covering 7 CVEs
 before 4.12.14-lp151.28.48.1
4.12.14-lp151.28.48.1
kernel-source
openSUSE:Leap 15.1
From an advisory covering 7 CVEs
 before 4.12.14-lp151.28.48.1
4.12.14-lp151.28.48.1
kernel-syms
openSUSE:Leap 15.1
From an advisory covering 7 CVEs
 before 4.12.14-lp151.28.48.1
4.12.14-lp151.28.48.1
kernel-vanilla
openSUSE:Leap 15.1
From an advisory covering 7 CVEs
 before 4.12.14-lp151.28.48.1
4.12.14-lp151.28.48.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-8834 is a medium vulnerability (CVSS 6.5) in Linux Kernel, published April 6, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. Fixed in linux 4.18.6-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 87 versions, 202 references and the rest of 11 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open