Every CVE Search/ Get API key

CVE-2019-9500

Broadcom brcmfmac driver is vulnerable to a heap buffer overflow

7.9 HighFix available

The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be constructed to trigger an heap buffer overflow in the brcmf_wowl_nd_results function. This vulnerability can be exploited with compromised chipsets to compromise the host, or when used in combination with CVE-2019-9503, can be used remotely. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions.

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

3.85%Up 2.0 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 7.9

Broadcom brcmfmac driver is vulnerable to a heap buffer overflow

The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be constructed to trigger an heap buffer overflow in the brcmf_wowl_nd_results function. This vulnerability can be exploited with compromised chipsets to compromise the host, or when used in combination with CVE-2019-9503, can be used remotely. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions.

Record
CVE-2019-9500
CVSS 3.1
7.9 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Weakness
CWE-122
Updated
2026-11-02
EUVDEUVD-2019-18874 7.9

The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be constructed to trigger an heap buffer overflow in the brcmf_wowl_nd_results function. This vulnerability can be exploited with compromised chipsets to compromise the host, or when used in combination with CVE-2019-9503, can be used remotely. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions.

Record
EUVD-2019-18874
CVSS 3.1
7.9 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-6jhq-h73f-x439 8.3

The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is...

The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be constructed to trigger an heap buffer overflow in the brcmf_wowl_nd_results function. This vulnerability can be exploited with compromised chipsets to compromise the host, or when used in combination with CVE-2019-9503, can be used remotely. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions.

Record
GHSA-6jhq-h73f-x439
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
NVD 7.9

The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be constructed to trigger an heap buffer overflow in the brcmf_wowl_nd_results function. This vulnerability can be exploited with compromised chipsets to compromise the host, or when used in combination with CVE-2019-9503, can be used remotely. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions.

Record
CVE-2019-9500
CVSS 3.1
7.9 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0
7.9 HighAV:A/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-122, CWE-787
Updated
2026-11-02
OSV 8.3

The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be constructed to trigger an heap buffer overflow in the brcmf_wowl_nd_results function. This vulnerability can be exploited with compromised chipsets to compromise the host, or when used in combination with CVE-2019-9503, can be used remotely. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions.

Record
CVE-2019-9500
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2019-9500 8.3

The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be constructed to trigger an heap buffer overflow in the brcmf_wowl_nd_results function. This vulnerability can be exploited with compromised chipsets to compromise the host, or when used in combination with CVE-2019-9503, can be used remotely. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions.

Record
DEBIAN-CVE-2019-9500
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
Show 22 moreShow less
OSVRHSA-2019:2600 6.5

Red Hat Security Advisory: kernel security and bug fix update

Record
RHSA-2019:2600
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRHSA-2019:2609 6.5

Red Hat Security Advisory: kernel-rt security and bug fix update

Record
RHSA-2019:2609
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRHSA-2019:2703 8.0

Red Hat Security Advisory: kernel security and bug fix update

Record
RHSA-2019:2703
CVSS 3.0
8.0 HighCVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:2741 8.0

Red Hat Security Advisory: kernel-rt security and bug fix update

Record
RHSA-2019:2741
CVSS 3.0
8.0 HighCVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:2945 6.5

Red Hat Security Advisory: kpatch-patch security update

Record
RHSA-2019:2945
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRHSA-2019:3217 7.8

Red Hat Security Advisory: kernel-alt security and bug fix update

Record
RHSA-2019:3217
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:4168 6.5

Red Hat Security Advisory: kernel security and bug fix update

Record
RHSA-2019:4168
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRHSA-2019:4171 6.5

Red Hat Security Advisory: kpatch-patch security update

Record
RHSA-2019:4171
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-9500 8.3

The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be constructed to trigger an heap buffer overflow in the brcmf_wowl_nd_results function. This vulnerability can be exploited with compromised chipsets to compromise the host, or when used in combination with CVE-2019-9503, can be used remotely. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions.

Record
UBUNTU-CVE-2019-9500
CVSS 3.1
8.3 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1
7.9 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2019:1404-1 No score

Security update for the Linux Kernel

The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes.

Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331)

  • CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS)
  • CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS)
  • CVE-2018-12130: Microarchitectural Load Port Data Samling (MLPDS)
  • CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

This kernel update contains software mitigations for these issues, which also utilize CPU microcode updates shipped in parallel.

For more information on this set of information leaks, check out https://www.suse.com/support/kb/doc/?id=7023736

The following security bugs were fixed:

  • CVE-2018-16880: A flaw was found in handle_rx() function in the vhost_net driver. A malicious virtual guest, under specific conditions, can trigger an out-of-bounds write in a kmalloc-8 slab on a virtual host which may lead to a kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out. (bnc#1122767).
  • CVE-2019-11486: The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c had multiple race conditions (bnc#1133188). It has been disabled.
  • CVE-2019-11815: An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c. There is a race condition leading to a use-after-free, related to net namespace cleanup (bnc#1134537).
  • CVE-2019-11884: The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c allowed a local user to obtain potentially sensitive information from kernel stack memory via a HIDPCONNADD command, because a name field may not end with a '\0' character (bnc#1134848).
  • CVE-2019-3882: A flaw was found in vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS). (bnc#1131416 bnc#1131427).
  • CVE-2019-9003: Attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a 'service ipmievd restart' loop (bnc#1126704).
  • CVE-2019-9500: A brcmfmac heap buffer overflow in brcmf_wowl_nd_results was fixed (bnc#1132681).
  • CVE-2019-9503: Multiple brcmfmac frame validation bypasses have been fixed (bnc#1132828).

The following non-security bugs were fixed:

  • 9p: do not trust pdu content for stat item size (bsc#1051510).
  • acpi, nfit: Prefer _DSM over _LSR for namespace label reads (bsc#1112128) (bsc#1132426).
  • ACPI / SBS: Fix GPE storm on recent MacBookPro's (bsc#1051510).
  • ALSA: core: Do not refer to snd_cards array directly (bsc#1051510).
  • ALSA: core: Fix card races between register and disconnect (bsc#1051510).
  • ALSA: emu10k1: Drop superfluous id-uniquification behavior (bsc#1051510).
  • ALSA: hda - Add two more machines to the power_save_blacklist (bsc#1051510).
  • ALSA: hda/hdmi - Consider eld_valid when reporting jack event (bsc#1051510).
  • ALSA: hda/hdmi - Read the pin sense from register when repolling (bsc#1051510).
  • ALSA: hda: Initialize power_state field properly (bsc#1051510).
  • ALSA: hda/realtek - Add new Dell platform for headset mode (bsc#1051510).
  • ALSA: hda/realtek - Add quirk for Tuxedo XC 1509 (bsc#1131442).
  • ALSA: hda/realtek - Add support headset mode for DELL WYSE AIO (bsc#1051510).
  • ALSA: hda/realtek - Add support headset mode for New DELL WYSE NB (bsc#1051510).
  • ALSA: hda/realtek - add two more pin configuration sets to quirk table (bsc#1051510).
  • ALSA: hda/realtek - Apply the fixup for ASUS Q325UAR (bsc#1051510).
  • ALSA: hda/realtek - EAPD turn on later (bsc#1051510).
  • ALSA: hda/realtek - Fixed Dell AIO speaker noise (bsc#1051510).
  • ALSA: hda - Register irq handler after the chip initialization (bsc#1051510).
  • ALSA:…
Record
openSUSE-SU-2019:1404-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:1479-1 No score

Security update for the Linux Kernel

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2018-7191: In the tun subsystem dev_get_valid_name xwas not called before register_netdevice. This allowed local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. This is similar to CVE-2013-4343 (bnc#1135603).
  • CVE-2019-11085: Insufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux may have allowed an authenticated user to potentially enable escalation of privilege via local access (bnc#1135278).
  • CVE-2019-11486: The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel had multiple race conditions (bnc#1133188). It was disabled by default.
  • CVE-2019-11811: There is a use-after-free upon attempted read access to /proc/ioports after the ipmi_si module is removed, related to drivers/char/ipmi/ipmi_si_intf.c, drivers/char/ipmi/ipmi_si_mem_io.c, and drivers/char/ipmi/ipmi_si_port_io.c (bnc#1134397).
  • CVE-2019-11815: An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c kernel. There is a race condition leading to a use-after-free, related to net namespace cleanup (bnc#1134537).
  • CVE-2019-11833: fs/ext4/extents.c did not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem (bnc#1135281).
  • CVE-2019-11884: The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c allowed a local user to obtain potentially sensitive information from kernel stack memory via a HIDPCONNADD command, because a name field may not end with a '\0' character (bnc#1134848).
  • CVE-2019-3882: A flaw was found in the vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS). (bnc#1131416 bnc#1131427).
  • CVE-2019-5489: The mincore() implementation in mm/mincore.c allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincore program.) Limited remote exploitation may be possible, as demonstrated by latency differences in accessing public files from an Apache HTTP Server (bnc#1120843).
  • CVE-2019-9500: A brcmfmac heap buffer overflow in brcmf_wowl_nd_results was fixed (bnc#1132681).
  • CVE-2019-9503: Multiple brcmfmac frame validation bypasses have been fixed (bnc#1132828).

The following non-security bugs were fixed:

  • 9p: do not trust pdu content for stat item size (bsc#1051510).
  • 9p locks: add mount option for lock retry interval (bsc#1051510).
  • acpi: Add Hygon Dhyana support ().
  • acpi: Add Hygon Dhyana support (fate#327735).
  • acpi: button: reinitialize button state upon resume (bsc#1051510).
  • acpiCA: AML interpreter: add region addresses in global list during initialization (bsc#1051510).
  • acpiCA: Namespace: remove address node from global list after method termination (bsc#1051510).
  • acpi, nfit: Prefer _DSM over _LSR for namespace label reads (bsc#112128) (bsc#1132426).
  • acpi: PM: Set enable_for_wake for wakeup GPEs during suspend-to-idle (bsc#1111666).
  • acpi: property: restore _DSD data subnodes GUID comment (bsc#1111666).
  • acpi / SBS: Fix GPE storm on recent MacBookPro's (bsc#1051510).
  • acpi / utils: Drop reference in test for device presence (bsc#1051510).
  • alsa: core: Do not refer to snd_cards array directly (bsc#1051510).
  • alsa: core: Fix card races between register and disconnect (bsc#1051510).
  • alsa: emu10k1: Drop superfluous id-uniquification behavior (bsc#1051510).
  • alsa: hda - Add two more machines to the power_save_blacklist (bsc#1051510).
  • alsa:…
Record
openSUSE-SU-2019:1479-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10728-1 No score

kernel-devel-5.14.6-1.4 on GA media

These are all security issues fixed in the kernel-devel-5.14.6-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10728-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13704-1 No score

kernel-devel-longterm-6.6.17-1.1 on GA media

These are all security issues fixed in the kernel-devel-longterm-6.6.17-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13704-1
Updated
2026-11-02
OSVSUSE-SU-2019:1240-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 for Azure kernel was updated to receive various security and bugfixes.

Four new speculative execution issues have been identified in Intel CPUs. (bsc#1111331)

  • CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS)
  • CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS)
  • CVE-2018-12130: Microarchitectural Load Port Data Samling (MLPDS)
  • CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

This kernel update contains software mitigations, utilizing CPU microcode updates shipped in parallel.

For more information on this set of information leaks, check out https://www.suse.com/support/kb/doc/?id=7023736

The following security bugs were fixed:

  • CVE-2019-9003: Attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a 'service ipmievd restart' loop (bnc#1126704).
  • CVE-2018-16880: A flaw was found in the handle_rx() function in the [vhost_net] driver. A malicious virtual guest, under specific conditions, can trigger an out-of-bounds write in a kmalloc-8 slab on a virtual host which may lead to a kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out. (bnc#1122767).
  • CVE-2019-9500: A brcmfmac heap buffer overflow in brcmf_wowl_nd_results was fixed. (bnc#1132681).
  • CVE-2019-9503: A brcmfmac frame validation bypass was fixed. (bnc#1132828).
  • CVE-2019-3882: A flaw was found in the vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS). (bnc#1131416 bnc#1131427).

The following non-security bugs were fixed:

  • 9p: do not trust pdu content for stat item size (bsc#1051510).
  • acpi: acpi_pad: Do not launch acpi_pad threads on idle cpus (bsc#1113399).
  • acpi, nfit: Prefer _DSM over _LSR for namespace label reads (bsc#1132426).
  • acpi / SBS: Fix GPE storm on recent MacBookPro's (bsc#1051510).
  • alsa: core: Fix card races between register and disconnect (bsc#1051510).
  • alsa: echoaudio: add a check for ioremap_nocache (bsc#1051510).
  • alsa: firewire: add const qualifier to identifiers for read-only symbols (bsc#1051510).
  • alsa: firewire-motu: add a flag for AES/EBU on XLR interface (bsc#1051510).
  • alsa: firewire-motu: add specification flag for position of flag for MIDI messages (bsc#1051510).
  • alsa: firewire-motu: add support for MOTU Audio Express (bsc#1051510).
  • alsa: firewire-motu: add support for Motu Traveler (bsc#1051510).
  • alsa: firewire-motu: use 'version' field of unit directory to identify model (bsc#1051510).
  • alsa: hda - add Lenovo IdeaCentre B550 to the power_save_blacklist (bsc#1051510).
  • alsa: hda - Add two more machines to the power_save_blacklist (bsc#1051510).
  • alsa: hda - Enforces runtime_resume after S3 and S4 for each codec (bsc#1051510).
  • alsa: hda: Initialize power_state field properly (bsc#1051510).
  • alsa: hda/realtek - Add quirk for Tuxedo XC 1509 (bsc#1131442).
  • alsa: hda/realtek - Add support for Acer Aspire E5-523G/ES1-432 headset mic (bsc#1051510).
  • alsa: hda/realtek - Add support headset mode for DELL WYSE AIO (bsc#1051510).
  • alsa: hda/realtek - Add support headset mode for New DELL WYSE NB (bsc#1051510).
  • alsa: hda/realtek - add two more pin configuration sets to quirk table (bsc#1051510).
  • alsa: hda/realtek: Enable ASUS X441MB and X705FD headset MIC with ALC256 (bsc#1051510).
  • alsa: hda/realtek: Enable headset MIC of Acer AIO with ALC286 (bsc#1051510).
  • alsa: hda/realtek: Enable headset MIC of Acer Aspire Z24-890 with ALC286 (bsc#1051510).
  • alsa: hda/realtek: Enable headset mic of ASUS P5440FF with ALC256 (bsc#1051510).
  • alsa: hda - Record the current power state before suspend/resume…
Record
SUSE-SU-2019:1240-1
Updated
2026-11-02
OSVSUSE-SU-2019:1241-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes.

Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331)

  • CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS)
  • CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS)
  • CVE-2018-12130: Microarchitectural Load Port Data Samling (MLPDS)
  • CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

This kernel update contains software mitigations for these issues, which also utilize CPU microcode updates shipped in parallel.

For more information on this set of vulnerabilities, check out https://www.suse.com/support/kb/doc/?id=7023736

The following security bugs were fixed:

  • CVE-2018-16880: A flaw was found in the handle_rx() function in the vhost_net driver. A malicious virtual guest, under specific conditions, could trigger an out-of-bounds write in a kmalloc-8 slab on a virtual host which may lead to a kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out. (bnc#1122767).
  • CVE-2019-3882: A flaw was found in the vfio interface implementation that permitted violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS). (bnc#1131416 bnc#1131427).
  • CVE-2019-9003: Attackers could trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a 'service ipmievd restart' loop (bnc#1126704).
  • CVE-2019-9500: A brcmfmac heap buffer overflow in brcmf_wowl_nd_results was fixed. (bnc#1132681).
  • CVE-2019-9503: A brcmfmac frame validation bypass was fixed. (bnc#1132828).

The following non-security bugs were fixed:

  • 9p: do not trust pdu content for stat item size (bsc#1051510).
  • ACPI: acpi_pad: Do not launch acpi_pad threads on idle cpus (bsc#1113399).
  • acpi, nfit: Prefer _DSM over _LSR for namespace label reads (bsc#1112128) (bsc#1132426).
  • ACPI / SBS: Fix GPE storm on recent MacBookPro's (bsc#1051510).
  • alsa: core: Fix card races between register and disconnect (bsc#1051510).
  • alsa: echoaudio: add a check for ioremap_nocache (bsc#1051510).
  • alsa: firewire: add const qualifier to identifiers for read-only symbols (bsc#1051510).
  • alsa: firewire-motu: add a flag for AES/EBU on XLR interface (bsc#1051510).
  • alsa: firewire-motu: add specification flag for position of flag for MIDI messages (bsc#1051510).
  • alsa: firewire-motu: add support for MOTU Audio Express (bsc#1051510).
  • alsa: firewire-motu: add support for Motu Traveler (bsc#1051510).
  • alsa: firewire-motu: use 'version' field of unit directory to identify model (bsc#1051510).
  • alsa: hda - add Lenovo IdeaCentre B550 to the power_save_blacklist (bsc#1051510).
  • alsa: hda - Add two more machines to the power_save_blacklist (bsc#1051510).
  • alsa: hda - Enforces runtime_resume after S3 and S4 for each codec (bsc#1051510).
  • alsa: hda: Initialize power_state field properly (bsc#1051510).
  • alsa: hda/realtek - Add new Dell platform for headset mode (bsc#1051510).
  • alsa: hda/realtek - Add quirk for Tuxedo XC 1509 (bsc#1131442).
  • alsa: hda/realtek - Add support for Acer Aspire E5-523G/ES1-432 headset mic (bsc#1051510).
  • alsa: hda/realtek - Add support headset mode for DELL WYSE AIO (bsc#1051510).
  • alsa: hda/realtek - Add support headset mode for New DELL WYSE NB (bsc#1051510).
  • alsa: hda/realtek - add two more pin configuration sets to quirk table (bsc#1051510).
  • alsa: hda/realtek - Apply the fixup for ASUS Q325UAR (bsc#1051510).
  • alsa: hda/realtek: Enable ASUS X441MB and X705FD headset MIC with ALC256 (bsc#1051510).
  • alsa: hda/realtek: Enable headset MIC of Acer AIO with ALC286 (bsc#1051510).
  • alsa: hda/realtek: Enable headset MIC of…
Record
SUSE-SU-2019:1241-1
Updated
2026-11-02
OSVSUSE-SU-2019:1242-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 Azure kernel was updated to receive various security and bugfixes.

Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331)

  • CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS)
  • CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS)
  • CVE-2018-12130: Microarchitectural Load Port Data Samling (MLPDS)
  • CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

This kernel update contains software mitigations for these issues, which also utilize CPU microcode updates shipped in parallel.

For more information on this set of information leaks, check out https://www.suse.com/support/kb/doc/?id=7023736

The following security bugs were fixed:

  • CVE-2018-16880: A flaw was found in the handle_rx() function in the vhost_net driver. A malicious virtual guest, under specific conditions, could trigger an out-of-bounds write in a kmalloc-8 slab on a virtual host which may lead to a kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out. (bnc#1122767).
  • CVE-2019-9003: Attackers could trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a 'service ipmievd restart' loop (bnc#1126704).
  • CVE-2019-9503: A brcmfmac frame validation bypass was fixed. (bnc#1132828).
  • CVE-2019-9500: A brcmfmac heap buffer overflow in brcmf_wowl_nd_results was fixed. (bnc#1132681).
  • CVE-2019-3882: A flaw was found in the vfio interface implementation that permitted violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS). (bnc#1131416 bnc#1131427).

The following non-security bugs were fixed:

  • 9p: do not trust pdu content for stat item size (bsc#1051510).
  • acpi: acpi_pad: Do not launch acpi_pad threads on idle cpus (bsc#1113399).
  • acpi, nfit: Prefer _DSM over _LSR for namespace label reads (bsc#112128) (bsc#1132426).
  • acpi / sbs: Fix GPE storm on recent MacBookPro's (bsc#1051510).
  • alsa: core: Fix card races between register and disconnect (bsc#1051510).
  • alsa: echoaudio: add a check for ioremap_nocache (bsc#1051510).
  • alsa: firewire: add const qualifier to identifiers for read-only symbols (bsc#1051510).
  • alsa: firewire-motu: add a flag for AES/EBU on XLR interface (bsc#1051510).
  • alsa: firewire-motu: add specification flag for position of flag for MIDI messages (bsc#1051510).
  • alsa: firewire-motu: add support for MOTU Audio Express (bsc#1051510).
  • alsa: firewire-motu: add support for Motu Traveler (bsc#1051510).
  • alsa: firewire-motu: use 'version' field of unit directory to identify model (bsc#1051510).
  • alsa: hda - add Lenovo IdeaCentre B550 to the power_save_blacklist (bsc#1051510).
  • alsa: hda - Add two more machines to the power_save_blacklist (bsc#1051510).
  • alsa: hda - Enforces runtime_resume after S3 and S4 for each codec (bsc#1051510).
  • alsa: hda: Initialize power_state field properly (bsc#1051510).
  • alsa: hda/realtek - Add new Dell platform for headset mode (bsc#1051510).
  • alsa: hda/realtek - Add quirk for Tuxedo XC 1509 (bsc#1131442).
  • alsa: hda/realtek - Add support for Acer Aspire E5-523G/ES1-432 headset mic (bsc#1051510).
  • alsa: hda/realtek - Add support headset mode for DELL WYSE AIO (bsc#1051510).
  • alsa: hda/realtek - Add support headset mode for New DELL WYSE NB (bsc#1051510).
  • alsa: hda/realtek - add two more pin configuration sets to quirk table (bsc#1051510).
  • alsa: hda/realtek - Apply the fixup for ASUS Q325UAR (bsc#1051510).
  • alsa: hda/realtek: Enable ASUS X441MB and X705FD headset MIC with ALC256 (bsc#1051510).
  • alsa: hda/realtek: Enable headset MIC of Acer AIO with ALC286 (bsc#1051510).
  • alsa: hda/realtek: Enable headset…
Record
SUSE-SU-2019:1242-1
Updated
2026-11-02
OSVSUSE-SU-2019:1244-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes.

Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331)

  • CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS)
  • CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS)
  • CVE-2018-12130: Microarchitectural Load Port Data Samling (MLPDS)
  • CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

This kernel update contains software mitigations for these issues, which also utilize CPU microcode updates shipped in parallel.

For more information on this set of vulnerabilities, check out https://www.suse.com/support/kb/doc/?id=7023736

The following security issues were fixed:

  • CVE-2018-16880: A flaw was found in the handle_rx() function in the vhost_net driver. A malicious virtual guest, under specific conditions, could trigger an out-of-bounds write in a kmalloc-8 slab on a virtual host which may lead to a kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out. (bnc#1122767).
  • CVE-2019-3882: A flaw was found in the vfio interface implementation that permitted violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS). (bnc#1131416 bnc#1131427).
  • CVE-2019-9003: Attackers could trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a 'service ipmievd restart' loop (bnc#1126704).
  • CVE-2019-9500: A brcmfmac heap buffer overflow in brcmf_wowl_nd_results was fixed. (bnc#1132681).
  • CVE-2019-9503: A brcmfmac frame validation bypass was fixed. (bnc#1132828).

The following non-security bugs were fixed:

  • 9p: do not trust pdu content for stat item size (bsc#1051510).
  • acpi: acpi_pad: Do not launch acpi_pad threads on idle cpus (bsc#1113399).
  • acpi, nfit: Prefer _DSM over _LSR for namespace label reads (bsc#1132426).
  • acpi / SBS: Fix GPE storm on recent MacBookPro's (bsc#1051510).
  • alsa: core: Fix card races between register and disconnect (bsc#1051510).
  • alsa: echoaudio: add a check for ioremap_nocache (bsc#1051510).
  • alsa: firewire: add const qualifier to identifiers for read-only symbols (bsc#1051510).
  • alsa: firewire-motu: add a flag for AES/EBU on XLR interface (bsc#1051510).
  • alsa: firewire-motu: add specification flag for position of flag for MIDI messages (bsc#1051510).
  • alsa: firewire-motu: add support for MOTU Audio Express (bsc#1051510).
  • alsa: firewire-motu: add support for Motu Traveler (bsc#1051510).
  • alsa: firewire-motu: use 'version' field of unit directory to identify model (bsc#1051510).
  • alsa: hda - add Lenovo IdeaCentre B550 to the power_save_blacklist (bsc#1051510).
  • alsa: hda - Add two more machines to the power_save_blacklist (bsc#1051510).
  • alsa: hda - Enforces runtime_resume after S3 and S4 for each codec (bsc#1051510).
  • alsa: hda: Initialize power_state field properly (bsc#1051510).
  • alsa: hda/realtek - Add quirk for Tuxedo XC 1509 (bsc#1131442).
  • alsa: hda/realtek - Add support for Acer Aspire E5-523G/ES1-432 headset mic (bsc#1051510).
  • alsa: hda/realtek - Add support headset mode for DELL WYSE AIO (bsc#1051510).
  • alsa: hda/realtek - Add support headset mode for New DELL WYSE NB (bsc#1051510).
  • alsa: hda/realtek - add two more pin configuration sets to quirk table (bsc#1051510).
  • alsa: hda/realtek: Enable ASUS X441MB and X705FD headset MIC with ALC256 (bsc#1051510).
  • alsa: hda/realtek: Enable headset MIC of Acer AIO with ALC286 (bsc#1051510).
  • alsa: hda/realtek: Enable headset MIC of Acer Aspire Z24-890 with ALC286 (bsc#1051510).
  • alsa: hda/realtek: Enable headset mic of ASUS P5440FF with ALC256 (bsc#1051510).
  • alsa: hda - Record the…
Record
SUSE-SU-2019:1244-1
Updated
2026-11-02
OSVSUSE-SU-2019:1550-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2019-12819: The function __mdiobus_register() called put_device(), which triggered a fixed_mdio_bus_init use-after-free. This would cause a denial of service. (bsc#1138291)

  • CVE-2019-12818: The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c may return NULL. If the caller does not check for this, it will trigger a NULL pointer dereference. This will cause denial of service. This used to affect nfc_llcp_build_gb in net/nfc/llcp_core.c. (bsc#1138293)

  • CVE-2019-11477: A sequence of SACKs may have been crafted such that one can trigger an integer overflow, leading to a kernel panic.

  • CVE-2019-11478: It was possible to send a crafted sequence of SACKs which will fragment the TCP retransmission queue. An attacker may have been able to further exploit the fragmented queue to cause an expensive linked-list walk for subsequent SACKs received for that same TCP connection.

  • CVE-2019-11479: An attacker could force the Linux kernel to segment its responses into multiple TCP segments. This would drastically increased the bandwidth required to deliver the same amount of data. Further, it would consume additional resources such as CPU and NIC processing power.

  • CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network. (bsc#1136424)

  • CVE-2019-10124: An issue was discovered in the hwpoison implementation in mm/memory-failure.c in the Linux kernel. When soft_offline_in_use_page() runs on a thp tail page after pmd is split, an attacker could cause a denial of service (bsc#1130699, CVE-2019-10124).

  • CVE-2019-12382: An issue was discovered in drm_load_edid_firmware in drivers/gpu/drm/drm_edid_load.c in the Linux kernel There was an unchecked kstrdup of fwstr, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). (bsc#1136586)

  • CVE-2019-11487: The Linux kernel allowed page reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It could occur with FUSE requests. (bbsc#1133190)

  • CVE-2019-5489: The mincore() implementation in mm/mincore.c in the Linux kernel allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincore program.) Limited remote exploitation may be possible, as demonstrated by latency differences in accessing public files from an Apache HTTP Server. (bsc#1120843)

  • CVE-2019-11833: fs/ext4/extents.c in the Linux kernel did not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem. (bsc#1135281)

  • CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may have allowed an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019. (bsc##1111331)

  • CVE-2018-7191: In the tun subsystem in the Linux kernel, dev_get_valid_name was not called before register_netdevice. This allowed local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. (bsc#1135603)

  • CVE-2018-12126…

Record
SUSE-SU-2019:1550-1
Updated
2026-11-02
OSVSUSE-SU-2019:2430-1 No score

Security update for kernel-source-rt

The SUSE Linux Enterprise 15 SP1 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2018-12126 CVE-2018-12127 CVE-2018-12130: Microarchitectural Store Buffer Data Sampling (MSBDS): Stored buffers on some microprocessors utilizing speculative execution which may have allowed an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019. (bsc#1103186)
  • CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may have allowed an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019. (bsc#1111331)
  • CVE-2019-12382: An issue was discovered in drm_load_edid_firmware in drivers/gpu/drm/drm_edid_load.c in the Linux kernel There was an unchecked kstrdup of fwstr, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). (bsc#1136586)
  • CVE-2019-10124: An issue was discovered in the hwpoison implementation in mm/memory-failure.c in the Linux kernel. When soft_offline_in_use_page() runs on a thp tail page after pmd is split, an attacker could cause a denial of service (bsc#1130699).
  • CVE-2019-11486: The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel has multiple race conditions. (bsc#1133188)
  • CVE-2019-11811: An issue was discovered in the Linux kernel There was a use-after-free upon attempted read access to /proc/ioports after the ipmi_si module was removed, related to drivers/char/ipmi/ipmi_si_intf.c, drivers/char/ipmi/ipmi_si_mem_io.c, and drivers/char/ipmi/ipmi_si_port_io.c. (bsc#1134397)
  • CVE-2019-11487: The Linux kernel allowed page reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It could occur with FUSE requests. (bsc#1133190)
  • CVE-2019-12818: The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c may return NULL. If the caller does not check for this, it will trigger a NULL pointer dereference. This will cause denial of service. This used to affect nfc_llcp_build_gb in net/nfc/llcp_core.c. (bsc#1138293)
  • CVE-2019-11833: fs/ext4/extents.c in the Linux kernel did not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem. (bsc#1135281)
  • CVE-2019-5489: The mincore() implementation in mm/mincore.c in the Linux kernel allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincore program.) Limited remote exploitation may be possible, as demonstrated by latency differences in accessing public files from an Apache HTTP Server. (bsc#1120843)
  • CVE-2018-7191: In the tun subsystem in the Linux kernel, dev_get_valid_name was not called before register_netdevice. This allowed local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. (bsc#1135603)
  • CVE-2019-11884: The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel allowed a local user to obtain potentially sensitive information from kernel stack memory via a hidPCONNADD command, because a name field may not end with a '\0' character. (bsc#1134848) -…
Record
SUSE-SU-2019:2430-1
Updated
2026-11-02
OSVUSN-3980-2 No score

linux-hwe, linux-azure vulnerabilities

USN-3980-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.10. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 18.10 for Ubuntu 18.04 LTS.

Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Giorgi Maisuradze, Dan Horea Lutas, Andrei Lutas, Volodymyr Pikhur, Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Moritz Lipp, Michael Schwarz, and Daniel Gruss discovered that memory previously stored in microarchitectural fill buffers of an Intel CPU core may be exposed to a malicious process that is executing on the same CPU core. A local attacker could use this to expose sensitive information. (CVE-2018-12130)

Brandon Falk, Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, and Cristiano Giuffrida discovered that memory previously stored in microarchitectural load ports of an Intel CPU core may be exposed to a malicious process that is executing on the same CPU core. A local attacker could use this to expose sensitive information. (CVE-2018-12127)

Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Marina Minkin, Daniel Moghimi, Moritz Lipp, Michael Schwarz, Jo Van Bulck, Daniel Genkin, Daniel Gruss, Berk Sunar, Frank Piessens, and Yuval Yarom discovered that memory previously stored in microarchitectural store buffers of an Intel CPU core may be exposed to a malicious process that is executing on the same CPU core. A local attacker could use this to expose sensitive information. (CVE-2018-12126)

Vasily Averin and Evgenii Shatokhin discovered that a use-after-free vulnerability existed in the NFS41+ subsystem when multiple network namespaces are in use. A local attacker in a container could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-16884)

Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Volodrmyr Pikhur, Moritz Lipp, Michael Schwarz, Daniel Gruss, Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, and Cristiano Giuffrida discovered that uncacheable memory previously stored in microarchitectural buffers of an Intel CPU core may be exposed to a malicious process that is executing on the same CPU core. A local attacker could use this to expose sensitive information. (CVE-2019-11091)

Matteo Croce, Natale Vinto, and Andrea Spagnolo discovered that the cgroups subsystem of the Linux kernel did not properly account for SCTP socket buffers. A local attacker could use this to cause a denial of service (system crash). (CVE-2019-3874)

Alex Williamson discovered that the vfio subsystem of the Linux kernel did not properly limit DMA mappings. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2019-3882)

Marc Orr discovered that the KVM hypervisor implementation in the Linux kernel did not properly restrict APIC MSR register values when nested virtualization is used. An attacker in a guest vm could use this to cause a denial of service (host OS crash). (CVE-2019-3887)

Hugues Anguelkov discovered that the Broadcom Wifi driver in the Linux kernel contained a heap buffer overflow. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-9500)

Hugues Anguelkov discovered that the Broadcom Wifi driver in the Linux kernel did not properly prevent remote firmware events from being processed for USB Wifi devices. A physically proximate attacker could use this to send firmware events to the device. (CVE-2019-9503)

Record
USN-3980-2
Updated
2026-11-02
OSVUSN-3981-1 No score

linux, linux-aws, linux-gcp, linux-kvm, linux-oem, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Giorgi Maisuradze, Dan Horea Lutas, Andrei Lutas, Volodymyr Pikhur, Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Moritz Lipp, Michael Schwarz, and Daniel Gruss discovered that memory previously stored in microarchitectural fill buffers of an Intel CPU core may be exposed to a malicious process that is executing on the same CPU core. A local attacker could use this to expose sensitive information. (CVE-2018-12130)

Brandon Falk, Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, and Cristiano Giuffrida discovered that memory previously stored in microarchitectural load ports of an Intel CPU core may be exposed to a malicious process that is executing on the same CPU core. A local attacker could use this to expose sensitive information. (CVE-2018-12127)

Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Marina Minkin, Daniel Moghimi, Moritz Lipp, Michael Schwarz, Jo Van Bulck, Daniel Genkin, Daniel Gruss, Berk Sunar, Frank Piessens, and Yuval Yarom discovered that memory previously stored in microarchitectural store buffers of an Intel CPU core may be exposed to a malicious process that is executing on the same CPU core. A local attacker could use this to expose sensitive information. (CVE-2018-12126)

Vasily Averin and Evgenii Shatokhin discovered that a use-after-free vulnerability existed in the NFS41+ subsystem when multiple network namespaces are in use. A local attacker in a container could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-16884)

Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Volodrmyr Pikhur, Moritz Lipp, Michael Schwarz, Daniel Gruss, Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, and Cristiano Giuffrida discovered that uncacheable memory previously stored in microarchitectural buffers of an Intel CPU core may be exposed to a malicious process that is executing on the same CPU core. A local attacker could use this to expose sensitive information. (CVE-2019-11091)

Matteo Croce, Natale Vinto, and Andrea Spagnolo discovered that the cgroups subsystem of the Linux kernel did not properly account for SCTP socket buffers. A local attacker could use this to cause a denial of service (system crash). (CVE-2019-3874)

Alex Williamson discovered that the vfio subsystem of the Linux kernel did not properly limit DMA mappings. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2019-3882)

Hugues Anguelkov discovered that the Broadcom Wifi driver in the Linux kernel contained a heap buffer overflow. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-9500)

Hugues Anguelkov discovered that the Broadcom Wifi driver in the Linux kernel did not properly prevent remote firmware events from being processed for USB Wifi devices. A physically proximate attacker could use this to send firmware events to the device. (CVE-2019-9503)

Record
USN-3981-1
Updated
2026-11-02
OSVUSN-3981-2 No score

linux-hwe, linux-azure, linux-gcp, linux-oracle vulnerabilities

USN-3981-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 18.04 LTS for Ubuntu 16.04 LTS and for the Linux Azure kernel for Ubuntu 14.04 LTS.

Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Giorgi Maisuradze, Dan Horea Lutas, Andrei Lutas, Volodymyr Pikhur, Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Moritz Lipp, Michael Schwarz, and Daniel Gruss discovered that memory previously stored in microarchitectural fill buffers of an Intel CPU core may be exposed to a malicious process that is executing on the same CPU core. A local attacker could use this to expose sensitive information. (CVE-2018-12130)

Brandon Falk, Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, and Cristiano Giuffrida discovered that memory previously stored in microarchitectural load ports of an Intel CPU core may be exposed to a malicious process that is executing on the same CPU core. A local attacker could use this to expose sensitive information. (CVE-2018-12127)

Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Marina Minkin, Daniel Moghimi, Moritz Lipp, Michael Schwarz, Jo Van Bulck, Daniel Genkin, Daniel Gruss, Berk Sunar, Frank Piessens, and Yuval Yarom discovered that memory previously stored in microarchitectural store buffers of an Intel CPU core may be exposed to a malicious process that is executing on the same CPU core. A local attacker could use this to expose sensitive information. (CVE-2018-12126)

Vasily Averin and Evgenii Shatokhin discovered that a use-after-free vulnerability existed in the NFS41+ subsystem when multiple network namespaces are in use. A local attacker in a container could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-16884)

Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Volodrmyr Pikhur, Moritz Lipp, Michael Schwarz, Daniel Gruss, Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, and Cristiano Giuffrida discovered that uncacheable memory previously stored in microarchitectural buffers of an Intel CPU core may be exposed to a malicious process that is executing on the same CPU core. A local attacker could use this to expose sensitive information. (CVE-2019-11091)

Matteo Croce, Natale Vinto, and Andrea Spagnolo discovered that the cgroups subsystem of the Linux kernel did not properly account for SCTP socket buffers. A local attacker could use this to cause a denial of service (system crash). (CVE-2019-3874)

Alex Williamson discovered that the vfio subsystem of the Linux kernel did not properly limit DMA mappings. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2019-3882)

Hugues Anguelkov discovered that the Broadcom Wifi driver in the Linux kernel contained a heap buffer overflow. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-9500)

Hugues Anguelkov discovered that the Broadcom Wifi driver in the Linux kernel did not properly prevent remote firmware events from being processed for USB Wifi devices. A physically proximate attacker could use this to send firmware events to the device. (CVE-2019-9503)

Record
USN-3981-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux
Debian:12
 before 4.19.37-4
4.19.37-4
linux
Debian:13
 before 4.19.37-4
4.19.37-4
linux
Debian:14
 before 4.19.37-4
4.19.37-4
linux-4.9
Debian:8
From an advisory covering 13 CVEs
 before 4.9.168-1+deb9u3~deb8u1, plus listed versions
4.9.110-1~deb8u14.9.144-3.1~deb8u14.9.168-1~deb8u1
4.9.168-1+deb9u3~deb8u1
linux
Debian:9
From an advisory covering 13 CVEs
 before 4.9.168-1+deb9u3, plus listed versions
4.9.107-14.9.110-14.9.110-24.9.110-34.9.110-3+deb9u1
Show 43 moreShow less
4.9.110-3+deb9u24.9.110-3+deb9u34.9.110-3+deb9u44.9.110-3+deb9u54.9.110-3+deb9u64.9.130-14.9.130-24.9.135-14.9.144-14.9.144-24.9.144-34.9.144-3.14.9.161-14.9.168-14.9.168-1+deb9u24.9.30-24.9.30-2+deb9u14.9.30-2+deb9u24.9.30-2+deb9u2~bpo8+14.9.30-2+deb9u34.9.30-2+deb9u44.9.30-2+deb9u54.9.30-2+deb9u5~bpo8+14.9.47-14.9.51-14.9.51-1~bpo8+14.9.65-14.9.65-24.9.65-34.9.65-3+deb9u14.9.65-3+deb9u1~bpo8+14.9.65-3+deb9u24.9.65-3+deb9u2~bpo8+14.9.65-3~bpo8+14.9.80-14.9.80-24.9.82-1+deb9u24.9.82-1+deb9u34.9.82-1+deb9u3~bpo8+14.9.88-14.9.88-1+deb9u14.9.88-1+deb9u1~bpo8+14.9.88-1~bpo8+1
4.9.168-1+deb9u3
bpftool
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
bpftool-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debug
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-doc
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-tools
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
perf
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
perf-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
python-perf
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
bpftool
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
bpftool-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debug
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-doc
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-tools
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
perf
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
perf-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
python-perf
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
bpftool
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
bpftool-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-bootwrapper
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debuginfo-common-ppc64
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-doc
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-kdump
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-kdump-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-kdump-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-tools
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
perf
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
perf-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
python-perf
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
bpftool
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
bpftool-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debug
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-doc
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-tools
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
perf
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
perf-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
python-perf
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.el7
0:3.10.0-1062.1.1.el7
kernel-rt
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.rt56.1024.el7
0:3.10.0-1062.1.1.rt56.1024.el7
kernel-rt-debug
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.rt56.1024.el7
0:3.10.0-1062.1.1.rt56.1024.el7
kernel-rt-debug-debuginfo
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.rt56.1024.el7
0:3.10.0-1062.1.1.rt56.1024.el7
kernel-rt-debug-devel
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.rt56.1024.el7
0:3.10.0-1062.1.1.rt56.1024.el7
kernel-rt-debug-kvm
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.rt56.1024.el7
0:3.10.0-1062.1.1.rt56.1024.el7
kernel-rt-debug-kvm-debuginfo
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.rt56.1024.el7
0:3.10.0-1062.1.1.rt56.1024.el7
kernel-rt-debuginfo
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.rt56.1024.el7
0:3.10.0-1062.1.1.rt56.1024.el7
kernel-rt-debuginfo-common-x86_64
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.rt56.1024.el7
0:3.10.0-1062.1.1.rt56.1024.el7
kernel-rt-devel
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.rt56.1024.el7
0:3.10.0-1062.1.1.rt56.1024.el7
kernel-rt-doc
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.rt56.1024.el7
0:3.10.0-1062.1.1.rt56.1024.el7
kernel-rt-kvm
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.rt56.1024.el7
0:3.10.0-1062.1.1.rt56.1024.el7
kernel-rt-kvm-debuginfo
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.rt56.1024.el7
0:3.10.0-1062.1.1.rt56.1024.el7
kernel-rt-trace
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.rt56.1024.el7
0:3.10.0-1062.1.1.rt56.1024.el7
kernel-rt-trace-debuginfo
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.rt56.1024.el7
0:3.10.0-1062.1.1.rt56.1024.el7
kernel-rt-trace-devel
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.rt56.1024.el7
0:3.10.0-1062.1.1.rt56.1024.el7
kernel-rt-trace-kvm
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.rt56.1024.el7
0:3.10.0-1062.1.1.rt56.1024.el7
kernel-rt-trace-kvm-debuginfo
Red Hat:rhel_extras_rt:7
From an advisory covering 2 CVEs
 before 0:3.10.0-1062.1.1.rt56.1024.el7
0:3.10.0-1062.1.1.rt56.1024.el7
bpftool
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
bpftool-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-abi-whitelists
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-cross-headers
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-debug
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-debug-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-debug-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-debug-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-debug-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-doc
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-headers
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-tools
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-tools-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-zfcpdump
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-zfcpdump-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-zfcpdump-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-zfcpdump-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-zfcpdump-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
python3-perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
python3-perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
bpftool-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::crb
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::crb
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::crb
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-tools-libs-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
python3-perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 7 CVEs
 before 0:4.18.0-80.11.1.el8_0
0:4.18.0-80.11.1.el8_0
kernel-rt
Red Hat:enterprise_linux:8::nfv
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-debug
Red Hat:enterprise_linux:8::nfv
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-debug-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-debug-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-debug-kvm-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::nfv
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-kvm-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt
Red Hat:enterprise_linux:8::realtime
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-debug
Red Hat:enterprise_linux:8::realtime
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-debug-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::realtime
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-debug-kvm-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::realtime
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::realtime
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::realtime
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-devel
Red Hat:enterprise_linux:8::realtime
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-kvm-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-modules
Red Hat:enterprise_linux:8::realtime
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::realtime
From an advisory covering 6 CVEs
 before 0:4.18.0-80.11.1.rt9.156.el8_0
0:4.18.0-80.11.1.rt9.156.el8_0
kpatch-patch-3_10_0-1062
Red Hat:enterprise_linux:7::server
 before 0:1-2.el7
0:1-2.el7
kpatch-patch-3_10_0-1062-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:1-2.el7
0:1-2.el7
kernel
Red Hat:enterprise_linux:7::server
From an advisory covering 5 CVEs
 before 0:4.14.0-115.14.1.el7a
0:4.14.0-115.14.1.el7a
kernel-abi-whitelists
Red Hat:enterprise_linux:7::server
From an advisory covering 5 CVEs
 before 0:4.14.0-115.14.1.el7a
0:4.14.0-115.14.1.el7a
kernel-alt
Red Hat:enterprise_linux:7::server
From an advisory covering 5 CVEs
 before 0:4.14.0-115.14.1.el7a
0:4.14.0-115.14.1.el7a
kernel-bootwrapper
Red Hat:enterprise_linux:7::server
From an advisory covering 5 CVEs
 before 0:4.14.0-115.14.1.el7a
0:4.14.0-115.14.1.el7a
kernel-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 5 CVEs
 before 0:4.14.0-115.14.1.el7a
0:4.14.0-115.14.1.el7a
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 5 CVEs
 before 0:4.14.0-115.14.1.el7a
0:4.14.0-115.14.1.el7a
kernel-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 5 CVEs
 before 0:4.14.0-115.14.1.el7a
0:4.14.0-115.14.1.el7a
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:7::server
From an advisory covering 5 CVEs
 before 0:4.14.0-115.14.1.el7a
0:4.14.0-115.14.1.el7a
kernel-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 5 CVEs
 before 0:4.14.0-115.14.1.el7a
0:4.14.0-115.14.1.el7a
kernel-doc
Red Hat:enterprise_linux:7::server
From an advisory covering 5 CVEs
 before 0:4.14.0-115.14.1.el7a
0:4.14.0-115.14.1.el7a
kernel-tools
Red Hat:enterprise_linux:7::server
From an advisory covering 5 CVEs
 before 0:4.14.0-115.14.1.el7a
0:4.14.0-115.14.1.el7a
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 5 CVEs
 before 0:4.14.0-115.14.1.el7a
0:4.14.0-115.14.1.el7a
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15
From an advisory covering 9 CVEs
 before 4.12.14-5.27.1
4.12.14-5.27.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15
From an advisory covering 9 CVEs
 before 4.12.14-5.27.1
4.12.14-5.27.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15
From an advisory covering 9 CVEs
 before 4.12.14-5.27.1
4.12.14-5.27.1
kernel-default
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 9 CVEs
 before 4.12.14-95.16.1
4.12.14-95.16.1
kernel-source
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 9 CVEs
 before 4.12.14-95.16.1
4.12.14-95.16.1
kernel-syms
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 9 CVEs
 before 4.12.14-95.16.1
4.12.14-95.16.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 12 SP4
From an advisory covering 9 CVEs
 before 4.12.14-95.16.1
4.12.14-95.16.1
kgraft-patch-SLE12-SP4_Update_4
SUSE:Linux Enterprise Live Patching 12 SP4
From an advisory covering 9 CVEs
 before 1-6.3.1
1-6.3.1
kernel-docs
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 9 CVEs
 before 4.12.14-95.16.1
4.12.14-95.16.1
kernel-obs-build
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 9 CVEs
 before 4.12.14-95.16.1
4.12.14-95.16.1
kernel-default
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 9 CVEs
 before 4.12.14-95.16.1
4.12.14-95.16.1
kernel-source
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 9 CVEs
 before 4.12.14-95.16.1
4.12.14-95.16.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 9 CVEs
 before 4.12.14-95.16.1
4.12.14-95.16.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 9 CVEs
 before 4.12.14-95.16.1
4.12.14-95.16.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 9 CVEs
 before 4.12.14-95.16.1
4.12.14-95.16.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 9 CVEs
 before 4.12.14-95.16.1
4.12.14-95.16.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 12 SP4
From an advisory covering 9 CVEs
 before 4.12.14-95.16.1
4.12.14-95.16.1
kernel-azure
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 9 CVEs
 before 4.12.14-6.12.1
4.12.14-6.12.1
kernel-source-azure
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 9 CVEs
 before 4.12.14-6.12.1
4.12.14-6.12.1
kernel-syms-azure
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 9 CVEs
 before 4.12.14-6.12.1
4.12.14-6.12.1
kernel-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 9 CVEs
 before 4.12.14-6.12.1
4.12.14-6.12.1
kernel-source-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 9 CVEs
 before 4.12.14-6.12.1
4.12.14-6.12.1
kernel-syms-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 9 CVEs
 before 4.12.14-6.12.1
4.12.14-6.12.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 9 CVEs
 before 4.12.14-150.17.1
4.12.14-150.17.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 9 CVEs
 before 4.12.14-150.17.1
4.12.14-150.17.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 9 CVEs
 before 4.12.14-150.17.1
4.12.14-150.17.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15
From an advisory covering 9 CVEs
 before 4.12.14-150.17.1
4.12.14-150.17.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15
From an advisory covering 9 CVEs
 before 4.12.14-150.17.1
4.12.14-150.17.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15
From an advisory covering 9 CVEs
 before 4.12.14-150.17.1
4.12.14-150.17.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15
From an advisory covering 9 CVEs
 before 4.12.14-150.17.1
4.12.14-150.17.1
kernel-vanilla
SUSE:Linux Enterprise Module for Development Tools 15
From an advisory covering 9 CVEs
 before 4.12.14-150.17.1
4.12.14-150.17.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15
From an advisory covering 9 CVEs
 before 4.12.14-150.17.1
4.12.14-150.17.1
kernel-default
SUSE:Linux Enterprise Live Patching 15
From an advisory covering 9 CVEs
 before 4.12.14-150.17.1
4.12.14-150.17.1
kernel-livepatch-SLE15_Update_10
SUSE:Linux Enterprise Live Patching 15
From an advisory covering 9 CVEs
 before 1-1.3.1
1-1.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15
From an advisory covering 9 CVEs
 before 4.12.14-150.17.1
4.12.14-150.17.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15
From an advisory covering 9 CVEs
 before 4.12.14-150.17.1
4.12.14-150.17.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 28 CVEs
 before 4.12.14-197.4.1
4.12.14-197.4.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 28 CVEs
 before 4.12.14-197.4.1
4.12.14-197.4.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 28 CVEs
 before 4.12.14-197.4.1
4.12.14-197.4.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 28 CVEs
 before 4.12.14-197.4.1
4.12.14-197.4.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 28 CVEs
 before 4.12.14-197.4.1
4.12.14-197.4.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 28 CVEs
 before 4.12.14-197.4.1
4.12.14-197.4.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 28 CVEs
 before 4.12.14-197.4.1
4.12.14-197.4.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP1
From an advisory covering 28 CVEs
 before 4.12.14-197.4.1
4.12.14-197.4.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP1
From an advisory covering 28 CVEs
 before 4.12.14-197.4.1
4.12.14-197.4.1
kernel-livepatch-SLE15-SP1_Update_1
SUSE:Linux Enterprise Live Patching 15 SP1
From an advisory covering 28 CVEs
 before 1-3.3.1
1-3.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP1
From an advisory covering 28 CVEs
 before 4.12.14-197.4.1
4.12.14-197.4.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP1
From an advisory covering 28 CVEs
 before 4.12.14-197.4.1
4.12.14-197.4.1
kernel-rt
SUSE:Real Time Module 15 SP1
From an advisory covering 45 CVEs
 before 4.12.14-14.8.1
4.12.14-14.8.1
kernel-rt_debug
SUSE:Real Time Module 15 SP1
From an advisory covering 45 CVEs
 before 4.12.14-14.8.1
4.12.14-14.8.1
kernel-source-rt
SUSE:Real Time Module 15 SP1
From an advisory covering 45 CVEs
 before 4.12.14-14.8.1
4.12.14-14.8.1
kernel-syms-rt
SUSE:Real Time Module 15 SP1
From an advisory covering 45 CVEs
 before 4.12.14-14.8.1
4.12.14-14.8.1
linux-azure
Ubuntu:14.04:LTS
 before 4.15.0-1045.49~14.04.1, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 6 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.1
4.15.0-1045.49~14.04.1
linux-aws-hwe
Ubuntu:16.04:LTS
 before 4.15.0-1039.41~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.14.15.0-1036.38~16.04.1
4.15.0-1039.41~16.04.1
linux-azure
Ubuntu:16.04:LTS
 before 4.15.0-1045.49, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 29 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.46
4.15.0-1045.49
linux-gcp
Ubuntu:16.04:LTS
 before 4.15.0-1032.34~16.04.1, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 24 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.1
4.15.0-1032.34~16.04.1
linux-hwe
Ubuntu:16.04:LTS
 before 4.15.0-50.54~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 44 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.1
4.15.0-50.54~16.04.1
linux-oracle
Ubuntu:16.04:LTS
 before 4.15.0-1013.15~16.04.1, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
4.15.0-1013.15~16.04.1
linux
Ubuntu:18.04:LTS
 before 4.15.0-50.54, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 23 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.51
4.15.0-50.54
linux-aws
Ubuntu:18.04:LTS
 before 4.15.0-1039.41, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 18 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.39
4.15.0-1039.41
linux-azure
Ubuntu:18.04:LTS
 before 4.18.0-1018.18~18.04.1, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 19 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.1
4.18.0-1018.18~18.04.1
linux-gcp
Ubuntu:18.04:LTS
 before 4.15.0-1032.34, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 16 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.32
4.15.0-1032.34
linux-gcp-edge
Ubuntu:18.04:LTS
 before 4.18.0-1011.12~18.04.1, plus listed versions
4.18.0-1004.5~18.04.14.18.0-1005.6~18.04.14.18.0-1006.7~18.04.14.18.0-1007.8~18.04.14.18.0-1008.9~18.04.14.18.0-1009.10~18.04.1
4.18.0-1011.12~18.04.1
linux-gke-4.15
Ubuntu:18.04:LTS
 before 4.15.0-1032.34, plus listed versions
4.15.0-1030.32
4.15.0-1032.34
linux-hwe
Ubuntu:18.04:LTS
 before 4.18.0-20.21~18.04.1, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.14.18.0-18.19~18.04.1
4.18.0-20.21~18.04.1
linux-kvm
Ubuntu:18.04:LTS
 before 4.15.0-1034.34, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 17 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.32
4.15.0-1034.34
linux-oem
Ubuntu:18.04:LTS
 before 4.15.0-1038.43, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 14 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.41
4.15.0-1038.43
linux-oracle
Ubuntu:18.04:LTS
 before 4.15.0-1013.15, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
4.15.0-1013.15
linux-raspi2
Ubuntu:18.04:LTS
 before 4.15.0-1036.38, plus listed versions
4.13.0-1005.54.13.0-1006.64.13.0-1008.84.15.0-1006.74.15.0-1009.10
Show 19 moreShow less
4.15.0-1010.114.15.0-1011.124.15.0-1012.134.15.0-1013.144.15.0-1017.184.15.0-1018.194.15.0-1020.224.15.0-1021.234.15.0-1022.244.15.0-1024.264.15.0-1026.284.15.0-1027.294.15.0-1028.304.15.0-1029.314.15.0-1030.324.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.36
4.15.0-1036.38
linux-azure
Ubuntu:18.04:LTS
From an advisory covering 10 CVEs
 before 4.18.0-1018.18~18.04.1, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 19 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.1
4.18.0-1018.18~18.04.1
linux-hwe
Ubuntu:18.04:LTS
From an advisory covering 10 CVEs
 before 4.18.0-20.21~18.04.1, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.14.18.0-18.19~18.04.1
4.18.0-20.21~18.04.1
linux
Ubuntu:18.04:LTS
From an advisory covering 9 CVEs
 before 4.15.0-50.54, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 23 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.51
4.15.0-50.54
linux-aws
Ubuntu:18.04:LTS
From an advisory covering 9 CVEs
 before 4.15.0-1039.41, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 18 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.39
4.15.0-1039.41
linux-gcp
Ubuntu:18.04:LTS
From an advisory covering 9 CVEs
 before 4.15.0-1032.34, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 16 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.32
4.15.0-1032.34
linux-kvm
Ubuntu:18.04:LTS
From an advisory covering 9 CVEs
 before 4.15.0-1034.34, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 17 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.32
4.15.0-1034.34
linux-oem
Ubuntu:18.04:LTS
From an advisory covering 9 CVEs
 before 4.15.0-1038.43, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 14 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.41
4.15.0-1038.43
linux-oracle
Ubuntu:18.04:LTS
From an advisory covering 9 CVEs
 before 4.15.0-1013.15, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
4.15.0-1013.15
linux-raspi2
Ubuntu:18.04:LTS
From an advisory covering 9 CVEs
 before 4.15.0-1036.38, plus listed versions
4.13.0-1005.54.13.0-1006.64.13.0-1008.84.15.0-1006.74.15.0-1009.10
Show 19 moreShow less
4.15.0-1010.114.15.0-1011.124.15.0-1012.134.15.0-1013.144.15.0-1017.184.15.0-1018.194.15.0-1020.224.15.0-1021.234.15.0-1022.244.15.0-1024.264.15.0-1026.284.15.0-1027.294.15.0-1028.304.15.0-1029.314.15.0-1030.324.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.36
4.15.0-1036.38
linux-snapdragon
Ubuntu:18.04:LTS
From an advisory covering 9 CVEs
 before 4.15.0-1053.57, plus listed versions
4.4.0-1077.824.4.0-1078.834.4.0-1079.844.4.0-1081.86
4.15.0-1053.57
linux-azure
Ubuntu:14.04:LTS
From an advisory covering 9 CVEs
 before 4.15.0-1045.49~14.04.1, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 6 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.1
4.15.0-1045.49~14.04.1
linux-azure
Ubuntu:16.04:LTS
From an advisory covering 9 CVEs
 before 4.15.0-1045.49, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 29 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.46
4.15.0-1045.49
linux-gcp
Ubuntu:16.04:LTS
From an advisory covering 9 CVEs
 before 4.15.0-1032.34~16.04.1, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 24 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.1
4.15.0-1032.34~16.04.1
linux-hwe
Ubuntu:16.04:LTS
From an advisory covering 9 CVEs
 before 4.15.0-50.54~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 44 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.1
4.15.0-50.54~16.04.1
linux-oracle
Ubuntu:16.04:LTS
From an advisory covering 9 CVEs
 before 4.15.0-1013.15~16.04.1, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
4.15.0-1013.15~16.04.1
kernel-debug
openSUSE:Leap 15.0
From an advisory covering 12 CVEs
 before 4.12.14-lp150.12.61.1
4.12.14-lp150.12.61.1
kernel-default
openSUSE:Leap 15.0
From an advisory covering 12 CVEs
 before 4.12.14-lp150.12.61.1
4.12.14-lp150.12.61.1
kernel-docs
openSUSE:Leap 15.0
From an advisory covering 12 CVEs
 before 4.12.14-lp150.12.61.1
4.12.14-lp150.12.61.1
kernel-kvmsmall
openSUSE:Leap 15.0
From an advisory covering 12 CVEs
 before 4.12.14-lp150.12.61.1
4.12.14-lp150.12.61.1
kernel-obs-build
openSUSE:Leap 15.0
From an advisory covering 12 CVEs
 before 4.12.14-lp150.12.61.1
4.12.14-lp150.12.61.1
kernel-obs-qa
openSUSE:Leap 15.0
From an advisory covering 12 CVEs
 before 4.12.14-lp150.12.61.1
4.12.14-lp150.12.61.1
kernel-source
openSUSE:Leap 15.0
From an advisory covering 12 CVEs
 before 4.12.14-lp150.12.61.1
4.12.14-lp150.12.61.1
kernel-syms
openSUSE:Leap 15.0
From an advisory covering 12 CVEs
 before 4.12.14-lp150.12.61.1
4.12.14-lp150.12.61.1
kernel-vanilla
openSUSE:Leap 15.0
From an advisory covering 12 CVEs
 before 4.12.14-lp150.12.61.1
4.12.14-lp150.12.61.1
kernel-debug
openSUSE:Leap 15.1
From an advisory covering 11 CVEs
 before 4.12.14-lp151.28.4.1
4.12.14-lp151.28.4.1
kernel-default
openSUSE:Leap 15.1
From an advisory covering 11 CVEs
 before 4.12.14-lp151.28.4.1
4.12.14-lp151.28.4.1
kernel-docs
openSUSE:Leap 15.1
From an advisory covering 11 CVEs
 before 4.12.14-lp151.28.4.1
4.12.14-lp151.28.4.1
kernel-kvmsmall
openSUSE:Leap 15.1
From an advisory covering 11 CVEs
 before 4.12.14-lp151.28.4.1
4.12.14-lp151.28.4.1
kernel-obs-build
openSUSE:Leap 15.1
From an advisory covering 11 CVEs
 before 4.12.14-lp151.28.4.1
4.12.14-lp151.28.4.1
kernel-obs-qa
openSUSE:Leap 15.1
From an advisory covering 11 CVEs
 before 4.12.14-lp151.28.4.1
4.12.14-lp151.28.4.1
kernel-source
openSUSE:Leap 15.1
From an advisory covering 11 CVEs
 before 4.12.14-lp151.28.4.1
4.12.14-lp151.28.4.1
kernel-syms
openSUSE:Leap 15.1
From an advisory covering 11 CVEs
 before 4.12.14-lp151.28.4.1
4.12.14-lp151.28.4.1
kernel-vanilla
openSUSE:Leap 15.1
From an advisory covering 11 CVEs
 before 4.12.14-lp151.28.4.1
4.12.14-lp151.28.4.1
kernel-source
openSUSE:Tumbleweed
From an advisory covering 119 CVEs
 before 5.14.6-1.4
5.14.6-1.4
kernel-source
openSUSE:Tumbleweed
From an advisory covering 194 CVEs
 before 6.6.17-1.1
6.6.17-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-9500 is a high vulnerability (CVSS 7.9) in Broadcom Brcmfmac Wifi Driver, published April 12, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.85%, the 90th percentile. Fixed in linux 4.19.37-4.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 66 package rows, 736 references and the rest of 8 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open