{"id":"CVE-2015-9289","aliases":["DEBIAN-CVE-2015-9289","EUVD-2015-9129","GHSA-65g9-7jfx-8gx9","RHSA-2020:1016","RHSA-2020:1070","SUSE-SU-2019:14157-1","UBUNTU-CVE-2015-9289"],"status":"published","title":"In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in...","description":"In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00416,"percentile":0.36219,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2019-07-27T21:38:59Z","modified":"2026-09-09T07:02:10Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["4.1.5-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["4.1.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["4.1.5-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux","fixed_in":["3.13.0-62.102"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bpftool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bpftool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bpftool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-bootwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bpftool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.el7"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.rt56.1093.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.rt56.1093.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.rt56.1093.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.rt56.1093.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.rt56.1093.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.rt56.1093.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.rt56.1093.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.rt56.1093.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.rt56.1093.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.rt56.1093.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.rt56.1093.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.rt56.1093.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.rt56.1093.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.rt56.1093.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.rt56.1093.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.rt56.1093.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1127.rt56.1093.el7"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"kernel-bigmem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.101.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.101.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.101.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.101.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.101.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.101.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.101.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.101.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.101.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-62.102"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86","3.13.0-53.88","3.13.0-53.89","3.13.0-54.91","3.13.0-55.92","3.13.0-55.94","3.13.0-57.95","3.13.0-58.97","3.13.0-59.98","3.13.0-61.100"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1063.66+cvm2.2","5.4.0-1063.66+cvm3.2","5.4.0-1064.67+cvm1.1","5.4.0-1065.68+cvm2.1","5.4.0-1067.70+cvm1.1","5.4.0-1068.71+cvm1.1","5.4.0-1069.72+cvm1.1","5.4.0-1070.73+cvm1.1","5.4.0-1072.75+cvm1.1","5.4.0-1073.76+cvm1.1","5.4.0-1074.77+cvm1.1","5.4.0-1076.79+cvm1.1","5.4.0-1078.81+cvm1.1","5.4.0-1080.83+cvm1.1","5.4.0-1083.87+cvm1.1","5.4.0-1085.90+cvm1.1","5.4.0-1085.90+cvm2.1","5.4.0-1086.91+cvm1.1","5.4.0-1089.94+cvm1.2","5.4.0-1090.95+cvm1.1","5.4.0-1091.96+cvm1.1","5.4.0-1092.97+cvm1.1","5.4.0-1095.101+cvm1.1","5.4.0-1098.104+cvm1.1","5.4.0-1100.106+cvm1.1","5.4.0-1103.109+cvm1.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1033.35","5.4.0-1035.37","5.4.0-1036.38","5.4.0-1037.39","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1042.44","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1074.79","5.4.0-1076.82","5.4.0-1078.84","5.4.0-1080.86","5.4.0-1081.87","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1100.107","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110","5.4.0-1104.111","5.4.0-1105.112"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-24.28","5.4.0-26.30","5.4.0-27.31","5.4.0-28.32","5.4.0-30.34","5.4.0-31.35","5.4.0-33.37","5.4.0-34.38","5.4.0-36.41","5.4.0-37.42","5.4.0-39.44","5.4.0-40.45"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1073.75"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1032.35"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1011.12","5.15.0-1012.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.21","5.15.0-1019.22","5.15.0-1020.23","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-2019.20"]}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"https://github.com/torvalds/linux/commit/1fa2337a315a2448c5434f41e00d56b01a22283c","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1fa2337a315a2448c5434f41e00d56b01a22283c","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.4","tags":["x_refsource_MISC","x_transferred","Release Notes","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-9289","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-65g9-7jfx-8gx9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-9289","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1016","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1507149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1528335","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1651706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1660385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1666106","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1694201","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1699856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701245","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701842","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1709837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1710751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1711520","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1715554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1716328","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1722706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1727756","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1729931","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1729933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1733347","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1733874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1734243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1735630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1735655","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1749390","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1750577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1750813","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757325","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758001","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760294","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1770404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1777825","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1016.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-9289","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-9289","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-17807","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-17807","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-17807","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-7191","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7191","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7191","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-19985","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-19985","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19985","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20169","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20169","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20169","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3901","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3901","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3901","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-5108","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1789927","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-5108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-5108","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9503","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9503","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9503","tags":["advisory"]},{"url":"https://blog.quarkslab.com/reverse-engineering-broadcom-wireless-chipsets.html#cve-2019-9503-remotely-sending-firmware-events-bypassing-is-wlc-event-frame","tags":["article"]},{"url":"https://kb.cert.org/vuls/id/166939/","tags":["article"]},{"url":"https://www.bleepingcomputer.com/news/security/broadcom-wifi-driver-flaws-expose-computers-phones-iot-to-rce-attacks/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10207","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10207","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10207","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10638","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10638","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10638","tags":["advisory"]},{"url":"https://arxiv.org/pdf/1906.10478.pdf","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10639","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11190","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11190","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11190","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11884","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11884","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11884","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12382","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12382","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12382","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13233","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13233","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13233","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13648","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13648","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13648","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14283","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14283","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14283","tags":["advisory"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3","tags":["article"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=da99466ac243f15fbba65bd261bfc75ffa1532b6","tags":["article"]},{"url":"https://github.com/torvalds/linux/commit/da99466ac243f15fbba65bd261bfc75ffa1532b6","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1744130","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14814","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14814","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7caac62ed598a196d6ddf8d9c121e12e082cac3a","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14815","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1744137","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14815","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14815","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15090","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1743526","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15090","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15090","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1743591","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15214","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15214","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1749974","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15221","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15221","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15916","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15916","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15916","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16746","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16746","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16746","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-18660","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-18660","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18660","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1070","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1550584","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1696087","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1699438","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708718","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1741775","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1751083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1772894","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1070.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914157-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1134390","tags":["report"]},{"url":"https://bugzilla.suse.com/1134399","tags":["report"]},{"url":"https://bugzilla.suse.com/1138744","tags":["report"]},{"url":"https://bugzilla.suse.com/1139358","tags":["report"]},{"url":"https://bugzilla.suse.com/1140945","tags":["report"]},{"url":"https://bugzilla.suse.com/1140965","tags":["report"]},{"url":"https://bugzilla.suse.com/1141401","tags":["report"]},{"url":"https://bugzilla.suse.com/1141402","tags":["report"]},{"url":"https://bugzilla.suse.com/1141452","tags":["report"]},{"url":"https://bugzilla.suse.com/1141453","tags":["report"]},{"url":"https://bugzilla.suse.com/1141454","tags":["report"]},{"url":"https://bugzilla.suse.com/1142023","tags":["report"]},{"url":"https://bugzilla.suse.com/1143045","tags":["report"]},{"url":"https://bugzilla.suse.com/1143179","tags":["report"]},{"url":"https://bugzilla.suse.com/1143189","tags":["report"]},{"url":"https://bugzilla.suse.com/1143191","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-9289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14284","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-9289","tags":["report"]},{"url":"https://git.kernel.org/linus/1fa2337a315a2448c5434f41e00d56b01a22283c","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-9289","description":"In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23.","status":"published","published":"2019-07-27T21:38:59Z","modified":"2024-08-06T08:43:42.382Z","updated_at":"2026-11-02T14:35:40.591596Z"}],"euvd":[{"id":"EUVD-2015-9129","description":"In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23.","status":"published","published":"2019-07-27T21:38:59Z","modified":"2024-08-06T08:43:42Z","updated_at":"2026-11-03T01:57:24.81699Z"}],"ghsa":[{"id":"GHSA-65g9-7jfx-8gx9","title":"In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in...","description":"In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23.","status":"published","published":"2022-05-24T16:51:33Z","modified":"2023-01-28T05:06:26Z","updated_at":"2026-11-02T14:44:25.86191Z"}],"nvd":[{"id":"CVE-2015-9289","description":"In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23.","status":"published","published":"2019-07-27T22:15:11.417Z","modified":"2026-06-17T00:36:13.3Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:C/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:03:19.73542Z"}],"osv":[{"id":"CVE-2015-9289","description":"In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23.","status":"published","published":"2019-07-27T22:15:11Z","modified":"2026-04-10T03:46:35.766461Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:01.068991Z"},{"id":"DEBIAN-CVE-2015-9289","description":"In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23.","status":"published","published":"2019-07-27T22:15:11.417Z","modified":"2026-09-09T07:02:10.528387607Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:27.323751Z"},{"id":"RHSA-2020:1016","title":"Red Hat Security Advisory: kernel security, bug fix, and enhancement update","status":"published","published":"2024-09-16T02:17:48Z","modified":"2026-06-28T10:35:27Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:1070","title":"Red Hat Security Advisory: kernel-rt security and bug fix update","status":"published","published":"2024-09-13T22:02:36Z","modified":"2026-06-28T10:35:28Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"UBUNTU-CVE-2015-9289","description":"In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23.","status":"published","published":"2019-07-27T22:15:00Z","modified":"2026-04-22T09:34:55.027172Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:11.100633Z"},{"id":"SUSE-SU-2019:14157-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2019-14284: The drivers/block/floppy.c allowed a denial of service by setup_format_params division-by-zero. Two consecutive ioctls can trigger the bug: the first one should set the drive geometry with .sect and .rate values that make F_SECT_PER_TRACK be zero. Next, the floppy format operation should be called. It can be triggered by an unprivileged local user even when a floppy disk has not been inserted. NOTE: QEMU creates the floppy device by default (bsc#1143189).\n- CVE-2019-14283: The function set_geometry in drivers/block/floppy.c did not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It can be triggered by an unprivileged local user when a floppy disk has been inserted. NOTE: QEMU creates the floppy device by default (bsc#1143191).\n- CVE-2019-13631: In parse_hid_report_descriptor in drivers/input/tablet/gtco.c, a malicious USB device can send an HID report that triggers an out-of-bounds write during generation of debugging messages (bsc#1142023).\n- CVE-2019-11810: A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This causes a Denial of Service, related to a use-after-free (bsc#1134399).\n- CVE-2019-1125: Enable Spectre v1 swapgs mitigations (bsc#1139358).\n- CVE-2018-20855: An issue was discovered in create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace (bsc#1143045).\n- CVE-2015-9289: A buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allowed larger values such as 23 (bsc#1143179).\n\nThe following non-security bugs were fixed:\n\n- fix detection of race between fcntl-setlk and close (bsc#1140965).\n- ocfs2: add first lock wait time in locking_state (bsc#1134390).\n- ocfs2: add last unlock times in locking_state (bsc#1134390).\n- ocfs2: add locking filter debugfs file (bsc#1134390).\n- powerpc/watchpoint: Restore NV GPRs while returning from exception (bsc#1140945,bsc#1141401,bsc#1141402,bsc#1141452,bsc#1141453,bsc#1141454).\n- xen-netfront: use napi_complete() correctly to prevent Rx stalling (bsc#1138744).\n","status":"published","published":"2019-08-29T14:18:28Z","modified":"2026-02-04T02:29:25.598254Z","updated_at":"2026-11-02T15:53:46.44301Z"}]}}