{"id":"CVE-2017-12190","aliases":["DEBIAN-CVE-2017-12190","DLA-1200-1","EUVD-2017-3765","GHSA-cw63-cpqx-9vx9","MGASA-2017-0463","MGASA-2017-0466","MGASA-2017-0467","MGASA-2018-0062","MGASA-2018-0063","MGASA-2018-0064","RHSA-2018:0654","RHSA-2018:0676","RHSA-2018:1062","RHSA-2018:1854","RHSA-2019:1170","RHSA-2019:1190","SUSE-SU-2018:0834-1","SUSE-SU-2018:0848-1","SUSE-SU-2018:1080-1","SUSE-SU-2018:1172-1","SUSE-SU-2018:1309-1","UBUNTU-CVE-2017-12190","USN-3582-1","USN-3582-2","USN-3583-1"],"status":"published","title":"The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13...","description":"The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00531,"percentile":0.45122,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400","CWE-772"],"published":"2017-10-12T00:00:00Z","modified":"2026-10-28T08:17:07Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["4.13.10-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["4.13.10-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["4.13.10-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux","fixed_in":["3.13.0-142.191"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-aws","fixed_in":["4.4.0-1014.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-xenial","fixed_in":["4.4.0-116.140~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux","fixed_in":["4.4.0-116.140"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-aws","fixed_in":["4.4.0-1052.61"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-azure","fixed_in":["4.13.0-1005.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-gcp","fixed_in":["4.13.0-1002.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe","fixed_in":["4.13.0-32.35~16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-kvm","fixed_in":["4.4.0-1019.24"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","fixed_in":["4.4.0-1085.93"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","fixed_in":["4.4.0-1087.92"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"linux-fips","fixed_in":["4.4.0-1005.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.10-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.10-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.10-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.96-1"}]}],"versions":["3.2.41-2","3.2.41-2+deb7u1","3.2.41-2+deb7u2","3.2.41-2+deb7u2~bpo60+1","3.2.46-1","3.2.46-1+deb7u1","3.2.46-1+deb7u1~bpo60+1","3.2.46-1~bpo60+1","3.2.51-1","3.2.51-1~bpo60+1","3.2.53-1","3.2.53-2","3.2.54-1","3.2.54-2","3.2.54-2~bpo60+1","3.2.57-1","3.2.57-2","3.2.57-3","3.2.57-3+deb7u1","3.2.57-3+deb7u2","3.2.57-3+deb7u2~bpo60+1","3.2.60-1","3.2.60-1+deb7u1","3.2.60-1+deb7u2","3.2.60-1+deb7u3","3.2.60-1+deb7u3~bpo60+1","3.2.63-1","3.2.63-2","3.2.63-2+deb7u1","3.2.63-2+deb7u1~bpo60+1","3.2.63-2+deb7u2","3.2.63-2+deb7u2~bpo60+1","3.2.65-1","3.2.65-1+deb7u1","3.2.65-1+deb7u1~bpo60+1","3.2.65-1+deb7u2","3.2.65-1+deb7u2~bpo60+1","3.2.68-1","3.2.68-1+deb7u1","3.2.68-1+deb7u1~bpo60+1","3.2.68-1+deb7u2","3.2.68-1+deb7u2~bpo60+1","3.2.68-1+deb7u3","3.2.68-1+deb7u3~bpo60+1","3.2.68-1+deb7u4","3.2.68-1+deb7u4~bpo60+1","3.2.68-1+deb7u5","3.2.68-1+deb7u6","3.2.68-1+deb7u6~bpo60+1","3.2.71-1","3.2.71-2","3.2.73-1","3.2.73-2","3.2.73-2+deb7u1","3.2.73-2+deb7u2","3.2.73-2+deb7u2~bpo60+1","3.2.73-2+deb7u3","3.2.78-1","3.2.81-1","3.2.81-2","3.2.82-1","3.2.84-1","3.2.84-2","3.2.86-1","3.2.88-1","3.2.89-1","3.2.89-2","3.2.93-1"],"bundled":24},{"source":"osv","ecosystem":"Mageia:5","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.105-1.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-userspace-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.105-1.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-vboxadditions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.30-2.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.30-2.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-xtables-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-50.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-tmb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.105-1.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-linus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.105-1.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:6","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.10-1.mga6"}]}],"bundled":26},{"source":"osv","ecosystem":"Mageia:6","package":"kernel-userspace-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.10-1.mga6"}]}],"bundled":26},{"source":"osv","ecosystem":"Mageia:6","package":"kmod-vboxadditions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-5.mga6"}]}],"bundled":26},{"source":"osv","ecosystem":"Mageia:6","package":"kmod-virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-5.mga6"}]}],"bundled":26},{"source":"osv","ecosystem":"Mageia:6","package":"kmod-xtables-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13-8.mga6"}]}],"bundled":26},{"source":"osv","ecosystem":"Mageia:6","package":"wireguard-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20171221-1.mga6"}]}],"bundled":26},{"source":"osv","ecosystem":"Mageia:6","package":"kernel-tmb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.10-1.mga6"}]}],"bundled":26},{"source":"osv","ecosystem":"Mageia:6","package":"kernel-linus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.10-1.mga6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-alt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-bootwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-49.el7a"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.rt56.804.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.rt56.804.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.rt56.804.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.rt56.804.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.rt56.804.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.rt56.804.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.rt56.804.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.rt56.804.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.rt56.804.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.rt56.804.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.rt56.804.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.rt56.804.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.rt56.804.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.rt56.804.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.rt56.804.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.rt56.804.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.rt56.804.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-bootwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-862.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debuginfo-common-i686","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debuginfo-common-i686","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debuginfo-common-i686","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debuginfo-common-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-bootwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debuginfo-common-i686","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-754.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::computenode","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"kernel-bootwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"kernel-debuginfo-common-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.4::server","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-693.47.2.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.47.2.rt56.641.el6rt"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.47.2.rt56.641.el6rt"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.47.2.rt56.641.el6rt"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.47.2.rt56.641.el6rt"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.47.2.rt56.641.el6rt"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.47.2.rt56.641.el6rt"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.47.2.rt56.641.el6rt"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.47.2.rt56.641.el6rt"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.47.2.rt56.641.el6rt"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.47.2.rt56.641.el6rt"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.47.2.rt56.641.el6rt"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.47.2.rt56.641.el6rt"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.47.2.rt56.641.el6rt"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.47.2.rt56.641.el6rt"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.47.2.rt56.641.el6rt"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.61-52.125.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.61-52.125.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.61-52.125.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.61-52.125.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.61-52.125.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"kgraft-patch-SLE12_Update_33","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-1.3.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.85.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.85.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.85.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.85.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"kgraft-patch-SLE12-SP1_Update_26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-2.3.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.85.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.85.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.85.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.85.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.85.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kgraft-patch-SLE12-SP1_Update_26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-2.3.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.85.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.85.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.85.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.85.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"kgraft-patch-SLE12-SP1_Update_26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-2.3.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.38.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-bigmem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.38.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.38.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.38.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.38.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.38.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.38.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.38.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.38.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.38.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-bigmem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.38.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.38.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.38.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.38.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.38.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.38.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.38.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.38.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.38.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.22.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.22.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.22.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.22.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.22.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.22.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.22.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.22.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.22.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.22.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.22.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.22.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.22.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.22.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.22.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-69.24.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","package":"kernel-rt_trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-69.24.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-69.24.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-69.24.1"}]}],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-142.191"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86","3.13.0-53.88","3.13.0-53.89","3.13.0-54.91","3.13.0-55.92","3.13.0-55.94","3.13.0-57.95","3.13.0-58.97","3.13.0-59.98","3.13.0-61.100","3.13.0-62.102","3.13.0-63.103","3.13.0-65.105","3.13.0-65.106","3.13.0-66.108","3.13.0-67.110","3.13.0-68.111","3.13.0-70.113","3.13.0-71.114","3.13.0-73.116","3.13.0-74.118","3.13.0-76.120","3.13.0-77.121","3.13.0-79.123","3.13.0-83.127","3.13.0-85.129","3.13.0-86.130","3.13.0-86.131","3.13.0-87.133","3.13.0-88.135","3.13.0-91.138","3.13.0-92.139","3.13.0-93.140","3.13.0-95.142","3.13.0-96.143","3.13.0-98.145","3.13.0-100.147","3.13.0-101.148","3.13.0-103.150","3.13.0-105.152","3.13.0-106.153","3.13.0-107.154","3.13.0-108.155","3.13.0-109.156","3.13.0-110.157","3.13.0-111.158","3.13.0-112.159","3.13.0-113.160","3.13.0-115.162","3.13.0-116.163","3.13.0-117.164","3.13.0-119.166","3.13.0-121.170","3.13.0-123.172","3.13.0-125.174","3.13.0-126.175","3.13.0-128.177","3.13.0-129.178","3.13.0-132.181","3.13.0-133.182","3.13.0-135.184","3.13.0-137.186","3.13.0-139.188","3.13.0-141.190"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1014.14"}]}],"versions":["4.4.0-1002.2","4.4.0-1003.3","4.4.0-1005.5","4.4.0-1006.6","4.4.0-1009.9","4.4.0-1010.10","4.4.0-1011.11","4.4.0-1012.12"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-xenial","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-116.140~14.04.1"}]}],"versions":["4.4.0-13.29~14.04.1","4.4.0-14.30~14.04.2","4.4.0-15.31~14.04.1","4.4.0-18.34~14.04.1","4.4.0-21.37~14.04.1","4.4.0-22.39~14.04.1","4.4.0-22.40~14.04.1","4.4.0-24.43~14.04.1","4.4.0-28.47~14.04.1","4.4.0-31.50~14.04.1","4.4.0-34.53~14.04.1","4.4.0-36.55~14.04.1","4.4.0-38.57~14.04.1","4.4.0-42.62~14.04.1","4.4.0-45.66~14.04.1","4.4.0-47.68~14.04.1","4.4.0-51.72~14.04.1","4.4.0-53.74~14.04.1","4.4.0-57.78~14.04.1","4.4.0-59.80~14.04.1","4.4.0-62.83~14.04.1","4.4.0-63.84~14.04.2","4.4.0-64.85~14.04.1","4.4.0-66.87~14.04.1","4.4.0-67.88~14.04.1","4.4.0-70.91~14.04.1","4.4.0-71.92~14.04.1","4.4.0-72.93~14.04.1","4.4.0-75.96~14.04.1","4.4.0-78.99~14.04.2","4.4.0-79.100~14.04.1","4.4.0-81.104~14.04.1","4.4.0-83.106~14.04.1","4.4.0-87.110~14.04.1","4.4.0-89.112~14.04.1","4.4.0-91.114~14.04.1","4.4.0-92.115~14.04.1","4.4.0-93.116~14.04.1","4.4.0-96.119~14.04.1","4.4.0-97.120~14.04.1","4.4.0-98.121~14.04.1","4.4.0-101.124~14.04.1","4.4.0-103.126~14.04.1","4.4.0-104.127~14.04.1","4.4.0-108.131~14.04.1","4.4.0-109.132~14.04.1","4.4.0-111.134~14.04.1","4.4.0-112.135~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-116.140"}]}],"versions":["4.2.0-16.19","4.2.0-17.21","4.2.0-19.23","4.3.0-1.10","4.3.0-2.11","4.3.0-5.16","4.3.0-6.17","4.3.0-7.18","4.4.0-2.16","4.4.0-4.19","4.4.0-6.21","4.4.0-7.22","4.4.0-8.23","4.4.0-9.24","4.4.0-10.25","4.4.0-11.26","4.4.0-12.28","4.4.0-13.29","4.4.0-14.30","4.4.0-15.31","4.4.0-16.32","4.4.0-17.33","4.4.0-18.34","4.4.0-21.37","4.4.0-22.39","4.4.0-22.40","4.4.0-24.43","4.4.0-28.47","4.4.0-31.50","4.4.0-34.53","4.4.0-36.55","4.4.0-38.57","4.4.0-42.62","4.4.0-43.63","4.4.0-45.66","4.4.0-47.68","4.4.0-51.72","4.4.0-53.74","4.4.0-57.78","4.4.0-59.80","4.4.0-62.83","4.4.0-63.84","4.4.0-64.85","4.4.0-65.86","4.4.0-66.87","4.4.0-67.88","4.4.0-70.91","4.4.0-71.92","4.4.0-72.93","4.4.0-75.96","4.4.0-77.98","4.4.0-78.99","4.4.0-79.100","4.4.0-81.104","4.4.0-83.106","4.4.0-87.110","4.4.0-89.112","4.4.0-91.114","4.4.0-92.115","4.4.0-93.116","4.4.0-96.119","4.4.0-97.120","4.4.0-98.121","4.4.0-101.124","4.4.0-103.126","4.4.0-104.127","4.4.0-108.131","4.4.0-109.132","4.4.0-112.135"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1052.61"}]}],"versions":["4.4.0-1001.10","4.4.0-1003.12","4.4.0-1004.13","4.4.0-1007.16","4.4.0-1009.18","4.4.0-1011.20","4.4.0-1012.21","4.4.0-1013.22","4.4.0-1016.25","4.4.0-1017.26","4.4.0-1018.27","4.4.0-1020.29","4.4.0-1022.31","4.4.0-1026.35","4.4.0-1028.37","4.4.0-1030.39","4.4.0-1031.40","4.4.0-1032.41","4.4.0-1035.44","4.4.0-1037.46","4.4.0-1038.47","4.4.0-1039.48","4.4.0-1041.50","4.4.0-1043.52","4.4.0-1044.53","4.4.0-1047.56","4.4.0-1048.57","4.4.0-1049.58","4.4.0-1050.59"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.0-1005.7"}]}],"versions":["4.11.0-1009.9","4.11.0-1011.11","4.11.0-1013.13","4.11.0-1014.14","4.11.0-1015.15","4.11.0-1016.16"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.0-1002.5"}]}],"versions":["4.10.0-1004.4","4.10.0-1006.6","4.10.0-1007.7","4.10.0-1008.8","4.10.0-1009.9"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.0-32.35~16.04.1"}]}],"versions":["4.8.0-36.36~16.04.1","4.8.0-39.42~16.04.1","4.8.0-41.44~16.04.1","4.8.0-42.45~16.04.1","4.8.0-44.47~16.04.1","4.8.0-45.48~16.04.1","4.8.0-46.49~16.04.1","4.8.0-49.52~16.04.1","4.8.0-51.54~16.04.1","4.8.0-52.55~16.04.1","4.8.0-53.56~16.04.1","4.8.0-54.57~16.04.1","4.8.0-56.61~16.04.1","4.8.0-58.63~16.04.1","4.10.0-27.30~16.04.2","4.10.0-28.32~16.04.2","4.10.0-30.34~16.04.1","4.10.0-32.36~16.04.1","4.10.0-33.37~16.04.1","4.10.0-35.39~16.04.1","4.10.0-37.41~16.04.1","4.10.0-38.42~16.04.1","4.10.0-40.44~16.04.1","4.10.0-42.46~16.04.1","4.13.0-26.29~16.04.2","4.13.0-31.34~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1019.24"}]}],"versions":["4.4.0-1004.9","4.4.0-1007.12","4.4.0-1008.13","4.4.0-1009.14","4.4.0-1010.15","4.4.0-1012.17","4.4.0-1013.18","4.4.0-1015.20","4.4.0-1017.22"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1085.93"}]}],"versions":["4.2.0-1013.19","4.2.0-1014.21","4.3.0-1006.6","4.4.0-1003.4","4.4.0-1004.5","4.4.0-1009.10","4.4.0-1010.12","4.4.0-1010.13","4.4.0-1012.16","4.4.0-1016.22","4.4.0-1017.23","4.4.0-1019.25","4.4.0-1021.27","4.4.0-1023.29","4.4.0-1027.33","4.4.0-1029.36","4.4.0-1034.41","4.4.0-1038.45","4.4.0-1040.47","4.4.0-1042.49","4.4.0-1044.51","4.4.0-1046.53","4.4.0-1048.55","4.4.0-1050.57","4.4.0-1051.58","4.4.0-1052.59","4.4.0-1054.61","4.4.0-1055.62","4.4.0-1057.64","4.4.0-1059.67","4.4.0-1061.69","4.4.0-1065.73","4.4.0-1067.75","4.4.0-1069.77","4.4.0-1070.78","4.4.0-1071.79","4.4.0-1074.82","4.4.0-1075.83","4.4.0-1076.84","4.4.0-1077.85","4.4.0-1079.87","4.4.0-1080.88","4.4.0-1082.90"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1087.92"}]}],"versions":["4.4.0-1012.12","4.4.0-1013.14","4.4.0-1013.15","4.4.0-1015.18","4.4.0-1019.22","4.4.0-1020.23","4.4.0-1022.25","4.4.0-1024.27","4.4.0-1026.29","4.4.0-1030.33","4.4.0-1032.36","4.4.0-1035.39","4.4.0-1039.43","4.4.0-1042.46","4.4.0-1044.48","4.4.0-1046.50","4.4.0-1047.51","4.4.0-1048.52","4.4.0-1050.54","4.4.0-1051.55","4.4.0-1053.57","4.4.0-1054.58","4.4.0-1055.59","4.4.0-1057.61","4.4.0-1058.62","4.4.0-1059.63","4.4.0-1061.66","4.4.0-1063.68","4.4.0-1067.72","4.4.0-1069.74","4.4.0-1071.76","4.4.0-1072.77","4.4.0-1073.78","4.4.0-1076.81","4.4.0-1077.82","4.4.0-1078.83","4.4.0-1079.84","4.4.0-1081.86","4.4.0-1082.87","4.4.0-1084.89"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1005.5"}]}],"versions":["4.4.0-1003.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1063.66+cvm2.2","5.4.0-1063.66+cvm3.2","5.4.0-1064.67+cvm1.1","5.4.0-1065.68+cvm2.1","5.4.0-1067.70+cvm1.1","5.4.0-1068.71+cvm1.1","5.4.0-1069.72+cvm1.1","5.4.0-1070.73+cvm1.1","5.4.0-1072.75+cvm1.1","5.4.0-1073.76+cvm1.1","5.4.0-1074.77+cvm1.1","5.4.0-1076.79+cvm1.1","5.4.0-1078.81+cvm1.1","5.4.0-1080.83+cvm1.1","5.4.0-1083.87+cvm1.1","5.4.0-1085.90+cvm1.1","5.4.0-1085.90+cvm2.1","5.4.0-1086.91+cvm1.1","5.4.0-1089.94+cvm1.2","5.4.0-1090.95+cvm1.1","5.4.0-1091.96+cvm1.1","5.4.0-1092.97+cvm1.1","5.4.0-1095.101+cvm1.1","5.4.0-1098.104+cvm1.1","5.4.0-1100.106+cvm1.1","5.4.0-1103.109+cvm1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure-fde-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1019.24~20.04.1.1","5.15.0-1020.25~20.04.1.1","5.15.0-1021.26~20.04.1.1","5.15.0-1029.36~20.04.1.1","5.15.0-1030.37~20.04.1.1","5.15.0-1031.38~20.04.1.1","5.15.0-1033.40~20.04.1.1","5.15.0-1034.41~20.04.1.2","5.15.0-1035.42~20.04.1.1","5.15.0-1036.43~20.04.1.1","5.15.0-1037.44~20.04.1.1","5.15.0-1038.45~20.04.1.1","5.15.0-1039.46~20.04.1.1","5.15.0-1040.47~20.04.1.1","5.15.0-1041.48~20.04.1.1","5.15.0-1042.49~20.04.1.1","5.15.0-1043.50~20.04.1.1","5.15.0-1046.53~20.04.1.1","5.15.0-1047.54~20.04.1.1","5.15.0-1049.56~20.04.1.1","5.15.0-1050.57~20.04.1.1","5.15.0-1051.59~20.04.1.1","5.15.0-1052.60~20.04.1.1","5.15.0-1053.61~20.04.1.1","5.15.0-1054.62~20.04.1.1","5.15.0-1056.64~20.04.1.1","5.15.0-1057.65~20.04.1.1","5.15.0-1058.66~20.04.2.1","5.15.0-1059.67~20.04.1.1","5.15.0-1060.69~20.04.1.1","5.15.0-1061.70~20.04.1.1","5.15.0-1063.72~20.04.1.1","5.15.0-1064.73~20.04.1.1","5.15.0-1065.74~20.04.1.1","5.15.0-1067.76~20.04.1.1","5.15.0-1068.77~20.04.1.1","5.15.0-1070.79~20.04.1.1","5.15.0-1071.80~20.04.1.1","5.15.0-1072.81~20.04.1.1","5.15.0-1073.82~20.04.1.1","5.15.0-1074.83~20.04.1.1","5.15.0-1076.85~20.04.1.1","5.15.0-1078.87~20.04.1.1","5.15.0-1081.90~20.04.1.1","5.15.0-1082.91~20.04.1.1","5.15.0-1086.95~20.04.1.1","5.15.0-1087.96~20.04.1.1","5.15.0-1088.97~20.04.1.1","5.15.0-1089.98~20.04.1.1","5.15.0-1091.100~20.04.1.1","5.15.0-1094.103~20.04.1.1","5.15.0-1096.105~20.04.1.1","5.15.0-1097.106~20.04.1.1","5.15.0-1098.107~20.04.1.1","5.15.0-1102.111~20.04.1.1","5.15.0-1103.112~20.04.1.1","5.15.0-1111.120~20.04.1.1","5.15.0-1114.123~20.04.1","5.15.0-1116.125~20.04.1","5.15.0-1117.126~20.04.2","5.15.0-1118.127~20.04.1","5.15.0-1119.128~20.04.1","5.15.0-1120.129~20.04.1","5.15.0-1121.130~20.04.1","5.15.0-1122.131~20.04.1","5.15.0-1124.133~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1033.35","5.4.0-1035.37","5.4.0-1036.38","5.4.0-1037.39","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1042.44","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1074.79","5.4.0-1076.82","5.4.0-1078.84","5.4.0-1080.86","5.4.0-1081.87","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1100.107","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110","5.4.0-1104.111","5.4.0-1105.112"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-24.28","5.4.0-26.30","5.4.0-27.31","5.4.0-28.32","5.4.0-30.34","5.4.0-31.35","5.4.0-33.37","5.4.0-34.38","5.4.0-36.41","5.4.0-37.42","5.4.0-39.44","5.4.0-40.45"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1073.75"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1032.35"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1011.12","5.15.0-1012.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.21","5.15.0-1019.22","5.15.0-1020.23","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1008.8~24.04.1","6.11.0-1012.12~24.04.1","6.11.0-1013.13~24.04.1","6.11.0-1014.14~24.04.1","6.11.0-1015.15~24.04.1","6.11.0-1017.17~24.04.1","6.11.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1006.6~24.04.2","6.11.0-1011.11~24.04.1","6.11.0-1013.13~24.04.1","6.11.0-1014.14~24.04.1","6.11.0-1015.15~24.04.1","6.11.0-1016.16~24.04.1","6.11.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-17.17~24.04.2","6.11.0-19.19~24.04.1","6.11.0-21.21~24.04.1","6.11.0-24.24~24.04.1","6.11.0-25.25~24.04.1","6.11.0-26.26~24.04.1","6.11.0-28.28~24.04.1","6.11.0-29.29~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency-hwe-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1009.10~24.04.1","6.11.0-1011.12~24.04.1","6.11.0-1012.13~24.04.1","6.11.0-1013.14~24.04.1","6.11.0-1014.15~24.04.1","6.11.0-1015.16~24.04.2","6.11.0-1016.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-2019.20"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-116.140"}]}],"versions":["4.2.0-16.19","4.2.0-17.21","4.2.0-19.23","4.3.0-1.10","4.3.0-2.11","4.3.0-5.16","4.3.0-6.17","4.3.0-7.18","4.4.0-2.16","4.4.0-4.19","4.4.0-6.21","4.4.0-7.22","4.4.0-8.23","4.4.0-9.24","4.4.0-10.25","4.4.0-11.26","4.4.0-12.28","4.4.0-13.29","4.4.0-14.30","4.4.0-15.31","4.4.0-16.32","4.4.0-17.33","4.4.0-18.34","4.4.0-21.37","4.4.0-22.39","4.4.0-22.40","4.4.0-24.43","4.4.0-28.47","4.4.0-31.50","4.4.0-34.53","4.4.0-36.55","4.4.0-38.57","4.4.0-42.62","4.4.0-43.63","4.4.0-45.66","4.4.0-47.68","4.4.0-51.72","4.4.0-53.74","4.4.0-57.78","4.4.0-59.80","4.4.0-62.83","4.4.0-63.84","4.4.0-64.85","4.4.0-65.86","4.4.0-66.87","4.4.0-67.88","4.4.0-70.91","4.4.0-71.92","4.4.0-72.93","4.4.0-75.96","4.4.0-77.98","4.4.0-78.99","4.4.0-79.100","4.4.0-81.104","4.4.0-83.106","4.4.0-87.110","4.4.0-89.112","4.4.0-91.114","4.4.0-92.115","4.4.0-93.116","4.4.0-96.119","4.4.0-97.120","4.4.0-98.121","4.4.0-101.124","4.4.0-103.126","4.4.0-104.127","4.4.0-108.131","4.4.0-109.132","4.4.0-112.135"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1052.61"}]}],"versions":["4.4.0-1001.10","4.4.0-1003.12","4.4.0-1004.13","4.4.0-1007.16","4.4.0-1009.18","4.4.0-1011.20","4.4.0-1012.21","4.4.0-1013.22","4.4.0-1016.25","4.4.0-1017.26","4.4.0-1018.27","4.4.0-1020.29","4.4.0-1022.31","4.4.0-1026.35","4.4.0-1028.37","4.4.0-1030.39","4.4.0-1031.40","4.4.0-1032.41","4.4.0-1035.44","4.4.0-1037.46","4.4.0-1038.47","4.4.0-1039.48","4.4.0-1041.50","4.4.0-1043.52","4.4.0-1044.53","4.4.0-1047.56","4.4.0-1048.57","4.4.0-1049.58","4.4.0-1050.59"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1019.24"}]}],"versions":["4.4.0-1004.9","4.4.0-1007.12","4.4.0-1008.13","4.4.0-1009.14","4.4.0-1010.15","4.4.0-1012.17","4.4.0-1013.18","4.4.0-1015.20","4.4.0-1017.22"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1085.93"}]}],"versions":["4.2.0-1013.19","4.2.0-1014.21","4.3.0-1006.6","4.4.0-1003.4","4.4.0-1004.5","4.4.0-1009.10","4.4.0-1010.12","4.4.0-1010.13","4.4.0-1012.16","4.4.0-1016.22","4.4.0-1017.23","4.4.0-1019.25","4.4.0-1021.27","4.4.0-1023.29","4.4.0-1027.33","4.4.0-1029.36","4.4.0-1034.41","4.4.0-1038.45","4.4.0-1040.47","4.4.0-1042.49","4.4.0-1044.51","4.4.0-1046.53","4.4.0-1048.55","4.4.0-1050.57","4.4.0-1051.58","4.4.0-1052.59","4.4.0-1054.61","4.4.0-1055.62","4.4.0-1057.64","4.4.0-1059.67","4.4.0-1061.69","4.4.0-1065.73","4.4.0-1067.75","4.4.0-1069.77","4.4.0-1070.78","4.4.0-1071.79","4.4.0-1074.82","4.4.0-1075.83","4.4.0-1076.84","4.4.0-1077.85","4.4.0-1079.87","4.4.0-1080.88","4.4.0-1082.90"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1087.92"}]}],"versions":["4.4.0-1012.12","4.4.0-1013.14","4.4.0-1013.15","4.4.0-1015.18","4.4.0-1019.22","4.4.0-1020.23","4.4.0-1022.25","4.4.0-1024.27","4.4.0-1026.29","4.4.0-1030.33","4.4.0-1032.36","4.4.0-1035.39","4.4.0-1039.43","4.4.0-1042.46","4.4.0-1044.48","4.4.0-1046.50","4.4.0-1047.51","4.4.0-1048.52","4.4.0-1050.54","4.4.0-1051.55","4.4.0-1053.57","4.4.0-1054.58","4.4.0-1055.59","4.4.0-1057.61","4.4.0-1058.62","4.4.0-1059.63","4.4.0-1061.66","4.4.0-1063.68","4.4.0-1067.72","4.4.0-1069.74","4.4.0-1071.76","4.4.0-1072.77","4.4.0-1073.78","4.4.0-1076.81","4.4.0-1077.82","4.4.0-1078.83","4.4.0-1079.84","4.4.0-1081.86","4.4.0-1082.87","4.4.0-1084.89"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1014.14"}]}],"versions":["4.4.0-1002.2","4.4.0-1003.3","4.4.0-1005.5","4.4.0-1006.6","4.4.0-1009.9","4.4.0-1010.10","4.4.0-1011.11","4.4.0-1012.12"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-xenial","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-116.140~14.04.1"}]}],"versions":["4.4.0-13.29~14.04.1","4.4.0-14.30~14.04.2","4.4.0-15.31~14.04.1","4.4.0-18.34~14.04.1","4.4.0-21.37~14.04.1","4.4.0-22.39~14.04.1","4.4.0-22.40~14.04.1","4.4.0-24.43~14.04.1","4.4.0-28.47~14.04.1","4.4.0-31.50~14.04.1","4.4.0-34.53~14.04.1","4.4.0-36.55~14.04.1","4.4.0-38.57~14.04.1","4.4.0-42.62~14.04.1","4.4.0-45.66~14.04.1","4.4.0-47.68~14.04.1","4.4.0-51.72~14.04.1","4.4.0-53.74~14.04.1","4.4.0-57.78~14.04.1","4.4.0-59.80~14.04.1","4.4.0-62.83~14.04.1","4.4.0-63.84~14.04.2","4.4.0-64.85~14.04.1","4.4.0-66.87~14.04.1","4.4.0-67.88~14.04.1","4.4.0-70.91~14.04.1","4.4.0-71.92~14.04.1","4.4.0-72.93~14.04.1","4.4.0-75.96~14.04.1","4.4.0-78.99~14.04.2","4.4.0-79.100~14.04.1","4.4.0-81.104~14.04.1","4.4.0-83.106~14.04.1","4.4.0-87.110~14.04.1","4.4.0-89.112~14.04.1","4.4.0-91.114~14.04.1","4.4.0-92.115~14.04.1","4.4.0-93.116~14.04.1","4.4.0-96.119~14.04.1","4.4.0-97.120~14.04.1","4.4.0-98.121~14.04.1","4.4.0-101.124~14.04.1","4.4.0-103.126~14.04.1","4.4.0-104.127~14.04.1","4.4.0-108.131~14.04.1","4.4.0-109.132~14.04.1","4.4.0-111.134~14.04.1","4.4.0-112.135~14.04.1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-142.191"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86","3.13.0-53.88","3.13.0-53.89","3.13.0-54.91","3.13.0-55.92","3.13.0-55.94","3.13.0-57.95","3.13.0-58.97","3.13.0-59.98","3.13.0-61.100","3.13.0-62.102","3.13.0-63.103","3.13.0-65.105","3.13.0-65.106","3.13.0-66.108","3.13.0-67.110","3.13.0-68.111","3.13.0-70.113","3.13.0-71.114","3.13.0-73.116","3.13.0-74.118","3.13.0-76.120","3.13.0-77.121","3.13.0-79.123","3.13.0-83.127","3.13.0-85.129","3.13.0-86.130","3.13.0-86.131","3.13.0-87.133","3.13.0-88.135","3.13.0-91.138","3.13.0-92.139","3.13.0-93.140","3.13.0-95.142","3.13.0-96.143","3.13.0-98.145","3.13.0-100.147","3.13.0-101.148","3.13.0-103.150","3.13.0-105.152","3.13.0-106.153","3.13.0-107.154","3.13.0-108.155","3.13.0-109.156","3.13.0-110.157","3.13.0-111.158","3.13.0-112.159","3.13.0-113.160","3.13.0-115.162","3.13.0-116.163","3.13.0-117.164","3.13.0-119.166","3.13.0-121.170","3.13.0-123.172","3.13.0-125.174","3.13.0-126.175","3.13.0-128.177","3.13.0-129.178","3.13.0-132.181","3.13.0-133.182","3.13.0-135.184","3.13.0-137.186","3.13.0-139.188","3.13.0-141.190"],"bundled":25}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2b04e8f6bbb196cab4b232af0f8d48ff2c7a8058","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Vendor Advisory","fix"]},{"url":"http://www.securityfocus.com/bid/101911","tags":["vdb-entry","x_refsource_BID","x_transferred","Issue Tracking","Third Party Advisory","VDB Entry","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://usn.ubuntu.com/3583-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1854","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://usn.ubuntu.com/3582-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.8","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95d78c28b5a85bacbc29b8dba7c04babb9b0d467","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Vendor Advisory","fix"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1062","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://github.com/torvalds/linux/commit/95d78c28b5a85bacbc29b8dba7c04babb9b0d467","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0654","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://usn.ubuntu.com/3583-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1495089","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","report"]},{"url":"https://github.com/torvalds/linux/commit/2b04e8f6bbb196cab4b232af0f8d48ff2c7a8058","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"http://seclists.org/oss-sec/2017/q4/52","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Mailing List","Third Party Advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0676","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://usn.ubuntu.com/3582-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1170","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1190","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://support.f5.com/csp/article/K93472064?utm_source=f5support\u0026amp%3Butm_medium=RSS","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12190","tags":["advisory"]},{"url":"https://support.f5.com/csp/article/K93472064?utm_source=f5support\u0026amp;utm_medium=RSS"},{"url":"https://access.redhat.com/security/cve/CVE-2017-12190","tags":["report"]},{"url":"https://usn.ubuntu.com/3583-2"},{"url":"https://usn.ubuntu.com/3583-1"},{"url":"https://usn.ubuntu.com/3582-2"},{"url":"https://usn.ubuntu.com/3582-1"},{"url":"https://github.com/advisories/GHSA-cw63-cpqx-9vx9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-12190","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0463.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22178","tags":["report"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.93","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.94","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.95","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.96","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.97","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.98","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.99","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.100","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.101","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.102","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.103","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.104","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.105","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2017-0466.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22179","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2017-0467.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22180","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2018-0062.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22166","tags":["report"]},{"url":"https://kernelnewbies.org/Linux_4.10","tags":["web"]},{"url":"https://kernelnewbies.org/Linux_4.11","tags":["web"]},{"url":"https://kernelnewbies.org/Linux_4.12","tags":["web"]},{"url":"https://kernelnewbies.org/Linux_4.13","tags":["web"]},{"url":"https://kernelnewbies.org/Linux_4.14","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.1","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.2","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.3","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.4","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.5","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.6","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.7","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.9","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.10","tags":["web"]},{"url":"https://www.wireguard.com/","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2018-0063.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22268","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2018-0064.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22269","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.5_Release_Notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1473209","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1498016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1498067","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1501794","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1519160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1519778","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1519780","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1519781","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1525762","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1525768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535315","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1544612","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0654.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5753","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5753","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5753","tags":["advisory"]},{"url":"https://access.redhat.com/security/vulnerabilities/speculativeexecution","tags":["article"]},{"url":"https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html","tags":["article"]},{"url":"https://meltdownattack.com","tags":["article"]},{"url":"https://spectreattack.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-11473","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11473","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11473","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12190","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12192","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1493435","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12192","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12192","tags":["advisory"]},{"url":"http://seclists.org/oss-sec/2017/q4/63","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15129","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15129","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15129","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15299","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15299","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15299","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1510399","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15306","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15306","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-16939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1517220","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-16939","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-16939","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-17448","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-17448","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-17448","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-17449","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-17449","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-17449","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000255","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1000255","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000255","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000410","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1000410","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000410","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-6927","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-6927","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-6927","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000004","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000004","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000004","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1292927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1324749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1391490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1401061","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1430418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1436798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1448770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452589","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1462329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1488329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1489088","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490781","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1491224","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1500894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1501878","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1503749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1506255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1507270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1509264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1514609","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1518274","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1518638","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1519591","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1520328","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1520893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1523481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1525218","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1525474","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1539706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1548412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1550811","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0676.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3672","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3672","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3672","tags":["advisory"]},{"url":"http://hmarco.org/bugs/CVE-2016-3672-Unlimiting-the-stack-not-longer-disables-ASLR.html","tags":["article"]},{"url":"http://seclists.org/bugtraq/2016/Apr/34","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7913","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7913","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7913","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8633","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8633","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8633","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7294","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7294","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7294","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-8824","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-8824","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8824","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9725","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9725","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9725","tags":["advisory"]},{"url":"https://source.android.com/security/bulletin/2017-09-01","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12154","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12154","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12154","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13166","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13166","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13166","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1581637","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13305","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-14140","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-14140","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14140","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15116","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15116","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15116","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15121","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15121","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15126","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15126","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15126","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15127","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15127","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15127","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15265","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15265","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15265","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15274","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1500391","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15274","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15274","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-17558","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-17558","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-17558","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18017","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18017","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18017","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18203","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18203","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18203","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000252","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1000252","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000252","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000407","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1000407","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000407","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5750","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5750","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1132610","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1334439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1372079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1450205","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458032","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1460213","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461282","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1487352","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1489542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1493125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1496836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1506382","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1507025","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1507026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531680","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1542013","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1062.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5715","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5715","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5715","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5754","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5754","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5754","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1580979","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18270","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18270","tags":["advisory"]},{"url":"http://kernsec.org/pipermail/linux-security-module-archive/2017-September/003318.html","tags":["article"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=237bbd29f7a049d310d907f4b2716a7feef9abf3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1066","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1539599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1066","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1066","tags":["advisory"]},{"url":"https://access.redhat.com/security/vulnerabilities/ssbd","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/6/html/6.10_release_notes/index.html","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/6/html/6.10_technical_notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=869942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1314275","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1314288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1395187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1422825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1436649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1437404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1441088","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1444493","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1448170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1450972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1497152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1551051","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1566890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1576419","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1854.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-6701","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-6701","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-6701","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8830","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8830","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8830","tags":["advisory"]},{"url":"http://seclists.org/oss-sec/2016/q2/479","tags":["article"]},{"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=735","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8650","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8650","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8650","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-2671","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-2671","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2671","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-6001","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-6001","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-6001","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7308","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7308","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7308","tags":["advisory"]},{"url":"https://googleprojectzero.blogspot.com/2017/05/exploiting-linux-kernel-via-packet.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7616","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7616","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7616","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7889","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7889","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7889","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-8890","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-8890","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8890","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9075","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9075","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9075","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9076","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9076","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9076","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9077","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9077","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9077","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1130","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1130","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1130","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3639","tags":["advisory"]},{"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1528","tags":["article"]},{"url":"https://software.intel.com/sites/default/files/managed/b9/f9/336983-Intel-Analysis-of-Speculative-Execution-Side-Channels-White-Paper.pdf","tags":["article"]},{"url":"https://software.intel.com/sites/default/files/managed/c5/63/336996-Speculative-Execution-Side-Channel-Mitigations.pdf","tags":["article"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5803","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5803","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5803","tags":["advisory"]},{"url":"https://access.redhat.com/security/vulnerabilities/mds","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1474928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1552048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1585011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1641878","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646781","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1667782","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705312","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1170.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-11600","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11600","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11600","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13215","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13215","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13215","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1068","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1068","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1068","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3665","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3665","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3665","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2018/06/15/5","tags":["article"]},{"url":"https://access.redhat.com/solutions/3485131","tags":["article"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00145.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12126","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12126","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12126","tags":["advisory"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12127","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12127","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12127","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12130","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12130","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12130","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18559","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18559","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18559","tags":["advisory"]},{"url":"https://blogs.securiteam.com/index.php/archives/3731","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11091","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11091","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692711","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1190.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180834-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1010470","tags":["report"]},{"url":"https://bugzilla.suse.com/1012382","tags":["report"]},{"url":"https://bugzilla.suse.com/1045330","tags":["report"]},{"url":"https://bugzilla.suse.com/1062568","tags":["report"]},{"url":"https://bugzilla.suse.com/1063416","tags":["report"]},{"url":"https://bugzilla.suse.com/1066001","tags":["report"]},{"url":"https://bugzilla.suse.com/1067118","tags":["report"]},{"url":"https://bugzilla.suse.com/1068032","tags":["report"]},{"url":"https://bugzilla.suse.com/1072689","tags":["report"]},{"url":"https://bugzilla.suse.com/1072865","tags":["report"]},{"url":"https://bugzilla.suse.com/1074488","tags":["report"]},{"url":"https://bugzilla.suse.com/1075617","tags":["report"]},{"url":"https://bugzilla.suse.com/1075621","tags":["report"]},{"url":"https://bugzilla.suse.com/1077560","tags":["report"]},{"url":"https://bugzilla.suse.com/1078669","tags":["report"]},{"url":"https://bugzilla.suse.com/1078672","tags":["report"]},{"url":"https://bugzilla.suse.com/1078673","tags":["report"]},{"url":"https://bugzilla.suse.com/1078674","tags":["report"]},{"url":"https://bugzilla.suse.com/1080255","tags":["report"]},{"url":"https://bugzilla.suse.com/1080464","tags":["report"]},{"url":"https://bugzilla.suse.com/1080757","tags":["report"]},{"url":"https://bugzilla.suse.com/1082299","tags":["report"]},{"url":"https://bugzilla.suse.com/1083244","tags":["report"]},{"url":"https://bugzilla.suse.com/1083483","tags":["report"]},{"url":"https://bugzilla.suse.com/1083494","tags":["report"]},{"url":"https://bugzilla.suse.com/1083640","tags":["report"]},{"url":"https://bugzilla.suse.com/1084323","tags":["report"]},{"url":"https://bugzilla.suse.com/1085107","tags":["report"]},{"url":"https://bugzilla.suse.com/1085114","tags":["report"]},{"url":"https://bugzilla.suse.com/1085279","tags":["report"]},{"url":"https://bugzilla.suse.com/1085447","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7566","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180848-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1055755","tags":["report"]},{"url":"https://bugzilla.suse.com/1077182","tags":["report"]},{"url":"https://bugzilla.suse.com/1077779","tags":["report"]},{"url":"https://bugzilla.suse.com/1080287","tags":["report"]},{"url":"https://bugzilla.suse.com/1081512","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181080-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1013018","tags":["report"]},{"url":"https://bugzilla.suse.com/1039348","tags":["report"]},{"url":"https://bugzilla.suse.com/1052943","tags":["report"]},{"url":"https://bugzilla.suse.com/1062840","tags":["report"]},{"url":"https://bugzilla.suse.com/1063516","tags":["report"]},{"url":"https://bugzilla.suse.com/1065600","tags":["report"]},{"url":"https://bugzilla.suse.com/1065999","tags":["report"]},{"url":"https://bugzilla.suse.com/1067912","tags":["report"]},{"url":"https://bugzilla.suse.com/1075088","tags":["report"]},{"url":"https://bugzilla.suse.com/1075091","tags":["report"]},{"url":"https://bugzilla.suse.com/1075994","tags":["report"]},{"url":"https://bugzilla.suse.com/1080813","tags":["report"]},{"url":"https://bugzilla.suse.com/1081358","tags":["report"]},{"url":"https://bugzilla.suse.com/1082091","tags":["report"]},{"url":"https://bugzilla.suse.com/1082424","tags":["report"]},{"url":"https://bugzilla.suse.com/1083242","tags":["report"]},{"url":"https://bugzilla.suse.com/1083275","tags":["report"]},{"url":"https://bugzilla.suse.com/1084536","tags":["report"]},{"url":"https://bugzilla.suse.com/1085113","tags":["report"]},{"url":"https://bugzilla.suse.com/1085331","tags":["report"]},{"url":"https://bugzilla.suse.com/1085513","tags":["report"]},{"url":"https://bugzilla.suse.com/1086162","tags":["report"]},{"url":"https://bugzilla.suse.com/1087092","tags":["report"]},{"url":"https://bugzilla.suse.com/1087260","tags":["report"]},{"url":"https://bugzilla.suse.com/1087762","tags":["report"]},{"url":"https://bugzilla.suse.com/1088147","tags":["report"]},{"url":"https://bugzilla.suse.com/1088260","tags":["report"]},{"url":"https://bugzilla.suse.com/1089608","tags":["report"]},{"url":"https://bugzilla.suse.com/909077","tags":["report"]},{"url":"https://bugzilla.suse.com/940776","tags":["report"]},{"url":"https://bugzilla.suse.com/943786","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8822","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181172-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1087088","tags":["report"]},{"url":"https://bugzilla.suse.com/1087209","tags":["report"]},{"url":"https://bugzilla.suse.com/1089752","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8897","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181309-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1032084","tags":["report"]},{"url":"https://bugzilla.suse.com/1050431","tags":["report"]},{"url":"https://bugzilla.suse.com/1089665","tags":["report"]},{"url":"https://bugzilla.suse.com/1089668","tags":["report"]},{"url":"https://bugzilla.suse.com/951638","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12190","tags":["report"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1062568","tags":["report"]},{"url":"https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg1495887.html","tags":["report"]},{"url":"https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg1495884.html","tags":["report"]},{"url":"https://marc.info/?t=150605752800001\u0026r=1\u0026w=2","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3487-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3582-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3582-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3583-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3583-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-8952","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5715","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-8824","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15115","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17712","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-0750","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-0861","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5669","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5754","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7542","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7889","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12153","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12192","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14051","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14156","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14489","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15102","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15868","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-16525","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17806","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-1000407","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5333","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5344","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-12190","description":"The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition.","status":"published","published":"2017-11-22T18:00:00Z","modified":"2024-08-05T18:28:16.645Z","cwes":["CWE-400"],"updated_at":"2026-11-02T14:33:17.264801Z"}],"euvd":[{"id":"EUVD-2017-3765","description":"The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition.","status":"published","published":"2017-11-22T18:00:00Z","modified":"2024-08-05T18:28:16Z","updated_at":"2026-11-03T02:23:22.23661Z"}],"ghsa":[{"id":"GHSA-cw63-cpqx-9vx9","title":"The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13...","description":"The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition.","status":"published","published":"2022-05-13T01:42:38Z","modified":"2025-04-20T03:49:56Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400","CWE-772"],"updated_at":"2026-11-02T15:01:56.152144Z"}],"nvd":[{"id":"CVE-2017-12190","description":"The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition.","status":"published","published":"2017-11-22T18:29:00.477Z","modified":"2026-06-17T01:02:52.22Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-400","CWE-772"],"updated_at":"2026-11-02T14:04:09.7374Z"}],"osv":[{"id":"CVE-2017-12190","description":"The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition.","status":"published","published":"2017-11-22T18:29:00.477Z","modified":"2026-04-16T06:17:17.942892872Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:04.159616Z"},{"id":"DEBIAN-CVE-2017-12190","description":"The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition.","status":"published","published":"2017-11-22T18:29:00.477Z","modified":"2026-09-01T20:03:42.067223651Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:28.50097Z"},{"id":"RHSA-2018:0654","title":"Red Hat Security Advisory: kernel-alt security, bug fix, and enhancement update","status":"published","published":"2024-09-16T00:48:58Z","modified":"2026-06-29T10:19:36Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0676","title":"Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update","status":"published","published":"2024-09-13T16:50:22Z","modified":"2026-06-29T10:19:37Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1062","title":"Red Hat Security Advisory: kernel security, bug fix, and enhancement update","status":"published","published":"2024-09-16T00:32:11Z","modified":"2026-06-29T10:19:39Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1854","title":"Red Hat Security Advisory: kernel security and bug fix update","status":"published","published":"2024-09-29T17:18:09Z","modified":"2026-07-01T10:03:56Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2019:1170","title":"Red Hat Security Advisory: kernel security and bug fix update","status":"published","published":"2024-09-13T19:50:27Z","modified":"2026-06-29T10:24:27Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2019:1190","title":"Red Hat Security Advisory: kernel-rt security and bug fix update","status":"published","published":"2024-09-13T19:50:39Z","modified":"2026-06-29T10:24:39Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"UBUNTU-CVE-2017-12190","description":"The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition.","status":"published","published":"2017-10-12T00:00:00Z","modified":"2026-10-28T08:17:07.556632479Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:13.729565Z"},{"id":"DLA-1200-1","title":"linux - security update","status":"published","published":"2017-12-09T00:00:00Z","modified":"2026-03-09T01:01:58.513336Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"MGASA-2017-0463","title":"Updated kernel packages fix security vulnerabilities","description":"This kernel update is based on upstream 4.4.105 and fixes at least the\nfollowing security issues:\n\nA security flaw was discovered in nl80211_set_rekey_data() function in the\nLinux kernel since v3.1-rc1 through v4.13. This function does not check\nwhether the required attributes are present in a netlink request. This\nrequest can be issued by a user with CAP_NET_ADMIN privilege and may result\nin NULL dereference and a system crash (CVE-2017-12153).\n\nLinux kernel built with the KVM visualization support (CONFIG_KVM), with\nnested visualization (nVMX) feature enabled (nested=1), is vulnerable to a\ncrash due to disabled external interrupts. As L2 guest could acce s (r/w)\nhardware CR8 register of the host(L0). In a nested visualization setup,\nL2 guest user could use this flaw to potentially crash the host(L0)\nresulting in DoS (CVE-2017-12154).\n\nThe tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before\n4.12 allows local users to cause a denial of service (__tcp_select_window\ndivide-by-zero error and system crash) by triggering a disconnect within a\ncertain tcp_recvmsg code path (CVE-2017-14106).\n\nThe atyfb_ioctl function in drivers/video/fbdev/aty/atyfb_base.c in the\nLinux kernel through 4.12.10 does not initialize a certain data structure,\nwhich allows local users to obtain sensitive information from kernel stack\nmemory by reading locations associated with padding bytes (CVE-2017-14156).\n\nIt was found that the iscsi_if_rx() function in scsi_transport_iscsi.c in\nthe Linux kernel since v2.6.24-rc1 through 4.13.2 allows local users to\ncause a denial of service (a system panic) by making a number of certain\nsyscalls by leveraging incorrect length validation in the kernel code\n(CVE-2017-14489).\n\nThe sg_ioctl function in drivers/scsi/sg.c in the Linux kernel before 4.13.4\nallows local users to obtain sensitive information from uninitialized kernel\nheap-memory locations via an SG_GET_REQUEST_TABLE ioctl call for /dev/sg0\n(CVE-2017-14991).\n\nA reachable assertion failure flaw was found in the Linux kernel built with\nKVM virtualisation(CONFIG_KVM) support with Virtual Function I/O feature\n(CONFIG_VFIO) enabled. This failure could occur if a malicious guest device\nsent a virtual interrupt (guest IRQ) with a larger (\u003e1024) index value\n(CVE-2017-1000252).\n\nFor other upstream fixes in this update, read the referenced changelogs.\n","status":"published","published":"2017-12-21T22:14:23Z","modified":"2026-04-16T06:25:57.459768725Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"MGASA-2017-0466","title":"Updated kernel-tmb packages fix security vulnerabilities","description":"This kernel-tmb update is based on upstream 4.4.105 and fixes at least the\nfollowing security issues:\n\nA security flaw was discovered in nl80211_set_rekey_data() function in the\nLinux kernel since v3.1-rc1 through v4.13. This function does not check\nwhether the required attributes are present in a netlink request. This\nrequest can be issued by a user with CAP_NET_ADMIN privilege and may result\nin NULL dereference and a system crash (CVE-2017-12153).\n\nLinux kernel built with the KVM visualization support (CONFIG_KVM), with\nnested visualization (nVMX) feature enabled (nested=1), is vulnerable to a\ncrash due to disabled external interrupts. As L2 guest could acce s (r/w)\nhardware CR8 register of the host(L0). In a nested visualization setup,\nL2 guest user could use this flaw to potentially crash the host(L0)\nresulting in DoS (CVE-2017-12154).\n\nThe tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before\n4.12 allows local users to cause a denial of service (__tcp_select_window\ndivide-by-zero error and system crash) by triggering a disconnect within a\ncertain tcp_recvmsg code path (CVE-2017-14106).\n\nThe atyfb_ioctl function in drivers/video/fbdev/aty/atyfb_base.c in the\nLinux kernel through 4.12.10 does not initialize a certain data structure,\nwhich allows local users to obtain sensitive information from kernel stack\nmemory by reading locations associated with padding bytes (CVE-2017-14156).\n\nIt was found that the iscsi_if_rx() function in scsi_transport_iscsi.c in\nthe Linux kernel since v2.6.24-rc1 through 4.13.2 allows local users to\ncause a denial of service (a system panic) by making a number of certain\nsyscalls by leveraging incorrect length validation in the kernel code\n(CVE-2017-14489).\n\nThe sg_ioctl function in drivers/scsi/sg.c in the Linux kernel before 4.13.4\nallows local users to obtain sensitive information from uninitialized kernel\nheap-memory locations via an SG_GET_REQUEST_TABLE ioctl call for /dev/sg0\n(CVE-2017-14991).\n\nA reachable assertion failure flaw was found in the Linux kernel built with\nKVM virtualisation(CONFIG_KVM) support with Virtual Function I/O feature\n(CONFIG_VFIO) enabled. This failure could occur if a malicious guest device\nsent a virtual interrupt (guest IRQ) with a larger (\u003e1024) index value\n(CVE-2017-1000252).\n\nFor other upstream fixes in this update, read the referenced changelogs.\n","status":"published","published":"2017-12-22T10:31:08Z","modified":"2026-04-16T06:23:02.565537206Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"MGASA-2017-0467","title":"Updated kernel-linus packages fix security vulnerabilities","description":"This kernel-linus update is based on upstream 4.4.105 and fixes at least the\nfollowing security issues:\n\nA security flaw was discovered in nl80211_set_rekey_data() function in the\nLinux kernel since v3.1-rc1 through v4.13. This function does not check\nwhether the required attributes are present in a netlink request. This\nrequest can be issued by a user with CAP_NET_ADMIN privilege and may result\nin NULL dereference and a system crash (CVE-2017-12153).\n\nLinux kernel built with the KVM visualization support (CONFIG_KVM), with\nnested visualization (nVMX) feature enabled (nested=1), is vulnerable to a\ncrash due to disabled external interrupts. As L2 guest could acce s (r/w)\nhardware CR8 register of the host(L0). In a nested visualization setup,\nL2 guest user could use this flaw to potentially crash the host(L0)\nresulting in DoS (CVE-2017-12154).\n\nThe tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before\n4.12 allows local users to cause a denial of service (__tcp_select_window\ndivide-by-zero error and system crash) by triggering a disconnect within a\ncertain tcp_recvmsg code path (CVE-2017-14106).\n\nThe atyfb_ioctl function in drivers/video/fbdev/aty/atyfb_base.c in the\nLinux kernel through 4.12.10 does not initialize a certain data structure,\nwhich allows local users to obtain sensitive information from kernel stack\nmemory by reading locations associated with padding bytes (CVE-2017-14156).\n\nIt was found that the iscsi_if_rx() function in scsi_transport_iscsi.c in\nthe Linux kernel since v2.6.24-rc1 through 4.13.2 allows local users to\ncause a denial of service (a system panic) by making a number of certain\nsyscalls by leveraging incorrect length validation in the kernel code\n(CVE-2017-14489).\n\nThe sg_ioctl function in drivers/scsi/sg.c in the Linux kernel before 4.13.4\nallows local users to obtain sensitive information from uninitialized kernel\nheap-memory locations via an SG_GET_REQUEST_TABLE ioctl call for /dev/sg0\n(CVE-2017-14991).\n\nA reachable assertion failure flaw was found in the Linux kernel built with\nKVM virtualisation(CONFIG_KVM) support with Virtual Function I/O feature\n(CONFIG_VFIO) enabled. This failure could occur if a malicious guest device\nsent a virtual interrupt (guest IRQ) with a larger (\u003e1024) index value\n(CVE-2017-1000252).\n\nFor other upstream fixes in this update, read the referenced changelogs.\n","status":"published","published":"2017-12-22T10:31:08Z","modified":"2026-04-16T06:24:48.513416539Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"MGASA-2018-0062","title":"kernel update provides 4.14 series and fixes security vulnerabilities","description":"This kernel update provides an upgrade to the 4.14 longterm branch,\ncurrently based on 4.14.10. It also fixes at least the following\nsecurity issues:\n\nAn elevation of privilege vulnerability in the Broadcom wi-fi driver\n(CVE-2017-0786).\n\nUse-after-free vulnerability in the snd_pcm_info function in the ALSA\nsubsystem in the Linux kernel allows attackers to gain privileges via\nunspecified vectors (CVE-2017-0861).\n\nLinux kernel built with the Kernel-based Virtual Machine(CONFIG_KVM)\nsupport is vulnerable to an incorrect debug exception(#DB) error. It\ncould occur while emulating a syscall instruction. A user/process\ninside guest could use this flaw to potentially escalate their\nprivileges inside guest. Linux guests are not affected.(CVE-2017-7518).\n\narch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested\nvirtualisation is used, does not properly traverse guest pagetable\nentries to resolve a guest virtual address, which allows L1 guest OS\nusers to execute arbitrary code on the host OS or cause a denial of\nservice (incorrect index during page walking, and host OS crash), aka\nan \"MMU potential stack buffer overrun\" (CVE-2017-12188).\n\nThe bio_map_user_iov and bio_unmap_user functions in block/bio.c in the\nLinux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O\nvector has small consecutive buffers belonging to the same page. The\nbio_add_pc_page function merges them into one, but the page reference\nis never dropped. This causes a memory leak and possible system lockup\n(exploitable against the host OS by a guest OS user, if a SCSI disk is\npassed through to a virtual machine) due to an out-of-memory condition\n(CVE-2017-12190).\n\nThe assoc_array_insert_into_terminal_node function in lib/assoc_array.c\nin the Linux kernel before 4.13.11 mishandles node splitting, which allows\nlocal users to cause a denial of service (NULL pointer dereference and\npanic) via a crafted application, as demonstrated by the keyring key type,\nand key addition and link creation operations (CVE-2017-12193).\n\nWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group\nTemporal Key (GTK) during the group key handshake, allowing an attacker\nwithin radio range to replay frames from access points to clients\n(CVE-2017-13080).\n\nThe sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel\nbefore 4.14 does not check whether the intended netns is used in a\npeel-off action, which allows local users to cause a denial of\nservice (use-after-free and system crash) or possibly have unspecified\nother impact via crafted system calls (CVE-2017-15115).\n\nRace condition in the ALSA subsystem in the Linux kernel before 4.13.8\nallows local users to cause a denial of service (use-after-free) or\npossibly have unspecified other impact via crafted /dev/snd/seq ioctl\ncalls, related to sound/core/seq/seq_clientmgr.c and \nsound/core/seq/seq_ports.c (CVE-2017-15265)\n\nThe KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of\nadd_key for a key that already exists but is uninstantiated, which allows\nlocal users to cause a denial of service (NULL pointer dereference and\nsystem crash) or possibly have unspecified other impact via a crafted\nsystem call (CVE-2017-15299).\n\nThe XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux\nkernel before 4.13.11 allows local users to gain privileges or cause a\ndenial of service (use-after-free) via a crafted SO_RCVBUF setsockopt\nsystem call in conjunction with XFRM_MSG_GETPOLICY Netlink messages\n(CVE-2017-16939).\n\nThe walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel\nbefore 4.14.2 mishandles holes in hugetlb ranges, which allows local\nusers to obtain sensitive information from uninitialized kernel memory\nvia crafted use of the mincore() system call (CVE-2017-16994).\n\nThe check_alu_op function in kernel/bpf/verifier.c in the Linux kernel\nthrough 4.14.8 allows local users to cause a denial of service (memory\ncorruption) or possibly have unspecified other impact by leveraging\nincorrect sign extension (CVE-2017-16995).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local\nusers to cause a denial of service (memory corruption) or possibly have\nunspecified other impact by leveraging register truncation mishandling\n(CVE-2017-16996).\n\nThe KVM implementation in the Linux kernel through 4.14.7 allows attackers\nto obtain potentially sensitive information from kernel memory, aka a\nwrite_mmio stack-based out-of-bounds read, related to arch/x86/kvm/x86.c\nand include/trace/events/kvm.h (CVE-2017-17741).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local\nusers to cause a denial of service (memory corruption) or possibly have\nunspecified other impact by leveraging mishandling of 32-bit ALU ops\n(CVE-2017-17852).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local\nusers to cause a denial of service (memory corruption) or possibly have\nunspecified other impact by leveraging incorrect BPF_RSH signed bounds\ncalculations (CVE-2017-17853).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local\nusers to cause a denial of service (integer overflow and memory\ncorruption) or possibly have unspecified other impact by leveraging\nunrestricted integer values for pointer arithmetic (CVE-2017-17854).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local\nusers to cause a denial of service (memory corruption) or possibly have\nunspecified other impact by leveraging improper use of pointers in\nplace of scalars (CVE-2017-17855).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local\nusers to cause a denial of service (memory corruption) or possibly\nhave unspecified other impact by leveraging the lack of stack-pointer\nalignment enforcement (CVE-2017-17856).\n\nThe check_stack_boundary function in kernel/bpf/verifier.c in the Linux\nkernel through 4.14.8 allows local users to cause a denial of service\n(memory corruption) or possibly have unspecified other impact by\nleveraging mishandling of invalid variable stack read operations\n(CVE-2017-17857).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 ignores\nunreachable code, even though it would still be processed by JIT\ncompilers. This behavior, also considered an improper branch-pruning\nlogic issue, could possibly be used by local users for denial of\nservice (CVE-2017-17862).\n\nkernel/bpf/verifier.c in the Linux kernel 4.9.x through 4.9.71 does not\ncheck the relationship between pointer values and the BPF stack, which\nallows local users to cause a denial of service (integer overflow or\ninvalid memory access) or possibly have unspecified other impact\n(CVE-2017-17863).\n\nkernel/bpf/verifier.c in the Linux kernel before 4.14 mishandles\nstates_equal comparisons between the pointer data type and the\nUNKNOWN_VALUE data type, which allows local users to obtain potentially\nsensitive address information, aka a \"pointer leak\" (CVE-2017-17864).\n\nThe timer_create syscall implementation in kernel/time/posix-timers.c\nin the Linux kernel before 4.14.8 doesn't properly validate the\nsigevent-\u003esigev_notify field, which leads to out-of-bounds access in\nthe show_timer function (called when /proc/$PID/timers is read).\nThis allows userspace applications to read arbitrary kernel memory\n(on a kernel built with CONFIG_POSIX_TIMERS and\nCONFIG_CHECKPOINT_RESTORE)(CVE-2017-18344).\n\nThe Linux Kernel 2.6.32 and later are affected by a denial of service,\nby flooding the diagnostic port 0x80 an exception can be triggered\nleading to a kernel panic (CVE-2017-1000407).\n\nThis update also adds support for WireGuard VPN.\n\nFor other changes in this update, read the referenced changelogs.\n","status":"published","published":"2018-01-06T00:53:31Z","modified":"2026-04-16T06:26:17.325590936Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"MGASA-2018-0063","title":"kernel-tmb update provides 4.14 series and fixes security vulnerabilities","description":"This kernel-tmb update provides an upgrade to the 4.14 longterm branch,\ncurrently based on 4.14.10. It also fixes at least the following\nsecurity issues:\n\nAn elevation of privilege vulnerability in the Broadcom wi-fi driver\n(CVE-2017-0786).\n\nUse-after-free vulnerability in the snd_pcm_info function in the ALSA\nsubsystem in the Linux kernel allows attackers to gain privileges via\nunspecified vectors (CVE-2017-0861).\n\nLinux kernel built with the Kernel-based Virtual Machine(CONFIG_KVM)\nsupport is vulnerable to an incorrect debug exception(#DB) error. It\ncould occur while emulating a syscall instruction. A user/process\ninside guest could use this flaw to potentially escalate their\nprivileges inside guest. Linux guests are not affected.(CVE-2017-7518).\n\narch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested\nvirtualisation is used, does not properly traverse guest pagetable\nentries to resolve a guest virtual address, which allows L1 guest OS\nusers to execute arbitrary code on the host OS or cause a denial of\nservice (incorrect index during page walking, and host OS crash), aka\nan \"MMU potential stack buffer overrun\" (CVE-2017-12188).\n\nThe bio_map_user_iov and bio_unmap_user functions in block/bio.c in the\nLinux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O\nvector has small consecutive buffers belonging to the same page. The\nbio_add_pc_page function merges them into one, but the page reference\nis never dropped. This causes a memory leak and possible system lockup\n(exploitable against the host OS by a guest OS user, if a SCSI disk is\npassed through to a virtual machine) due to an out-of-memory condition\n(CVE-2017-12190).\n\nThe assoc_array_insert_into_terminal_node function in lib/assoc_array.c\nin the Linux kernel before 4.13.11 mishandles node splitting, which allows\nlocal users to cause a denial of service (NULL pointer dereference and\npanic) via a crafted application, as demonstrated by the keyring key type,\nand key addition and link creation operations (CVE-2017-12193).\n\nWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group\nTemporal Key (GTK) during the group key handshake, allowing an attacker\nwithin radio range to replay frames from access points to clients\n(CVE-2017-13080).\n\nThe sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel\nbefore 4.14 does not check whether the intended netns is used in a\npeel-off action, which allows local users to cause a denial of\nservice (use-after-free and system crash) or possibly have unspecified\nother impact via crafted system calls (CVE-2017-15115).\n\nRace condition in the ALSA subsystem in the Linux kernel before 4.13.8\nallows local users to cause a denial of service (use-after-free) or\npossibly have unspecified other impact via crafted /dev/snd/seq ioctl\ncalls, related to sound/core/seq/seq_clientmgr.c and \nsound/core/seq/seq_ports.c (CVE-2017-15265)\n\nThe KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of\nadd_key for a key that already exists but is uninstantiated, which allows\nlocal users to cause a denial of service (NULL pointer dereference and\nsystem crash) or possibly have unspecified other impact via a crafted\nsystem call (CVE-2017-15299).\n\nThe XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux\nkernel before 4.13.11 allows local users to gain privileges or cause a\ndenial of service (use-after-free) via a crafted SO_RCVBUF setsockopt\nsystem call in conjunction with XFRM_MSG_GETPOLICY Netlink messages\n(CVE-2017-16939).\n\nThe walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel\nbefore 4.14.2 mishandles holes in hugetlb ranges, which allows local\nusers to obtain sensitive information from uninitialized kernel memory\nvia crafted use of the mincore() system call (CVE-2017-16994).\n\nThe check_alu_op function in kernel/bpf/verifier.c in the Linux kernel\nthrough 4.14.8 allows local users to cause a denial of service (memory\ncorruption) or possibly have unspecified other impact by leveraging\nincorrect sign extension (CVE-2017-16995).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local\nusers to cause a denial of service (memory corruption) or possibly have\nunspecified other impact by leveraging register truncation mishandling\n(CVE-2017-16996).\n\nThe KVM implementation in the Linux kernel through 4.14.7 allows attackers\nto obtain potentially sensitive information from kernel memory, aka a\nwrite_mmio stack-based out-of-bounds read, related to arch/x86/kvm/x86.c\nand include/trace/events/kvm.h (CVE-2017-17741).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local\nusers to cause a denial of service (memory corruption) or possibly have\nunspecified other impact by leveraging mishandling of 32-bit ALU ops\n(CVE-2017-17852).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local\nusers to cause a denial of service (memory corruption) or possibly have\nunspecified other impact by leveraging incorrect BPF_RSH signed bounds\ncalculations (CVE-2017-17853).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local\nusers to cause a denial of service (integer overflow and memory\ncorruption) or possibly have unspecified other impact by leveraging\nunrestricted integer values for pointer arithmetic (CVE-2017-17854).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local\nusers to cause a denial of service (memory corruption) or possibly have\nunspecified other impact by leveraging improper use of pointers in\nplace of scalars (CVE-2017-17855).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local\nusers to cause a denial of service (memory corruption) or possibly\nhave unspecified other impact by leveraging the lack of stack-pointer\nalignment enforcement (CVE-2017-17856).\n\nThe check_stack_boundary function in kernel/bpf/verifier.c in the Linux\nkernel through 4.14.8 allows local users to cause a denial of service\n(memory corruption) or possibly have unspecified other impact by\nleveraging mishandling of invalid variable stack read operations\n(CVE-2017-17857).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 ignores\nunreachable code, even though it would still be processed by JIT\ncompilers. This behavior, also considered an improper branch-pruning\nlogic issue, could possibly be used by local users for denial of\nservice (CVE-2017-17862).\n\nkernel/bpf/verifier.c in the Linux kernel 4.9.x through 4.9.71 does not\ncheck the relationship between pointer values and the BPF stack, which\nallows local users to cause a denial of service (integer overflow or\ninvalid memory access) or possibly have unspecified other impact\n(CVE-2017-17863).\n\nkernel/bpf/verifier.c in the Linux kernel before 4.14 mishandles\nstates_equal comparisons between the pointer data type and the\nUNKNOWN_VALUE data type, which allows local users to obtain potentially\nsensitive address information, aka a \"pointer leak\" (CVE-2017-17864).\n\nThe timer_create syscall implementation in kernel/time/posix-timers.c\nin the Linux kernel before 4.14.8 doesn't properly validate the\nsigevent-\u003esigev_notify field, which leads to out-of-bounds access in\nthe show_timer function (called when /proc/$PID/timers is read).\nThis allows userspace applications to read arbitrary kernel memory\n(on a kernel built with CONFIG_POSIX_TIMERS and\nCONFIG_CHECKPOINT_RESTORE)(CVE-2017-18344).\n\nThe Linux Kernel 2.6.32 and later are affected by a denial of service,\nby flooding the diagnostic port 0x80 an exception can be triggered\nleading to a kernel panic (CVE-2017-1000407).\n\nThis update also adds support for WireGuard VPN.\n\nFor other changes in this update, read the referenced changelogs.\n","status":"published","published":"2018-01-06T00:53:31Z","modified":"2026-04-16T06:22:43.462881638Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"MGASA-2018-0064","title":"kernel-linus update provides 4.14 series and fixes security vulnerabilities","description":"This kernel-linus update provides an upgrade to the 4.14 longterm\nbranch, currently based on 4.14.10. It also fixes at least the\nfollowing security issues:\n\nAn elevation of privilege vulnerability in the Broadcom wi-fi driver\n(CVE-2017-0786).\n\nUse-after-free vulnerability in the snd_pcm_info function in the ALSA\nsubsystem in the Linux kernel allows attackers to gain privileges via\nunspecified vectors (CVE-2017-0861).\n\nLinux kernel built with the Kernel-based Virtual Machine(CONFIG_KVM)\nsupport is vulnerable to an incorrect debug exception(#DB) error. It\ncould occur while emulating a syscall instruction. A user/process\ninside guest could use this flaw to potentially escalate their\nprivileges inside guest. Linux guests are not affected.(CVE-2017-7518).\n\narch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested\nvirtualisation is used, does not properly traverse guest pagetable\nentries to resolve a guest virtual address, which allows L1 guest OS\nusers to execute arbitrary code on the host OS or cause a denial of\nservice (incorrect index during page walking, and host OS crash), aka\nan \"MMU potential stack buffer overrun\" (CVE-2017-12188).\n\nThe bio_map_user_iov and bio_unmap_user functions in block/bio.c in the\nLinux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O\nvector has small consecutive buffers belonging to the same page. The\nbio_add_pc_page function merges them into one, but the page reference\nis never dropped. This causes a memory leak and possible system lockup\n(exploitable against the host OS by a guest OS user, if a SCSI disk is\npassed through to a virtual machine) due to an out-of-memory condition\n(CVE-2017-12190).\n\nThe assoc_array_insert_into_terminal_node function in lib/assoc_array.c\nin the Linux kernel before 4.13.11 mishandles node splitting, which allows\nlocal users to cause a denial of service (NULL pointer dereference and\npanic) via a crafted application, as demonstrated by the keyring key type,\nand key addition and link creation operations (CVE-2017-12193).\n\nWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group\nTemporal Key (GTK) during the group key handshake, allowing an attacker\nwithin radio range to replay frames from access points to clients\n(CVE-2017-13080).\n\nThe sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel\nbefore 4.14 does not check whether the intended netns is used in a\npeel-off action, which allows local users to cause a denial of\nservice (use-after-free and system crash) or possibly have unspecified\nother impact via crafted system calls (CVE-2017-15115).\n\nRace condition in the ALSA subsystem in the Linux kernel before 4.13.8\nallows local users to cause a denial of service (use-after-free) or\npossibly have unspecified other impact via crafted /dev/snd/seq ioctl\ncalls, related to sound/core/seq/seq_clientmgr.c and \nsound/core/seq/seq_ports.c (CVE-2017-15265)\n\nThe KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of\nadd_key for a key that already exists but is uninstantiated, which allows\nlocal users to cause a denial of service (NULL pointer dereference and\nsystem crash) or possibly have unspecified other impact via a crafted\nsystem call (CVE-2017-15299).\n\nThe XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux\nkernel before 4.13.11 allows local users to gain privileges or cause a\ndenial of service (use-after-free) via a crafted SO_RCVBUF setsockopt\nsystem call in conjunction with XFRM_MSG_GETPOLICY Netlink messages\n(CVE-2017-16939).\n\nThe walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel\nbefore 4.14.2 mishandles holes in hugetlb ranges, which allows local\nusers to obtain sensitive information from uninitialized kernel memory\nvia crafted use of the mincore() system call (CVE-2017-16994).\n\nThe check_alu_op function in kernel/bpf/verifier.c in the Linux kernel\nthrough 4.14.8 allows local users to cause a denial of service (memory\ncorruption) or possibly have unspecified other impact by leveraging\nincorrect sign extension (CVE-2017-16995).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local\nusers to cause a denial of service (memory corruption) or possibly have\nunspecified other impact by leveraging register truncation mishandling\n(CVE-2017-16996).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local\nusers to cause a denial of service (memory corruption) or possibly have\nunspecified other impact by leveraging mishandling of 32-bit ALU ops\n(CVE-2017-17852).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local\nusers to cause a denial of service (memory corruption) or possibly have\nunspecified other impact by leveraging incorrect BPF_RSH signed bounds\ncalculations (CVE-2017-17853).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local\nusers to cause a denial of service (integer overflow and memory\ncorruption) or possibly have unspecified other impact by leveraging\nunrestricted integer values for pointer arithmetic (CVE-2017-17854).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local\nusers to cause a denial of service (memory corruption) or possibly have\nunspecified other impact by leveraging improper use of pointers in\nplace of scalars (CVE-2017-17855).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local\nusers to cause a denial of service (memory corruption) or possibly\nhave unspecified other impact by leveraging the lack of stack-pointer\nalignment enforcement (CVE-2017-17856).\n\nThe check_stack_boundary function in kernel/bpf/verifier.c in the Linux\nkernel through 4.14.8 allows local users to cause a denial of service\n(memory corruption) or possibly have unspecified other impact by\nleveraging mishandling of invalid variable stack read operations\n(CVE-2017-17857).\n\nkernel/bpf/verifier.c in the Linux kernel through 4.14.8 ignores\nunreachable code, even though it would still be processed by JIT\ncompilers. This behavior, also considered an improper branch-pruning\nlogic issue, could possibly be used by local users for denial of\nservice (CVE-2017-17862).\n\nkernel/bpf/verifier.c in the Linux kernel 4.9.x through 4.9.71 does not\ncheck the relationship between pointer values and the BPF stack, which\nallows local users to cause a denial of service (integer overflow or\ninvalid memory access) or possibly have unspecified other impact\n(CVE-2017-17863).\n\nkernel/bpf/verifier.c in the Linux kernel before 4.14 mishandles\nstates_equal comparisons between the pointer data type and the\nUNKNOWN_VALUE data type, which allows local users to obtain potentially\nsensitive address information, aka a \"pointer leak\" (CVE-2017-17864).\n\nThe timer_create syscall implementation in kernel/time/posix-timers.c\nin the Linux kernel before 4.14.8 doesn't properly validate the\nsigevent-\u003esigev_notify field, which leads to out-of-bounds access in\nthe show_timer function (called when /proc/$PID/timers is read).\nThis allows userspace applications to read arbitrary kernel memory\n(on a kernel built with CONFIG_POSIX_TIMERS and\nCONFIG_CHECKPOINT_RESTORE)(CVE-2017-18344).\n\nThe Linux Kernel 2.6.32 and later are affected by a denial of service,\nby flooding the diagnostic port 0x80 an exception can be triggered\nleading to a kernel panic (CVE-2017-1000407).\n\nFor other changes in this update, read the referenced changelogs.\n","status":"published","published":"2018-01-06T00:53:31Z","modified":"2026-04-16T06:22:49.505651352Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"SUSE-SU-2018:0834-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 12 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2018-1068: Fixed flaw in the implementation of 32-bit syscall interface\n  for bridging. This allowed a privileged user to arbitrarily write to a limited\n  range of kernel memory (bnc#1085107).\n- CVE-2017-18221: The __munlock_pagevec function allowed local users to cause a\n  denial of service (NR_MLOCK accounting corruption) via crafted use of mlockall\n  and munlockall system calls (bnc#1084323).\n- CVE-2018-1066: Prevent NULL pointer dereference in\n  fs/cifs/cifsencrypt.c:setup_ntlmv2_rsp() that allowed an attacker controlling a\n  CIFS server to kernel panic a client that has this server mounted, because an\n  empty TargetInfo field in an NTLMSSP setup negotiation response was mishandled\n  during session recovery (bnc#1083640).\n- CVE-2017-13166: Prevent elevation of privilege vulnerability in the kernel\n  v4l2 video driver (bnc#1072865).\n- CVE-2017-16911: The vhci_hcd driver allowed local attackers to disclose\n  kernel memory addresses. Successful exploitation required that a USB device was\n  attached over IP (bnc#1078674).\n- CVE-2017-15299: The KEYS subsystem mishandled use of add_key for a key that\n  already exists but is uninstantiated, which allowed local users to cause a\n  denial of service (NULL pointer dereference and system crash) or possibly have\n  unspecified other impact via a crafted system call (bnc#1063416).\n- CVE-2017-18208: The madvise_willneed function kernel allowed local users to\n  cause a denial of service (infinite loop) by triggering use of MADVISE_WILLNEED\n  for a DAX mapping (bnc#1083494).\n- CVE-2018-7566: The ALSA sequencer core initializes the event pool on demand\n  by invoking snd_seq_pool_init() when the first write happens and the pool is\n  empty. A user could have reset the pool size manually via ioctl concurrently,\n  which may have lead UAF or out-of-bound access (bsc#1083483).\n- CVE-2017-18204: The ocfs2_setattr function allowed local users to cause a\n  denial of service (deadlock) via DIO requests (bnc#1083244).\n- CVE-2017-16644: The hdpvr_probe function allowed local users to cause a\n  denial of service (improper error handling and system crash) or possibly have\n  unspecified other impact via a crafted USB device (bnc#1067118).\n- CVE-2018-6927: The futex_requeue function allowed attackers to cause a denial\n  of service (integer overflow) or possibly have unspecified other impact by\n  triggering a negative wake or requeue value (bnc#1080757).\n- CVE-2017-16914: The 'stub_send_ret_submit()' function allowed attackers to\n  cause a denial of service (NULL pointer dereference) via a specially crafted\n  USB over IP packet (bnc#1078669).\n- CVE-2016-7915: The hid_input_field function allowed physically proximate\n  attackers to obtain sensitive information from kernel memory or cause a denial\n  of service (out-of-bounds read) by connecting a device (bnc#1010470).\n- CVE-2017-12190: The bio_map_user_iov and bio_unmap_user functions did\n  unbalanced refcounting when a SCSI I/O vector had small consecutive buffers\n  belonging to the same page. The bio_add_pc_page function merged them into one,\n  but the page reference was never dropped. This caused a memory leak and\n  possible system lockup (exploitable against the host OS by a guest OS user, if\n  a SCSI disk is passed through to a virtual machine) due to an out-of-memory\n  condition (bnc#1062568).\n- CVE-2017-16912: The 'get_pipe()' function allowed attackers to cause a denial\n  of service (out-of-bounds read) via a specially crafted USB over IP packet\n  (bnc#1078673).\n- CVE-2017-16913: The 'stub_recv_cmd_submit()' function when handling\n  CMD_SUBMIT packets allowed attackers to cause a denial of service (arbitrary\n  memory allocation) via a specially crafted USB over IP packet (bnc#1078672).\n- CVE-2018-5332: The rds_message_alloc_sgs() function did not validate a value\n  that is used during DMA page allocation, leading to a heap-based out-of-bounds\n  write (related to the rds_rdma_extra_size function in net/rds/rdma.c)\n  (bnc#1075621).\n- CVE-2018-5333: The rds_cmsg_atomic function in net/rds/rdma.c mishandled\n  cases where page pinning fails or an invalid address is supplied, leading to an\n  rds_atomic_free_op NULL pointer dereference (bnc#1075617).\n- CVE-2017-18017: The tcpmss_mangle_packet function allowed remote attackers to\n  cause a denial of service (use-after-free and memory corruption) or possibly\n  have unspecified other impact by leveraging the presence of xt_TCPMSS in an\n  iptables action (bnc#1074488).\n\nThe following non-security bugs were fixed:\n\n- Fix build on arm64 by defining empty gmb() (bnc#1068032).\n- KEYS: do not let add_key() update an uninstantiated key (bnc#1063416).\n- KEYS: fix writing past end of user-supplied buffer in keyring_read() (bsc#1066001).\n- KEYS: return full count in keyring_read() if buffer is too small (bsc#1066001).\n- include/stddef.h: Move offsetofend() from vfio.h to a generic kernel header (bsc#1077560).\n- ipc/msg: introduce msgctl(MSG_STAT_ANY) (bsc#1072689).\n- ipc/sem: introduce semctl(SEM_STAT_ANY) (bsc#1072689).\n- ipc/shm: introduce shmctl(SHM_STAT_ANY) (bsc#1072689).\n- x86/kaiser: use trampoline stack for kernel entry (bsc#1077560)\n- leds: do not overflow sysfs buffer in led_trigger_show (bsc#1080464).\n- livepatch: __kgr_shadow_get_or_alloc() is local to shadow.c. Shadow variables support (bsc#1082299).\n- livepatch: introduce shadow variable API. Shadow variables support (bsc#1082299)\n- media: v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (bnc#1012382).\n- media: v4l2-compat-ioctl32.c: avoid sizeof(type) (bnc#1012382).\n- media: v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (bnc#1012382).\n- media: v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (bnc#1012382).\n- media: v4l2-compat-ioctl32.c: do not copy back the result for certain errors (bnc#1012382).\n- media: v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (bnc#1012382).\n- media: v4l2-compat-ioctl32.c: fix the indentation (bnc#1012382).\n- media: v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (bnc#1012382).\n- media: v4l2-compat-ioctl32: Copy v4l2_window-\u003eglobal_alpha (bnc#1012382).\n- media: v4l2-ioctl.c: do not copy back the result for -ENOTTY (bnc#1012382).\n- netfilter: ebtables: CONFIG_COMPAT: do not trust userland offsets (bsc#1085107).\n- netfilter: ebtables: fix erroneous reject of last rule (bsc#1085107).\n- packet: only call dev_add_pack() on freshly allocated fanout instances\n- pipe: cap initial pipe capacity according to pipe-max-size limit (bsc#1045330).\n- x86/espfix: Fix return stack in do_double_fault() (bsc#1085279).\n","status":"published","published":"2018-03-28T14:17:49Z","modified":"2026-02-04T03:54:59.456038Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0848-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 12 SP1 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2018-1068: Fixed flaw in the implementation of 32-bit syscall interface\n  for bridging. This allowed a privileged user to arbitrarily write to a limited\n  range of kernel memory (bnc#1085107).\n- CVE-2017-18221: The __munlock_pagevec function allowed local users to cause a\n  denial of service (NR_MLOCK accounting corruption) via crafted use of mlockall\n  and munlockall system calls (bnc#1084323).\n- CVE-2018-1066: Prevent NULL pointer dereference in\n  fs/cifs/cifsencrypt.c:setup_ntlmv2_rsp() that allowed an attacker controlling a\n  CIFS server to kernel panic a client that has this server mounted, because an\n  empty TargetInfo field in an NTLMSSP setup negotiation response was mishandled\n  during session recovery (bnc#1083640).\n- CVE-2017-13166: Prevent elevation of privilege vulnerability in the kernel\n  v4l2 video driver (bnc#1072865).\n- CVE-2017-16911: The vhci_hcd driver allowed local attackers to disclose\n  kernel memory addresses. Successful exploitation required that a USB device was\n  attached over IP (bnc#1078674).\n- CVE-2017-15299: The KEYS subsystem mishandled use of add_key for a key that\n  already exists but is uninstantiated, which allowed local users to cause a\n  denial of service (NULL pointer dereference and system crash) or possibly have\n  unspecified other impact via a crafted system call (bnc#1063416).\n- CVE-2017-18208: The madvise_willneed function kernel allowed local users to\n  cause a denial of service (infinite loop) by triggering use of MADVISE_WILLNEED\n  for a DAX mapping (bnc#1083494).\n- CVE-2018-7566: The ALSA sequencer core initializes the event pool on demand\n  by invoking snd_seq_pool_init() when the first write happens and the pool is\n  empty. A user could have reset the pool size manually via ioctl concurrently,\n  which may have lead UAF or out-of-bound access (bsc#1083483).\n- CVE-2017-18204: The ocfs2_setattr function allowed local users to cause a\n  denial of service (deadlock) via DIO requests (bnc#1083244).\n- CVE-2017-16644: The hdpvr_probe function allowed local users to cause a\n  denial of service (improper error handling and system crash) or possibly have\n  unspecified other impact via a crafted USB device (bnc#1067118).\n- CVE-2018-6927: The futex_requeue function allowed attackers to cause a denial\n  of service (integer overflow) or possibly have unspecified other impact by\n  triggering a negative wake or requeue value (bnc#1080757).\n- CVE-2017-16914: The 'stub_send_ret_submit()' function allowed attackers to\n  cause a denial of service (NULL pointer dereference) via a specially crafted\n  USB over IP packet (bnc#1078669).\n- CVE-2016-7915: The hid_input_field function allowed physically proximate\n  attackers to obtain sensitive information from kernel memory or cause a denial\n  of service (out-of-bounds read) by connecting a device (bnc#1010470).\n- CVE-2017-12190: The bio_map_user_iov and bio_unmap_user functions did\n  unbalanced refcounting when a SCSI I/O vector had small consecutive buffers\n  belonging to the same page. The bio_add_pc_page function merged them into one,\n  but the page reference was never dropped. This caused a memory leak and\n  possible system lockup (exploitable against the host OS by a guest OS user, if\n  a SCSI disk is passed through to a virtual machine) due to an out-of-memory\n  condition (bnc#1062568).\n- CVE-2017-16912: The 'get_pipe()' function allowed attackers to cause a denial\n  of service (out-of-bounds read) via a specially crafted USB over IP packet\n  (bnc#1078673).\n- CVE-2017-16913: The 'stub_recv_cmd_submit()' function when handling\n  CMD_SUBMIT packets allowed attackers to cause a denial of service (arbitrary\n  memory allocation) via a specially crafted USB over IP packet (bnc#1078672).\n- CVE-2018-5332: The rds_message_alloc_sgs() function did not validate a value\n  that is used during DMA page allocation, leading to a heap-based out-of-bounds\n  write (related to the rds_rdma_extra_size function in net/rds/rdma.c)\n  (bnc#1075621).\n- CVE-2018-5333: The rds_cmsg_atomic function in net/rds/rdma.c mishandled\n  cases where page pinning fails or an invalid address is supplied, leading to an\n  rds_atomic_free_op NULL pointer dereference (bnc#1075617).\n- CVE-2017-18017: The tcpmss_mangle_packet function allowed remote attackers to\n  cause a denial of service (use-after-free and memory corruption) or possibly\n  have unspecified other impact by leveraging the presence of xt_TCPMSS in an\n  iptables action (bnc#1074488).\n  \nThe following non-security bugs were fixed:\n\n- KEYS: do not let add_key() update an uninstantiated key (bnc#1063416).\n- KEYS: fix writing past end of user-supplied buffer in keyring_read() (bsc#1066001).\n- KEYS: return full count in keyring_read() if buffer is too small (bsc#1066001).\n- NFS: Add a cond_resched() to nfs_commit_release_pages() (bsc#1077779).\n- btrfs: qgroup: move noisy underflow warning to debugging build (bsc#1055755 and bsc#1080287).\n- ipc/msg: introduce msgctl(MSG_STAT_ANY) (bsc#1072689).\n- ipc/sem: introduce semctl(SEM_STAT_ANY) (bsc#1072689).\n- ipc/shm: introduce shmctl(SHM_STAT_ANY) (bsc#1072689).\n- x86/kaiser: use trampoline stack for kernel entry (bsc#1077560)\n- leds: do not overflow sysfs buffer in led_trigger_show (bsc#1080464).\n- livepatch: __kgr_shadow_get_or_alloc() is local to shadow.c. Shadow variables support (bsc#1082299).\n- livepatch: introduce shadow variable API. Shadow variables support (bsc#1082299)\n- media: v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (bnc#1012382).\n- media: v4l2-compat-ioctl32.c: avoid sizeof(type) (bnc#1012382).\n- media: v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (bnc#1012382).\n- media: v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (bnc#1012382).\n- media: v4l2-compat-ioctl32.c: do not copy back the result for certain errors (bnc#1012382).\n- media: v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (bnc#1012382).\n- media: v4l2-compat-ioctl32.c: fix the indentation (bnc#1012382).\n- media: v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (bnc#1012382).\n- media: v4l2-compat-ioctl32: Copy v4l2_window-\u003eglobal_alpha (bnc#1012382).\n- media: v4l2-ioctl.c: do not copy back the result for -ENOTTY (bnc#1012382).\n- netfilter: ebtables: CONFIG_COMPAT: do not trust userland offsets (bsc#1085107).\n- netfilter: ebtables: fix erroneous reject of last rule (bsc#1085107).\n- packet: only call dev_add_pack() on freshly allocated fanout instances\n- pipe: cap initial pipe capacity according to pipe-max-size limit (bsc#1045330).\n- powerpc/64s: Improve RFI L1-D cache flush fallback (bsc#1068032, bsc#1077182).\n- powerpc/numa: Invalidate numa_cpu_lookup_table on cpu remove (bsc#1081512).\n- powerpc/powernv: Support firmware disable of RFI flush (bsc#1068032, bsc#1077182).\n- powerpc/powernv: Support firmware disable of RFI flush (bsc#1068032, bsc#1077182).\n- powerpc/pseries: Support firmware disable of RFI flush (bsc#1068032, bsc#1077182).\n- powerpc/pseries: Support firmware disable of RFI flush (bsc#1068032, bsc#1077182).\n- rfi-flush: Move the logic to avoid a redo into the debugfs code (bsc#1068032, bsc#1077182).\n- rfi-flush: Switch to new linear fallback flush (bsc#1068032, bsc#1077182).\n","status":"published","published":"2018-03-29T12:28:31Z","modified":"2025-05-02T04:05:33.356536Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:1080-1","title":"Security update for the Linux Kernel","description":"\n\nThe SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis (bnc#1068032).\n\n  Enhancements and bugfixes over the previous fixes have been added to this kernel.\n\n- CVE-2018-10087: The kernel_wait4 function in kernel/exit.c might have allowed local users to cause a denial of service by triggering an attempted use of the -INT_MIN value (bnc#1089608).\n- CVE-2018-7757: Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c allowed local users to cause a denial of service (memory consumption) via many read accesses to files in the /sys/class/sas_phy directory, as demonstrated by the /sys/class/sas_phy/phy-1:0:12/invalid_dword_count file (bnc#1084536).\n- CVE-2018-7566: There was a buffer overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user (bnc#1083483).\n- CVE-2017-0861: Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem allowed attackers to gain privileges via unspecified vectors (bnc#1088260).\n- CVE-2018-8822: Incorrect buffer length handling in the ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c could be exploited by malicious NCPFS servers to crash the kernel or execute code (bnc#1086162).\n- CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver. (bnc#1072865).\n- CVE-2017-18203: The dm_get_from_kobject function in drivers/md/dm.c allowed local users to cause a denial of service (BUG) by leveraging a race condition with __dm_destroy during creation and removal of DM devices (bnc#1083242).\n- CVE-2017-16911: The vhci_hcd driver allowed allows local attackers to disclose kernel memory addresses. Successful exploitation requires that a USB device is attached over IP (bnc#1078674).\n- CVE-2017-18208: The madvise_willneed function in mm/madvise.c local users to cause a denial of service (infinite loop) by triggering use of MADVISE_WILLNEED for a DAX mapping (bnc#1083494).\n- CVE-2017-16644: The hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c allowed local users to cause a denial of service (improper error handling and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1067118).\n- CVE-2018-6927: The futex_requeue function in kernel/futex.c in the Linux kernel might allow attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact by triggering a negative wake or requeue value (bnc#1080757).\n- CVE-2017-16914: The 'stub_send_ret_submit()' function (drivers/usb/usbip/stub_tx.c) allowed attackers to cause a denial of service (NULL pointer dereference) via a specially crafted USB over IP packet (bnc#1078669).\n- CVE-2016-7915: The hid_input_field function in drivers/hid/hid-core.c allowed physically proximate attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read) by connecting a device, as demonstrated by a Logitech DJ receiver (bnc#1010470).\n- CVE-2015-5156: The virtnet_probe function in drivers/net/virtio_net.c attempted to support a FRAGLIST feature without proper memory allocation, which allowed guest OS users to cause a denial of service (buffer overflow and memory corruption) via a crafted sequence of fragmented packets (bnc#940776).\n- CVE-2017-12190: The bio_map_user_iov and bio_unmap_user functions in block/bio.c did unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition (bnc#1062568).\n- CVE-2017-16912: The 'get_pipe()' function (drivers/usb/usbip/stub_rx.c) allowed attackers to cause a denial of service (out-of-bounds read) via a specially crafted USB over IP packet (bnc#1078673).\n- CVE-2017-16913: The 'stub_recv_cmd_submit()' function (drivers/usb/usbip/stub_rx.c) when handling CMD_SUBMIT packets allowed attackers to cause a denial of service (arbitrary memory allocation) via a specially crafted USB over IP packet (bnc#1078672).\n\nThe following non-security bugs were fixed:\n\n- af_iucv: enable control sends in case of SEND_SHUTDOWN (bnc#1085513, LTC#165135).\n- cifs: fix buffer overflow in cifs_build_path_to_root() (bsc#1085113).\n- drm/mgag200: fix a test in mga_vga_mode_valid() (bsc#1087092).\n- hrtimer: Ensure POSIX compliance (relative CLOCK_REALTIME hrtimers) (bnc#1013018).\n- hrtimer: Reset hrtimer cpu base proper on CPU hotplug (bnc#1013018).\n- ide-cd: workaround VMware ESXi cdrom emulation bug (bsc#1080813).\n- ipc/msg: introduce msgctl(MSG_STAT_ANY) (bsc#1072689).\n- ipc/sem: introduce semctl(SEM_STAT_ANY) (bsc#1072689).\n- ipc/shm: introduce shmctl(SHM_STAT_ANY) (bsc#1072689).\n- jffs2: Fix use-after-free bug in jffs2_iget()'s error handling path (git-fixes).\n- kabi: x86/kaiser: properly align trampoline stack.\n- keys: do not let add_key() update an uninstantiated key (bnc#1063416).\n- keys: prevent creating a different user's keyrings (bnc#1065999).\n- leds: do not overflow sysfs buffer in led_trigger_show (bsc#1080464).\n- mm/mmap.c: do not blow on PROT_NONE MAP_FIXED holes in the stack (bnc#1039348).\n- nfsv4: fix getacl head length estimation (git-fixes).\n- pci: Use function 0 VPD for identical functions, regular VPD for others (bnc#943786 git-fixes).\n- pipe: actually allow root to exceed the pipe buffer limits (git-fixes).\n- posix-timers: Protect posix clock array access against speculation (bnc#1081358).\n- powerpc/pseries: Support firmware disable of RFI flush (bsc#1068032, bsc#1075088).\n- qeth: repair SBAL elements calculation (bnc#1085513, LTC#165484).\n- Revert 'USB: cdc-acm: fix broken runtime suspend' (bsc#1067912)\n- s390/qeth: fix underestimated count of buffer elements (bnc#1082091, LTC#164529).\n- scsi: sr: workaround VMware ESXi cdrom emulation bug (bsc#1080813).\n- usbnet: Fix a race between usbnet_stop() and the BH (bsc#1083275).\n- x86-64: Move the 'user' vsyscall segment out of the data segment (bsc#1082424).\n- x86/espfix: Fix return stack in do_double_fault() (bsc#1085279).\n- x86/kaiser: properly align trampoline stack (bsc#1087260).\n- x86/retpoline: do not perform thunk calls in ring3 vsyscall code (bsc#1085331).\n- xen/x86/asm/traps: Disable tracing and kprobes in fixup_bad_iret and sync_regs (bsc#909077).\n- xen/x86/cpu: Check speculation control CPUID bit (bsc#1068032).\n- xen/x86/cpu: Factor out application of forced CPU caps (bsc#1075994 bsc#1075091).\n- xen/x86/cpu: Fix bootup crashes by sanitizing the argument of the 'clearcpuid=' command-line option (bsc#1065600).\n- xen/x86/cpu: Sync CPU feature flags late (bsc#1075994 bsc#1075091).\n- xen/x86/entry: Use IBRS on entry to kernel space (bsc#1068032).\n- xen/x86/idle: Toggle IBRS when going idle (bsc#1068032).\n- xen/x86/kaiser: Move feature detection up (bsc#1068032).\n- xfs: check for buffer errors before waiting (bsc#1052943).\n- xfs: fix allocbt cursor leak in xfs_alloc_ag_vextent_near (bsc#1087762).\n- xfs: really fix the cursor leak in xfs_alloc_ag_vextent_near (bsc#1087762).\n","status":"published","published":"2018-04-25T13:27:56Z","modified":"2026-02-04T04:10:03.159175Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:1172-1","title":"Security update for the Linux Kernel","description":"\n\nThe SUSE Linux Enterprise 11 SP3 LTSS kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2018-1087: And an unprivileged KVM guest user could use this flaw to potentially escalate their privileges inside a guest. (bsc#1087088)\n- CVE-2018-8897: An unprivileged system user could use incorrect set up interrupt stacks to crash the Linux kernel resulting in DoS issue. (bsc#1087088)\n- CVE-2018-10124: The kill_something_info function in kernel/signal.c might allow local users to cause a denial of service via an INT_MIN argument (bnc#1089752).\n- CVE-2018-10087: The kernel_wait4 function in kernel/exit.c might allow local users to cause a denial of service by triggering an attempted use of the -INT_MIN value (bnc#1089608).\n- CVE-2018-7757: Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c allowed local users to cause a denial of service (memory consumption) via many read accesses to files in the /sys/class/sas_phy directory, as demonstrated by the /sys/class/sas_phy/phy-1:0:12/invalid_dword_count file (bnc#1084536 1087209).\n- CVE-2018-7566: A Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user was fixed (bnc#1083483).\n- CVE-2017-0861: Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem allowed attackers to gain privileges via unspecified vectors (bnc#1088260).\n- CVE-2018-8822: Incorrect buffer length handling in the ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c could be exploited by malicious NCPFS servers to crash the kernel or execute code (bnc#1086162).\n- CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver. (bnc#1072865).\n- CVE-2017-18203: The dm_get_from_kobject function in drivers/md/dm.c allow local users to cause a denial of service (BUG) by leveraging a race condition with __dm_destroy during creation and removal of DM devices (bnc#1083242).\n- CVE-2017-16911: The vhci_hcd driver allowed allows local attackers to disclose kernel memory addresses. Successful exploitation requires that a USB device is attached over IP (bnc#1078674).\n- CVE-2017-18208: The madvise_willneed function in mm/madvise.c allowed local users to cause a denial of service (infinite loop) by triggering use of MADVISE_WILLNEED for a DAX mapping (bnc#1083494).\n- CVE-2017-16644: The hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c allowed local users to cause a denial of service (improper error handling and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1067118).\n- CVE-2018-6927: The futex_requeue function in kernel/futex.c might allow attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact by triggering a negative wake or requeue value (bnc#1080757).\n- CVE-2017-16914: The 'stub_send_ret_submit()' function (drivers/usb/usbip/stub_tx.c) allowed attackers to cause a denial of service (NULL pointer dereference) via a specially crafted USB over IP packet (bnc#1078669).\n- CVE-2016-7915: The hid_input_field function in drivers/hid/hid-core.c allowed physically proximate attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read) by connecting a device, as demonstrated by a Logitech DJ receiver (bnc#1010470).\n- CVE-2015-5156: The virtnet_probe function in drivers/net/virtio_net.c attempted to support a FRAGLIST feature without proper memory allocation, which allowed guest OS users to cause a denial of service (buffer overflow and memory corruption) via a crafted sequence of fragmented packets (bnc#940776).\n- CVE-2017-12190: The bio_map_user_iov and bio_unmap_user functions in block/bio.c did unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition (bnc#1062568).\n- CVE-2017-16912: The 'get_pipe()' function (drivers/usb/usbip/stub_rx.c) allowed attackers to cause a denial of service (out-of-bounds read) via a specially crafted USB over IP packet (bnc#1078673).\n- CVE-2017-16913: The 'stub_recv_cmd_submit()' function (drivers/usb/usbip/stub_rx.c) when handling CMD_SUBMIT packets allowed attackers to cause a denial of service (arbitrary memory allocation) via a specially crafted USB over IP packet (bnc#1078672).\n\nThe following non-security bugs were fixed:\n\n- Integrate fixes resulting from bsc#1088147 More info in the respective commit messages.\n- KABI: x86/kaiser: properly align trampoline stack.\n- KEYS: do not let add_key() update an uninstantiated key (bnc#1063416).\n- ipc/msg: introduce msgctl(MSG_STAT_ANY) (bsc#1072689).\n- ipc/sem: introduce semctl(SEM_STAT_ANY) (bsc#1072689).\n- ipc/shm: introduce shmctl(SHM_STAT_ANY) (bsc#1072689).\n- kvm/x86: fix icebp instruction handling (bsc#1087088).\n- leds: do not overflow sysfs buffer in led_trigger_show (bsc#1080464).\n- mm/mmap.c: do not blow on PROT_NONE MAP_FIXED holes in the stack (bnc#1039348).\n- x86-64: Move the 'user' vsyscall segment out of the data segment (bsc#1082424).\n- x86/entry/64: Do not use IST entry for #BP stack (bsc#1087088).\n- x86/kaiser: properly align trampoline stack (bsc#1087260).\n- x86/retpoline: do not perform thunk calls in ring3 vsyscall code (bsc#1085331).\n- xfs: check for buffer errors before waiting (bsc#1052943).\n- xfs: fix allocbt cursor leak in xfs_alloc_ag_vextent_near (bsc#1087762).\n- xfs: really fix the cursor leak in xfs_alloc_ag_vextent_near (bsc#1087762).\n","status":"published","published":"2018-05-08T17:33:21Z","modified":"2026-02-04T02:36:02.74629Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:1309-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 11 SP4 RT kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2018-10124: The kill_something_info function in kernel/signal.c might\n  have allowed local users to cause a denial of service via an INT_MIN argument\n  (bnc#1089752).\n- CVE-2018-10087: The kernel_wait4 function in kernel/exit.c might have allowed\n  local users to cause a denial of service by triggering an attempted use of the\n  -INT_MIN value (bnc#1089608).\n- CVE-2018-7757: Memory leak in the sas_smp_get_phy_events function in\n  drivers/scsi/libsas/sas_expander.c allowed local users to cause a denial of\n  service (memory consumption) via many read accesses to files in the\n  /sys/class/sas_phy directory, as demonstrated by the\n  /sys/class/sas_phy/phy-1:0:12/invalid_dword_count file (bnc#1084536).\n- CVE-2018-7566: Buffer overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl\n  write operation to /dev/snd/seq by a local user potentially allowing for code\n  execution (bnc#1083483).\n- CVE-2017-0861: Use-after-free vulnerability in the snd_pcm_info function in\n  the ALSA subsystem allowed attackers to gain privileges via unspecified vectors\n  (bnc#1088260 1088268).\n- CVE-2018-8822: Incorrect buffer length handling in the ncp_read_kernel\n  function could have beenexploited by malicious NCPFS servers to crash the\n  kernel or execute code (bnc#1086162).\n- CVE-2017-13166: Prevent elevation of privilege vulnerability in the video\n  driver (bnc#1072865).\n- CVE-2017-18203: The dm_get_from_kobject function in drivers/md/dm.c allow\n  local users to cause a denial of service (BUG) by leveraging a race condition\n  with __dm_destroy during creation and removal of DM devices (bnc#1083242).\n- CVE-2017-16911: The vhci_hcd driver allowed local attackers to disclose\n  kernel memory addresses. Successful exploitation requires that a USB device is\n  attached over IP (bnc#1078674).\n- CVE-2017-18208: The madvise_willneed function in mm/madvise.c allowed local\n  users to cause a denial of service (infinite loop) by triggering use of\n  MADVISE_WILLNEED for a DAX mapping (bnc#1083494).\n- CVE-2017-16644: The hdpvr_probe function in\n  drivers/media/usb/hdpvr/hdpvr-core.c allowed local users to cause a denial of\n  service (improper error handling and system crash) or possibly have unspecified\n  other impact via a crafted USB device (bnc#1067118).\n- CVE-2018-6927: The futex_requeue function in kernel/futex.c allowed attackers\n  to cause a denial of service (integer overflow) or possibly have unspecified\n  other impact by triggering a negative wake or requeue value (bnc#1080757).\n- CVE-2017-16914: The 'stub_send_ret_submit()' function\n  (drivers/usb/usbip/stub_tx.c) allowed attackers to cause a denial of service\n  (NULL pointer dereference) via a specially crafted USB over IP packet\n  (bnc#1078669).\n- CVE-2016-7915: The hid_input_field function in drivers/hid/hid-core.c allowed\n  physically proximate attackers to obtain sensitive information from kernel\n  memory or cause a denial of service (out-of-bounds read) by connecting a\n  device, as demonstrated by a Logitech DJ receiver (bnc#1010470).\n- CVE-2015-5156: The virtnet_probe function in drivers/net/virtio_net.c\n  attempted to support a FRAGLIST feature without proper memory allocation, which\n  allowed guest OS users to cause a denial of service (buffer overflow and memory\n  corruption) via a crafted sequence of fragmented packets (bnc#940776).\n- CVE-2017-12190: The bio_map_user_iov and bio_unmap_user functions in\n  block/bio.c did unbalanced refcounting when a SCSI I/O vector had small\n  consecutive buffers belonging to the same page. The bio_add_pc_page function\n  merged them into one, but the page reference was never dropped. This caused a\n  memory leak and possible system lockup (exploitable against the host OS by a\n  guest OS user, if a SCSI disk is passed through to a virtual machine) due to an\n  out-of-memory condition (bnc#1062568).\n- CVE-2017-16912: The 'get_pipe()' function (drivers/usb/usbip/stub_rx.c)\n  allowed attackers to cause a denial of service (out-of-bounds read) via a\n  specially crafted USB over IP packet (bnc#1078673).\n- CVE-2017-16913: The 'stub_recv_cmd_submit()' function\n  (drivers/usb/usbip/stub_rx.c) when handling CMD_SUBMIT packets allowed\n  attackers to cause a denial of service (arbitrary memory allocation) via a\n  specially crafted USB over IP packet (bnc#1078672).\n\nThe following non-security bugs were fixed:\n\n- Integrate fixes resulting from bsc#1088147 More info in the respective commit messages.\n- KABI: x86/kaiser: properly align trampoline stack.\n- KEYS: do not let add_key() update an uninstantiated key (bnc#1063416).\n- KEYS: prevent creating a different user's keyrings (bnc#1065999).\n- NFSv4: fix getacl head length estimation (git-fixes).\n- PCI: Use function 0 VPD for identical functions, regular VPD for others (bnc#943786 git-fixes).\n- Revert 'USB: cdc-acm: fix broken runtime suspend' (bsc#1067912)\n- Subject: af_iucv: enable control sends in case of SEND_SHUTDOWN (bnc#1085513, LTC#165135).\n- blacklist.conf: blacklisted 7edaeb6841df ('kernel/watchdog: Prevent false positives with turbo modes') (bnc#1063516)\n- blacklist.conf: blacklisted 9fbc1f635fd0bd28cb32550211bf095753ac637a (bnc#1089665)\n- blacklist.conf: blacklisted ba4877b9ca51f80b5d30f304a46762f0509e1635 (bnc#1089668)\n- cifs: fix buffer overflow in cifs_build_path_to_root() (bsc#1085113).\n- drm/mgag200: fix a test in mga_vga_mode_valid() (bsc#1087092).\n- hrtimer: Ensure POSIX compliance (relative CLOCK_REALTIME hrtimers) (bnc#1013018).\n- hrtimer: Reset hrtimer cpu base proper on CPU hotplug (bnc#1013018).\n- ide-cd: workaround VMware ESXi cdrom emulation bug (bsc#1080813).\n- ipc/msg: introduce msgctl(MSG_STAT_ANY) (bsc#1072689).\n- ipc/sem: introduce semctl(SEM_STAT_ANY) (bsc#1072689).\n- ipc/shm: introduce shmctl(SHM_STAT_ANY) (bsc#1072689).\n- jffs2: Fix use-after-free bug in jffs2_iget()'s error handling path (git-fixes).\n- leds: do not overflow sysfs buffer in led_trigger_show (bsc#1080464).\n- media: cpia2: Fix a couple off by one bugs (bsc#1050431).\n- mm/mmap.c: do not blow on PROT_NONE MAP_FIXED holes in the stack (bnc#1039348).\n- pipe: actually allow root to exceed the pipe buffer limits (git-fixes).\n- posix-timers: Protect posix clock array access against speculation (bnc#1081358).\n- powerpc/fadump: Add a warning when 'fadump_reserve_mem=' is used (bnc#1032084).\n- powerpc/fadump: reuse crashkernel parameter for fadump memory reservation (bnc#1032084).\n- powerpc/fadump: update documentation about crashkernel parameter reuse (bnc#1032084).\n- powerpc/fadump: use 'fadump_reserve_mem=' when specified (bnc#1032084).\n- powerpc/pseries: Support firmware disable of RFI flush (bsc#1068032, bsc#1075088).\n- qeth: repair SBAL elements calculation (bnc#1085513, LTC#165484).\n- s390/qeth: fix underestimated count of buffer elements (bnc#1082091, LTC#164529).\n- scsi: sr: workaround VMware ESXi cdrom emulation bug (bsc#1080813).\n- usbnet: Fix a race between usbnet_stop() and the BH (bsc#1083275).\n- x86-64: Move the 'user' vsyscall segment out of the data segment (bsc#1082424).\n- x86/espfix: Fix return stack in do_double_fault() (bsc#1085279).\n- x86/kaiser: properly align trampoline stack (bsc#1087260).\n- x86/retpoline: do not perform thunk calls in ring3 vsyscall code (bsc#1085331).\n- xen/x86/CPU: Check speculation control CPUID bit (bsc#1068032).\n- xen/x86/CPU: Sync CPU feature flags late (bsc#1075994 bsc#1075091).\n- xen/x86/asm/traps: Disable tracing and kprobes in fixup_bad_iret and sync_regs (bsc#909077).\n- xen/x86/cpu: Factor out application of forced CPU caps (bsc#1075994 bsc#1075091).\n- xen/x86/cpu: Fix bootup crashes by sanitizing the argument of the 'clearcpuid=' command-line option (bsc#1065600).\n- xen/x86/entry: Use IBRS on entry to kernel space (bsc#1068032).\n- xen/x86/idle: Toggle IBRS when going idle (bsc#1068032).\n- xen/x86/kaiser: Move feature detection up (bsc#1068032).\n- xfs: check for buffer errors before waiting (bsc#1052943).\n- xfs: fix allocbt cursor leak in xfs_alloc_ag_vextent_near (bsc#1087762).\n- xfs: really fix the cursor leak in xfs_alloc_ag_vextent_near (bsc#1087762).\n","status":"published","published":"2018-05-16T14:59:01Z","modified":"2026-02-04T03:25:05.321086Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"USN-3582-1","title":"linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities","description":"Mohamed Ghannam discovered that the IPv4 raw socket implementation in the\nLinux kernel contained a race condition leading to uninitialized pointer\nusage. A local attacker could use this to cause a denial of service or\npossibly execute arbitrary code. (CVE-2017-17712)\n\nLaurent Guerby discovered that the mbcache feature in the ext2 and ext4\nfilesystems in the Linux kernel improperly handled xattr block caching. A\nlocal attacker could use this to cause a denial of service. (CVE-2015-8952)\n\nVitaly Mayatskikh discovered that the SCSI subsystem in the Linux kernel\ndid not properly track reference counts when merging buffers. A local\nattacker could use this to cause a denial of service (memory exhaustion).\n(CVE-2017-12190)\n\nChunYu Wang discovered that a use-after-free vulnerability existed in the\nSCTP protocol implementation in the Linux kernel. A local attacker could\nuse this to cause a denial of service (system crash) or possibly execute\narbitrary code, (CVE-2017-15115)\n\nMohamed Ghannam discovered a use-after-free vulnerability in the DCCP\nprotocol implementation in the Linux kernel. A local attacker could use\nthis to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2017-8824)\n\nUSN-3540-1 mitigated CVE-2017-5715 (Spectre Variant 2) for the\namd64 architecture in Ubuntu 16.04 LTS. This update provides the\ncompiler-based retpoline kernel mitigation for the amd64 and i386\narchitectures. Original advisory details:\n\n Jann Horn discovered that microprocessors utilizing speculative execution\n and branch prediction may allow unauthorized memory reads via sidechannel\n attacks. This flaw is known as Spectre. A local attacker could use this to\n expose sensitive information, including kernel memory. (CVE-2017-5715)\n","status":"published","published":"2018-02-22T09:11:00Z","modified":"2026-04-22T09:43:15.939855Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-3582-2","title":"linux-lts-xenial, linux-aws vulnerabilities","description":"USN-3582-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04\nLTS. This update provides the corresponding updates for the Linux\nHardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu\n14.04 LTS.\n\nMohamed Ghannam discovered that the IPv4 raw socket implementation in the\nLinux kernel contained a race condition leading to uninitialized pointer\nusage. A local attacker could use this to cause a denial of service or\npossibly execute arbitrary code. (CVE-2017-17712)\n\nLaurent Guerby discovered that the mbcache feature in the ext2 and ext4\nfilesystems in the Linux kernel improperly handled xattr block caching. A\nlocal attacker could use this to cause a denial of service. (CVE-2015-8952)\n\nVitaly Mayatskikh discovered that the SCSI subsystem in the Linux kernel\ndid not properly track reference counts when merging buffers. A local\nattacker could use this to cause a denial of service (memory exhaustion).\n(CVE-2017-12190)\n\nChunYu Wang discovered that a use-after-free vulnerability existed in the\nSCTP protocol implementation in the Linux kernel. A local attacker could\nuse this to cause a denial of service (system crash) or possibly execute\narbitrary code, (CVE-2017-15115)\n\nMohamed Ghannam discovered a use-after-free vulnerability in the DCCP\nprotocol implementation in the Linux kernel. A local attacker could use\nthis to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2017-8824)\n\nUSN-3540-2 mitigated CVE-2017-5715 (Spectre Variant 2) for the\namd64 architecture in Ubuntu 14.04 LTS. This update provides the\ncompiler-based retpoline kernel mitigation for the amd64 and i386\narchitectures. Original advisory details:\n\n Jann Horn discovered that microprocessors utilizing speculative execution\n and branch prediction may allow unauthorized memory reads via sidechannel\n attacks. This flaw is known as Spectre. A local attacker could use this to\n expose sensitive information, including kernel memory. (CVE-2017-5715)\n","status":"published","published":"2018-02-22T10:06:35Z","modified":"2026-02-10T04:41:17Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-3583-1","title":"linux vulnerabilities","description":"It was discovered that an out-of-bounds write vulnerability existed in the\nFlash-Friendly File System (f2fs) in the Linux kernel. An attacker could\nconstruct a malicious file system that, when mounted, could cause a denial\nof service (system crash) or possibly execute arbitrary code.\n(CVE-2017-0750)\n\nIt was discovered that a race condition leading to a use-after-free\nvulnerability existed in the ALSA PCM subsystem of the Linux kernel. A\nlocal attacker could use this to cause a denial of service (system crash)\nor possibly execute arbitrary code. (CVE-2017-0861)\n\nIt was discovered that the KVM implementation in the Linux kernel allowed\npassthrough of the diagnostic I/O port 0x80. An attacker in a guest VM\ncould use this to cause a denial of service (system crash) in the host OS.\n(CVE-2017-1000407)\n\nBo Zhang discovered that the netlink wireless configuration interface in\nthe Linux kernel did not properly validate attributes when handling certain\nrequests. A local attacker with the CAP_NET_ADMIN could use this to cause a\ndenial of service (system crash). (CVE-2017-12153)\n\nVitaly Mayatskikh discovered that the SCSI subsystem in the Linux kernel\ndid not properly track reference counts when merging buffers. A local\nattacker could use this to cause a denial of service (memory exhaustion).\n(CVE-2017-12190)\n\nIt was discovered that the key management subsystem in the Linux kernel did\nnot properly restrict key reads on negatively instantiated keys. A local\nattacker could use this to cause a denial of service (system crash).\n(CVE-2017-12192)\n\nIt was discovered that an integer overflow existed in the sysfs interface\nfor the QLogic 24xx+ series SCSI driver in the Linux kernel. A local\nprivileged attacker could use this to cause a denial of service (system\ncrash). (CVE-2017-14051)\n\nOtto Ebeling discovered that the memory manager in the Linux kernel did not\nproperly check the effective UID in some situations. A local attacker could\nuse this to expose sensitive information. (CVE-2017-14140)\n\nIt was discovered that the ATI Radeon framebuffer driver in the Linux\nkernel did not properly initialize a data structure returned to user space.\nA local attacker could use this to expose sensitive information (kernel\nmemory). (CVE-2017-14156)\n\nChunYu Wang discovered that the iSCSI transport implementation in the Linux\nkernel did not properly validate data structures. A local attacker could\nuse this to cause a denial of service (system crash). (CVE-2017-14489)\n\nJames Patrick-Evans discovered a race condition in the LEGO USB Infrared\nTower driver in the Linux kernel. A physically proximate attacker could use\nthis to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2017-15102)\n\nChunYu Wang discovered that a use-after-free vulnerability existed in the\nSCTP protocol implementation in the Linux kernel. A local attacker could\nuse this to cause a denial of service (system crash) or possibly execute\narbitrary code, (CVE-2017-15115)\n\nIt was discovered that the key management subsystem in the Linux kernel did\nnot properly handle NULL payloads with non-zero length values. A local\nattacker could use this to cause a denial of service (system crash).\n(CVE-2017-15274)\n\nIt was discovered that the Bluebooth Network Encapsulation Protocol (BNEP)\nimplementation in the Linux kernel did not validate the type of socket\npassed in the BNEPCONNADD ioctl(). A local attacker with the CAP_NET_ADMIN\nprivilege could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2017-15868)\n\nAndrey Konovalov discovered a use-after-free vulnerability in the USB\nserial console driver in the Linux kernel. A physically proximate attacker\ncould use this to cause a denial of service (system crash) or possibly\nexecute arbitrary code. (CVE-2017-16525)\n\nIt was discovered that the netfilter passive OS fingerprinting (xt_osf)\nmodule did not properly perform access control checks. A local attacker\ncould improperly modify the system-wide OS fingerprint list.\n(CVE-2017-17450)\n\nIt was discovered that the HMAC implementation did not validate the state\nof the underlying cryptographic hash algorithm. A local attacker could use\nthis to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2017-17806)\n\nDenys Fedoryshchenko discovered a use-after-free vulnerability in the\nnetfilter xt_TCPMSS filter of the Linux kernel. A remote attacker could use\nthis to cause a denial of service (system crash). (CVE-2017-18017)\n\nGareth Evans discovered that the shm IPC subsystem in the Linux kernel did\nnot properly restrict mapping page zero. A local privileged attacker could\nuse this to execute arbitrary code. (CVE-2017-5669)\n\nIt was discovered that an integer overflow vulnerability existing in the\nIPv6 implementation in the Linux kernel. A local attacker could use this to\ncause a denial of service (infinite loop). (CVE-2017-7542)\n\nTommi Rantala and Brad Spengler discovered that the memory manager in the\nLinux kernel did not properly enforce the CONFIG_STRICT_DEVMEM protection\nmechanism. A local attacker with access to /dev/mem could use this to\nexpose sensitive information or possibly execute arbitrary code.\n(CVE-2017-7889)\n\nMohamed Ghannam discovered a use-after-free vulnerability in the DCCP\nprotocol implementation in the Linux kernel. A local attacker could use\nthis to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2017-8824)\n\nMohamed Ghannam discovered a null pointer dereference in the RDS (Reliable\nDatagram Sockets) protocol implementation of the Linux kernel. A local\nattacker could use this to cause a denial of service (system crash).\n(CVE-2018-5333)\n\n范龙飞 discovered that a race condition existed in loop block device\nimplementation in the Linux kernel. A local attacker could use this to\ncause a denial of service (system crash) or possibly execute arbitrary\ncode. (CVE-2018-5344)\n\nUSN-3524-1 mitigated CVE-2017-5754 (Meltdown) for the amd64\narchitecture in Ubuntu 14.04 LTS. This update provides the\ncorresponding mitigations for the ppc64el architecture. Original\nadvisory details:\n\n Jann Horn discovered that microprocessors utilizing speculative execution\n and indirect branch prediction may allow unauthorized memory reads via\n sidechannel attacks. This flaw is known as Meltdown. A local attacker could\n use this to expose sensitive information, including kernel memory.\n (CVE-2017-5754)\n\n","status":"published","published":"2018-02-23T09:14:24Z","modified":"2026-04-22T09:43:37.619348Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}