{"id":"CVE-2019-18675","aliases":["CLSA-2026-1789960079","CLSA-2026-1790030905","CLSA-2026-1791949745","CLSA-2026-1792020435","DEBIAN-CVE-2019-18675","EUVD-2019-8391","GHSA-7xj8-cwpp-wfwj","SUSE-SU-2020:1255-1","SUSE-SU-2020:1275-1","SUSE-SU-2020:14354-1","UBUNTU-CVE-2019-18675"],"status":"published","title":"The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in...","description":"The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00513,"percentile":0.44039,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2019-11-25T13:44:26Z","modified":"2026-11-06T13:49:03Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["4.16.16-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["4.16.16-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["4.16.16-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-aws","fixed_in":["4.4.0-1028.31"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-azure","fixed_in":["4.15.0-1031.32~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-xenial","fixed_in":["4.4.0-134.160~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux","fixed_in":["4.4.0-134.160"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-aws","fixed_in":["4.4.0-1066.76"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-azure","fixed_in":["4.15.0-1025.26~16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-gcp","fixed_in":["4.15.0-1021.22~16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe","fixed_in":["4.15.0-36.39~16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-kvm","fixed_in":["4.4.0-1032.38"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","fixed_in":["4.4.0-1095.103"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","fixed_in":["4.4.0-1099.104"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"linux-fips","fixed_in":["4.4.0-1008.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"linux","fixed_in":["4.15.0-36.39"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws","fixed_in":["4.15.0-1023.23"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"linux-kvm","fixed_in":["4.15.0-1023.23"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"linux-oem","fixed_in":["4.15.0-1021.24"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"linux-raspi2","fixed_in":["4.15.0-1024.26"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"linux-snapdragon","fixed_in":["4.15.0-1053.57"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els35"}]}],"bundled":57},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els35"}]}],"bundled":57},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els35"}]}],"bundled":57},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els35"}]}],"bundled":57},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els35"}]}],"bundled":57},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els35"}]}],"bundled":57},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els35"}]}],"bundled":57},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els35"}]}],"bundled":57},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els35"}]}],"bundled":57},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els35"}]}],"bundled":57},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els35"}]}],"bundled":57},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els35"}]}],"bundled":57},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els35"}]}],"bundled":57},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els35"}]}],"bundled":57},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els35"}]}],"bundled":57},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els35"}]}],"bundled":57},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els35"}]}],"bundled":57},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els35"}]}],"bundled":57},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els35"}]}],"bundled":57},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els35"}]}],"bundled":57},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"bundled":69},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"bundled":69},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"bundled":69},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"bundled":69},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"bundled":69},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"bundled":69},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"bundled":69},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"bundled":69},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"bundled":69},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"bundled":69},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"bundled":69},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"bundled":69},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"bundled":69},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"bundled":69},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"bundled":69},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"bundled":69},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"bundled":69},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"bundled":69},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"bundled":69},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"bundled":69},{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.16-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.16-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.16-1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.129.1"}]}],"bundled":57},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.129.1"}]}],"bundled":57},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.129.1"}]}],"bundled":57},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"kgraft-patch-SLE12-SP2_Update_34","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-3.3.1"}]}],"bundled":57},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.129.1"}]}],"bundled":57},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.129.1"}]}],"bundled":57},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.129.1"}]}],"bundled":57},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.129.1"}]}],"bundled":57},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"kgraft-patch-SLE12-SP2_Update_34","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-3.3.1"}]}],"bundled":57},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.129.1"}]}],"bundled":57},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.129.1"}]}],"bundled":57},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.129.1"}]}],"bundled":57},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"kgraft-patch-SLE12-SP2_Update_34","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-3.3.1"}]}],"bundled":57},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.129.1"}]}],"bundled":57},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.129.1"}]}],"bundled":57},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.129.1"}]}],"bundled":57},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"kgraft-patch-SLE12-SP3_Update_31","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-4.3.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"kgraft-patch-SLE12-SP3_Update_31","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-4.3.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"kgraft-patch-SLE12-SP3_Update_31","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-4.3.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"kgraft-patch-SLE12-SP3_Update_31","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-4.3.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"kgraft-patch-SLE12-SP3_Update_31","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-4.3.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.180-94.116.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"kgraft-patch-SLE12-SP3_Update_31","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-4.3.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"kernel-bigmem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.111.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.111.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.111.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.111.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.111.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.111.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.111.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.111.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.111.1"}]}],"bundled":28},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1028.31"}]}],"versions":["4.4.0-1002.2","4.4.0-1003.3","4.4.0-1005.5","4.4.0-1006.6","4.4.0-1009.9","4.4.0-1010.10","4.4.0-1011.11","4.4.0-1012.12","4.4.0-1014.14","4.4.0-1016.16","4.4.0-1017.17","4.4.0-1019.19","4.4.0-1022.22","4.4.0-1023.23","4.4.0-1024.25","4.4.0-1025.26","4.4.0-1027.30"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1031.32~14.04.1"}]}],"versions":["4.15.0-1023.24~14.04.1","4.15.0-1030.31~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-xenial","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-134.160~14.04.1"}]}],"versions":["4.4.0-13.29~14.04.1","4.4.0-14.30~14.04.2","4.4.0-15.31~14.04.1","4.4.0-18.34~14.04.1","4.4.0-21.37~14.04.1","4.4.0-22.39~14.04.1","4.4.0-22.40~14.04.1","4.4.0-24.43~14.04.1","4.4.0-28.47~14.04.1","4.4.0-31.50~14.04.1","4.4.0-34.53~14.04.1","4.4.0-36.55~14.04.1","4.4.0-38.57~14.04.1","4.4.0-42.62~14.04.1","4.4.0-45.66~14.04.1","4.4.0-47.68~14.04.1","4.4.0-51.72~14.04.1","4.4.0-53.74~14.04.1","4.4.0-57.78~14.04.1","4.4.0-59.80~14.04.1","4.4.0-62.83~14.04.1","4.4.0-63.84~14.04.2","4.4.0-64.85~14.04.1","4.4.0-66.87~14.04.1","4.4.0-67.88~14.04.1","4.4.0-70.91~14.04.1","4.4.0-71.92~14.04.1","4.4.0-72.93~14.04.1","4.4.0-75.96~14.04.1","4.4.0-78.99~14.04.2","4.4.0-79.100~14.04.1","4.4.0-81.104~14.04.1","4.4.0-83.106~14.04.1","4.4.0-87.110~14.04.1","4.4.0-89.112~14.04.1","4.4.0-91.114~14.04.1","4.4.0-92.115~14.04.1","4.4.0-93.116~14.04.1","4.4.0-96.119~14.04.1","4.4.0-97.120~14.04.1","4.4.0-98.121~14.04.1","4.4.0-101.124~14.04.1","4.4.0-103.126~14.04.1","4.4.0-104.127~14.04.1","4.4.0-108.131~14.04.1","4.4.0-109.132~14.04.1","4.4.0-111.134~14.04.1","4.4.0-112.135~14.04.1","4.4.0-116.140~14.04.1","4.4.0-119.143~14.04.1","4.4.0-121.145~14.04.1","4.4.0-124.148~14.04.1","4.4.0-127.153~14.04.1","4.4.0-128.154~14.04.1","4.4.0-130.156~14.04.1","4.4.0-131.157~14.04.1","4.4.0-133.159~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86","3.13.0-53.88","3.13.0-53.89","3.13.0-54.91","3.13.0-55.92","3.13.0-55.94","3.13.0-57.95","3.13.0-58.97","3.13.0-59.98","3.13.0-61.100","3.13.0-62.102","3.13.0-63.103","3.13.0-65.105","3.13.0-65.106","3.13.0-66.108","3.13.0-67.110","3.13.0-68.111","3.13.0-70.113","3.13.0-71.114","3.13.0-73.116","3.13.0-74.118","3.13.0-76.120","3.13.0-77.121","3.13.0-79.123","3.13.0-83.127","3.13.0-85.129","3.13.0-86.130","3.13.0-86.131","3.13.0-87.133","3.13.0-88.135","3.13.0-91.138","3.13.0-92.139","3.13.0-93.140","3.13.0-95.142","3.13.0-96.143","3.13.0-98.145","3.13.0-100.147","3.13.0-101.148","3.13.0-103.150","3.13.0-105.152","3.13.0-106.153","3.13.0-107.154","3.13.0-108.155","3.13.0-109.156","3.13.0-110.157","3.13.0-111.158","3.13.0-112.159","3.13.0-113.160","3.13.0-115.162","3.13.0-116.163","3.13.0-117.164","3.13.0-119.166","3.13.0-121.170","3.13.0-123.172","3.13.0-125.174","3.13.0-126.175","3.13.0-128.177","3.13.0-129.178","3.13.0-132.181","3.13.0-133.182","3.13.0-135.184","3.13.0-137.186","3.13.0-139.188","3.13.0-141.190","3.13.0-142.191","3.13.0-143.192","3.13.0-144.193","3.13.0-145.194","3.13.0-147.196","3.13.0-149.199","3.13.0-151.201","3.13.0-153.203","3.13.0-155.205","3.13.0-156.206","3.13.0-157.207","3.13.0-158.208","3.13.0-160.210","3.13.0-161.211","3.13.0-162.212","3.13.0-163.213","3.13.0-164.214","3.13.0-165.215","3.13.0-166.216","3.13.0-167.217","3.13.0-168.218","3.13.0-169.219","3.13.0-170.220","3.13.0-171.222","3.13.0-172.223","3.13.0-173.224","3.13.0-174.225","3.13.0-175.226","3.13.0-176.227","3.13.0-180.231","3.13.0-181.232","3.13.0-182.233","3.13.0-183.234","3.13.0-184.235","3.13.0-185.236","3.13.0-186.237","3.13.0-187.238","3.13.0-188.239","3.13.0-189.240","3.13.0-190.241","3.13.0-191.242","3.13.0-192.243","3.13.0-193.244","3.13.0-194.245","3.13.0-195.246","3.13.0-196.247","3.13.0-197.248","3.13.0-198.249","3.13.0-199.250","3.13.0-200.251","3.13.0-201.252","3.13.0-202.253","3.13.0-203.254","3.13.0-204.255","3.13.0-205.256","3.13.0-206.257","3.13.0-207.258","3.13.0-208.259","3.13.0-209.260","3.13.0-210.261","3.13.0-211.262","3.13.0-212.263","3.13.0-214.265","3.13.0-215.266","3.13.0-217.268","3.13.0-218.269","3.13.0-219.270","3.13.0-220.271"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-134.160"}]}],"versions":["4.2.0-16.19","4.2.0-17.21","4.2.0-19.23","4.3.0-1.10","4.3.0-2.11","4.3.0-5.16","4.3.0-6.17","4.3.0-7.18","4.4.0-2.16","4.4.0-4.19","4.4.0-6.21","4.4.0-7.22","4.4.0-8.23","4.4.0-9.24","4.4.0-10.25","4.4.0-11.26","4.4.0-12.28","4.4.0-13.29","4.4.0-14.30","4.4.0-15.31","4.4.0-16.32","4.4.0-17.33","4.4.0-18.34","4.4.0-21.37","4.4.0-22.39","4.4.0-22.40","4.4.0-24.43","4.4.0-28.47","4.4.0-31.50","4.4.0-34.53","4.4.0-36.55","4.4.0-38.57","4.4.0-42.62","4.4.0-43.63","4.4.0-45.66","4.4.0-47.68","4.4.0-51.72","4.4.0-53.74","4.4.0-57.78","4.4.0-59.80","4.4.0-62.83","4.4.0-63.84","4.4.0-64.85","4.4.0-65.86","4.4.0-66.87","4.4.0-67.88","4.4.0-70.91","4.4.0-71.92","4.4.0-72.93","4.4.0-75.96","4.4.0-77.98","4.4.0-78.99","4.4.0-79.100","4.4.0-81.104","4.4.0-83.106","4.4.0-87.110","4.4.0-89.112","4.4.0-91.114","4.4.0-92.115","4.4.0-93.116","4.4.0-96.119","4.4.0-97.120","4.4.0-98.121","4.4.0-101.124","4.4.0-103.126","4.4.0-104.127","4.4.0-108.131","4.4.0-109.132","4.4.0-112.135","4.4.0-116.140","4.4.0-119.143","4.4.0-121.145","4.4.0-122.146","4.4.0-124.148","4.4.0-127.153","4.4.0-128.154","4.4.0-130.156","4.4.0-131.157","4.4.0-133.159"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1066.76"}]}],"versions":["4.4.0-1001.10","4.4.0-1003.12","4.4.0-1004.13","4.4.0-1007.16","4.4.0-1009.18","4.4.0-1011.20","4.4.0-1012.21","4.4.0-1013.22","4.4.0-1016.25","4.4.0-1017.26","4.4.0-1018.27","4.4.0-1020.29","4.4.0-1022.31","4.4.0-1026.35","4.4.0-1028.37","4.4.0-1030.39","4.4.0-1031.40","4.4.0-1032.41","4.4.0-1035.44","4.4.0-1037.46","4.4.0-1038.47","4.4.0-1039.48","4.4.0-1041.50","4.4.0-1043.52","4.4.0-1044.53","4.4.0-1047.56","4.4.0-1048.57","4.4.0-1049.58","4.4.0-1050.59","4.4.0-1052.61","4.4.0-1054.63","4.4.0-1055.64","4.4.0-1057.66","4.4.0-1060.69","4.4.0-1061.70","4.4.0-1062.71","4.4.0-1063.72","4.4.0-1065.75"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1025.26~16.04.1"}]}],"versions":["4.11.0-1009.9","4.11.0-1011.11","4.11.0-1013.13","4.11.0-1014.14","4.11.0-1015.15","4.11.0-1016.16","4.13.0-1005.7","4.13.0-1006.8","4.13.0-1007.9","4.13.0-1009.12","4.13.0-1011.14","4.13.0-1012.15","4.13.0-1014.17","4.13.0-1016.19","4.13.0-1018.21","4.15.0-1013.13~16.04.2","4.15.0-1014.14~16.04.1","4.15.0-1018.18~16.04.1","4.15.0-1019.19~16.04.1","4.15.0-1021.21~16.04.1","4.15.0-1022.22~16.04.1","4.15.0-1023.24~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1021.22~16.04.1"}]}],"versions":["4.10.0-1004.4","4.10.0-1006.6","4.10.0-1007.7","4.10.0-1008.8","4.10.0-1009.9","4.13.0-1002.5","4.13.0-1006.9","4.13.0-1007.10","4.13.0-1008.11","4.13.0-1011.15","4.13.0-1012.16","4.13.0-1013.17","4.13.0-1015.19","4.13.0-1017.21","4.13.0-1019.23","4.15.0-1014.14~16.04.1","4.15.0-1015.15~16.04.1","4.15.0-1017.18~16.04.1","4.15.0-1018.19~16.04.2","4.15.0-1019.20~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-36.39~16.04.1"}]}],"versions":["4.8.0-36.36~16.04.1","4.8.0-39.42~16.04.1","4.8.0-41.44~16.04.1","4.8.0-42.45~16.04.1","4.8.0-44.47~16.04.1","4.8.0-45.48~16.04.1","4.8.0-46.49~16.04.1","4.8.0-49.52~16.04.1","4.8.0-51.54~16.04.1","4.8.0-52.55~16.04.1","4.8.0-53.56~16.04.1","4.8.0-54.57~16.04.1","4.8.0-56.61~16.04.1","4.8.0-58.63~16.04.1","4.10.0-27.30~16.04.2","4.10.0-28.32~16.04.2","4.10.0-30.34~16.04.1","4.10.0-32.36~16.04.1","4.10.0-33.37~16.04.1","4.10.0-35.39~16.04.1","4.10.0-37.41~16.04.1","4.10.0-38.42~16.04.1","4.10.0-40.44~16.04.1","4.10.0-42.46~16.04.1","4.13.0-26.29~16.04.2","4.13.0-31.34~16.04.1","4.13.0-32.35~16.04.1","4.13.0-36.40~16.04.1","4.13.0-37.42~16.04.1","4.13.0-38.43~16.04.1","4.13.0-39.44~16.04.1","4.13.0-41.46~16.04.1","4.13.0-43.48~16.04.1","4.13.0-45.50~16.04.1","4.15.0-24.26~16.04.1","4.15.0-29.31~16.04.1","4.15.0-30.32~16.04.1","4.15.0-32.35~16.04.1","4.15.0-33.36~16.04.1","4.15.0-34.37~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1032.38"}]}],"versions":["4.4.0-1004.9","4.4.0-1007.12","4.4.0-1008.13","4.4.0-1009.14","4.4.0-1010.15","4.4.0-1012.17","4.4.0-1013.18","4.4.0-1015.20","4.4.0-1017.22","4.4.0-1019.24","4.4.0-1020.25","4.4.0-1021.26","4.4.0-1023.28","4.4.0-1026.31","4.4.0-1027.32","4.4.0-1029.34","4.4.0-1031.37"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1095.103"}]}],"versions":["4.2.0-1013.19","4.2.0-1014.21","4.3.0-1006.6","4.4.0-1003.4","4.4.0-1004.5","4.4.0-1009.10","4.4.0-1010.12","4.4.0-1010.13","4.4.0-1012.16","4.4.0-1016.22","4.4.0-1017.23","4.4.0-1019.25","4.4.0-1021.27","4.4.0-1023.29","4.4.0-1027.33","4.4.0-1029.36","4.4.0-1034.41","4.4.0-1038.45","4.4.0-1040.47","4.4.0-1042.49","4.4.0-1044.51","4.4.0-1046.53","4.4.0-1048.55","4.4.0-1050.57","4.4.0-1051.58","4.4.0-1052.59","4.4.0-1054.61","4.4.0-1055.62","4.4.0-1057.64","4.4.0-1059.67","4.4.0-1061.69","4.4.0-1065.73","4.4.0-1067.75","4.4.0-1069.77","4.4.0-1070.78","4.4.0-1071.79","4.4.0-1074.82","4.4.0-1075.83","4.4.0-1076.84","4.4.0-1077.85","4.4.0-1079.87","4.4.0-1080.88","4.4.0-1082.90","4.4.0-1085.93","4.4.0-1086.94","4.4.0-1087.95","4.4.0-1089.97","4.4.0-1090.98","4.4.0-1091.99","4.4.0-1092.100","4.4.0-1094.102"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1099.104"}]}],"versions":["4.4.0-1012.12","4.4.0-1013.14","4.4.0-1013.15","4.4.0-1015.18","4.4.0-1019.22","4.4.0-1020.23","4.4.0-1022.25","4.4.0-1024.27","4.4.0-1026.29","4.4.0-1030.33","4.4.0-1032.36","4.4.0-1035.39","4.4.0-1039.43","4.4.0-1042.46","4.4.0-1044.48","4.4.0-1046.50","4.4.0-1047.51","4.4.0-1048.52","4.4.0-1050.54","4.4.0-1051.55","4.4.0-1053.57","4.4.0-1054.58","4.4.0-1055.59","4.4.0-1057.61","4.4.0-1058.62","4.4.0-1059.63","4.4.0-1061.66","4.4.0-1063.68","4.4.0-1067.72","4.4.0-1069.74","4.4.0-1071.76","4.4.0-1072.77","4.4.0-1073.78","4.4.0-1076.81","4.4.0-1077.82","4.4.0-1078.83","4.4.0-1079.84","4.4.0-1081.86","4.4.0-1082.87","4.4.0-1084.89","4.4.0-1087.92","4.4.0-1088.93","4.4.0-1090.95","4.4.0-1092.97","4.4.0-1093.98","4.4.0-1094.99","4.4.0-1095.100","4.4.0-1096.101","4.4.0-1098.103"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.0-28.30~16.04.1","4.8.0-30.32~16.04.1","4.8.0-32.34~16.04.1","4.8.0-34.36~16.04.1","4.10.0-14.16~16.04.1","4.10.0-19.21~16.04.1","4.10.0-20.22~16.04.1","4.10.0-21.23~16.04.1","4.10.0-22.24~16.04.1","4.10.0-24.28~16.04.1","4.10.0-26.30~16.04.1","4.11.0-13.19~16.04.1","4.11.0-14.20~16.04.1","4.13.0-16.19~16.04.3","4.13.0-17.20~16.04.1","4.13.0-19.22~16.04.1","4.13.0-21.24~16.04.1","4.13.0-25.29~16.04.2","4.15.0-13.14~16.04.1","4.15.0-15.16~16.04.1","4.15.0-20.21~16.04.1","4.15.0-22.24~16.04.1","4.15.0-23.25~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1008.10"}]}],"versions":["4.4.0-1003.3","4.4.0-1005.5","4.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-36.39"}]}],"versions":["4.13.0-16.19","4.13.0-17.20","4.13.0-25.29","4.13.0-32.35","4.15.0-10.11","4.15.0-12.13","4.15.0-13.14","4.15.0-15.16","4.15.0-19.20","4.15.0-20.21","4.15.0-22.24","4.15.0-23.25","4.15.0-24.26","4.15.0-29.31","4.15.0-30.32","4.15.0-32.35","4.15.0-33.36","4.15.0-34.37"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1023.23"}]}],"versions":["4.15.0-1001.1","4.15.0-1003.3","4.15.0-1005.5","4.15.0-1006.6","4.15.0-1007.7","4.15.0-1009.9","4.15.0-1010.10","4.15.0-1011.11","4.15.0-1016.16","4.15.0-1017.17","4.15.0-1019.19","4.15.0-1020.20","4.15.0-1021.21"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1023.23"}]}],"versions":["4.15.0-1002.2","4.15.0-1003.3","4.15.0-1004.4","4.15.0-1006.6","4.15.0-1008.8","4.15.0-1010.10","4.15.0-1011.11","4.15.0-1012.12","4.15.0-1016.16","4.15.0-1017.17","4.15.0-1019.19","4.15.0-1020.20","4.15.0-1021.21"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1021.24"}]}],"versions":["4.15.0-1002.3","4.15.0-1004.5","4.15.0-1006.9","4.15.0-1008.11","4.15.0-1009.12","4.15.0-1012.15","4.15.0-1013.16","4.15.0-1015.18","4.15.0-1017.20","4.15.0-1018.21"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1024.26"}]}],"versions":["4.13.0-1005.5","4.13.0-1006.6","4.13.0-1008.8","4.15.0-1006.7","4.15.0-1009.10","4.15.0-1010.11","4.15.0-1011.12","4.15.0-1012.13","4.15.0-1013.14","4.15.0-1017.18","4.15.0-1018.19","4.15.0-1020.22","4.15.0-1021.23","4.15.0-1022.24"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-snapdragon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1053.57"}]}],"versions":["4.4.0-1077.82","4.4.0-1078.83","4.4.0-1079.84","4.4.0-1081.86"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1021.24~18.04.1","5.0.0-1022.25~18.04.1","5.0.0-1023.26~18.04.1","5.0.0-1024.27~18.04.1","5.0.0-1025.28","5.0.0-1027.30"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.2","4.15.0-1003.3","4.15.0-1004.4","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1012.12","4.15.0-1013.13","4.15.0-1014.14","4.15.0-1018.18","4.15.0-1019.19","4.15.0-1021.21","4.15.0-1022.23","4.15.0-1023.24","4.15.0-1025.26","4.15.0-1028.29","4.15.0-1030.31","4.15.0-1031.32","4.15.0-1032.33","4.15.0-1035.36","4.15.0-1036.38","4.15.0-1037.39","4.18.0-1011.11~18.04.1","4.18.0-1013.13~18.04.1","4.18.0-1014.14~18.04.1","4.18.0-1018.18~18.04.1","4.18.0-1019.19~18.04.1","4.18.0-1020.20~18.04.1","4.18.0-1023.24~18.04.1","4.18.0-1024.25~18.04.1","4.18.0-1025.27~18.04.1","5.0.0-1014.14~18.04.1","5.0.0-1016.17~18.04.1","5.0.0-1018.19~18.04.1","5.0.0-1020.21~18.04.1","5.0.0-1022.23~18.04.1","5.0.0-1023.24~18.04.1","5.0.0-1025.27~18.04.1","5.0.0-1027.29~18.04.1","5.0.0-1028.30~18.04.1","5.0.0-1029.31~18.04.1","5.0.0-1031.33","5.0.0-1032.34","5.0.0-1035.37","5.0.0-1036.38"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-1006.6~18.04.1","4.18.0-1007.7~18.04.1","4.18.0-1008.8~18.04.1","5.0.0-1012.12~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1001.1","4.15.0-1003.3","4.15.0-1005.5","4.15.0-1006.6","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1010.10","4.15.0-1014.14","4.15.0-1015.15","4.15.0-1017.18","4.15.0-1018.19","4.15.0-1019.20","4.15.0-1021.22","4.15.0-1023.24","4.15.0-1024.25","4.15.0-1025.26","4.15.0-1026.27","4.15.0-1027.28","4.15.0-1028.29","4.15.0-1029.31","4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1042.45","4.15.0-1044.70","5.0.0-1020.20~18.04.1","5.0.0-1021.21~18.04.1","5.0.0-1025.26~18.04.1","5.0.0-1026.27~18.04.1","5.0.0-1028.29~18.04.1","5.0.0-1029.30~18.04.1","5.0.0-1031.32","5.0.0-1033.34","5.0.0-1034.35"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-1004.5~18.04.1","4.18.0-1005.6~18.04.1","4.18.0-1006.7~18.04.1","4.18.0-1007.8~18.04.1","4.18.0-1008.9~18.04.1","4.18.0-1009.10~18.04.1","4.18.0-1011.12~18.04.1","4.18.0-1012.13~18.04.1","4.18.0-1013.14~18.04.1","4.18.0-1015.16~18.04.1","5.0.0-1011.11~18.04.1","5.0.0-1013.13~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1007.12~18.04.1","5.0.0-1008.13~18.04.1","5.0.0-1009.14~18.04.1","5.0.0-1010.15~18.04.1","5.0.0-1011.16","5.0.0-1013.18","5.0.0-1014.19"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1063.66+cvm2.2","5.4.0-1063.66+cvm3.2","5.4.0-1064.67+cvm1.1","5.4.0-1065.68+cvm2.1","5.4.0-1067.70+cvm1.1","5.4.0-1068.71+cvm1.1","5.4.0-1069.72+cvm1.1","5.4.0-1070.73+cvm1.1","5.4.0-1072.75+cvm1.1","5.4.0-1073.76+cvm1.1","5.4.0-1074.77+cvm1.1","5.4.0-1076.79+cvm1.1","5.4.0-1078.81+cvm1.1","5.4.0-1080.83+cvm1.1","5.4.0-1083.87+cvm1.1","5.4.0-1085.90+cvm1.1","5.4.0-1085.90+cvm2.1","5.4.0-1086.91+cvm1.1","5.4.0-1089.94+cvm1.2","5.4.0-1090.95+cvm1.1","5.4.0-1091.96+cvm1.1","5.4.0-1092.97+cvm1.1","5.4.0-1095.101+cvm1.1","5.4.0-1098.104+cvm1.1","5.4.0-1100.106+cvm1.1","5.4.0-1103.109+cvm1.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1033.35","5.4.0-1035.37","5.4.0-1036.38","5.4.0-1037.39","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1042.44","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1074.79","5.4.0-1076.82","5.4.0-1078.84","5.4.0-1080.86","5.4.0-1081.87","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1100.107","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110","5.4.0-1104.111","5.4.0-1105.112"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-24.28","5.4.0-26.30","5.4.0-27.31","5.4.0-28.32","5.4.0-30.34","5.4.0-31.35","5.4.0-33.37","5.4.0-34.38","5.4.0-36.41","5.4.0-37.42","5.4.0-39.44","5.4.0-40.45"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1073.75"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1032.35"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1011.12","5.15.0-1012.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.21","5.15.0-1019.22","5.15.0-1020.23","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1008.8~24.04.1","6.11.0-1012.12~24.04.1","6.11.0-1013.13~24.04.1","6.11.0-1014.14~24.04.1","6.11.0-1015.15~24.04.1","6.11.0-1017.17~24.04.1","6.11.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1006.6~24.04.2","6.11.0-1011.11~24.04.1","6.11.0-1013.13~24.04.1","6.11.0-1014.14~24.04.1","6.11.0-1015.15~24.04.1","6.11.0-1016.16~24.04.1","6.11.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-17.17~24.04.2","6.11.0-19.19~24.04.1","6.11.0-21.21~24.04.1","6.11.0-24.24~24.04.1","6.11.0-25.25~24.04.1","6.11.0-26.26~24.04.1","6.11.0-28.28~24.04.1","6.11.0-29.29~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency-hwe-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1009.10~24.04.1","6.11.0-1011.12~24.04.1","6.11.0-1012.13~24.04.1","6.11.0-1013.14~24.04.1","6.11.0-1014.15~24.04.1","6.11.0-1015.16~24.04.2","6.11.0-1016.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-2019.20"]}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/drivers/media/usb/cpia2/cpia2_core.c","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://deshal3v.github.io/blog/kernel-research/mmap_exploitation","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://security.netapp.com/advisory/ntap-20200103-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=be83bbf806822b1b89e0a0f23cd87cddc409e429","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18675","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-7xj8-cwpp-wfwj"},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1789960079.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10878","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14734","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15117","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19039","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19377","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19816","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50185","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2162","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52922","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52974","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71075","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23243","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23281","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23455","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31402","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31408","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43037","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43050","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43088","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43116","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43190","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43198","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43427","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45942","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46116","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46266","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52920","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52986","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52998","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53059","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53131","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53186","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53224","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53246","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53253","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53254","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53256","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53268","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53275","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64271","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64323","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64341","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64342","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64343","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64344","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64348","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68144","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68188","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68376","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68413","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68425","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1790030905.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-0512","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1791949745.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50302","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53197","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46243","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52918","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53266","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63826","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63922","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63983","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64322","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64340","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64422","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64471","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68093","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68202","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68320","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68365","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72070","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72322","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72389","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72398","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72413","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74287","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74359","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74387","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74388","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74556","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74588","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74630","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74641","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74689","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80536","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80590","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80622","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80829","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81001","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89478","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89549","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89550","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89575","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89607","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89633","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89671","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89699","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89893","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90033","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90057","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90116","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90203","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90383","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90421","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93803","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97408","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97445","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97455","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97536","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97539","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97931","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97938","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97949","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98077","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98193","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98194","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98266","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98276","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98348","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98349","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98364","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98375","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1792020435.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-18675","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1037216","tags":["report"]},{"url":"https://bugzilla.suse.com/1075091","tags":["report"]},{"url":"https://bugzilla.suse.com/1075994","tags":["report"]},{"url":"https://bugzilla.suse.com/1087082","tags":["report"]},{"url":"https://bugzilla.suse.com/1087813","tags":["report"]},{"url":"https://bugzilla.suse.com/1091041","tags":["report"]},{"url":"https://bugzilla.suse.com/1099279","tags":["report"]},{"url":"https://bugzilla.suse.com/1120386","tags":["report"]},{"url":"https://bugzilla.suse.com/1131107","tags":["report"]},{"url":"https://bugzilla.suse.com/1133147","tags":["report"]},{"url":"https://bugzilla.suse.com/1136449","tags":["report"]},{"url":"https://bugzilla.suse.com/1137325","tags":["report"]},{"url":"https://bugzilla.suse.com/1146519","tags":["report"]},{"url":"https://bugzilla.suse.com/1146544","tags":["report"]},{"url":"https://bugzilla.suse.com/1146612","tags":["report"]},{"url":"https://bugzilla.suse.com/1149591","tags":["report"]},{"url":"https://bugzilla.suse.com/1153811","tags":["report"]},{"url":"https://bugzilla.suse.com/1154844","tags":["report"]},{"url":"https://bugzilla.suse.com/1155311","tags":["report"]},{"url":"https://bugzilla.suse.com/1155897","tags":["report"]},{"url":"https://bugzilla.suse.com/1156060","tags":["report"]},{"url":"https://bugzilla.suse.com/1157038","tags":["report"]},{"url":"https://bugzilla.suse.com/1157042","tags":["report"]},{"url":"https://bugzilla.suse.com/1157070","tags":["report"]},{"url":"https://bugzilla.suse.com/1157143","tags":["report"]},{"url":"https://bugzilla.suse.com/1157155","tags":["report"]},{"url":"https://bugzilla.suse.com/1157157","tags":["report"]},{"url":"https://bugzilla.suse.com/1157158","tags":["report"]},{"url":"https://bugzilla.suse.com/1157303","tags":["report"]},{"url":"https://bugzilla.suse.com/1157324","tags":["report"]},{"url":"https://bugzilla.suse.com/1157333","tags":["report"]},{"url":"https://bugzilla.suse.com/1157464","tags":["report"]},{"url":"https://bugzilla.suse.com/1157804","tags":["report"]},{"url":"https://bugzilla.suse.com/1157923","tags":["report"]},{"url":"https://bugzilla.suse.com/1158021","tags":["report"]},{"url":"https://bugzilla.suse.com/1158132","tags":["report"]},{"url":"https://bugzilla.suse.com/1158381","tags":["report"]},{"url":"https://bugzilla.suse.com/1158394","tags":["report"]},{"url":"https://bugzilla.suse.com/1158398","tags":["report"]},{"url":"https://bugzilla.suse.com/1158410","tags":["report"]},{"url":"https://bugzilla.suse.com/1158413","tags":["report"]},{"url":"https://bugzilla.suse.com/1158417","tags":["report"]},{"url":"https://bugzilla.suse.com/1158427","tags":["report"]},{"url":"https://bugzilla.suse.com/1158445","tags":["report"]},{"url":"https://bugzilla.suse.com/1158819","tags":["report"]},{"url":"https://bugzilla.suse.com/1158823","tags":["report"]},{"url":"https://bugzilla.suse.com/1158824","tags":["report"]},{"url":"https://bugzilla.suse.com/1158827","tags":["report"]},{"url":"https://bugzilla.suse.com/1158834","tags":["report"]},{"url":"https://bugzilla.suse.com/1158900","tags":["report"]},{"url":"https://bugzilla.suse.com/1158903","tags":["report"]},{"url":"https://bugzilla.suse.com/1158904","tags":["report"]},{"url":"https://bugzilla.suse.com/1159199","tags":["report"]},{"url":"https://bugzilla.suse.com/1159285","tags":["report"]},{"url":"https://bugzilla.suse.com/1159297","tags":["report"]},{"url":"https://bugzilla.suse.com/1159841","tags":["report"]},{"url":"https://bugzilla.suse.com/1159908","tags":["report"]},{"url":"https://bugzilla.suse.com/1159910","tags":["report"]},{"url":"https://bugzilla.suse.com/1159911","tags":["report"]},{"url":"https://bugzilla.suse.com/1159912","tags":["report"]},{"url":"https://bugzilla.suse.com/1160195","tags":["report"]},{"url":"https://bugzilla.suse.com/1162227","tags":["report"]},{"url":"https://bugzilla.suse.com/1162298","tags":["report"]},{"url":"https://bugzilla.suse.com/1162928","tags":["report"]},{"url":"https://bugzilla.suse.com/1162929","tags":["report"]},{"url":"https://bugzilla.suse.com/1162931","tags":["report"]},{"url":"https://bugzilla.suse.com/1163971","tags":["report"]},{"url":"https://bugzilla.suse.com/1164069","tags":["report"]},{"url":"https://bugzilla.suse.com/1164078","tags":["report"]},{"url":"https://bugzilla.suse.com/1164846","tags":["report"]},{"url":"https://bugzilla.suse.com/1165111","tags":["report"]},{"url":"https://bugzilla.suse.com/1165311","tags":["report"]},{"url":"https://bugzilla.suse.com/1165873","tags":["report"]},{"url":"https://bugzilla.suse.com/1165881","tags":["report"]},{"url":"https://bugzilla.suse.com/1165984","tags":["report"]},{"url":"https://bugzilla.suse.com/1165985","tags":["report"]},{"url":"https://bugzilla.suse.com/1167629","tags":["report"]},{"url":"https://bugzilla.suse.com/1168075","tags":["report"]},{"url":"https://bugzilla.suse.com/1168295","tags":["report"]},{"url":"https://bugzilla.suse.com/1168424","tags":["report"]},{"url":"https://bugzilla.suse.com/1168829","tags":["report"]},{"url":"https://bugzilla.suse.com/1168854","tags":["report"]},{"url":"https://bugzilla.suse.com/1170056","tags":["report"]},{"url":"https://bugzilla.suse.com/1170345","tags":["report"]},{"url":"https://bugzilla.suse.com/1170778","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-21008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-9383","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201275-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1056134","tags":["report"]},{"url":"https://bugzilla.suse.com/1145929","tags":["report"]},{"url":"https://bugzilla.suse.com/1154118","tags":["report"]},{"url":"https://bugzilla.suse.com/1155689","tags":["report"]},{"url":"https://bugzilla.suse.com/1158642","tags":["report"]},{"url":"https://bugzilla.suse.com/1161586","tags":["report"]},{"url":"https://bugzilla.suse.com/1163508","tags":["report"]},{"url":"https://bugzilla.suse.com/1164009","tags":["report"]},{"url":"https://bugzilla.suse.com/1164051","tags":["report"]},{"url":"https://bugzilla.suse.com/1167421","tags":["report"]},{"url":"https://bugzilla.suse.com/1167423","tags":["report"]},{"url":"https://bugzilla.suse.com/1170847","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014354-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1012382","tags":["report"]},{"url":"https://bugzilla.suse.com/1105327","tags":["report"]},{"url":"https://bugzilla.suse.com/1136471","tags":["report"]},{"url":"https://bugzilla.suse.com/1136922","tags":["report"]},{"url":"https://bugzilla.suse.com/1148871","tags":["report"]},{"url":"https://bugzilla.suse.com/1149448","tags":["report"]},{"url":"https://bugzilla.suse.com/1152631","tags":["report"]},{"url":"https://bugzilla.suse.com/1156652","tags":["report"]},{"url":"https://bugzilla.suse.com/1157344","tags":["report"]},{"url":"https://bugzilla.suse.com/1157678","tags":["report"]},{"url":"https://bugzilla.suse.com/1161358","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19227","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-18675","tags":["report"]},{"url":"https://lore.kernel.org/lkml/20191108215038.59170-1-omerdeshalev@gmail.com/","tags":["report"]},{"url":"https://lore.kernel.org/lkml/20191111114615.GA418224@kroah.com/","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-18675","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-18675","description":"The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.","status":"published","published":"2019-11-25T13:44:26Z","modified":"2024-08-05T01:54:14.592Z","updated_at":"2026-11-02T14:32:23.485011Z"}],"euvd":[{"id":"EUVD-2019-8391","description":"The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.","status":"published","published":"2019-11-25T13:44:26Z","modified":"2024-08-05T01:54:14Z","updated_at":"2026-11-03T02:40:27.733219Z"}],"ghsa":[{"id":"GHSA-7xj8-cwpp-wfwj","title":"The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in...","description":"The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.","status":"published","published":"2022-05-24T17:01:51Z","modified":"2023-03-04T05:08:05Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:54:16.14777Z"}],"nvd":[{"id":"CVE-2019-18675","description":"The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.","status":"published","published":"2019-11-25T14:15:12.1Z","modified":"2026-06-17T02:25:16.64Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:05:37.024431Z"}],"osv":[{"id":"CVE-2019-18675","description":"The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.","status":"published","published":"2019-11-25T14:15:12.1Z","modified":"2026-03-15T22:27:57.910028Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"DEBIAN-CVE-2019-18675","description":"The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.","status":"published","published":"2019-11-25T14:15:12.1Z","modified":"2026-09-21T07:02:33.722063071Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"UBUNTU-CVE-2019-18675","description":"The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.","status":"published","published":"2019-11-25T14:15:00Z","modified":"2026-11-06T13:49:03.842187212Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-06T14:21:53.47933Z"},{"id":"CLSA-2026-1789960079","title":"kernel: Fix of 56 CVEs","description":"- usb: free iso schedules on failed submit {CVE-2026-64348}\n- udf: validate VAT header length against the VAT inode size {CVE-2026-64323}\n- USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}\n- USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}\n- USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}\n- USB: iowarrior: fix use-after-free on disconnect {CVE-2026-64342}\n- can: bcm: restore op-\u003eflags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}\n- can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}\n- dm-log: fix a bitset_size overflow on 32bit machines {CVE-2026-72105}\n- scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075}\n- dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}\n- netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}\n- phonet: pep: fix use-after-free in pep_get_sb() {CVE-2026-68144}\n- ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 {CVE-2026-64114}\n- Input: touchwin - reset the packet index on every complete packet {CVE-2026-64271}\n- IB/mad: Drop unmatched RMPP responses before reassembly {CVE-2026-68425}\n- wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() {CVE-2026-68413}\n- Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}\n- sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}\n- net: slip: serialize receive against buffer reallocation {CVE-2026-68143}\n- pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame {CVE-2026-53254}\n- net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}\n- netfilter: nf_conntrack_sip: don't use simple_strtoul {CVE-2026-52986}\n- tcp: fix potential race in tcp_v6_syn_recv_sock() {CVE-2026-43198}\n- netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}\n- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress {CVE-2023-52974}\n- Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}\n- Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}\n- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() {CVE-2026-31408}\n- ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}\n- RDMA/srp: bound SRP_RSP sense copy by the received length {CVE-2026-53186}\n- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}\n- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}\n- ipv6: mcast: Fix use-after-free when processing MLD queries {CVE-2026-53275}\n- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}\n- RDMA/umad: Reject negative data_len in ib_umad_write() {CVE-2026-23243}\n- can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922}\n- netfilter: xt_tcpmss: check remaining length before reading option length {CVE-2026-43190}\n- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() {CVE-2026-23455}\n- netfilter: nf_conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}\n- scsi: libfc: Fix use after free in fc_exch_abts_resp() {CVE-2022-49114}\n- drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() {CVE-2022-50185}\n- wifi: libertas: fix use-after-free in lbs_free_adapter() {CVE-2026-23281}\n- ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit {CVE-2019-15117}\n- vfs: introduce FMODE_UNSIGNED_OFFSET for allowing negative f_pos {CVE-2019-18675}\n- infiniband: fix a possible use-after-free bug {CVE-2018-14734}\n- phonet: pep: fix use-after-free in pep_get_sb() {CVE-2026-68144}\n- Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}\n- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}\n- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete {CVE-2026-46116}\n- netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131}\n- ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err() {CVE-2026-43037}\n- btrfs: tree-checker: Enhance chunk checker to validate chunk profile {CVE-2019-19816}\n- atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050}\n- scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075}\n- usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}\n- btrfs: Don't submit any btree write bio if the fs has errors {CVE-2019-19377}\n- HID: make arrays usage and value to be the same {CVE-2021-0512}\n- Input: touchwin - reset the packet index on every complete packet {CVE-2026-64271}\n- ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 {CVE-2026-64114}\n- netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}\n- ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err() {CVE-2026-43037}\n- dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}\n- ALSA: caiaq: fix stack out-of-bounds read in init_card\n- ext4: make sure bitmaps and the inode table don't overlap with bg descriptors {CVE-2018-10879}\n- ext4: always check block group bounds in ext4_init_block_bitmap() {CVE-2018-10879}\n- sctp: validate embedded INIT chunk and address list lengths in COOKIE_ECHO {CVE-2026-53224}\n- sctp: validate cached peer INIT chunk length in COOKIE_ECHO {CVE-2026-53246}","status":"published","published":"2026-09-21T03:08:55Z","modified":"2026-10-26T09:43:10.115225201Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1790030905","title":"kernel: Fix of 56 CVEs","description":"- usb: free iso schedules on failed submit {CVE-2026-64348}\n- udf: validate VAT header length against the VAT inode size {CVE-2026-64323}\n- USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}\n- USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}\n- USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}\n- USB: iowarrior: fix use-after-free on disconnect {CVE-2026-64342}\n- can: bcm: restore op-\u003eflags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}\n- can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}\n- dm-log: fix a bitset_size overflow on 32bit machines {CVE-2026-72105}\n- scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075}\n- dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}\n- netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}\n- phonet: pep: fix use-after-free in pep_get_sb() {CVE-2026-68144}\n- ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 {CVE-2026-64114}\n- Input: touchwin - reset the packet index on every complete packet {CVE-2026-64271}\n- IB/mad: Drop unmatched RMPP responses before reassembly {CVE-2026-68425}\n- wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() {CVE-2026-68413}\n- Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}\n- sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}\n- net: slip: serialize receive against buffer reallocation {CVE-2026-68143}\n- pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}\n- Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame {CVE-2026-53254}\n- net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}\n- netfilter: nf_conntrack_sip: don't use simple_strtoul {CVE-2026-52986}\n- tcp: fix potential race in tcp_v6_syn_recv_sock() {CVE-2026-43198}\n- netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}\n- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress {CVE-2023-52974}\n- Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}\n- Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}\n- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() {CVE-2026-31408}\n- ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}\n- RDMA/srp: bound SRP_RSP sense copy by the received length {CVE-2026-53186}\n- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}\n- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}\n- ipv6: mcast: Fix use-after-free when processing MLD queries {CVE-2026-53275}\n- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}\n- RDMA/umad: Reject negative data_len in ib_umad_write() {CVE-2026-23243}\n- can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922}\n- netfilter: xt_tcpmss: check remaining length before reading option length {CVE-2026-43190}\n- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() {CVE-2026-23455}\n- netfilter: nf_conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}\n- scsi: libfc: Fix use after free in fc_exch_abts_resp() {CVE-2022-49114}\n- drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() {CVE-2022-50185}\n- wifi: libertas: fix use-after-free in lbs_free_adapter() {CVE-2026-23281}\n- ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit {CVE-2019-15117}\n- vfs: introduce FMODE_UNSIGNED_OFFSET for allowing negative f_pos {CVE-2019-18675}\n- infiniband: fix a possible use-after-free bug {CVE-2018-14734}\n- phonet: pep: fix use-after-free in pep_get_sb() {CVE-2026-68144}\n- Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}\n- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}\n- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete {CVE-2026-46116}\n- netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131}\n- ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err() {CVE-2026-43037}\n- btrfs: tree-checker: Enhance chunk checker to validate chunk profile {CVE-2019-19816}\n- atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050}\n- scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075}\n- usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}\n- btrfs: Don't submit any btree write bio if the fs has errors {CVE-2019-19377}\n- HID: make arrays usage and value to be the same {CVE-2021-0512}\n- Input: touchwin - reset the packet index on every complete packet {CVE-2026-64271}\n- ipv4: raw: reject IP_HDRINCL packets with ihl \u003c 5 {CVE-2026-64114}\n- netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}\n- ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err() {CVE-2026-43037}\n- dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}\n- ALSA: caiaq: fix stack out-of-bounds read in init_card\n- ext4: make sure bitmaps and the inode table don't overlap with bg descriptors {CVE-2018-10879}\n- ext4: always check block group bounds in ext4_init_block_bitmap() {CVE-2018-10879}\n- sctp: validate embedded INIT chunk and address list lengths in COOKIE_ECHO {CVE-2026-53224}\n- sctp: validate cached peer INIT chunk length in COOKIE_ECHO {CVE-2026-53246}","status":"published","published":"2026-10-19T12:21:57Z","modified":"2026-10-26T09:43:52.721071606Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1791949745","title":"kernel: Fix of 69 CVEs","description":"- sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() {CVE-2026-97445}\n- Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}\n- wifi: libipw: fix key index receive bound checks {CVE-2026-93803}\n- netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}\n- configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}\n- reboot: fix cad_pid use-after-free race {CVE-2026-97938}\n- ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}\n- net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540}\n- usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}\n- scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown {CVE-2026-97536}\n- xfrm: hold net_device reference under RCU in bundle creation {CVE-2026-98364}\n- wifi: libipw: reject too-short beacon and probe responses {CVE-2026-98349}\n- wifi: libipw: reject too-short association responses {CVE-2026-98348}\n- net: lock the socket in sock_gettstamp() {CVE-2026-98276}\n- ALSA: core: Fix potential UAF after asynchronous card release {CVE-2026-98266}\n- wifi: libertas_tf: fix UAF in lbtf_free_adapter() {CVE-2026-98194}\n- wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() {CVE-2026-72070}\n- netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}\n- ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data {CVE-2026-74388}\n- PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}\n- sunrpc: route to a populated pool in svc_pool_for_cpu() {CVE-2026-89549}\n- nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}\n- smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}\n- KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug {CVE-2026-68093}\n- inet: frags: strip GSO state from fragments before reassembly {CVE-2026-80590}\n- misc: sgi-gru: remove interrupt-context page-table walks {CVE-2026-90383}\n- slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}\n- slip: fix use-after-free in sl_sync() {CVE-2026-81001}\n- xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}\n- nfsd: gate nfs3 setacl by argp-\u003emask {CVE-2026-89671}\n- SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}\n- ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}\n- char: tlclk: fix use-after-free in tlclk_cleanup() {CVE-2026-80622}\n- net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}\n- sctp: keep chunk-\u003etransport in step with the list it is queued on {CVE-2026-74588}\n- ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}\n- scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}\n- sctp: add INIT verification after cookie unpacking {CVE-2026-72398}\n- sctp: validate embedded address parameter length {CVE-2026-74287}\n- configfs_lookup(): don't leave -\u003es_dentry dangling on failure {CVE-2026-74359}\n- ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}\n- ipv6: mcast: Fix potential UAF in MLD delayed work {CVE-2026-72322}\n- ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}\n- USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}\n- sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}\n- net/sched: fix packet loop on netem when duplicate is on {CVE-2026-63983}\n- fbdev: fix use-after-free in store_modes() {CVE-2026-63826}\n- ipv6: exthdrs: refresh nh after handling HAO option {CVE-2026-63922}\n- Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}\n- Squashfs: check block offset is not negative {CVE-2026-90203}\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}\n- media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893}\n- ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet {CVE-2026-89607}\n- dm raid1: reserve space for NUL-terminator in build_constructor_string() {CVE-2026-89575}\n- ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}\n- sctp: drop a chunk if its transport was removed {CVE-2026-89478}\n- udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}\n- xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}\n- wifi: libipw: reject TKIP frames without a full MIC {CVE-2026-98193}\n- bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}\n- net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}\n- USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}\n- Bluetooth: serialize accept_q access {CVE-2026-52918}\n- fix signedness mess in rw_verify_area() on 64bit architectures {CVE-2019-18675}\n- smb: client: reject userspace cifs.spnego descriptions {CVE-2026-46243}\n- KEYS: Add a key type op to permit the key description to be vetted {CVE-2026-46243}\n- ALSA: usb-audio: Fix a DMA to stack memory bug {CVE-2024-53197}\n- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices {CVE-2024-53197}\n- HID: core: zero-initialize the report buffer {CVE-2024-50302}","status":"published","published":"2026-10-17T13:11:21Z","modified":"2026-10-26T09:43:22.101445963Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1792020435","title":"kernel: Fix of 68 CVEs","description":"- sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() {CVE-2026-97445}\n- Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}\n- wifi: libipw: fix key index receive bound checks {CVE-2026-93803}\n- netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}\n- configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}\n- reboot: fix cad_pid use-after-free race {CVE-2026-97938}\n- ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}\n- net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540}\n- usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}\n- scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown {CVE-2026-97536}\n- xfrm: hold net_device reference under RCU in bundle creation {CVE-2026-98364}\n- wifi: libipw: reject too-short beacon and probe responses {CVE-2026-98349}\n- wifi: libipw: reject too-short association responses {CVE-2026-98348}\n- net: lock the socket in sock_gettstamp() {CVE-2026-98276}\n- ALSA: core: Fix potential UAF after asynchronous card release {CVE-2026-98266}\n- wifi: libertas_tf: fix UAF in lbtf_free_adapter() {CVE-2026-98194}\n- wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() {CVE-2026-72070}\n- netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}\n- ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data {CVE-2026-74388}\n- PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}\n- sunrpc: route to a populated pool in svc_pool_for_cpu() {CVE-2026-89549}\n- nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}\n- smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}\n- KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug {CVE-2026-68093}\n- inet: frags: strip GSO state from fragments before reassembly {CVE-2026-80590}\n- misc: sgi-gru: remove interrupt-context page-table walks {CVE-2026-90383}\n- slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}\n- slip: fix use-after-free in sl_sync() {CVE-2026-81001}\n- xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}\n- nfsd: gate nfs3 setacl by argp-\u003emask {CVE-2026-89671}\n- SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}\n- ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}\n- char: tlclk: fix use-after-free in tlclk_cleanup() {CVE-2026-80622}\n- net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}\n- sctp: keep chunk-\u003etransport in step with the list it is queued on {CVE-2026-74588}\n- ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}\n- scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}\n- sctp: add INIT verification after cookie unpacking {CVE-2026-72398}\n- sctp: validate embedded address parameter length {CVE-2026-74287}\n- configfs_lookup(): don't leave -\u003es_dentry dangling on failure {CVE-2026-74359}\n- ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}\n- ipv6: mcast: Fix potential UAF in MLD delayed work {CVE-2026-72322}\n- ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}\n- USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}\n- sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}\n- net/sched: fix packet loop on netem when duplicate is on {CVE-2026-63983}\n- fbdev: fix use-after-free in store_modes() {CVE-2026-63826}\n- ipv6: exthdrs: refresh nh after handling HAO option {CVE-2026-63922}\n- Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}\n- Squashfs: check block offset is not negative {CVE-2026-90203}\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}\n- media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893}\n- ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet {CVE-2026-89607}\n- dm raid1: reserve space for NUL-terminator in build_constructor_string() {CVE-2026-89575}\n- ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}\n- sctp: drop a chunk if its transport was removed {CVE-2026-89478}\n- udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}\n- xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}\n- wifi: libipw: reject TKIP frames without a full MIC {CVE-2026-98193}\n- bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}\n- net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}\n- USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}\n- Bluetooth: serialize accept_q access {CVE-2026-52918}\n- fix signedness mess in rw_verify_area() on 64bit architectures {CVE-2019-18675}\n- smb: client: reject userspace cifs.spnego descriptions {CVE-2026-46243}\n- KEYS: Add a key type op to permit the key description to be vetted {CVE-2026-46243}\n- ALSA: usb-audio: Fix a DMA to stack memory bug {CVE-2024-53197}\n- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices {CVE-2024-53197}\n- HID: core: zero-initialize the report buffer {CVE-2024-50302}","status":"published","published":"2026-10-14T23:28:20Z","modified":"2026-10-26T09:43:12.660914399Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"SUSE-SU-2020:1255-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424).\n- CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).\n- CVE-2020-8647: Fixed a use-after-free vulnerability in the vc_do_resize function in drivers/tty/vt/vt.c (bnc#1162929).\n- CVE-2020-8649: Fixed a use-after-free vulnerability in the vgacon_invert_region function in drivers/video/console/vgacon.c (bnc#1162931).\n- CVE-2020-9383: Fixed an issue in set_fdc in drivers/block/floppy.c, which leads to a wait_til_ready out-of-bounds read (bnc#1165111).\n- CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295).\n- CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386).\n- CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285).\n- CVE-2020-11609: Fixed a NULL pointer dereference in the stv06xx subsystem caused by mishandling invalid descriptors (bnc#1168854).\n- CVE-2020-10720: Fixed a use-after-free read in napi_gro_frags() (bsc#1170778).\n- CVE-2020-10690: Fixed the race between the release of ptp_clock and cdev (bsc#1170056).\n- CVE-2019-9455: Fixed a pointer leak due to a WARN_ON statement in a video driver. This could lead to local information disclosure with System execution privileges needed (bnc#1170345).\n- CVE-2020-11608: Fixed an issue in drivers/media/usb/gspca/ov519.c caused by a NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs when there are zero endpoints (bnc#1168829).\n- CVE-2017-18255: The perf_cpu_time_max_percent_handler function in kernel/events/core.c allowed local users to cause a denial of service (integer overflow) or possibly have unspecified other impact via a large value, as demonstrated by an incorrect sample-rate calculation (bnc#1087813).\n- CVE-2020-8648: There was a use-after-free vulnerability in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bnc#1162928).\n- CVE-2020-2732: A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest (bnc#1163971).\n- CVE-2019-5108: Fixed a denial-of-service vulnerability caused by triggering AP to send IAPP location updates for stations before the required authentication process has completed (bnc#1159912).\n- CVE-2020-8992: ext4_protect_reserved_inode in fs/ext4/block_validity.c allowed attackers to cause a denial of service (soft lockup) via a crafted journal size (bnc#1164069).\n- CVE-2018-21008: Fixed a use-after-free which could be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c (bnc#1149591).\n- CVE-2019-14896: A heap-based buffer overflow vulnerability was found in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bnc#1157157).\n- CVE-2019-14897: A stack-based buffer overflow was found in Marvell WiFi chip driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bnc#1157155).\n- CVE-2019-18675: Fixed an integer overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allowed local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation (bnc#1157804).\n- CVE-2019-14615: Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may have allowed an unauthenticated user to potentially enable information disclosure via local access (bnc#1160195, bsc#1165881).\n- CVE-2019-19965: Fixed a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition (bnc#1159911).\n- CVE-2019-20054: Fixed a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links (bnc#1159910).\n- CVE-2019-20096: Fixed a memory leak in __feat_register_sp() in net/dccp/feat.c, which may cause denial of service (bnc#1159908).\n- CVE-2019-19966: Fixed a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service (bnc#1159841).\n- CVE-2019-19447: Fixed an issue with mounting a crafted ext4 filesystem image, performing some operations, and unmounting could lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c (bnc#1158819).\n- CVE-2019-19319: Fixed an issue with a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call (bnc#1158021).\n- CVE-2019-19767: Fixed mishandling of ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c (bnc#1159297).\n- CVE-2019-19066: Fixed memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c that allowed attackers to cause a denial of service (memory consumption) by triggering bfa_port_get_stats() failures (bnc#1157303).\n- CVE-2019-19332: There was an OOB memory write via kvm_dev_ioctl_get_cpuid (bsc#1158827).\n- CVE-2019-19537: There was a race condition bug that could have been caused by a malicious USB device in the USB character device driver layer (bnc#1158904).\n- CVE-2019-19535: There was an info-leak bug that could have been caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver (bnc#1158903).\n- CVE-2019-19527: There was a use-after-free bug that could have been caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver (bnc#1158900).\n- CVE-2019-19533: There was an info-leak bug that could have been caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver (bnc#1158834).\n- CVE-2019-19532: There were multiple out-of-bounds write bugs that could have been caused by a malicious USB device in the Linux kernel HID drivers (bnc#1158824).\n- CVE-2019-19523: There was a use-after-free bug that could have been caused by a malicious USB device in the drivers/usb/misc/adutux.c driver (bnc#1158823).\n- CVE-2019-15213: An issue was discovered in the Linux kernel, there was a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver (bnc#1146544).\n- CVE-2019-19531: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1158445).\n- CVE-2019-19525: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver (bnc#1158417).\n- CVE-2019-19530: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver (bnc#1158410).\n- CVE-2019-19536: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver (bnc#1158394).\n- CVE-2019-19524: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver (bnc#1158413).\n- CVE-2019-19534: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver (bnc#1158398).\n- CVE-2019-14901: A heap overflow flaw was found in the Linux kernel in Marvell WiFi chip driver. The vulnerability allowed a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system (bnc#1157042).\n- CVE-2019-14895: Fixed a heap-based buffer overflow in the Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1157158).\n- CVE-2019-18660: Fixed a information disclosure on powerpc related to the Spectre-RSB mitigation. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c (bnc#1157038 1157923).\n- CVE-2019-18683: Fixed a privilege escalation where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem) (bnc#1155897).\n- CVE-2019-19062: Fixed a memory leak in the crypto_report() function in crypto/crypto_user_base.c, which allowed attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures (bnc#1157333).\n- CVE-2019-19052: A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157324).\n- CVE-2019-19074: A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c allowed attackers to cause a denial of service (memory consumption) (bnc#1157143).\n- CVE-2019-19073: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c allowed attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures (bnc#1157070).\n- CVE-2019-11091,CVE-2018-12126,CVE-2018-12130,CVE-2018-12127: Earlier mitigations for the 'MDS' Microarchitectural Data Sampling attacks were not complete.\n  An additional fix was added to the x86_64 fast systemcall path to further mitigate these attacks. (bsc#1164846 bsc#1170847)\n\n\nThe following non-security bugs were fixed:\n\n- blk: Fix kabi due to blk_trace_mutex addition (bsc#1159285).\n- blktrace: fix dereference after null check (bsc#1159285).\n- blktrace: fix trace mutex deadlock (bsc#1159285).\n- btrfs: Fix bound checking in qgroup_trace_new_subtree_blocks (bsc#1155311).\n- btrfs: qgroup: Check bg while resuming relocation to avoid NULL pointer dereference (bsc#1155311).\n- btrfs: qgroup: Cleanup old subtree swap code (bsc#1155311).\n- btrfs: qgroup: Do not trace subtree if we're dropping reloc tree (bsc#1155311).\n- btrfs: qgroup: Introduce function to find all new tree blocks of reloc tree (bsc#1155311).\n- btrfs: qgroup: Introduce function to trace two swaped extents (bsc#1155311).\n- btrfs: qgroup: Introduce per-root swapped blocks infrastructure (bsc#1155311).\n- btrfs: qgroup: Only trace data extents in leaves if we're relocating data block group (bsc#1155311).\n- btrfs: qgroup: Refactor btrfs_qgroup_trace_subtree_swap (bsc#1155311).\n- btrfs: qgroup: Use delayed subtree rescan for balance (bsc#1155311).\n- btrfs: qgroup: Use generation-aware subtree swap to mark dirty extents (bsc#1155311).\n- btrfs: reloc: Also queue orphan reloc tree for cleanup to avoid BUG_ON() (bsc#1155311).\n- btrfs: relocation: Delay reloc tree deletion after merge_reloc_roots (bsc#1155311).\n- btrfs: relocation: fix use-after-free on dead relocation roots (bsc#1155311).\n- btrfs: reloc: Fix NULL pointer dereference due to expanded reloc_root lifespan (bsc#1155311).\n- cgroup: avoid copying strings longer than the buffers (bsc#1146544).\n- cgroup: use strlcpy() instead of strscpy() to avoid spurious warning (bsc#1146544).\n- enic: prevent waking up stopped tx queues over watchdog reset (bsc#1133147).\n- ext4: fix use-after-free race with debug_want_extra_isize (bsc#1136449).\n- fix PageHeadHuge() race with THP split (VM Functionality, bsc#1165311).\n- fs/binfmt_misc.c: do not allow offset overflow (bsc#1099279 bsc#1156060).\n- fs/xfs: fix f_ffree value for statfs when project quota is set (bsc#1165985).\n- futex: Use smp_store_release() in mark_wake_futex() (bsc#1157464).\n- Input: add safety guards to input_set_keycode() (bsc#1168075).\n- ipv4: correct gso_size for UFO (bsc#1154844).\n- ipv6: fix memory accounting during ipv6 queue expire (bsc#1162227) (bsc#1162227).\n- ipvlan: do not add hardware address of master to its unicast filter list (bsc#1137325).\n- media: ov519: add missing endpoint sanity checks (bsc#1168829).\n- media: stv06xx: add missing descriptor sanity checks (bsc#1168854).\n- netfilter: conntrack: sctp: use distinct states for new SCTP connections (bsc#1159199).\n- netfilter: nf_nat: do not bug when mapping already exists (bsc#1146612).\n- powerpc/64: Call setup_barrier_nospec() from setup_arch() (bsc#1131107).\n- powerpc/64: Make meltdown reporting Book3S 64 specific (bsc#1091041).\n- powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (bsc#1131107).\n- powerpc/64s: Add new security feature flags for count cache flush (bsc#1131107).\n- powerpc/64s: Add support for software count cache flush (bsc#1131107).\n- powerpc/64s: support nospectre_v2 cmdline option (bsc#1131107).\n- powerpc/asm: Add a patch_site macro \u0026 helpers for patching instructions (bsc#1131107).\n- powerpc/fsl: Add nospectre_v2 command line argument (bsc#1131107).\n- powerpc/fsl: Fix spectre_v2 mitigations reporting (bsc#1131107).\n- powerpc/powernv: Query firmware for count cache flush settings (bsc#1131107).\n- powerpc/pseries: Query hypervisor for count cache flush settings (bsc#1131107).\n- powerpc/security/book3s64: Report L1TF status in sysfs (bsc#1091041).\n- powerpc/security: Fix spectre_v2 reporting (bsc#1131107).\n- powerpc/security: Fix wrong message when RFI Flush is disable (bsc#1131107).\n- powerpc/security: Show powerpc_security_features in debugfs (bsc#1131107).\n- route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race (bsc#1037216).\n- sched/fair: WARN() and refuse to set buddy when !se-\u003eon_rq (bsc#1158132).\n- string: drop __must_check from strscpy() and restore strscpy() usages in cgroup (bsc#1146544).\n- x86/alternatives: Add int3_emulate_call() selftest (bsc#1153811).\n- x86/alternatives: Fix int3_emulate_call() selftest stack corruption (bsc#1153811).\n- x86/mitigations: Clear CPU buffers on the SYSCALL fast path (bsc#1164846).\n- xen/pv: Fix a boot up hang revealed by int3 self test (bsc#1153811).\n- xfs: also remove cached ACLs when removing the underlying attr (bsc#1165873).\n- xfs: bulkstat should copy lastip whenever userspace supplies one (bsc#1165984).\n","status":"published","published":"2020-05-26T14:11:09Z","modified":"2026-02-04T04:08:58.515531Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1275-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424).\n- CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).\n- CVE-2020-8647: Fixed a use-after-free vulnerability in the vc_do_resize function in drivers/tty/vt/vt.c (bnc#1162929).\n- CVE-2020-8649: Fixed a use-after-free vulnerability in the vgacon_invert_region function in drivers/video/console/vgacon.c (bnc#1162931).\n- CVE-2020-9383: Fixed an issue in set_fdc in drivers/block/floppy.c, which leads to a wait_til_ready out-of-bounds read (bnc#1165111).\n- CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295).\n- CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386).\n- CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285).\n- CVE-2020-11609: Fixed a NULL pointer dereference in the stv06xx subsystem caused by mishandling invalid descriptors (bnc#1168854).\n- CVE-2020-10720: Fixed a use-after-free read in napi_gro_frags() (bsc#1170778).\n- CVE-2020-10690: Fixed the race between the release of ptp_clock and cdev (bsc#1170056).\n- CVE-2019-9455: Fixed a pointer leak due to a WARN_ON statement in a video driver. This could lead to local information disclosure with System execution privileges needed (bnc#1170345).\n- CVE-2020-11608: Fixed an issue in drivers/media/usb/gspca/ov519.c caused by a NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs when there are zero endpoints (bnc#1168829).\n- CVE-2017-18255: The perf_cpu_time_max_percent_handler function in kernel/events/core.c allowed local users to cause a denial of service (integer overflow) or possibly have unspecified other impact via a large value, as demonstrated by an incorrect sample-rate calculation (bnc#1087813).\n- CVE-2020-8648: There was a use-after-free vulnerability in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bnc#1162928).\n- CVE-2020-2732: A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest (bnc#1163971).\n- CVE-2019-5108: Fixed a denial-of-service vulnerability caused by triggering AP to send IAPP location updates for stations before the required authentication process has completed (bnc#1159912).\n- CVE-2020-8992: ext4_protect_reserved_inode in fs/ext4/block_validity.c allowed attackers to cause a denial of service (soft lockup) via a crafted journal size (bnc#1164069).\n- CVE-2018-21008: Fixed a use-after-free which could be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c (bnc#1149591).\n- CVE-2019-14896: A heap-based buffer overflow vulnerability was found in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bnc#1157157).\n- CVE-2019-14897: A stack-based buffer overflow was found in Marvell WiFi chip driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bnc#1157155).\n- CVE-2019-18675: Fixed an integer overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allowed local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation (bnc#1157804).\n- CVE-2019-14615: Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may have allowed an unauthenticated user to potentially enable information disclosure via local access (bnc#1160195, bsc#1165881).\n- CVE-2019-19965: Fixed a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition (bnc#1159911).\n- CVE-2019-20054: Fixed a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links (bnc#1159910).\n- CVE-2019-20096: Fixed a memory leak in __feat_register_sp() in net/dccp/feat.c, which may cause denial of service (bnc#1159908).\n- CVE-2019-19966: Fixed a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service (bnc#1159841).\n- CVE-2019-19447: Fixed an issue with mounting a crafted ext4 filesystem image, performing some operations, and unmounting could lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c (bnc#1158819).\n- CVE-2019-19319: Fixed an issue with a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call (bnc#1158021).\n- CVE-2019-19767: Fixed mishandling of ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c (bnc#1159297).\n- CVE-2019-11091,CVE-2018-12126,CVE-2018-12130,CVE-2018-12127: Earlier mitigations for the 'MDS' Microarchitectural Data Sampling attacks were not complete.\n  An additional fix was added to the x86_64 fast systemcall path to further mitigate these attacks. (bsc#1164846 bsc#1170847)\n\n\nThe following non-security bugs were fixed:\n\n- blk: Fix kabi due to blk_trace_mutex addition (bsc#1159285).\n- blktrace: fix dereference after null check (bsc#1159285).\n- blktrace: fix trace mutex deadlock (bsc#1159285).\n- btrfs: fix btrfs_wait_ordered_range() so that it waits for all ordered extents (bsc#1163508).\n- btrfs: fix panic during relocation after ENOSPC before writeback happens (bsc#1163508).\n- btrfs: qgroup: Fix root item corruption when multiple same source snapshots are created with quota enabled (bsc#1158642)\n- btrfs: relocation: fix reloc_root lifespan and access (bsc#1164009).\n- enic: prevent waking up stopped tx queues over watchdog reset (bsc#1133147).\n- fix PageHeadHuge() race with THP split (VM Functionality, bsc#1165311).\n- fs/xfs: fix f_ffree value for statfs when project quota is set (bsc#1165985).\n- ibmvnic: Bound waits for device queries (bsc#1155689 ltc#182047).\n- ibmvnic: Fix completion structure initialization (bsc#1155689 ltc#182047).\n- ibmvnic: Serialize device queries (bsc#1155689 ltc#182047).\n- ibmvnic: Terminate waiting device threads after loss of service (bsc#1155689 ltc#182047).\n- input: add safety guards to input_set_keycode() (bsc#1168075).\n- ipv4: correct gso_size for UFO (bsc#1154844).\n- ipv6: fix memory accounting during ipv6 queue expire (bsc#1162227) (bsc#1162227).\n- ipvlan: do not add hardware address of master to its unicast filter list (bsc#1137325).\n- md: add mddev-\u003epers to avoid potential NULL pointer dereference (bsc#1056134).\n- md/bitmap: do not read page from device with Bitmap_sync (bsc#1056134).\n- md: change the initialization value for a spare device spot to MD_DISK_ROLE_SPARE (bsc#1056134).\n- md: Delete gendisk before cleaning up the request queue (bsc#1056134).\n- md: do not call bitmap_create() while array is quiesced (bsc#1056134).\n- md: do not set In_sync if array is frozen (bsc#1056134).\n- md: fix a potential deadlock of raid5/raid10 reshape (bsc#1056134).\n- md: md.c: Return -ENODEV when mddev is NULL in rdev_attr_show (bsc#1056134).\n- md: notify about new spare disk in the container (bsc#1056134).\n- md/raid0: Fix buffer overflow at debug print (bsc#1164051).\n- md/raid10: end bio when the device faulty (bsc#1056134).\n- md/raid10: Fix raid10 replace hang when new added disk faulty (bsc#1056134).\n- md/raid1,raid10: silence warning about wait-within-wait (bsc#1056134).\n- md: return -ENODEV if rdev has no mddev assigned (bsc#1056134).\n- media: ov519: add missing endpoint sanity checks (bsc#1168829).\n- media: stv06xx: add missing descriptor sanity checks (bsc#1168854).\n- net: ena: Add PCI shutdown handler to allow safe kexec (bsc#1167421, bsc#1167423).\n- netfilter: conntrack: sctp: use distinct states for new SCTP connections (bsc#1159199).\n- net/ibmvnic: Fix typo in retry check (bsc#1155689 ltc#182047).\n- rpm/kernel-binary.spec.in: Replace Novell with SUSE\n- sched/fair: Scale bandwidth quota and period without losing quota/period ratio precision (bsc#1161586).\n- scsi: core: avoid repetitive logging of device offline messages (bsc#1145929).\n- scsi: core: kABI fix already_offline (bsc#1145929).\n- tcp: clear tp-\u003epackets_out when purging write queue (bsc#1154118).\n- x86/mitigations: Clear CPU buffers on the SYSCALL fast path (bsc#1164846 bsc#1170847).\n- xfs: also remove cached ACLs when removing the underlying attr (bsc#1165873).\n- xfs: bulkstat should copy lastip whenever userspace supplies one (bsc#1165984).\n","status":"published","published":"2020-05-14T09:34:21Z","modified":"2025-05-02T04:06:40.553773Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:14354-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bsc#1167629).\n- CVE-2020-8647: There was a use-after-free vulnerability in the vc_do_resize function in drivers/tty/vt/vt.c (bsc#1162929).\n- CVE-2020-8649: There was a use-after-free vulnerability in the vgacon_invert_region function in drivers/video/console/vgacon.c (bsc#1162931).\n- CVE-2020-9383: An issue was discovered set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it (bsc#1165111).\n- CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bsc#1159285).\n- CVE-2020-11608: Fixed a NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs when there are zero endpoints (bsc#1168829).\n- CVE-2020-8648: There was a use-after-free vulnerability in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bsc#1162928).\n- CVE-2019-14896: A heap-based buffer overflow vulnerability was found in Marvell WiFi chip driver. A remote attacker could cause a denial of service or possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bsc#1157157).\n- CVE-2019-14897: A stack-based buffer overflow was found in the Marvell WiFi chip driver. An attacker is able to cause a denial of service or possibly execute arbitrary code, when a STA works in IBSS mode and connects to another STA (bsc#1157155).\n- CVE-2019-18675: Fixed an Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allowed local users to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation (bsc#1157804).\n- CVE-2019-19965: Fixed a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition (bsc#1159911).\n- CVE-2019-19066: A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c allowed attackers to cause a denial of service by triggering bfa_port_get_stats() failures (bsc#1157303).\n- CVE-2019-20096: Fixed a memory leak in __feat_register_sp() in net/dccp/feat.c, which may cause denial of service (bsc#1159908).\n- CVE-2019-19966: Fixed a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service (bsc#1159841).\n- CVE-2019-19532: Fixed multiple out-of-bounds write bugs that can be caused by a malicious USB device (bsc#1158824).\n- CVE-2019-19523: Fixed a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver (bsc#115882).\n- CVE-2019-19537: Fixed a race condition that can be caused by a malicious USB device in the USB character device driver layer (bsc#1158904).\n- CVE-2019-19527, CVE-2019-19530, CVE-2019-19524: Fixed multiple use-after-free bug that could be caused by a malicious USB device (bsc#1158381, bsc#1158834, bsc#1158900).\n- CVE-2019-15213: Fixed a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver (bsc#1146544).\n- CVE-2019-19531: Fixed a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bsc#1158445).\n- CVE-2019-18660: The Linux kernel on powerpc allowed Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs (bsc#1157038).\n- CVE-2019-19227: Fixed a potential NULL pointer dereference in the AppleTalk subsystem (bsc#1157678).\n- CVE-2019-19074: Fixed a memory leak in the ath9k_wmi_cmd(), which allowed attackers to cause a denial of service (bsc#1157143).\n- CVE-2019-19073: Fixed multiple memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c, which allowed attackers to cause a denial of service (bsc#1157070).\n- CVE-2019-15916: Fixed a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which could cause denial of service (bsc#1149448).\n- CVE-2019-12456: Fixed a denial of service in _ctl_ioctl_main, which could be triggered by a local user (bsc#1136922).\n\nThe following non-security bugs were fixed:\n\n- Input: add safety guards to input_set_keycode() (bsc#1168075).\n- blk: Fix kabi due to blk_trace_mutex addition (bsc#1159285).\n- blktrace: fix dereference after null check (bsc#1159285).\n- blktrace: fix trace mutex deadlock (bsc#1159285).\n- block: Fix oops scsi_disk_get() (bsc#1105327).\n- fs/xfs: fix f_ffree value for statfs when project quota is set (bsc#1165985).\n- kaiser: Fix for 32bit KAISER implementations (bsc#1157344).\n- klist: fix starting point removed bug in klist iterators (bsc#1156652).\n- kobject: Export kobject_get_unless_zero() (bsc#1105327).\n- kobject: fix kset_find_obj() race with concurrent last kobject_put() (bsc#1105327).\n- kref: minor cleanup (bsc#1105327).\n- media: ov519: add missing endpoint sanity checks (bsc#1168829).\n- media: stv06xx: add missing descriptor sanity checks (bsc#1168854).\n- netfilter: nf_nat: do not bug when mapping already exists (bsc#1146612).\n- powerpc/64: Make meltdown reporting Book3S 64 specific (bsc#1091041).\n- powerpc/pseries/mobility: notify network peers after migration (bsc#1152631 ltc#181798).\n- powerpc/security/book3s64: Report L1TF status in sysfs (bsc#1091041).\n- powerpc/security: Fix wrong message when RFI Flush is disable (bsc#1131107).\n- rpm/kernel-binary.spec.in: Replace Novell with SUSE\n- sched: Fix race between task_group and sched_task_group (bsc#1136471).\n- sched: Remove lockdep check in sched_move_task() (bsc#1136471).\n- scsi: lpfc: Fix driver crash in target reset handler (bsc#1148871).\n- writeback: fix race that cause writeback hung (bsc#1161358).\n- x86: fix speculation bug reporting (bsc#1012382).\n","status":"published","published":"2020-04-30T16:00:22Z","modified":"2026-02-04T04:35:51.936404Z","updated_at":"2026-11-02T15:53:47.634847Z"}]}}