{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "BIG-IP (Advanced WAF and ASM) versions 16.x ant\u00e9rieures \u00e0 16.0.1.1",
      "product": {
        "name": "BIG-IP",
        "vendor": {
          "name": "F5",
          "scada": false
        }
      }
    },
    {
      "description": "BIG-IP (Advanced WAF and ASM) versions 15.x ant\u00e9rieures \u00e0 15.1.2.1",
      "product": {
        "name": "BIG-IP",
        "vendor": {
          "name": "F5",
          "scada": false
        }
      }
    },
    {
      "description": "BIG-IP (Advanced WAF and ASM) versions 12.x ant\u00e9rieures \u00e0 12.1.5.3",
      "product": {
        "name": "BIG-IP",
        "vendor": {
          "name": "F5",
          "scada": false
        }
      }
    },
    {
      "description": "BIG-IP (Advanced WAF and ASM) versions 11.x ant\u00e9rieures \u00e0 11.6.5.3",
      "product": {
        "name": "BIG-IP",
        "vendor": {
          "name": "F5",
          "scada": false
        }
      }
    },
    {
      "description": "BIG-IP (Advanced WAF and ASM) versions 14.x ant\u00e9rieures \u00e0 14.1.4",
      "product": {
        "name": "BIG-IP",
        "vendor": {
          "name": "F5",
          "scada": false
        }
      }
    },
    {
      "description": "BIG-IP (Advanced WAF and ASM) versions 13.x ant\u00e9rieures \u00e0 13.1.3.6",
      "product": {
        "name": "BIG-IP",
        "vendor": {
          "name": "F5",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2019-25013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-25013"
    },
    {
      "name": "CVE-2021-22987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22987"
    },
    {
      "name": "CVE-2021-22986",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22986"
    },
    {
      "name": "CVE-2020-14314",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14314"
    },
    {
      "name": "CVE-2021-22988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22988"
    },
    {
      "name": "CVE-2021-22992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22992"
    },
    {
      "name": "CVE-2021-22991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22991"
    },
    {
      "name": "CVE-2019-11599",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11599"
    },
    {
      "name": "CVE-2021-22994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22994"
    },
    {
      "name": "CVE-2021-22990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22990"
    }
  ],
  "links": [],
  "reference": "CERTFR-2021-AVI-189",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-03-11T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans F5 BIG-IP.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance\net une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans F5 BIG-IP",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 F5 K03009991 du 10 mars 2021",
      "url": "https://support.f5.com/csp/article/K03009991"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 F5 K68251873 du 10 mars 2021",
      "url": "https://support.f5.com/csp/article/K68251873"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 F5 K67830124 du 10 mars 2021",
      "url": "https://support.f5.com/csp/article/K67830124"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 F5 K66851119 du 10 mars 2021",
      "url": "https://support.f5.com/csp/article/K66851119"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 F5 K56715231 du 10 mars 2021",
      "url": "https://support.f5.com/csp/article/K56715231"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 F5 K51674118 du 10 mars 2021",
      "url": "https://support.f5.com/csp/article/K51674118"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 F5 K18132488 du 10 mars 2021",
      "url": "https://support.f5.com/csp/article/K18132488"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 F5 K45056101 du 10 mars 2021",
      "url": "https://support.f5.com/csp/article/K45056101"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 F5 K52510511 du 10 mars 2021",
      "url": "https://support.f5.com/csp/article/K52510511"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 F5 K70031188 du 10 mars 2021",
      "url": "https://support.f5.com/csp/article/K70031188"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "App Connect Professional versions 7.5.4.0 et 7.5.5.0 sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "App Connect Professional version 7.5.2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "WebSphere Cast Iron version 7.5.1.0",
      "product": {
        "name": "WebSphere",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2019-5436",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-5436"
    },
    {
      "name": "CVE-2019-11598",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11598"
    },
    {
      "name": "CVE-2019-11478",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11478"
    },
    {
      "name": "CVE-2019-11470",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11470"
    },
    {
      "name": "CVE-2019-3885",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-3885"
    },
    {
      "name": "CVE-2019-10650",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10650"
    },
    {
      "name": "CVE-2019-11068",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11068"
    },
    {
      "name": "CVE-2016-2774",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-2774"
    },
    {
      "name": "CVE-2019-11472",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11472"
    },
    {
      "name": "CVE-2018-16877",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16877"
    },
    {
      "name": "CVE-2019-11479",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11479"
    },
    {
      "name": "CVE-2018-16878",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16878"
    },
    {
      "name": "CVE-2019-11477",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11477"
    },
    {
      "name": "CVE-2019-11599",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11599"
    },
    {
      "name": "CVE-2018-1120",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1120"
    },
    {
      "name": "CVE-2019-3838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-3838"
    },
    {
      "name": "CVE-2019-11597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11597"
    },
    {
      "name": "CVE-2019-10131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10131"
    },
    {
      "name": "CVE-2014-9709",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9709"
    }
  ],
  "links": [],
  "reference": "CERTFR-2022-AVI-168",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-02-22T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance\net un contournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 6558082 du 20 f\u00e9vrier 2022",
      "url": "https://www.ibm.com/support/pages/node/6558082"
    }
  ]
}

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E19B1AD5-F2B9-42A0-8DEA-D1523A006A62",
              "versionEndExcluding": "3.16.66",
              "versionStartIncluding": "2.16.12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "048C641C-0C59-4039-B43F-98D9D1D80331",
              "versionEndExcluding": "4.4.183",
              "versionStartIncluding": "3.17",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4FA14762-EEF0-47BF-9AEF-B4EA7F8370C8",
              "versionEndExcluding": "4.9.188",
              "versionStartIncluding": "4.5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A8435063-EEF3-4473-8F06-76341B7A06A3",
              "versionEndExcluding": "4.14.114",
              "versionStartIncluding": "4.10",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "ABC4CBFF-ED77-45EE-8543-A217F9762929",
              "versionEndExcluding": "4.19.37",
              "versionStartIncluding": "4.15",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C0ACE181-99FA-47C7-898B-810936A33C08",
              "versionEndExcluding": "5.0.10",
              "versionStartIncluding": "4.20",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c."
    },
    {
      "lang": "es",
      "value": "La implementaci\u00f3n del coredump en el kernel de Linux en versiones anteriores a 5.0.10,  no utiliza mecanismos de bloqueo u otros mecanismos para evitar cambios en el layout de vma o en los flags vma mientras se ejecuta, lo que permite a los usuarios locales obtener informaci\u00f3n sensible, causar una denegaci\u00f3n de servicio o posiblemente tener otro impacto no especificado al activar una condici\u00f3n de carrera con llamadas mmget_not_zero o get_task_mm. Esto est\u00e1 relacionado con fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, y drivers/infiniband/core/uverbs_main.c"
    }
  ],
  "id": "CVE-2019-11599",
  "lastModified": "2026-06-17T02:13:14.507",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 6.9,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.4,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.0,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.0,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2019-04-29T18:29:00.243",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00014.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://packetstormsecurity.com/files/152663/Linux-Missing-Lockdown.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://packetstormsecurity.com/files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2019/04/29/1"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2019/04/29/2"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2019/04/30/1"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/108113"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2019:2029"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2019:2043"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2019:3309"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2019:3517"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2020:0100"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2020:0103"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2020:0179"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2020:0543"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1790"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Vendor Advisory"
      ],
      "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.114"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Vendor Advisory"
      ],
      "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.37"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Vendor Advisory"
      ],
      "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=04f5866e41fb70690e28397487d8bd8eea7d712a"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00011.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "https://seclists.org/bugtraq/2019/Jul/33"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "https://seclists.org/bugtraq/2019/Jun/26"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.netapp.com/advisory/ntap-20190517-0002/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://security.netapp.com/advisory/ntap-20200608-0001/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://support.f5.com/csp/article/K51674118"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://support.f5.com/csp/article/K51674118?utm_source=f5support\u0026amp%3Butm_medium=RSS"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://usn.ubuntu.com/4069-1/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://usn.ubuntu.com/4069-2/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://usn.ubuntu.com/4095-1/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://usn.ubuntu.com/4115-1/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://usn.ubuntu.com/4118-1/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.debian.org/security/2019/dsa-4465"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://www.exploit-db.com/exploits/46781/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00014.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://packetstormsecurity.com/files/152663/Linux-Missing-Lockdown.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://packetstormsecurity.com/files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2019/04/29/1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2019/04/29/2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2019/04/30/1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/108113"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2019:2029"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2019:2043"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2019:3309"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2019:3517"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2020:0100"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2020:0103"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2020:0179"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2020:0543"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1790"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Vendor Advisory"
      ],
      "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.114"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Vendor Advisory"
      ],
      "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.37"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Vendor Advisory"
      ],
      "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=04f5866e41fb70690e28397487d8bd8eea7d712a"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00011.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "https://seclists.org/bugtraq/2019/Jul/33"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "https://seclists.org/bugtraq/2019/Jun/26"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.netapp.com/advisory/ntap-20190517-0002/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://security.netapp.com/advisory/ntap-20200608-0001/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://support.f5.com/csp/article/K51674118"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://support.f5.com/csp/article/K51674118?utm_source=f5support\u0026amp%3Butm_medium=RSS"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://usn.ubuntu.com/4069-1/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://usn.ubuntu.com/4069-2/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://usn.ubuntu.com/4095-1/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://usn.ubuntu.com/4115-1/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://usn.ubuntu.com/4118-1/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.debian.org/security/2019/dsa-4465"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://www.exploit-db.com/exploits/46781/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-667"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2019-11599"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-667"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2019-04-29T18:29:00Z",
    "severity": "HIGH"
  },
  "details": "The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c.",
  "id": "GHSA-q8vw-4h9f-5745",
  "modified": "2024-02-15T18:30:39Z",
  "published": "2022-05-24T16:44:52Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11599"
    },
    {
      "type": "WEB",
      "url": "https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a"
    },
    {
      "type": "WEB",
      "url": "https://seclists.org/bugtraq/2019/Jul/33"
    },
    {
      "type": "WEB",
      "url": "https://seclists.org/bugtraq/2019/Jun/26"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20190517-0002"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20200608-0001"
    },
    {
      "type": "WEB",
      "url": "https://support.f5.com/csp/article/K51674118"
    },
    {
      "type": "WEB",
      "url": "https://support.f5.com/csp/article/K51674118?utm_source=f5support\u0026amp%3Butm_medium=RSS"
    },
    {
      "type": "WEB",
      "url": "https://support.f5.com/csp/article/K51674118?utm_source=f5support\u0026amp;utm_medium=RSS"
    },
    {
      "type": "WEB",
      "url": "https://usn.ubuntu.com/4069-1"
    },
    {
      "type": "WEB",
      "url": "https://usn.ubuntu.com/4069-2"
    },
    {
      "type": "WEB",
      "url": "https://usn.ubuntu.com/4095-1"
    },
    {
      "type": "WEB",
      "url": "https://usn.ubuntu.com/4115-1"
    },
    {
      "type": "WEB",
      "url": "https://usn.ubuntu.com/4118-1"
    },
    {
      "type": "WEB",
      "url": "https://www.debian.org/security/2019/dsa-4465"
    },
    {
      "type": "WEB",
      "url": "https://www.exploit-db.com/exploits/46781"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00011.html"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=04f5866e41fb70690e28397487d8bd8eea7d712a"
    },
    {
      "type": "WEB",
      "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10"
    },
    {
      "type": "WEB",
      "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.37"
    },
    {
      "type": "WEB",
      "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.114"
    },
    {
      "type": "WEB",
      "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1790"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2020:0543"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2020:0179"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2020:0103"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2020:0100"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:3517"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:3309"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2043"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2029"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00014.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html"
    },
    {
      "type": "WEB",
      "url": "http://packetstormsecurity.com/files/152663/Linux-Missing-Lockdown.html"
    },
    {
      "type": "WEB",
      "url": "http://packetstormsecurity.com/files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2019/04/29/1"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2019/04/29/2"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2019/04/30/1"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/108113"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2019-11599",
    "description": "The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c.",
    "id": "GSD-2019-11599",
    "references": [
      "https://www.suse.com/security/cve/CVE-2019-11599.html",
      "https://www.debian.org/security/2019/dsa-4465",
      "https://access.redhat.com/errata/RHSA-2020:0543",
      "https://access.redhat.com/errata/RHSA-2020:0179",
      "https://access.redhat.com/errata/RHSA-2020:0103",
      "https://access.redhat.com/errata/RHSA-2020:0100",
      "https://access.redhat.com/errata/RHSA-2019:3517",
      "https://access.redhat.com/errata/RHSA-2019:3309",
      "https://access.redhat.com/errata/RHSA-2019:2043",
      "https://access.redhat.com/errata/RHSA-2019:2029",
      "https://ubuntu.com/security/CVE-2019-11599",
      "https://advisories.mageia.org/CVE-2019-11599.html",
      "https://alas.aws.amazon.com/cve/html/CVE-2019-11599.html",
      "https://linux.oracle.com/cve/CVE-2019-11599.html",
      "https://packetstormsecurity.com/files/cve/CVE-2019-11599"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2019-11599"
      ],
      "details": "The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c.",
      "id": "GSD-2019-11599",
      "modified": "2023-12-13T01:24:02.596199Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2019-11599",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "[oss-security] 20190429 Re: Linux kernel: multiple issues",
            "refsource": "MLIST",
            "url": "http://www.openwall.com/lists/oss-security/2019/04/29/2"
          },
          {
            "name": "[oss-security] 20190429 Linux kernel: multiple issues",
            "refsource": "MLIST",
            "url": "http://www.openwall.com/lists/oss-security/2019/04/29/1"
          },
          {
            "name": "[oss-security] 20190430 Re: Linux kernel: multiple issues",
            "refsource": "MLIST",
            "url": "http://www.openwall.com/lists/oss-security/2019/04/30/1"
          },
          {
            "name": "46781",
            "refsource": "EXPLOIT-DB",
            "url": "https://www.exploit-db.com/exploits/46781/"
          },
          {
            "name": "108113",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/108113"
          },
          {
            "name": "[debian-lts-announce] 20190528 [SECURITY] [DLA 1799-1] linux security update",
            "refsource": "MLIST",
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html"
          },
          {
            "name": "[debian-lts-announce] 20190528 [SECURITY] [DLA 1799-2] linux security update",
            "refsource": "MLIST",
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html"
          },
          {
            "name": "DSA-4465",
            "refsource": "DEBIAN",
            "url": "https://www.debian.org/security/2019/dsa-4465"
          },
          {
            "name": "[debian-lts-announce] 20190618 [SECURITY] [DLA 1824-1] linux-4.9 security update",
            "refsource": "MLIST",
            "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00011.html"
          },
          {
            "name": "20190618 [SECURITY] [DSA 4465-1] linux security update",
            "refsource": "BUGTRAQ",
            "url": "https://seclists.org/bugtraq/2019/Jun/26"
          },
          {
            "name": "openSUSE-SU-2019:1716",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00014.html"
          },
          {
            "name": "openSUSE-SU-2019:1757",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html"
          },
          {
            "name": "20190722 [slackware-security] Slackware 14.2 kernel (SSA:2019-202-01)",
            "refsource": "BUGTRAQ",
            "url": "https://seclists.org/bugtraq/2019/Jul/33"
          },
          {
            "name": "USN-4069-1",
            "refsource": "UBUNTU",
            "url": "https://usn.ubuntu.com/4069-1/"
          },
          {
            "name": "USN-4069-2",
            "refsource": "UBUNTU",
            "url": "https://usn.ubuntu.com/4069-2/"
          },
          {
            "name": "RHSA-2019:2043",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2043"
          },
          {
            "name": "RHSA-2019:2029",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2029"
          },
          {
            "name": "USN-4095-1",
            "refsource": "UBUNTU",
            "url": "https://usn.ubuntu.com/4095-1/"
          },
          {
            "name": "USN-4115-1",
            "refsource": "UBUNTU",
            "url": "https://usn.ubuntu.com/4115-1/"
          },
          {
            "name": "USN-4118-1",
            "refsource": "UBUNTU",
            "url": "https://usn.ubuntu.com/4118-1/"
          },
          {
            "name": "RHSA-2019:3309",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:3309"
          },
          {
            "name": "RHSA-2019:3517",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:3517"
          },
          {
            "name": "RHSA-2020:0100",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2020:0100"
          },
          {
            "name": "RHSA-2020:0103",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2020:0103"
          },
          {
            "name": "RHSA-2020:0179",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2020:0179"
          },
          {
            "name": "RHSA-2020:0543",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2020:0543"
          },
          {
            "name": "https://www.oracle.com/security-alerts/cpuApr2021.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
          },
          {
            "name": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.114",
            "refsource": "MISC",
            "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.114"
          },
          {
            "name": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.37",
            "refsource": "MISC",
            "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.37"
          },
          {
            "name": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10",
            "refsource": "MISC",
            "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10"
          },
          {
            "name": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1790",
            "refsource": "MISC",
            "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1790"
          },
          {
            "name": "https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a",
            "refsource": "MISC",
            "url": "https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a"
          },
          {
            "name": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=04f5866e41fb70690e28397487d8bd8eea7d712a",
            "refsource": "MISC",
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=04f5866e41fb70690e28397487d8bd8eea7d712a"
          },
          {
            "name": "http://packetstormsecurity.com/files/152663/Linux-Missing-Lockdown.html",
            "refsource": "MISC",
            "url": "http://packetstormsecurity.com/files/152663/Linux-Missing-Lockdown.html"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20190517-0002/",
            "refsource": "CONFIRM",
            "url": "https://security.netapp.com/advisory/ntap-20190517-0002/"
          },
          {
            "name": "https://support.f5.com/csp/article/K51674118",
            "refsource": "CONFIRM",
            "url": "https://support.f5.com/csp/article/K51674118"
          },
          {
            "name": "http://packetstormsecurity.com/files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html",
            "refsource": "MISC",
            "url": "http://packetstormsecurity.com/files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
          },
          {
            "name": "https://support.f5.com/csp/article/K51674118?utm_source=f5support\u0026amp;utm_medium=RSS",
            "refsource": "CONFIRM",
            "url": "https://support.f5.com/csp/article/K51674118?utm_source=f5support\u0026amp;utm_medium=RSS"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20200608-0001/",
            "refsource": "CONFIRM",
            "url": "https://security.netapp.com/advisory/ntap-20200608-0001/"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E19B1AD5-F2B9-42A0-8DEA-D1523A006A62",
                    "versionEndExcluding": "3.16.66",
                    "versionStartIncluding": "2.16.12",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "048C641C-0C59-4039-B43F-98D9D1D80331",
                    "versionEndExcluding": "4.4.183",
                    "versionStartIncluding": "3.17",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4FA14762-EEF0-47BF-9AEF-B4EA7F8370C8",
                    "versionEndExcluding": "4.9.188",
                    "versionStartIncluding": "4.5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A8435063-EEF3-4473-8F06-76341B7A06A3",
                    "versionEndExcluding": "4.14.114",
                    "versionStartIncluding": "4.10",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ABC4CBFF-ED77-45EE-8543-A217F9762929",
                    "versionEndExcluding": "4.19.37",
                    "versionStartIncluding": "4.15",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C0ACE181-99FA-47C7-898B-810936A33C08",
                    "versionEndExcluding": "5.0.10",
                    "versionStartIncluding": "4.20",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": "The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c."
          },
          {
            "lang": "es",
            "value": "La implementaci\u00f3n del coredump en el kernel de Linux en versiones anteriores a 5.0.10,  no utiliza mecanismos de bloqueo u otros mecanismos para evitar cambios en el layout de vma o en los flags vma mientras se ejecuta, lo que permite a los usuarios locales obtener informaci\u00f3n sensible, causar una denegaci\u00f3n de servicio o posiblemente tener otro impacto no especificado al activar una condici\u00f3n de carrera con llamadas mmget_not_zero o get_task_mm. Esto est\u00e1 relacionado con fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, y drivers/infiniband/core/uverbs_main.c"
          }
        ],
        "id": "CVE-2019-11599",
        "lastModified": "2024-02-15T15:56:20.377",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 6.9,
                "confidentialityImpact": "COMPLETE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 3.4,
              "impactScore": 10.0,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.0,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.0,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2019-04-29T18:29:00.243",
        "references": [
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00014.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit",
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://packetstormsecurity.com/files/152663/Linux-Missing-Lockdown.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://packetstormsecurity.com/files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/04/29/1"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/04/29/2"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/04/30/1"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securityfocus.com/bid/108113"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2029"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2043"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3309"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3517"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0100"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0103"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0179"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0543"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List",
              "Exploit",
              "Third Party Advisory"
            ],
            "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1790"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List",
              "Vendor Advisory"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.114"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List",
              "Vendor Advisory"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.37"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List",
              "Vendor Advisory"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List",
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=04f5866e41fb70690e28397487d8bd8eea7d712a"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Third Party Advisory"
            ],
            "url": "https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00011.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "https://seclists.org/bugtraq/2019/Jul/33"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "https://seclists.org/bugtraq/2019/Jun/26"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190517-0002/"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200608-0001/"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://support.f5.com/csp/article/K51674118"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://support.f5.com/csp/article/K51674118?utm_source=f5support\u0026amp%3Butm_medium=RSS"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://usn.ubuntu.com/4069-1/"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://usn.ubuntu.com/4069-2/"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://usn.ubuntu.com/4095-1/"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://usn.ubuntu.com/4115-1/"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://usn.ubuntu.com/4118-1/"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4465"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit",
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://www.exploit-db.com/exploits/46781/"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-667"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\n\nThe openSUSE Leap 15.0 was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2019-10638: A device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may be conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses (bnc#1140575).\n- CVE-2019-10639: The Linux kernel allowed Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. Specifically, it is possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). This key contains enough bits from a kernel address (of a static variable) so when the key is extracted (via enumeration), the offset of the kernel image is exposed. This attack can be carried out remotely, by the attacker forcing the target device to send UDP or ICMP (or certain other) traffic to attacker-controlled IP addresses. Forcing a server to send UDP traffic is trivial if the server is a DNS server. ICMP traffic is trivial if the server answers ICMP Echo requests (ping). For client targets, if the target visits the attacker\u0027s web page, then WebRTC or gQUIC can be used to force UDP traffic to attacker-controlled IP addresses. NOTE: this attack against KASLR became viable in 4.1 because IP ID generation was changed to have a dependency on an address associated with a network namespace (bnc#1140577).\n- CVE-2018-20836: There was a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free (bnc#1134395).\n- CVE-2019-10126: A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corruption and possibly other consequences (bnc#1136935).\n- CVE-2019-11599: The coredump implementation in the Linux kernel did not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allowed local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c (bnc#1131645 1133738).\n- CVE-2019-12614: An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c where there was an unchecked kstrdup of prop-\u003ename, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash) (bnc#1137194).\n- CVE-2018-16871: A flaw was found in NFS where an attacker who is able to mount an exported NFS filesystem was able to trigger a null pointer dereference by an invalid NFS sequence.  (bnc#1137103).\n\nThe following non-security bugs were fixed:\n\n- 6lowpan: Off by one handling -\u003enexthdr (bsc#1051510).\n- added De0-Nanos-SoC board support (and others based on Altera SOC).\n- Add sample kernel-default-base spec file (FATE#326579, jsc#SLE-4117,  jsc#SLE-3853, bsc#1128910).\n- Add sample kernel-default-base spec file (jsc#SLE-4117, jsc#SLE-3853, bsc#1128910).\n- af_key: unconditionally clone on broadcast (bsc#1051510).\n- alsa: firewire-lib/fireworks: fix miss detection of received MIDI messages (bsc#1051510).\n- alsa: hda - Force polling mode on CNL for fixing codec communication (bsc#1051510).\n- alsa: hda/realtek: Add quirks for several Clevo notebook barebones (bsc#1051510).\n- alsa: hda/realtek - Change front mic location for Lenovo M710q (bsc#1051510).\n- alsa: line6: Fix write on zero-sized buffer (bsc#1051510).\n- alsa: seq: fix incorrect order of dest_client/dest_ports arguments (bsc#1051510).\n- alsa: usb-audio: fix sign unintended sign extension on left shifts (bsc#1051510).\n- apparmor: enforce nullbyte at end of tag string (bsc#1051510).\n- audit: fix a memory leak bug (bsc#1051510).\n- ax25: fix inconsistent lock state in ax25_destroy_timer (bsc#1051510).\n- blk-mq: free hw queue\u0027s resource in hctx\u0027s release handler (bsc#1140637).\n- block: Fix a NULL pointer dereference in generic_make_request() (bsc#1139771).\n- bluetooth: Fix faulty expression for minimum encryption key size check (bsc#1140328).\n- can: af_can: Fix error path of can_init() (bsc#1051510).\n- can: flexcan: fix timeout when set small bitrate (bsc#1051510).\n- can: purge socket error queue on sock destruct (bsc#1051510).\n- ceph: flush dirty inodes before proceeding with remount (bsc#1140405).\n- cfg80211: fix memory leak of wiphy device name (bsc#1051510).\n- clk: rockchip: Turn on \u0027aclk_dmac1\u0027 for suspend on rk3288 (bsc#1051510).\n- clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider (bsc#1051510).\n- coresight: etb10: Fix handling of perf mode (bsc#1051510).\n- coresight: etm4x: Add support to enable ETMv4.2 (bsc#1051510).\n- cpu/topology: Export die_id (jsc#SLE-5454).\n- crypto: algapi - guard against uninitialized spawn list in crypto_remove_spawns (bsc#1133401).\n- crypto: cryptd - Fix skcipher instance memory leak (bsc#1051510).\n- crypto: user - prevent operating on larval algorithms (bsc#1133401).\n- device core: Consolidate locking and unlocking of parent and device (bsc#1106383).\n- dmaengine: imx-sdma: remove BD_INTR for channel0 (bsc#1051510).\n- dm, dax: Fix detection of DAX support (bsc#1139782).\n- doc: Cope with the deprecation of AutoReporter (bsc#1051510).\n- Do not provide kernel-default from kernel-default-base (boo#1132154, bsc#1106751).\n- Do not provide kernel-default-srchash from kernel-default-base.\n- Do not restrict NFSv4.2 on openSUSE (bsc#1138719).\n- driver core: Establish order of operations for device_add and device_del via bitflag (bsc#1106383).\n- driver core: Probe devices asynchronously instead of the driver (bsc#1106383).\n- drivers/base: Introduce kill_device() (bsc#1139865).\n- drivers/base: kABI fixes for struct device_private (bsc#1106383).\n- drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var (bsc#1051510).\n- drivers/rapidio/devices/rio_mport_cdev.c: fix resource leak in error handling path in \u0027rio_dma_transfer()\u0027 (bsc#1051510).\n- drivers/rapidio/rio_cm.c: fix potential oops in riocm_ch_listen() (bsc#1051510).\n- drivers: thermal: tsens: Do not print error message on -EPROBE_DEFER (bsc#1051510).\n- drm/arm/hdlcd: Allow a bit of clock tolerance (bsc#1051510).\n- drm/i915/gvt: ignore unexpected pvinfo write (bsc#1051510).\n- EDAC/mc: Fix edac_mc_find() in case no device is found (bsc#1114279).\n- ftrace/x86: Remove possible deadlock between register_kprobe() and ftrace_run_update_code() (bsc#1071995).\n- ftrace/x86: Remove possible deadlock between register_kprobe()  and ftrace_run_update_code() (bsc#1071995 fate#323487).\n- genirq: Prevent use-after-free and work list corruption (bsc#1051510).\n- genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent() (bsc#1051510).\n- genwqe: Prevent an integer overflow in the ioctl (bsc#1051510).\n- hwmon/coretemp: Cosmetic: Rename internal variables to zones from packages (jsc#SLE-5454).\n- hwmon/coretemp: Support multi-die/package (jsc#SLE-5454).\n- hwmon: (k10temp) 27C Offset needed for Threadripper2  (FATE#327735).\n- hwmon: (k10temp) Add Hygon Dhyana support (FATE#327735).\n- hwmon: (k10temp) Add support for AMD Ryzen w/ Vega graphics  (FATE#327735).\n- hwmon: (k10temp) Add support for family 17h (FATE#327735).\n- hwmon: (k10temp) Add support for Stoney Ridge and Bristol  Ridge CPUs (FATE#327735).\n- hwmon: (k10temp) Add support for temperature offsets  (FATE#327735).\n- hwmon: (k10temp) Add temperature offset for Ryzen 1900X  (FATE#327735).\n- hwmon: (k10temp) Add temperature offset for Ryzen 2700X  (FATE#327735).\n- hwmon: (k10temp) Correct model name for Ryzen 1600X  (FATE#327735).\n- hwmon: (k10temp) Display both Tctl and Tdie (FATE#327735).\n- hwmon: (k10temp) Fix reading critical temperature register  (FATE#327735).\n- hwmon: (k10temp) Make function get_raw_temp static  (FATE#327735).\n- hwmon: (k10temp) Move chip specific code into probe function  (FATE#327735).\n- hwmon: (k10temp) Only apply temperature offset if result is  positive (FATE#327735).\n- hwmon: (k10temp) Support all Family 15h Model 6xh and Model  7xh processors (FATE#327735).\n- hwmon: k10temp: Support Threadripper 2920X, 2970WX; simplify  offset table (FATE#327735).\n- hwmon: (k10temp) Use API function to access System Management  Network (FATE#327735).\n- hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs ().\n- hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs  (FATE#327735).\n- i2c: acorn: fix i2c warning (bsc#1135642).\n- i2c-piix4: Add Hygon Dhyana SMBus support (FATE#327735).\n- ibmveth: Update ethtool settings to reflect virtual properties (bsc#1136157, LTC#177197).\n- input: synaptics - enable SMBus on ThinkPad E480 and E580 (bsc#1051510).\n- input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD (bsc#1051510).\n- Install extra rpm scripts for kernel subpackaging (FATE#326579,  jsc#SLE-4117, jsc#SLE-3853, bsc#1128910).\n- Install extra rpm scripts for kernel subpackaging (jsc#SLE-4117, jsc#SLE-3853, bsc#1128910).\n- kabi fixup blk_mq_register_dev() (bsc#1140637).\n- kabi: x86/topology: Add CPUID.1F multi-die/package support (jsc#SLE-5454).\n- kabi: x86/topology: Define topology_logical_die_id() (jsc#SLE-5454).\n- kvm: x86: Include CPUID leaf 0x8000001e in kvm\u0027s supported CPUID (bsc#1114279).\n- kvm: x86: Include multiple indices with CPUID leaf 0x8000001d (bsc#1114279).\n- libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk (bsc#1051510).\n- libnvdimm/bus: Prevent duplicate device_unregister() calls (bsc#1139865).\n- libnvdimm, pfn: Fix over-trim in trim_pfn_device() (bsc#1140719).\n- mac80211: Do not use stack memory with scatterlist for GMAC (bsc#1051510).\n- mac80211: drop robust management frames from unknown TA (bsc#1051510).\n- mac80211: handle deauthentication/disassociation from TDLS peer (bsc#1051510).\n- media: v4l2-ioctl: clear fields in s_parm (bsc#1051510).\n- mISDN: make sure device name is NUL terminated (bsc#1051510).\n- mmc: core: Prevent processing SDIO IRQs when the card is suspended (bsc#1051510).\n- module: Fix livepatch/ftrace module text permissions race (bsc#1071995).\n- module: Fix livepatch/ftrace module text permissions race  (bsc#1071995 fate#323487).\n- net: mvpp2: prs: Fix parser range for VID filtering (bsc#1098633).\n- net: mvpp2: prs: Use the correct helpers when removing all VID filters (bsc#1098633).\n- net: mvpp2: Use strscpy to handle stat strings (bsc#1098633).\n- nfit/ars: Allow root to busy-poll the ARS state machine (bsc#1140814).\n- nfit/ars: Avoid stale ARS results (jsc#SLE-5433).\n- nfit/ars: Introduce scrub_flags (jsc#SLE-5433).\n- ntp: Allow TAI-UTC offset to be set to zero (bsc#1135642).\n- nvme: copy MTFA field from identify controller (bsc#1140715).\n- nvme-rdma: fix double freeing of async event data (bsc#1120423).\n- nvme-rdma: fix possible double free of controller async event buffer (bsc#1120423).\n- ocfs2: try to reuse extent block in dealloc without meta_alloc (bsc#1128902).\n- pci: PM: Skip devices in D0 for suspend-to-idle (bsc#1051510).\n- pci: rpadlpar: Fix leaked device_node references in add/remove paths (bsc#1051510).\n- perf/x86/intel/cstate: Support multi-die/package (jsc#SLE-5454).\n- perf/x86/intel/rapl: Cosmetic rename internal variables in response to multi-die/pkg support (jsc#SLE-5454).\n- perf/x86/intel/rapl: Support multi-die/package (jsc#SLE-5454).\n- perf/x86/intel/uncore: Cosmetic renames in response to multi-die/pkg support (jsc#SLE-5454).\n- perf/x86/intel/uncore: Support multi-die/package (jsc#SLE-5454).\n- powercap/intel_rapl: Simplify rapl_find_package() (jsc#SLE-5454).\n- powercap/intel_rapl: Support multi-die/package (jsc#SLE-5454).\n- powercap/intel_rapl: Update RAPL domain name and debug messages (jsc#SLE-5454).\n- powerpc/perf: Add PM_LD_MISS_L1 and PM_BR_2PATH to power9 event list (bsc#1137728, LTC#178106).\n- powerpc/perf: Add POWER9 alternate PM_RUN_CYC and PM_RUN_INST_CMPL events (bsc#1137728, LTC#178106).\n- powerpc/rtas: retry when cpu offline races with suspend/migration (bsc#1140428, LTC#178808).\n- ppp: mppe: Add softdep to arc4 (bsc#1088047).\n- qmi_wwan: add network device usage statistics for qmimux devices (bsc#1051510).\n- qmi_wwan: add support for QMAP padding in the RX path (bsc#1051510).\n- qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode (bsc#1051510).\n- qmi_wwan: extend permitted QMAP mux_id value range (bsc#1051510).\n- rapidio: fix a NULL pointer dereference when create_workqueue() fails (bsc#1051510).\n- ras/CEC: Convert the timer callback to a workqueue (bsc#1114279).\n- ras/CEC: Fix binary search function (bsc#1114279).\n- Refresh patches.fixes/scsi-Introduce-scsi_start_queue.patch (bsc#1119532).\n- Remove the previous subpackage infrastructure.  This partially reverts commit 9b3ca32c11854156b2f950ff5e26131377d8445e  (\u0027Add kernel-subpackage-build.spec (FATE#326579).\u0027)\n- Replace the bluetooth fix with the upstream commit (bsc#1135556)\n- Revert \u0027Drop multiversion(kernel) from the KMP template ()\u0027 (bsc#1109137).\n- Revert \u0027Drop multiversion(kernel) from the KMP template (fate#323189)\u0027  (bsc#1109137).  This reverts commit 71504d805c1340f68715ad41958e5ef35da2c351.\n- Revert \u0027KMPs: obsolete older KMPs of the same flavour (bsc#1127155, bsc#1109137).\u0027\n- Revert \u0027KMPs: provide and conflict a kernel version specific KMP name\u0027\n- Revert \u0027Revert \u0027Drop multiversion(kernel) from the KMP template ()\u0027\u0027\n- Revert \u0027Revert \u0027Drop multiversion(kernel) from the KMP template (fate#323189)\u0027\u0027  This feature was requested for SLE15 but aws reverted in packaging and  master.\n- Revert \u0027s390/jump_label: Use \u0027jdd\u0027 constraint on gcc9 (bsc#1138589).\u0027\n- Revert \u0027Sign non-x86 kernels when possible (boo#1134303)\u0027 This reverts commit bac621c6704610562ebd9e74ae5ad85ca8025681.\n- Revert \u0027svm: Fix AVIC incomplete IPI emulation\u0027 (bsc#1140133).\n- rpm: Add arm64 dtb-allwinner subpackage 4.10 added arch/arm64/boot/dts/allwinner/.\n- rpm: Add arm64 dtb-zte subpackage 4.9 added arch/arm64/boot/dts/zte/.\n- rpm/kernel-binary.spec.in: Add back kernel-binary-base subpackage (jsc#SLE-3853).\n- rpm/kernel-binary.spec.in: Build livepatch support in SUSE release projects (bsc#1124167).\n- rpm/kernel-subpackage-build: handle arm kernel zImage.\n- rpm/kernel-subpackage-spec: only provide firmware actually present in subpackage.\n- rpm/package-descriptions: fix typo in kernel-azure\n- rpm/post.sh: correct typo in err msg (bsc#1137625)\n- s390/dasd: fix using offset into zero size array error (bsc#1051510).\n- s390/jump_label: Use \u0027jdd\u0027 constraint on gcc9 (bsc#1138589).\n- s390/qeth: fix race when initializing the IP address table (bsc#1051510).\n- s390/qeth: fix VLAN attribute in bridge_hostnotify udev event (bsc#1051510).\n- s390/setup: fix early warning messages (bsc#1051510).\n- s390/virtio: handle find on invalid queue gracefully (bsc#1051510).\n- sbitmap: fix improper use of smp_mb__before_atomic() (bsc#1140658).\n- scripts/git_sort/git_sort.py: add djbw/nvdimm nvdimm-pending.\n- scripts/git_sort/git_sort.py: add nvdimm/libnvdimm-fixes\n- scsi: core: add new RDAC LENOVO/DE_Series device (bsc#1132390).\n- scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending() (bsc#1140727).\n- scsi: qla2xxx: Fix FC-AL connection target discovery (bsc#1094555).\n- scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines (bsc#1140728).\n- scsi: qla2xxx: Fix N2N target discovery with Local loop (bsc#1094555).\n- scsi: target/iblock: Fix overrun in WRITE SAME emulation (bsc#1140424).\n- scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (bsc#1135296).\n- scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove (bsc#1051510).\n- scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host (bsc#1051510).\n- scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP devices (bsc#1051510).\n- scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) (bsc#1051510).\n- smb3: Fix endian warning (bsc#1137884).\n- soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher (bsc#1051510).\n- soc: rockchip: Set the proper PWM for rk3288 (bsc#1051510).\n- staging: comedi: ni_mio_common: Fix divide-by-zero for DIO cmdtest (bsc#1051510).\n- svm: Add warning message for AVIC IPI invalid target (bsc#1140133).\n- svm: Fix AVIC incomplete IPI emulation (bsc#1140133).\n- sysctl: handle overflow in proc_get_long (bsc#1051510).\n- thermal: rcar_gen3_thermal: disable interrupt in .remove (bsc#1051510).\n- thermal/x86_pkg_temp_thermal: Cosmetic: Rename internal variables to zones from packages (jsc#SLE-5454).\n- thermal/x86_pkg_temp_thermal: Support multi-die/package (jsc#SLE-5454).\n- tmpfs: fix link accounting when a tmpfile is linked in (bsc#1051510).\n- tmpfs: fix uninitialized return value in shmem_link (bsc#1051510).\n- topology: Create core_cpus and die_cpus sysfs attributes (jsc#SLE-5454).\n- topology: Create package_cpus sysfs attribute (jsc#SLE-5454).\n- tracing/snapshot: Resize spare buffer if size changed (bsc#1140726).\n- Trim build dependencies of sample subpackage spec file (FATE#326579,  jsc#SLE-4117, jsc#SLE-3853, bsc#1128910).\n- Trim build dependencies of sample subpackage spec file (jsc#SLE-4117, jsc#SLE-3853, bsc#1128910).\n- tty: max310x: Fix external crystal register setup (bsc#1051510).\n- usb: chipidea: udc: workaround for endpoint conflict issue (bsc#1135642).\n- usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression) (bsc#1135642).\n- usb: Fix chipmunk-like voice when using Logitech C270 for recording audio (bsc#1051510).\n- usbnet: ipheth: fix racing condition (bsc#1051510).\n- usb: serial: fix initial-termios handling (bsc#1135642).\n- usb: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode (bsc#1051510).\n- usb: serial: option: add Telit 0x1260 and 0x1261 compositions (bsc#1051510).\n- usb: serial: pl2303: add Allied Telesis VT-Kit3 (bsc#1051510).\n- usb: serial: pl2303: fix tranceiver suspend mode (bsc#1135642).\n- usb: usb-storage: Add new ID to ums-realtek (bsc#1051510).\n- usb: xhci: avoid null pointer deref when bos field is NULL (bsc#1135642).\n- vfio: ccw: only free cp on final interrupt (bsc#1051510).\n- vlan: disable SIOCSHWTSTAMP in container (bsc#1051510).\n- x86/amd_nb: Add support for Raven Ridge CPUs ().\n- x86/amd_nb: Add support for Raven Ridge CPUs (FATE#327735).\n- x86/CPU/AMD: Do not force the CPB cap when running under a hypervisor (bsc#1114279).\n- x86/cpufeatures: Carve out CQM features retrieval (jsc#SLE-5382).\n- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (jsc#SLE-5382).\n- x86/cpufeatures: Enumerate the new AVX512 BFLOAT16 instructions (jsc#SLE-5382).\n- x86/CPU/hygon: Fix phys_proc_id calculation logic for multi-die processors ().\n- x86/CPU/hygon: Fix phys_proc_id calculation logic for multi-die  processors (fate#327735).\n- x86/mce: Fix machine_check_poll() tests for error types (bsc#1114279).\n- x86/microcode, cpuhotplug: Add a microcode loader CPU hotplug callback (bsc#1114279).\n- x86/microcode: Fix microcode hotplug state (bsc#1114279).\n- x86/microcode: Fix the ancient deprecated microcode loading method (bsc#1114279).\n- x86/mm/mem_encrypt: Disable all instrumentation for early SME setup (bsc#1114279).\n- x86/smpboot: Rename match_die() to match_pkg() (jsc#SLE-5454).\n- x86/speculation/mds: Revert CPU buffer clear on double fault exit (bsc#1114279).\n- x86/topology: Add CPUID.1F multi-die/package support (jsc#SLE-5454).\n- x86/topology: Create topology_max_die_per_package() (jsc#SLE-5454).\n- x86/topology: Define topology_die_id() (jsc#SLE-5454).\n- x86/topology: Define topology_logical_die_id() (jsc#SLE-5454).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2019-1716",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_1716-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2019:1716-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HJXAHNWJ4IAQN4V6E2PEXAAFMQPYBBPT/#HJXAHNWJ4IAQN4V6E2PEXAAFMQPYBBPT"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2019:1716-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HJXAHNWJ4IAQN4V6E2PEXAAFMQPYBBPT/#HJXAHNWJ4IAQN4V6E2PEXAAFMQPYBBPT"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1051510",
        "url": "https://bugzilla.suse.com/1051510"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1071995",
        "url": "https://bugzilla.suse.com/1071995"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1088047",
        "url": "https://bugzilla.suse.com/1088047"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1094555",
        "url": "https://bugzilla.suse.com/1094555"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1098633",
        "url": "https://bugzilla.suse.com/1098633"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1106383",
        "url": "https://bugzilla.suse.com/1106383"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1106751",
        "url": "https://bugzilla.suse.com/1106751"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1109137",
        "url": "https://bugzilla.suse.com/1109137"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1114279",
        "url": "https://bugzilla.suse.com/1114279"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1119532",
        "url": "https://bugzilla.suse.com/1119532"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1120423",
        "url": "https://bugzilla.suse.com/1120423"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1124167",
        "url": "https://bugzilla.suse.com/1124167"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127155",
        "url": "https://bugzilla.suse.com/1127155"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1128902",
        "url": "https://bugzilla.suse.com/1128902"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1128910",
        "url": "https://bugzilla.suse.com/1128910"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131645",
        "url": "https://bugzilla.suse.com/1131645"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1132154",
        "url": "https://bugzilla.suse.com/1132154"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1132390",
        "url": "https://bugzilla.suse.com/1132390"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1133401",
        "url": "https://bugzilla.suse.com/1133401"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1133738",
        "url": "https://bugzilla.suse.com/1133738"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1134303",
        "url": "https://bugzilla.suse.com/1134303"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1134395",
        "url": "https://bugzilla.suse.com/1134395"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1135296",
        "url": "https://bugzilla.suse.com/1135296"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1135556",
        "url": "https://bugzilla.suse.com/1135556"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1135642",
        "url": "https://bugzilla.suse.com/1135642"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136157",
        "url": "https://bugzilla.suse.com/1136157"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136935",
        "url": "https://bugzilla.suse.com/1136935"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1137103",
        "url": "https://bugzilla.suse.com/1137103"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1137194",
        "url": "https://bugzilla.suse.com/1137194"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1137625",
        "url": "https://bugzilla.suse.com/1137625"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1137728",
        "url": "https://bugzilla.suse.com/1137728"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1137884",
        "url": "https://bugzilla.suse.com/1137884"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1138589",
        "url": "https://bugzilla.suse.com/1138589"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1138719",
        "url": "https://bugzilla.suse.com/1138719"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1139771",
        "url": "https://bugzilla.suse.com/1139771"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1139782",
        "url": "https://bugzilla.suse.com/1139782"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1139865",
        "url": "https://bugzilla.suse.com/1139865"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140133",
        "url": "https://bugzilla.suse.com/1140133"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140328",
        "url": "https://bugzilla.suse.com/1140328"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140405",
        "url": "https://bugzilla.suse.com/1140405"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140424",
        "url": "https://bugzilla.suse.com/1140424"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140428",
        "url": "https://bugzilla.suse.com/1140428"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140575",
        "url": "https://bugzilla.suse.com/1140575"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140577",
        "url": "https://bugzilla.suse.com/1140577"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140637",
        "url": "https://bugzilla.suse.com/1140637"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140658",
        "url": "https://bugzilla.suse.com/1140658"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140715",
        "url": "https://bugzilla.suse.com/1140715"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140719",
        "url": "https://bugzilla.suse.com/1140719"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140726",
        "url": "https://bugzilla.suse.com/1140726"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140727",
        "url": "https://bugzilla.suse.com/1140727"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140728",
        "url": "https://bugzilla.suse.com/1140728"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140814",
        "url": "https://bugzilla.suse.com/1140814"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16871 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16871/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-20836 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-20836/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10126 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10126/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10638 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10638/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10639 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10639/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11599 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11599/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-12614 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-12614/"
      }
    ],
    "title": "Security update for the Linux Kernel",
    "tracking": {
      "current_release_date": "2019-07-19T06:01:10Z",
      "generator": {
        "date": "2019-07-19T06:01:10Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2019:1716-1",
      "initial_release_date": "2019-07-19T06:01:10Z",
      "revision_history": [
        {
          "date": "2019-07-19T06:01:10Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-4.12.14-lp150.12.67.1.noarch",
                "product": {
                  "name": "kernel-devel-4.12.14-lp150.12.67.1.noarch",
                  "product_id": "kernel-devel-4.12.14-lp150.12.67.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-docs-4.12.14-lp150.12.67.1.noarch",
                "product": {
                  "name": "kernel-docs-4.12.14-lp150.12.67.1.noarch",
                  "product_id": "kernel-docs-4.12.14-lp150.12.67.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
                "product": {
                  "name": "kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
                  "product_id": "kernel-docs-html-4.12.14-lp150.12.67.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-4.12.14-lp150.12.67.1.noarch",
                "product": {
                  "name": "kernel-macros-4.12.14-lp150.12.67.1.noarch",
                  "product_id": "kernel-macros-4.12.14-lp150.12.67.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-4.12.14-lp150.12.67.1.noarch",
                "product": {
                  "name": "kernel-source-4.12.14-lp150.12.67.1.noarch",
                  "product_id": "kernel-source-4.12.14-lp150.12.67.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
                "product": {
                  "name": "kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
                  "product_id": "kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-debug-4.12.14-lp150.12.67.1.x86_64",
                "product": {
                  "name": "kernel-debug-4.12.14-lp150.12.67.1.x86_64",
                  "product_id": "kernel-debug-4.12.14-lp150.12.67.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
                "product": {
                  "name": "kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
                  "product_id": "kernel-debug-base-4.12.14-lp150.12.67.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
                "product": {
                  "name": "kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
                  "product_id": "kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-4.12.14-lp150.12.67.1.x86_64",
                "product": {
                  "name": "kernel-default-4.12.14-lp150.12.67.1.x86_64",
                  "product_id": "kernel-default-4.12.14-lp150.12.67.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
                "product": {
                  "name": "kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
                  "product_id": "kernel-default-base-4.12.14-lp150.12.67.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
                "product": {
                  "name": "kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
                  "product_id": "kernel-default-devel-4.12.14-lp150.12.67.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
                  "product_id": "kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
                  "product_id": "kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
                  "product_id": "kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
                "product": {
                  "name": "kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
                  "product_id": "kernel-obs-build-4.12.14-lp150.12.67.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
                "product": {
                  "name": "kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
                  "product_id": "kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-syms-4.12.14-lp150.12.67.1.x86_64",
                "product": {
                  "name": "kernel-syms-4.12.14-lp150.12.67.1.x86_64",
                  "product_id": "kernel-syms-4.12.14-lp150.12.67.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
                "product": {
                  "name": "kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
                  "product_id": "kernel-vanilla-4.12.14-lp150.12.67.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
                "product": {
                  "name": "kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
                  "product_id": "kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64",
                "product": {
                  "name": "kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64",
                  "product_id": "kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.0",
                "product": {
                  "name": "openSUSE Leap 15.0",
                  "product_id": "openSUSE Leap 15.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-4.12.14-lp150.12.67.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64"
        },
        "product_reference": "kernel-debug-4.12.14-lp150.12.67.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-base-4.12.14-lp150.12.67.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64"
        },
        "product_reference": "kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64"
        },
        "product_reference": "kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-4.12.14-lp150.12.67.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64"
        },
        "product_reference": "kernel-default-4.12.14-lp150.12.67.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-base-4.12.14-lp150.12.67.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64"
        },
        "product_reference": "kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-devel-4.12.14-lp150.12.67.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64"
        },
        "product_reference": "kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-4.12.14-lp150.12.67.1.noarch as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch"
        },
        "product_reference": "kernel-devel-4.12.14-lp150.12.67.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-docs-4.12.14-lp150.12.67.1.noarch as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch"
        },
        "product_reference": "kernel-docs-4.12.14-lp150.12.67.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-docs-html-4.12.14-lp150.12.67.1.noarch as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch"
        },
        "product_reference": "kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-4.12.14-lp150.12.67.1.noarch as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch"
        },
        "product_reference": "kernel-macros-4.12.14-lp150.12.67.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-obs-build-4.12.14-lp150.12.67.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64"
        },
        "product_reference": "kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64"
        },
        "product_reference": "kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-4.12.14-lp150.12.67.1.noarch as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch"
        },
        "product_reference": "kernel-source-4.12.14-lp150.12.67.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch"
        },
        "product_reference": "kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-syms-4.12.14-lp150.12.67.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64"
        },
        "product_reference": "kernel-syms-4.12.14-lp150.12.67.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-vanilla-4.12.14-lp150.12.67.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64"
        },
        "product_reference": "kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64"
        },
        "product_reference": "kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
        },
        "product_reference": "kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-16871",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16871"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel\u0027s NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the NFS server will be lost.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16871",
          "url": "https://www.suse.com/security/cve/CVE-2018-16871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1137103 for CVE-2018-16871",
          "url": "https://bugzilla.suse.com/1137103"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156320 for CVE-2018-16871",
          "url": "https://bugzilla.suse.com/1156320"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-19T06:01:10Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-16871"
    },
    {
      "cve": "CVE-2018-20836",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-20836"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-20836",
          "url": "https://www.suse.com/security/cve/CVE-2018-20836"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1134395 for CVE-2018-20836",
          "url": "https://bugzilla.suse.com/1134395"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-19T06:01:10Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-20836"
    },
    {
      "cve": "CVE-2019-10126",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10126"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corruption and possibly other consequences.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10126",
          "url": "https://www.suse.com/security/cve/CVE-2019-10126"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1136935 for CVE-2019-10126",
          "url": "https://bugzilla.suse.com/1136935"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1137944 for CVE-2019-10126",
          "url": "https://bugzilla.suse.com/1137944"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1142129 for CVE-2019-10126",
          "url": "https://bugzilla.suse.com/1142129"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156330 for CVE-2019-10126",
          "url": "https://bugzilla.suse.com/1156330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-19T06:01:10Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-10126"
    },
    {
      "cve": "CVE-2019-10638",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10638"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may be conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10638",
          "url": "https://www.suse.com/security/cve/CVE-2019-10638"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1140575 for CVE-2019-10638",
          "url": "https://bugzilla.suse.com/1140575"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1140577 for CVE-2019-10638",
          "url": "https://bugzilla.suse.com/1140577"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1142129 for CVE-2019-10638",
          "url": "https://bugzilla.suse.com/1142129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-19T06:01:10Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10638"
    },
    {
      "cve": "CVE-2019-10639",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10639"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. Specifically, it is possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). This key contains enough bits from a kernel address (of a static variable) so when the key is extracted (via enumeration), the offset of the kernel image is exposed. This attack can be carried out remotely, by the attacker forcing the target device to send UDP or ICMP (or certain other) traffic to attacker-controlled IP addresses. Forcing a server to send UDP traffic is trivial if the server is a DNS server. ICMP traffic is trivial if the server answers ICMP Echo requests (ping). For client targets, if the target visits the attacker\u0027s web page, then WebRTC or gQUIC can be used to force UDP traffic to attacker-controlled IP addresses. NOTE: this attack against KASLR became viable in 4.1 because IP ID generation was changed to have a dependency on an address associated with a network namespace.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10639",
          "url": "https://www.suse.com/security/cve/CVE-2019-10639"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1140577 for CVE-2019-10639",
          "url": "https://bugzilla.suse.com/1140577"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-19T06:01:10Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10639"
    },
    {
      "cve": "CVE-2019-11599",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11599"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11599",
          "url": "https://www.suse.com/security/cve/CVE-2019-11599"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131645 for CVE-2019-11599",
          "url": "https://bugzilla.suse.com/1131645"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133738 for CVE-2019-11599",
          "url": "https://bugzilla.suse.com/1133738"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157905 for CVE-2019-11599",
          "url": "https://bugzilla.suse.com/1157905"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-19T06:01:10Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-11599"
    },
    {
      "cve": "CVE-2019-12614",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-12614"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup of prop-\u003ename, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
          "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-12614",
          "url": "https://www.suse.com/security/cve/CVE-2019-12614"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1137194 for CVE-2019-12614",
          "url": "https://bugzilla.suse.com/1137194"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.67.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.67.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.67.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-19T06:01:10Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-12614"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\n\nThe openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2019-10638: A device could be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may be conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses (bnc#1140575).\n- CVE-2019-10639: The Linux kernel allowed Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. Specifically, it is possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). This key contains enough bits from a kernel address (of a static variable) so when the key is extracted (via enumeration), the offset of the kernel image is exposed. This attack can be carried out remotely, by the attacker forcing the target device to send UDP or ICMP (or certain other) traffic to attacker-controlled IP addresses. Forcing a server to send UDP traffic is trivial if the server is a DNS server. ICMP traffic is trivial if the server answers ICMP Echo requests (ping). For client targets, if the target visits the attacker\u0027s web page, then WebRTC or gQUIC can be used to force UDP traffic to attacker-controlled IP addresses. NOTE: this attack against KASLR became viable in 4.1 because IP ID generation was changed to have a dependency on an address associated with a network namespace (bnc#1140577).\n- CVE-2019-13233: In arch/x86/lib/insn-eval.c there was a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation (bnc#1140454).\n- CVE-2018-20836: There was a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free (bnc#1134395).\n- CVE-2019-10126: A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might have lead to memory corruption and possibly other consequences (bnc#1136935).\n- CVE-2019-11599: The coredump implementation in the Linux kernel did not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allowed local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c (bnc#1133738).\n- CVE-2019-12817: arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel for powerpc has a bug where unrelated processes may be able to read/write to one another\u0027s virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected (bnc#1138263).\n- CVE-2019-12614: An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel. There was an unchecked kstrdup of prop-\u003ename, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash) (bnc#1137194).\n- CVE-2018-16871: A NULL pointer dereference due to an anomalized NFS message sequence was fixed. (bnc#1137103).\n\nThe following non-security bugs were fixed:\n\n- 6lowpan: Off by one handling -\u003enexthdr (bsc#1051510).\n- Abort file_remove_privs() for non-reg. files (bsc#1140888).\n- ACPICA: Clear status of GPEs on first direct enable (bsc#1111666).\n- ACPI: PM: Allow transitions to D0 to occur in special cases (bsc#1051510).\n- ACPI: PM: Avoid evaluating _PS3 on transitions from D3hot to D3cold (bsc#1051510).\n- af_key: unconditionally clone on broadcast (bsc#1051510).\n- alsa: firewire-lib/fireworks: fix miss detection of received MIDI messages (bsc#1051510).\n- alsa: hda - Force polling mode on CNL for fixing codec communication (bsc#1051510).\n- alsa: hda/realtek: Add quirks for several Clevo notebook barebones (bsc#1051510).\n- alsa: hda/realtek - Change front mic location for Lenovo M710q (bsc#1051510).\n- alsa: line6: Fix write on zero-sized buffer (bsc#1051510).\n- alsa: seq: fix incorrect order of dest_client/dest_ports arguments (bsc#1051510).\n- alsa: usb-audio: Fix parse of UAC2 Extension Units (bsc#1111666).\n- alsa: usb-audio: fix sign unintended sign extension on left shifts (bsc#1051510).\n- apparmor: enforce nullbyte at end of tag string (bsc#1051510).\n- ASoC: cx2072x: fix integer overflow on unsigned int multiply (bsc#1111666).\n- audit: fix a memory leak bug (bsc#1051510).\n- ax25: fix inconsistent lock state in ax25_destroy_timer (bsc#1051510).\n- blk-mq: free hw queue\u0027s resource in hctx\u0027s release handler (bsc#1140637).\n- block: Fix a NULL pointer dereference in generic_make_request() (bsc#1139771).\n- bluetooth: Fix faulty expression for minimum encryption key size check (bsc#1140328).\n- bpf, devmap: Add missing bulk queue free (bsc#1109837).\n- bpf, devmap: Add missing RCU read lock on flush (bsc#1109837).\n- bpf, devmap: Fix premature entry free on destroying map (bsc#1109837).\n- bpf: devmap: fix use-after-free Read in __dev_map_entry_free (bsc#1109837).\n- bpf: lpm_trie: check left child of last leftmost node for NULL (bsc#1109837).\n- bpf: sockmap fix msg-\u003esg.size account on ingress skb (bsc#1109837).\n- bpf: sockmap, fix use after free from sleep in psock backlog workqueue (bsc#1109837).\n- bpf: sockmap remove duplicate queue free (bsc#1109837).\n- bpf, tcp: correctly handle DONT_WAIT flags and timeo == 0 (bsc#1109837).\n- can: af_can: Fix error path of can_init() (bsc#1051510).\n- can: flexcan: fix timeout when set small bitrate (bsc#1051510).\n- can: purge socket error queue on sock destruct (bsc#1051510).\n- ceph: factor out ceph_lookup_inode() (bsc#1138681).\n- ceph: fix NULL pointer deref when debugging is enabled (bsc#1138681).\n- ceph: fix potential use-after-free in ceph_mdsc_build_path (bsc#1138681).\n- ceph: flush dirty inodes before proceeding with remount (bsc#1138681).\n- ceph: flush dirty inodes before proceeding with remount (bsc#1140405).\n- ceph: print inode number in __caps_issued_mask debugging messages (bsc#1138681).\n- ceph: quota: fix quota subdir mounts (bsc#1138681).\n- ceph: remove duplicated filelock ref increase (bsc#1138681).\n- cfg80211: fix memory leak of wiphy device name (bsc#1051510).\n- clk: rockchip: Turn on \u0027aclk_dmac1\u0027 for suspend on rk3288 (bsc#1051510).\n- clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider (bsc#1051510).\n- coresight: etb10: Fix handling of perf mode (bsc#1051510).\n- coresight: etm4x: Add support to enable ETMv4.2 (bsc#1051510).\n- cpu/topology: Export die_id (jsc#SLE-5454).\n- crypto: algapi - guard against uninitialized spawn list in crypto_remove_spawns (bsc#1133401).\n- crypto: cryptd - Fix skcipher instance memory leak (bsc#1051510).\n- crypto: user - prevent operating on larval algorithms (bsc#1133401).\n- dax: Fix xarray entry association for mixed mappings (bsc#1140893).\n- device core: Consolidate locking and unlocking of parent and device (bsc#1106383).\n- dmaengine: imx-sdma: remove BD_INTR for channel0 (bsc#1051510).\n- doc: Cope with the deprecation of AutoReporter (bsc#1051510).\n- Documentation/ABI: Document umwait control sysfs interfaces (jsc#SLE-5187).\n- Documentation: DMA-API: fix a function name of max_mapping_size (bsc#1140954).\n- Do not restrict NFSv4.2 on openSUSE (bsc#1138719).\n- driver core: Establish order of operations for device_add and device_del via bitflag (bsc#1106383).\n- driver core: Probe devices asynchronously instead of the driver (bsc#1106383).\n- drivers/base/devres: introduce devm_release_action() (bsc#1103992).\n- drivers/base/devres: introduce devm_release_action()  (bsc#1103992 FATE#326009).\n- drivers/base: Introduce kill_device() (bsc#1139865).\n- drivers/base: kABI fixes for struct device_private (bsc#1106383).\n- drivers: depend on HAS_IOMEM for devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).\n- drivers: fix a typo in the kernel doc for devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).\n- Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var (bsc#1051510).\n- drivers: provide devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).\n- drivers/rapidio/devices/rio_mport_cdev.c: fix resource leak in error handling path in \u0027rio_dma_transfer()\u0027 (bsc#1051510).\n- drivers/rapidio/rio_cm.c: fix potential oops in riocm_ch_listen() (bsc#1051510).\n- drivers: thermal: tsens: Do not print error message on -EPROBE_DEFER (bsc#1051510).\n- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE (bsc#1051510).\n- drm/amd/powerplay: use hardware fan control if no powerplay fan table (bsc#1111666).\n- drm/arm/hdlcd: Actually validate CRTC modes (bsc#1111666).\n- drm/arm/hdlcd: Allow a bit of clock tolerance (bsc#1051510).\n- drm/arm/mali-dp: Add a loop around the second set CVAL and try 5 times (bsc#1111666).\n- drm/etnaviv: add missing failure path to destroy suballoc (bsc#1111666).\n- drm/fb-helper: generic: Do not take module ref for fbcon (bsc#1111666).\n- drm: Fix drm_release() and device unplug (bsc#1111666).\n- drm/i915: Add new AML_ULX support list (jsc#SLE-4986).\n- drm/i915: Add new ICL PCI ID (jsc#SLE-4986).\n- drm/i915/aml: Add new Amber Lake PCI ID (jsc#SLE-4986).\n- drm/i915: Apply correct ddi translation table for AML device (jsc#SLE-4986).\n- drm/i915: Attach the pci match data to the device upon creation (jsc#SLE-4986).\n- drm/i915/cfl: Adding another PCI Device ID (jsc#SLE-4986).\n- drm/i915/cml: Add CML PCI IDS (jsc#SLE-4986).\n- drm/i915/dmc: protect against reading random memory (bsc#1051510).\n- drm/i915: Fix uninitialized mask in intel_device_info_subplatform_init (jsc#SLE-4986).\n- drm/i915/gvt: ignore unexpected pvinfo write (bsc#1051510).\n- drm/i915/icl: Adding few more device IDs for Ice Lake (jsc#SLE-4986).\n- drm/i915: Introduce concept of a sub-platform (jsc#SLE-4986).\n- drm/i915: Mark AML 0x87CA as ULX (jsc#SLE-4986).\n- drm/i915: Move final cleanup of drm_i915_private to i915_driver_destroy (jsc#SLE-4986).\n- drm/i915: Remove redundant device id from IS_IRONLAKE_M macro (jsc#SLE-4986).\n- drm/i915: Split Pineview device info into desktop and mobile (jsc#SLE-4986).\n- drm/i915: Split some PCI ids into separate groups (jsc#SLE-4986).\n- drm/i915: start moving runtime device info to a separate struct (jsc#SLE-4986).\n- drm/imx: notify drm core before sending event during crtc disable (bsc#1111666).\n- drm/imx: only send event on crtc disable if kept disabled (bsc#1111666).\n- drm: panel-orientation-quirks: Add quirk for GPD MicroPC (bsc#1111666).\n- drm: panel-orientation-quirks: Add quirk for GPD pocket2 (bsc#1111666).\n- drm/vmwgfx: fix a warning due to missing dma_parms (bsc#1111666).\n- drm/vmwgfx: Use the backdoor port if the HB port is not available (bsc#1111666).\n- EDAC/mc: Fix edac_mc_find() in case no device is found (bsc#1114279).\n- ext4: do not delete unlinked inode from orphan list on failed truncate (bsc#1140891).\n- failover: allow name change on IFF_UP slave interfaces (bsc#1109837).\n- fs: hugetlbfs: fix hwpoison reserve accounting (bsc#1139712) \n- fs/ocfs2: fix race in ocfs2_dentry_attach_lock() (bsc#1140889).\n- fs/proc/proc_sysctl.c: Fix a NULL pointer dereference (bsc#1140887).\n- fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links (bsc#1140887).\n- ftrace/x86: Remove possible deadlock between register_kprobe() and ftrace_run_update_code() (bsc#1071995).\n- ftrace/x86: Remove possible deadlock between register_kprobe()  and ftrace_run_update_code() (bsc#1071995 fate#323487).\n- genirq: Prevent use-after-free and work list corruption (bsc#1051510).\n- genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent() (bsc#1051510).\n- genwqe: Prevent an integer overflow in the ioctl (bsc#1051510).\n- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).\n- hugetlbfs: dirty pages as they are added to pagecache (git fixes (mm/hugetlbfs)).\n- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git fixes (mm/hugetlbfs)).\n- hwmon/coretemp: Cosmetic: Rename internal variables to zones from packages (jsc#SLE-5454).\n- hwmon/coretemp: Support multi-die/package (jsc#SLE-5454).\n- hwmon: (k10temp) 27C Offset needed for Threadripper2  (FATE#327735).\n- hwmon: (k10temp) Add Hygon Dhyana support (FATE#327735).\n- hwmon: (k10temp) Add support for AMD Ryzen w/ Vega graphics  (FATE#327735).\n- hwmon: (k10temp) Add support for family 17h (FATE#327735).\n- hwmon: (k10temp) Add support for Stoney Ridge and Bristol  Ridge CPUs (FATE#327735).\n- hwmon: (k10temp) Add support for temperature offsets  (FATE#327735).\n- hwmon: (k10temp) Add temperature offset for Ryzen 1900X  (FATE#327735).\n- hwmon: (k10temp) Add temperature offset for Ryzen 2700X  (FATE#327735).\n- hwmon: (k10temp) Correct model name for Ryzen 1600X  (FATE#327735).\n- hwmon: (k10temp) Display both Tctl and Tdie (FATE#327735).\n- hwmon: (k10temp) Fix reading critical temperature register  (FATE#327735).\n- hwmon: (k10temp) Make function get_raw_temp static  (FATE#327735).\n- hwmon: (k10temp) Move chip specific code into probe function  (FATE#327735).\n- hwmon: (k10temp) Only apply temperature offset if result is  positive (FATE#327735).\n- hwmon: (k10temp) Support all Family 15h Model 6xh and Model  7xh processors (FATE#327735).\n- hwmon: k10temp: Support Threadripper 2920X, 2970WX; simplify  offset table (FATE#327735).\n- hwmon: (k10temp) Use API function to access System Management  Network (FATE#327735).\n- hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs  (FATE#327735).\n- i2c: acorn: fix i2c warning (bsc#1135642).\n- i2c: mlxcpld: Add support for extended transaction length for i2c-mlxcpld (bsc#1112374).\n- i2c: mlxcpld: Add support for smbus block read transaction (bsc#1112374).\n- i2c: mlxcpld: Allow configurable adapter id for mlxcpld (bsc#1112374).\n- i2c: mlxcpld: Fix adapter functionality support callback (bsc#1112374).\n- i2c: mlxcpld: Fix wrong initialization order in probe (bsc#1112374).\n- i2c: mux: mlxcpld: simplify code to reach the adapter (bsc#1112374).\n- i2c-piix4: Add Hygon Dhyana SMBus support (FATE#327735).\n- IB/hfi1: Clear the IOWAIT pending bits when QP is put into  error state (bsc#1114685 FATE#325854).\n- IB/hfi1: Create inline to get extended headers (bsc#1114685  FATE#325854).\n- IB/hfi1: Validate fault injection opcode user input (bsc#1114685  FATE#325854).\n- IB/mlx5: Verify DEVX general object type correctly (bsc#1103991  FATE#326007).\n- ibmveth: Update ethtool settings to reflect virtual properties (bsc#1136157, LTC#177197).\n- input: synaptics - enable SMBus on ThinkPad E480 and E580 (bsc#1051510).\n- input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD (bsc#1051510).\n- iommu/amd: Make iommu_disable safer (bsc#1140955).\n- iommu/arm-smmu: Add support for qcom,smmu-v2 variant (bsc#1051510).\n- iommu/arm-smmu: Avoid constant zero in TLBI writes (bsc#1140956).\n- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).\n- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register (bsc#1051510).\n- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer (bsc#1051510).\n- iommu: Fix a leak in iommu_insert_resv_region (bsc#1140957).\n- iommu: Use right function to get group for device (bsc#1140958).\n- iommu/vt-d: Duplicate iommu_resv_region objects per device list (bsc#1140959).\n- iommu/vt-d: Handle PCI bridge RMRR device scopes in intel_iommu_get_resv_regions (bsc#1140960).\n- iommu/vt-d: Handle RMRR with PCI bridge device scopes (bsc#1140961).\n- iommu/vt-d: Introduce is_downstream_to_pci_bridge helper (bsc#1140962).\n- iommu/vt-d: Remove unnecessary rcu_read_locks (bsc#1140964).\n- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).\n- ipv6: fib: Do not assume only nodes hold a reference on routes (bsc#1138732).\n- irqchip/gic-v3-its: fix some definitions of inner cacheability attributes (bsc#1051510).\n- irqchip/mbigen: Do not clear eventid when freeing an MSI (bsc#1051510).\n- ixgbe: Avoid NULL pointer dereference with VF on non-IPsec hw (bsc#1140228).\n- kabi fixup blk_mq_register_dev() (bsc#1140637).\n- kabi: Mask no_vf_scan in struct pci_dev (jsc#SLE-5803  FATE#327056).\n- kabi workaround for asus-wmi changes (bsc#1051510).\n- kabi: x86/topology: Add CPUID.1F multi-die/package support (jsc#SLE-5454).\n- kabi: x86/topology: Define topology_logical_die_id() (jsc#SLE-5454).\n- kvm: svm/avic: fix off-by-one in checking host APIC ID (bsc#1140971).\n- kvm: x86: fix return value for reserved EFER (bsc#1140992).\n- kvm: x86: Include CPUID leaf 0x8000001e in kvm\u0027s supported CPUID (bsc#1114279).\n- kvm: x86: Include multiple indices with CPUID leaf 0x8000001d (bsc#1114279).\n- kvm: x86: Skip EFER vs. guest CPUID checks for host-initiated writes (bsc#1140972).\n- libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk (bsc#1051510).\n- libceph: assign cookies in linger_submit() (bsc#1135897).\n- libceph: check reply num_data_items in setup_request_data() (bsc#1135897).\n- libceph: do not consume a ref on pagelist in ceph_msg_data_add_pagelist() (bsc#1135897).\n- libceph: enable fallback to ceph_msg_new() in ceph_msgpool_get() (bsc#1135897).\n- libceph: introduce alloc_watch_request() (bsc#1135897).\n- libceph: introduce ceph_pagelist_alloc() (bsc#1135897).\n- libceph: preallocate message data items (bsc#1135897).\n- libceph, rbd: add error handling for osd_req_op_cls_init() (bsc#1135897). This feature was requested for SLE15 but aws reverted in packaging and master.\n- libceph, rbd, ceph: move ceph_osdc_alloc_messages() calls (bsc#1135897).\n- libnvdimm/bus: Prevent duplicate device_unregister() calls (bsc#1139865).\n- libnvdimm, pfn: Fix over-trim in trim_pfn_device() (bsc#1140719).\n- mac80211: Do not use stack memory with scatterlist for GMAC (bsc#1051510).\n- mac80211: drop robust management frames from unknown TA (bsc#1051510).\n- mac80211: handle deauthentication/disassociation from TDLS peer (bsc#1051510).\n- media: v4l2-ioctl: clear fields in s_parm (bsc#1051510).\n- mfd: hi655x: Fix regmap area declared size for hi655x (bsc#1051510).\n- mISDN: make sure device name is NUL terminated (bsc#1051510).\n- mlxsw: core: Add API for QSFP module temperature thresholds reading (bsc#1112374).\n- mlxsw: core: Do not use WQ_MEM_RECLAIM for EMAD workqueue (bsc#1112374).\n- mlxsw: core: mlxsw: core: avoid -Wint-in-bool-context warning (bsc#1112374).\n- mlxsw: core: Move ethtool module callbacks to a common location (bsc#1112374).\n- mlxsw: core: Prevent reading unsupported slave address from SFP EEPROM (bsc#1112374).\n- mlxsw: pci: Reincrease PCI reset timeout (bsc#1112374).\n- mlxsw: reg: Add Management Temperature Bulk Register (bsc#1112374).\n- mlxsw: spectrum_flower: Fix TOS matching (bsc#1112374).\n- mlxsw: spectrum: Move QSFP EEPROM definitions to common location (bsc#1112374).\n- mlxsw: spectrum: Put MC TCs into DWRR mode (bsc#1112374).\n- mmc: core: complete HS400 before checking status (bsc#1111666).\n- mmc: core: Prevent processing SDIO IRQs when the card is suspended (bsc#1051510).\n- mm/devm_memremap_pages: introduce devm_memunmap_pages  (bsc#1103992 FATE#326009).\n- mm: fix race on soft-offlining free huge pages (bsc#1139712). \n- mm: hugetlb: delete dequeue_hwpoisoned_huge_page()   (bsc#1139712). \n- mm: hugetlb: prevent reuse of hwpoisoned free hugepages   (bsc#1139712). \n- mm: hugetlb: soft-offline: dissolve_free_huge_page() return   zero on !PageHuge (bsc#bsc#1139712). \n- mm: hugetlb: soft-offline: dissolve source hugepage after   successful migration (bsc#1139712). \n- mm: hugetlb: soft_offline: save compound page order before   page migration (bsc#1139712) \n- mm: hwpoison: change PageHWPoison behavior on hugetlb pages   (bsc#1139712). \n- mm: hwpoison: dissolve in-use hugepage in unrecoverable memory   error (bsc#1139712). \n- mm: hwpoison: introduce idenfity_page_state (bsc#1139712). \n- mm: hwpoison: introduce memory_failure_hugetlb() (bsc#1139712). \n- mm/page_alloc.c: avoid potential NULL pointer dereference (git fixes (mm/pagealloc)).\n- mm/page_alloc.c: fix never set ALLOC_NOFRAGMENT flag (git fixes (mm/pagealloc)).\n- mm: soft-offline: close the race against page allocation   (bsc#1139712). \n- mm: soft-offline: dissolve free hugepage if soft-offlined   (bsc#1139712). \n- mm: soft-offline: return -EBUSY if   set_hwpoison_free_buddy_page() fails (bsc#1139712). \n- mm/vmscan.c: prevent useless kswapd loops (git fixes (mm/vmscan)).\n- module: Fix livepatch/ftrace module text permissions race  (bsc#1071995 fate#323487).\n- net: core: support XDP generic on stacked devices (bsc#1109837).\n- net: do not clear sock-\u003esk early to avoid trouble in strparser  (bsc#1103990 FATE#326006).\n- net: ena: add ethtool function for changing io queue sizes (bsc#1138879).\n- net: ena: add good checksum counter (bsc#1138879).\n- net: ena: add handling of llq max tx burst size (bsc#1138879).\n- net: ena: add MAX_QUEUES_EXT get feature admin command (bsc#1138879).\n- net: ena: add newline at the end of pr_err prints (bsc#1138879).\n- net: ena: add support for changing max_header_size in LLQ mode (bsc#1138879).\n- net: ena: allow automatic fallback to polling mode (bsc#1138879).\n- net: ena: allow queue allocation backoff when low on memory (bsc#1138879).\n- net: ena: arrange ena_probe() function variables in reverse christmas tree (bsc#1138879).\n- net: ena: enable negotiating larger Rx ring size (bsc#1138879).\n- net: ena: ethtool: add extra properties retrieval via get_priv_flags (bsc#1138879).\n- net: ena: Fix bug where ring allocation backoff stopped too late (bsc#1138879).\n- net: ena: fix ena_com_fill_hash_function() implementation (bsc#1138879).\n- net: ena: fix: Free napi resources when ena_up() fails (bsc#1138879).\n- net: ena: fix incorrect test of supported hash function (bsc#1138879).\n- net: ena: fix: set freed objects to NULL to avoid failing future allocations (bsc#1138879).\n- net: ena: fix swapped parameters when calling ena_com_indirect_table_fill_entry (bsc#1138879).\n- net: ena: gcc 8: fix compilation warning (bsc#1138879).\n- net: ena: improve latency by disabling adaptive interrupt moderation by default (bsc#1138879).\n- net: ena: make ethtool show correct current and max queue sizes (bsc#1138879).\n- net: ena: optimise calculations for CQ doorbell (bsc#1138879).\n- net: ena: remove inline keyword from functions in *.c (bsc#1138879).\n- net: ena: replace free_tx/rx_ids union with single free_ids field in ena_ring (bsc#1138879).\n- net: ena: update driver version from 2.0.3 to 2.1.0 (bsc#1138879).\n- net: ena: use dev_info_once instead of static variable (bsc#1138879).\n- net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set (bsc#1130836).\n- net: Fix missing meta data in skb with vlan packet (bsc#1109837).\n- net/mlx5: Avoid reloading already removed devices (bsc#1103990  FATE#326006).\n- net/mlx5e: Fix ethtool rxfh commands when CONFIG_MLX5_EN_RXNFC  is disabled (bsc#1103990 FATE#326006).\n- net/mlx5e: Fix the max MTU check in case of XDP (bsc#1103990  FATE#326006).\n- net/mlx5e: Fix use-after-free after xdp_return_frame  (bsc#1103990 FATE#326006).\n- net/mlx5e: Rx, Check ip headers sanity (bsc#1103990  FATE#326006).\n- net/mlx5e: Rx, Fixup skb checksum for packets with tail padding (bsc#1109837).\n- net/mlx5e: XDP, Fix shifted flag index in RQ bitmap (bsc#1103990  FATE#326006).\n- net/mlx5: FPGA, tls, hold rcu read lock a bit longer  (bsc#1103990 FATE#326006).\n- net/mlx5: FPGA, tls, idr remove on flow delete (bsc#1103990  FATE#326006).\n- net/mlx5: Set completion EQs as shared resources (bsc#1103991  FATE#326007).\n- net/mlx5: Update pci error handler entries and command  translation (bsc#1103991 FATE#326007).\n- net: mvpp2: prs: Fix parser range for VID filtering (bsc#1098633).\n- net: mvpp2: prs: Use the correct helpers when removing all VID filters (bsc#1098633).\n- net: mvpp2: Use strscpy to handle stat strings (bsc#1098633).\n- net: phy: marvell10g: report if the PHY fails to boot firmware  (bsc#1119113 FATE#326472).\n- net/sched: cbs: Fix error path of cbs_module_init (bsc#1109837).\n- net/sched: cbs: fix port_rate miscalculation (bsc#1109837).\n- net/tls: avoid NULL pointer deref on nskb-\u003esk in fallback (bsc#1109837).\n- net/tls: avoid potential deadlock in tls_set_device_offload_rx() (bsc#1109837).\n- net: tls, correctly account for copied bytes with multiple sk_msgs (bsc#1109837).\n- net/tls: do not copy negative amounts of data in reencrypt (bsc#1109837).\n- net/tls: do not ignore netdev notifications if no TLS features (bsc#1109837).\n- net/tls: do not leak IV and record seq when offload fails (bsc#1109837).\n- net/tls: do not leak partially sent record in device mode (bsc#1109837).\n- net/tls: fix build without CONFIG_TLS_DEVICE (bsc#1109837).\n- net/tls: fix copy to fragments in reencrypt (bsc#1109837).\n- net/tls: fix page double free on TX cleanup (bsc#1109837).\n- net/tls: fix refcount adjustment in fallback (bsc#1109837).\n- net/tls: fix state removal with feature flags off (bsc#1109837).\n- net/tls: fix the IV leaks (bsc#1109837).\n- net/tls: prevent bad memory access in tls_is_sk_tx_device_offloaded() (bsc#1109837).\n- net/tls: replace the sleeping lock around RX resync with a bit lock (bsc#1109837).\n- net/udp_gso: Allow TX timestamp with UDP GSO (bsc#1109837).\n- new primitive: vmemdup_user() (jsc#SLE-4712 bsc#1136156).\n- nfit/ars: Allow root to busy-poll the ARS state machine (bsc#1140814).\n- nfit/ars: Avoid stale ARS results (jsc#SLE-5433).\n- nfit/ars: Introduce scrub_flags (jsc#SLE-5433).\n- nfp: bpf: fix static check error through tightening shift amount adjustment (bsc#1109837).\n- nfp: flower: add rcu locks when accessing netdev for tunnels (bsc#1109837).\n- nl80211: fix station_info pertid memory leak (bsc#1051510).\n- ntp: Allow TAI-UTC offset to be set to zero (bsc#1135642).\n- nvme: copy MTFA field from identify controller (bsc#1140715).\n- nvme-rdma: fix double freeing of async event data (bsc#1120423).\n- nvme-rdma: fix possible double free of controller async event buffer (bsc#1120423).\n- ocfs2: try to reuse extent block in dealloc without meta_alloc (bsc#1128902).\n- pci: Disable VF decoding before pcibios_sriov_disable() updates resources (jsc#SLE-5803).\n- pci: Disable VF decoding before pcibios_sriov_disable()  updates resources (jsc#SLE-5803 FATE#327056).\n- pci: Do not poll for PME if the device is in D3cold (bsc#1051510).\n- pci/IOV: Add flag so platforms can skip VF scanning (jsc#SLE-5803).\n- pci/IOV: Add flag so platforms can skip VF scanning  (jsc#SLE-5803 FATE#327056).\n- pci/IOV: Factor out sriov_add_vfs() (jsc#SLE-5803).\n- pci/IOV: Factor out sriov_add_vfs() (jsc#SLE-5803 FATE#327056).\n- pci/P2PDMA: fix the gen_pool_add_virt() failure path (bsc#1103992).\n- pci/P2PDMA: fix the gen_pool_add_virt() failure path  (bsc#1103992 FATE#326009).\n- pci: PM: Skip devices in D0 for suspend-to-idle (bsc#1051510).\n- pci: rpadlpar: Fix leaked device_node references in add/remove paths (bsc#1051510).\n- perf/x86/intel/cstate: Support multi-die/package (jsc#SLE-5454).\n- perf/x86/intel/rapl: Cosmetic rename internal variables in response to multi-die/pkg support (jsc#SLE-5454).\n- perf/x86/intel/rapl: Support multi-die/package (jsc#SLE-5454).\n- perf/x86/intel/uncore: Cosmetic renames in response to multi-die/pkg support (jsc#SLE-5454).\n- perf/x86/intel/uncore: Support multi-die/package (jsc#SLE-5454).\n- pinctrl/amd: add get_direction handler (bsc#1140463).\n- pinctrl/amd: fix gpio irq level in debugfs (bsc#1140463).\n- pinctrl/amd: fix masking of GPIO interrupts (bsc#1140463).\n- pinctrl/amd: make functions amd_gpio_suspend and amd_gpio_resume static (bsc#1140463).\n- pinctrl/amd: poll InterruptEnable bits in amd_gpio_irq_set_type (bsc#1140463).\n- pinctrl/amd: poll InterruptEnable bits in enable_irq (bsc#1140463).\n- platform_data/mlxreg: Add capability field to core platform data (bsc#1112374).\n- platform_data/mlxreg: additions for Mellanox watchdog driver (bsc#1112374).\n- platform_data/mlxreg: Document fixes for core platform data (bsc#1112374).\n- platform/mellanox: Add new ODM system types to mlx-platform (bsc#1112374).\n- platform/mellanox: Add TmFifo driver for Mellanox BlueField Soc (bsc#1136333 jsc#SLE-4994).\n- platform/x86: asus-wmi: Only Tell EC the OS will handle display hotkeys from asus_nb_wmi (bsc#1051510).\n- platform/x86: mlx-platform: Add ASIC hotplug device configuration (bsc#1112374).\n- platform/x86: mlx-platform: Add definitions for new registers (bsc#1112374).\n- platform/x86: mlx-platform: Add extra CPLD for next generation systems (bsc#1112374).\n- platform/x86: mlx-platform: Add LED platform driver activation (bsc#1112374).\n- platform/x86: mlx-platform: Add mlxreg-fan platform driver activation (bsc#1112374).\n- platform/x86: mlx-platform: Add mlxreg-io platform driver activation (bsc#1112374).\n- platform/x86: mlx-platform: Add mlx-wdt platform driver activation (bsc#1112374).\n- platform/x86: mlx-platform: Add support for fan capability registers (bsc#1112374).\n- platform/x86: mlx-platform: Add support for fan direction register (bsc#1112374).\n- platform/x86: mlx-platform: Add support for new VMOD0007 board name (bsc#1112374).\n- platform/x86: mlx-platform: Add support for tachometer speed register (bsc#1112374).\n- platform/x86: mlx-platform: Add UID LED for the next generation systems (bsc#1112374).\n- platform/x86: mlx-platform: Allow mlxreg-io driver activation for more systems (bsc#1112374).\n- platform/x86: mlx-platform: Allow mlxreg-io driver activation for new systems (bsc#1112374).\n- platform/x86: mlx-platform: Change mlxreg-io configuration for MSN274x systems (bsc#1112374).\n- platform/x86: mlx-platform: Convert to use SPDX identifier (bsc#1112374).\n- platform/x86: mlx-platform: Fix access mode for fan_dir attribute (bsc#1112374).\n- platform/x86: mlx-platform: Fix copy-paste error in mlxplat_init() (bsc#1112374).\n- platform/x86: mlx-platform: Fix LED configuration (bsc#1112374).\n- platform/x86: mlx-platform: Fix tachometer registers (bsc#1112374).\n- platform/x86: mlx-platform: Remove unused define (bsc#1112374).\n- platform/x86: mlx-platform: Rename new systems product names (bsc#1112374).\n- PM: ACPI/PCI: Resume all devices during hibernation (bsc#1111666).\n- powercap/intel_rapl: Simplify rapl_find_package() (jsc#SLE-5454).\n- powercap/intel_rapl: Support multi-die/package (jsc#SLE-5454).\n- powercap/intel_rapl: Update RAPL domain name and debug messages (jsc#SLE-5454).\n- powerpc/perf: Add PM_LD_MISS_L1 and PM_BR_2PATH to power9 event list (bsc#1137728, LTC#178106).\n- powerpc/perf: Add POWER9 alternate PM_RUN_CYC and PM_RUN_INST_CMPL events (bsc#1137728, LTC#178106).\n- powerpc/rtas: retry when cpu offline races with suspend/migration (bsc#1140428, LTC#178808).\n- ppc64le: enable CONFIG_PPC_DT_CPU_FTRS (jsc#SLE-7159).\n- ppp: mppe: Add softdep to arc4 (bsc#1088047).\n- ptrace: Fix -$gt;ptracer_cred handling for PTRACE_TRACEME (git-fixes).\n- ptrace: restore smp_rmb() in __ptrace_may_access() (git-fixes).\n- pwm: stm32: Use 3 cells -\u003eof_xlate() (bsc#1111666).\n- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index (jsc#SLE-4693 bsc#1136462).\n- qmi_wwan: add network device usage statistics for qmimux devices (bsc#1051510).\n- qmi_wwan: add support for QMAP padding in the RX path (bsc#1051510).\n- qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode (bsc#1051510).\n- qmi_wwan: extend permitted QMAP mux_id value range (bsc#1051510).\n- qmi_wwan: Fix out-of-bounds read (bsc#1111666).\n- rapidio: fix a NULL pointer dereference when create_workqueue() fails (bsc#1051510).\n- RAS/CEC: Convert the timer callback to a workqueue (bsc#1114279).\n- RAS/CEC: Fix binary search function (bsc#1114279).\n- rbd: do not assert on writes to snapshots (bsc#1137985 bsc#1138681).\n- rdma/ipoib: Allow user space differentiate between valid dev_port (bsc#1103992).\n- rdma/ipoib: Allow user space differentiate between valid  dev_port (bsc#1103992 FATE#326009).\n- rdma/mlx5: Do not allow the user to write to the clock page (bsc#1103991).\n- rdma/mlx5: Do not allow the user to write to the clock page  (bsc#1103991 FATE#326007).\n- rdma/mlx5: Initialize roce port info before multiport master init (bsc#1103991).\n- rdma/mlx5: Initialize roce port info before multiport master  init (bsc#1103991 FATE#326007).\n- rdma/mlx5: Use rdma_user_map_io for mapping BAR pages (bsc#1103992).\n- rdma/mlx5: Use rdma_user_map_io for mapping BAR pages  (bsc#1103992 FATE#326009).\n- Refresh patches.fixes/scsi-Introduce-scsi_start_queue.patch (bsc#1119532).\n- regulator: s2mps11: Fix buck7 and buck8 wrong voltages (bsc#1051510).\n- Replace the bluetooth fix with the upstream commit (bsc#1135556)\n- Reshuffle patches to match series_sort.py\n- Revert \u0027net: ena: ethtool: add extra properties retrieval via get_priv_flags\u0027 (bsc#1138879).\n- Revert \u0027net/mlx5e: Enable reporting checksum unnecessary also for L3 packets\u0027 (bsc#1103990).\n- Revert \u0027net/mlx5e: Enable reporting checksum unnecessary also  for L3 packets\u0027 (bsc#1103990 FATE#326006).\n- Revert \u0027Revert \u0027Drop multiversion(kernel) from the KMP template ()\u0027\u0027\n- Revert \u0027Revert \u0027Drop multiversion(kernel) from the KMP template (fate#323189)\n- Revert \u0027s390/jump_label: Use \u0027jdd\u0027 constraint on gcc9 (bsc#1138589).\u0027 This broke the build with older gcc instead.\n- Revert \u0027Sign non-x86 kernels when possible (boo#1134303)\u0027 This reverts commit bac621c6704610562ebd9e74ae5ad85ca8025681. We do not have reports of this working with all ARM architectures in all cases (boot, kexec, ..) so revert for now.\n- Revert \u0027svm: Fix AVIC incomplete IPI emulation\u0027 (bsc#1140133).\n- rpm/package-descriptions: fix typo in kernel-azure\n- rpm/post.sh: correct typo in err msg (bsc#1137625)\n- s390/dasd: fix using offset into zero size array error (bsc#1051510).\n- s390/jump_label: Use \u0027jdd\u0027 constraint on gcc9 (bsc#1138589).\n- s390/pci: improve bar check (jsc#SLE-5803).\n- s390/pci: improve bar check (jsc#SLE-5803 FATE#327056).\n- s390/pci: map IOV resources (jsc#SLE-5803).\n- s390/pci: map IOV resources (jsc#SLE-5803 FATE#327056).\n- s390/pci: skip VF scanning (jsc#SLE-5803).\n- s390/pci: skip VF scanning (jsc#SLE-5803 FATE#327056).\n- s390/qeth: fix race when initializing the IP address table (bsc#1051510).\n- s390/qeth: fix VLAN attribute in bridge_hostnotify udev event (bsc#1051510).\n- s390/setup: fix early warning messages (bsc#1051510).\n- s390/virtio: handle find on invalid queue gracefully (bsc#1051510).\n- sbitmap: fix improper use of smp_mb__before_atomic() (bsc#1140658).\n- sched/topology: Improve load balancing on AMD EPYC (bsc#1137366).\n- scripts/git_sort/git_sort.py: add djbw/nvdimm nvdimm-pending.\n- scripts/git_sort/git_sort.py: add nvdimm/libnvdimm-fixes\n- scripts/git_sort/git_sort.py: drop old scsi branches\n- scsi: aacraid: change event_wait to a completion (jsc#SLE-4710 bsc#1136161).\n- scsi: aacraid: change wait_sem to a completion (jsc#SLE-4710 bsc#1136161).\n- scsi: aacraid: clean up some indentation and formatting issues (jsc#SLE-4710 bsc#1136161).\n- scsi: aacraid: Mark expected switch fall-through (jsc#SLE-4710 bsc#1136161).\n- scsi: aacraid: Mark expected switch fall-throughs (jsc#SLE-4710 bsc#1136161).\n- scsi: be2iscsi: be_iscsi: Mark expected switch fall-through (jsc#SLE-4721 bsc#1136264).\n- scsi: be2iscsi: be_main: Mark expected switch fall-through (jsc#SLE-4721 bsc#1136264).\n- scsi: be2iscsi: fix spelling mistake \u0027Retreiving\u0027 -gt; \u0027Retrieving\u0027 (jsc#SLE-4721 bsc#1136264).\n- scsi: be2iscsi: lpfc: fix typo (jsc#SLE-4721 bsc#1136264).\n- scsi: be2iscsi: remove unused variable dmsg (jsc#SLE-4721 bsc#1136264).\n- scsi: be2iscsi: switch to generic DMA API (jsc#SLE-4721 bsc#1136264).\n- scsi: core: add new RDAC LENOVO/DE_Series device (bsc#1132390).\n- scsi: csiostor: csio_wr: mark expected switch fall-through (jsc#SLE-4679 bsc#1136343).\n- scsi: csiostor: drop serial_number usage (jsc#SLE-4679 bsc#1136343).\n- scsi: csiostor: fix calls to dma_set_mask_and_coherent() (jsc#SLE-4679 bsc#1136343).\n- scsi: csiostor: fix incorrect dma device in case of vport (jsc#SLE-4679 bsc#1136343).\n- scsi: csiostor: fix missing data copy in csio_scsi_err_handler() (jsc#SLE-4679 bsc#1136343).\n- scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state() (jsc#SLE-4679 bsc#1136343).\n- scsi: csiostor: no need to check return value of debugfs_create functions (jsc#SLE-4679 bsc#1136343).\n- scsi: csiostor: Remove set but not used variable \u0027pln\u0027 (jsc#SLE-4679 bsc#1136343).\n- scsi: hpsa: bump driver version (jsc#SLE-4712 bsc#1136156).\n- scsi: hpsa: check for lv removal (jsc#SLE-4712 bsc#1136156).\n- scsi: hpsa: clean up two indentation issues (jsc#SLE-4712 bsc#1136156).\n- scsi: hpsa: correct device id issues (jsc#SLE-4712 bsc#1136156).\n- scsi: hpsa: correct device resets (jsc#SLE-4712 bsc#1136156).\n- scsi: hpsa: correct ioaccel2 chaining (jsc#SLE-4712 bsc#1136156).\n- scsi: hpsa: correct simple mode (jsc#SLE-4712 bsc#1136156).\n- scsi: hpsa: fix an uninitialized read and dereference of pointer dev (jsc#SLE-4712 bsc#1136156).\n- scsi: hpsa: mark expected switch fall-throughs (jsc#SLE-4712 bsc#1136156).\n- scsi: hpsa: remove timeout from TURs (jsc#SLE-4712 bsc#1136156).\n- scsi: hpsa: switch to generic DMA API (jsc#SLE-4712 bsc#1136156).\n- scsi: hpsa: Use vmemdup_user to replace the open code (jsc#SLE-4712 bsc#1136156).\n- scsi: megaraid_sas: Add support for DEVICE_LIST DCMD in driver (bsc#1136271).\n- scsi: megaraid_sas: correct an info message (bsc#1136271).\n- scsi: megaraid_sas: driver version update (bsc#1136271).\n- scsi: megaraid_sas: Retry reads of outbound_intr_status reg (bsc#1136271).\n- scsi: megaraid_sas: Rework code to get PD and LD list (bsc#1136271).\n- scsi: megaraid_sas: Rework device add code in AEN path (bsc#1136271).\n- scsi: megaraid_sas: Update structures for HOST_DEVICE_LIST DCMD (bsc#1136271).\n- scsi: mpt3sas: Add Atomic RequestDescriptor support on Aero (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: Add flag high_iops_queues (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: Add missing breaks in switch statements (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: Add support for ATLAS PCIe switch (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: Add support for NVMe Switch Adapter (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: Affinity high iops queues IRQs to local node (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: change _base_get_msix_index prototype (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: Enable interrupt coalescing on high iops (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: fix indentation issue (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: Fix kernel panic during expander reset (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: Fix typo in request_desript_type (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: function pointers of request descriptor (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: Improve the threshold value and introduce module param (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: Introduce perf_mode module parameter (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: Irq poll to avoid CPU hard lockups (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: Load balance to improve performance and avoid soft lockups (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: Rename mpi endpoint device ID macro (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: save and use MSI-X index for posting RD (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: simplify interrupt handler (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: Update driver version to 27.102.00.00 (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: Update driver version to 29.100.00.00 (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: Update mpt3sas driver version to 28.100.00.00 (bsc#1125703,jsc#SLE-4717).\n- scsi: mpt3sas: Use high iops queues under some circumstances (bsc#1125703,jsc#SLE-4717).\n- scsi: qedi: add module param to set ping packet size (jsc#SLE-4693 bsc#1136462).\n- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693 bsc#1136462).\n- scsi: qedi: Check for session online before getting iSCSI TLV data (jsc#SLE-4693 bsc#1136462).\n- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition (jsc#SLE-4693 bsc#1136462).\n- scsi: qedi: Fix spelling mistake \u0027OUSTANDING\u0027 -\u003e \u0027OUTSTANDING\u0027 (jsc#SLE-4693 bsc#1136462).\n- scsi: qedi: Move LL2 producer index processing in BH (jsc#SLE-4693 bsc#1136462).\n- scsi: qedi: remove set but not used variables \u0027cdev\u0027 and \u0027udev\u0027 (jsc#SLE-4693 bsc#1136462).\n- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693 bsc#1136462).\n- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693 bsc#1136462).\n- scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending() (bsc#1140727).\n- scsi: qla2xxx: Fix FC-AL connection target discovery (bsc#1094555).\n- scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines (bsc#1140728).\n- scsi: qla2xxx: Fix N2N target discovery with Local loop (bsc#1094555).\n- scsi: target/iblock: Fix overrun in WRITE SAME emulation (bsc#1140424).\n- scsi: target/iblock: Fix overrun in WRITE SAME emulation (bsc#1140424).\n- scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (bsc#1135296).\n- scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove (bsc#1051510).\n- scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host (bsc#1051510).\n- scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP devices (bsc#1051510).\n- scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) (bsc#1051510).\n- signal/ptrace: Do not leak unitialized kernel memory with PTRACE_PEEK_SIGINFO (git-fixes).\n- smb3: Fix endian warning (bsc#1137884).\n- soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher (bsc#1051510).\n- soc: rockchip: Set the proper PWM for rk3288 (bsc#1051510).\n- sort patches to proper position\n- squash patches.fixes/tcp-fix-fack_count-accounting-on-tcp_shift_skb_data.patch into patches.fixes/tcp-limit-payload-size-of-sacked-skbs.patch to match what stable backports do\n- staging: comedi: ni_mio_common: Fix divide-by-zero for DIO cmdtest (bsc#1051510).\n- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).\n- supported.conf: added mlxbf_tmfifo (bsc#1136333 jsc#SLE-4994)\n- svm: Add warning message for AVIC IPI invalid target (bsc#1140133).\n- svm: Fix AVIC incomplete IPI emulation (bsc#1140133).\n- sysctl: handle overflow in proc_get_long (bsc#1051510).\n- thermal: rcar_gen3_thermal: disable interrupt in .remove (bsc#1051510).\n- thermal/x86_pkg_temp_thermal: Cosmetic: Rename internal variables to zones from packages (jsc#SLE-5454).\n- thermal/x86_pkg_temp_thermal: Support multi-die/package (jsc#SLE-5454).\n- tmpfs: fix link accounting when a tmpfile is linked in (bsc#1051510).\n- tmpfs: fix uninitialized return value in shmem_link (bsc#1051510).\n- tools: bpftool: fix infinite loop in map create (bsc#1109837).\n- topology: Create core_cpus and die_cpus sysfs attributes (jsc#SLE-5454).\n- topology: Create package_cpus sysfs attribute (jsc#SLE-5454).\n- tracing/snapshot: Resize spare buffer if size changed (bsc#1140726).\n- tty: max310x: Fix external crystal register setup (bsc#1051510).\n- typec: tcpm: fix compiler warning about stupid things (git-fixes).\n- usb: chipidea: udc: workaround for endpoint conflict issue (bsc#1135642).\n- usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression) (bsc#1135642).\n- usb: Fix chipmunk-like voice when using Logitech C270 for recording audio (bsc#1051510).\n- usbnet: ipheth: fix racing condition (bsc#1051510).\n- usb: serial: fix initial-termios handling (bsc#1135642).\n- usb: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode (bsc#1051510).\n- usb: serial: option: add Telit 0x1260 and 0x1261 compositions (bsc#1051510).\n- usb: serial: pl2303: add Allied Telesis VT-Kit3 (bsc#1051510).\n- usb: serial: pl2303: fix tranceiver suspend mode (bsc#1135642).\n- usb: usb-storage: Add new ID to ums-realtek (bsc#1051510).\n- usb: xhci: avoid null pointer deref when bos field is NULL (bsc#1135642).\n- vfio: ccw: only free cp on final interrupt (bsc#1051510).\n- vlan: disable SIOCSHWTSTAMP in container (bsc#1051510).\n- x86/amd_nb: Add support for Raven Ridge CPUs (FATE#327735).\n- x86/CPU/AMD: Do not force the CPB cap when running under a hypervisor (bsc#1114279).\n- x86/cpufeatures: Carve out CQM features retrieval (jsc#SLE-5382).\n- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (jsc#SLE-5382). This changes definitions of some bits, but they are intended to be used only by the core, so hopefully, no KMP uses the definitions.\n- x86/cpufeatures: Enumerate the new AVX512 BFLOAT16 instructions (jsc#SLE-5382).\n- x86/cpufeatures: Enumerate user wait instructions (jsc#SLE-5187).\n- x86/CPU/hygon: Fix phys_proc_id calculation logic for multi-die  processors (fate#327735).\n- x86/mce: Fix machine_check_poll() tests for error types (bsc#1114279).\n- x86/microcode, cpuhotplug: Add a microcode loader CPU hotplug callback (bsc#1114279).\n- x86/microcode: Fix microcode hotplug state (bsc#1114279).\n- x86/microcode: Fix the ancient deprecated microcode loading method (bsc#1114279).\n- x86/mm/mem_encrypt: Disable all instrumentation for early SME setup (bsc#1114279).\n- x86/smpboot: Rename match_die() to match_pkg() (jsc#SLE-5454).\n- x86/speculation/mds: Revert CPU buffer clear on double fault exit (bsc#1114279).\n- x86/topology: Add CPUID.1F multi-die/package support (jsc#SLE-5454).\n- x86/topology: Create topology_max_die_per_package() (jsc#SLE-5454).\n- x86/topology: Define topology_die_id() (jsc#SLE-5454).\n- x86/topology: Define topology_logical_die_id() (jsc#SLE-5454).\n- x86/umwait: Add sysfs interface to control umwait C0.2 state (jsc#SLE-5187).\n- x86/umwait: Add sysfs interface to control umwait maximum time (jsc#SLE-5187).\n- x86/umwait: Initialize umwait control values (jsc#SLE-5187).\n- xdp: check device pointer before clearing (bsc#1109837).\n- {nl,mac}80211: allow 4addr AP operation on crypto controlled devices (bsc#1051510).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2019-1757",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_1757-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2019:1757-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PJTYGHQOYDY2SFDAAFYO3E3URRCWKEUQ/#PJTYGHQOYDY2SFDAAFYO3E3URRCWKEUQ"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2019:1757-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PJTYGHQOYDY2SFDAAFYO3E3URRCWKEUQ/#PJTYGHQOYDY2SFDAAFYO3E3URRCWKEUQ"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1051510",
        "url": "https://bugzilla.suse.com/1051510"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1071995",
        "url": "https://bugzilla.suse.com/1071995"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1088047",
        "url": "https://bugzilla.suse.com/1088047"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1094555",
        "url": "https://bugzilla.suse.com/1094555"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1098633",
        "url": "https://bugzilla.suse.com/1098633"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1103990",
        "url": "https://bugzilla.suse.com/1103990"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1103991",
        "url": "https://bugzilla.suse.com/1103991"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1103992",
        "url": "https://bugzilla.suse.com/1103992"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1106383",
        "url": "https://bugzilla.suse.com/1106383"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1109837",
        "url": "https://bugzilla.suse.com/1109837"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1111666",
        "url": "https://bugzilla.suse.com/1111666"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1112374",
        "url": "https://bugzilla.suse.com/1112374"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1114279",
        "url": "https://bugzilla.suse.com/1114279"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1114685",
        "url": "https://bugzilla.suse.com/1114685"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1119113",
        "url": "https://bugzilla.suse.com/1119113"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1119532",
        "url": "https://bugzilla.suse.com/1119532"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1120423",
        "url": "https://bugzilla.suse.com/1120423"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1125703",
        "url": "https://bugzilla.suse.com/1125703"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1128902",
        "url": "https://bugzilla.suse.com/1128902"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1130836",
        "url": "https://bugzilla.suse.com/1130836"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1132390",
        "url": "https://bugzilla.suse.com/1132390"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1133401",
        "url": "https://bugzilla.suse.com/1133401"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1133738",
        "url": "https://bugzilla.suse.com/1133738"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1134303",
        "url": "https://bugzilla.suse.com/1134303"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1134395",
        "url": "https://bugzilla.suse.com/1134395"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1135296",
        "url": "https://bugzilla.suse.com/1135296"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1135556",
        "url": "https://bugzilla.suse.com/1135556"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1135642",
        "url": "https://bugzilla.suse.com/1135642"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1135897",
        "url": "https://bugzilla.suse.com/1135897"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136156",
        "url": "https://bugzilla.suse.com/1136156"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136157",
        "url": "https://bugzilla.suse.com/1136157"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136161",
        "url": "https://bugzilla.suse.com/1136161"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136264",
        "url": "https://bugzilla.suse.com/1136264"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136271",
        "url": "https://bugzilla.suse.com/1136271"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136333",
        "url": "https://bugzilla.suse.com/1136333"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136343",
        "url": "https://bugzilla.suse.com/1136343"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136462",
        "url": "https://bugzilla.suse.com/1136462"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136935",
        "url": "https://bugzilla.suse.com/1136935"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1137103",
        "url": "https://bugzilla.suse.com/1137103"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1137194",
        "url": "https://bugzilla.suse.com/1137194"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1137366",
        "url": "https://bugzilla.suse.com/1137366"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1137625",
        "url": "https://bugzilla.suse.com/1137625"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1137728",
        "url": "https://bugzilla.suse.com/1137728"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1137884",
        "url": "https://bugzilla.suse.com/1137884"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1137985",
        "url": "https://bugzilla.suse.com/1137985"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1138263",
        "url": "https://bugzilla.suse.com/1138263"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1138589",
        "url": "https://bugzilla.suse.com/1138589"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1138681",
        "url": "https://bugzilla.suse.com/1138681"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1138719",
        "url": "https://bugzilla.suse.com/1138719"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1138732",
        "url": "https://bugzilla.suse.com/1138732"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1138879",
        "url": "https://bugzilla.suse.com/1138879"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1139712",
        "url": "https://bugzilla.suse.com/1139712"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1139771",
        "url": "https://bugzilla.suse.com/1139771"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1139865",
        "url": "https://bugzilla.suse.com/1139865"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140133",
        "url": "https://bugzilla.suse.com/1140133"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140228",
        "url": "https://bugzilla.suse.com/1140228"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140328",
        "url": "https://bugzilla.suse.com/1140328"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140405",
        "url": "https://bugzilla.suse.com/1140405"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140424",
        "url": "https://bugzilla.suse.com/1140424"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140428",
        "url": "https://bugzilla.suse.com/1140428"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140454",
        "url": "https://bugzilla.suse.com/1140454"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140463",
        "url": "https://bugzilla.suse.com/1140463"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140575",
        "url": "https://bugzilla.suse.com/1140575"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140577",
        "url": "https://bugzilla.suse.com/1140577"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140637",
        "url": "https://bugzilla.suse.com/1140637"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140658",
        "url": "https://bugzilla.suse.com/1140658"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140715",
        "url": "https://bugzilla.suse.com/1140715"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140719",
        "url": "https://bugzilla.suse.com/1140719"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140726",
        "url": "https://bugzilla.suse.com/1140726"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140727",
        "url": "https://bugzilla.suse.com/1140727"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140728",
        "url": "https://bugzilla.suse.com/1140728"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140814",
        "url": "https://bugzilla.suse.com/1140814"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140887",
        "url": "https://bugzilla.suse.com/1140887"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140888",
        "url": "https://bugzilla.suse.com/1140888"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140889",
        "url": "https://bugzilla.suse.com/1140889"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140891",
        "url": "https://bugzilla.suse.com/1140891"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140893",
        "url": "https://bugzilla.suse.com/1140893"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140948",
        "url": "https://bugzilla.suse.com/1140948"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140954",
        "url": "https://bugzilla.suse.com/1140954"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140955",
        "url": "https://bugzilla.suse.com/1140955"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140956",
        "url": "https://bugzilla.suse.com/1140956"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140957",
        "url": "https://bugzilla.suse.com/1140957"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140958",
        "url": "https://bugzilla.suse.com/1140958"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140959",
        "url": "https://bugzilla.suse.com/1140959"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140960",
        "url": "https://bugzilla.suse.com/1140960"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140961",
        "url": "https://bugzilla.suse.com/1140961"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140962",
        "url": "https://bugzilla.suse.com/1140962"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140964",
        "url": "https://bugzilla.suse.com/1140964"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140971",
        "url": "https://bugzilla.suse.com/1140971"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140972",
        "url": "https://bugzilla.suse.com/1140972"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140992",
        "url": "https://bugzilla.suse.com/1140992"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16871 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16871/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-20836 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-20836/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10126 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10126/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10638 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10638/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10639 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10639/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11599 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11599/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-12614 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-12614/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-12817 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-12817/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-13233 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-13233/"
      }
    ],
    "title": "Security update for the Linux Kernel",
    "tracking": {
      "current_release_date": "2019-07-20T06:26:39Z",
      "generator": {
        "date": "2019-07-20T06:26:39Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2019:1757-1",
      "initial_release_date": "2019-07-20T06:26:39Z",
      "revision_history": [
        {
          "date": "2019-07-20T06:26:39Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-4.12.14-lp151.28.10.1.noarch",
                "product": {
                  "name": "kernel-devel-4.12.14-lp151.28.10.1.noarch",
                  "product_id": "kernel-devel-4.12.14-lp151.28.10.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-docs-4.12.14-lp151.28.10.1.noarch",
                "product": {
                  "name": "kernel-docs-4.12.14-lp151.28.10.1.noarch",
                  "product_id": "kernel-docs-4.12.14-lp151.28.10.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
                "product": {
                  "name": "kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
                  "product_id": "kernel-docs-html-4.12.14-lp151.28.10.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-4.12.14-lp151.28.10.1.noarch",
                "product": {
                  "name": "kernel-macros-4.12.14-lp151.28.10.1.noarch",
                  "product_id": "kernel-macros-4.12.14-lp151.28.10.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-4.12.14-lp151.28.10.1.noarch",
                "product": {
                  "name": "kernel-source-4.12.14-lp151.28.10.1.noarch",
                  "product_id": "kernel-source-4.12.14-lp151.28.10.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
                "product": {
                  "name": "kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
                  "product_id": "kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-debug-4.12.14-lp151.28.10.1.x86_64",
                "product": {
                  "name": "kernel-debug-4.12.14-lp151.28.10.1.x86_64",
                  "product_id": "kernel-debug-4.12.14-lp151.28.10.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
                "product": {
                  "name": "kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
                  "product_id": "kernel-debug-base-4.12.14-lp151.28.10.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
                "product": {
                  "name": "kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
                  "product_id": "kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-4.12.14-lp151.28.10.1.x86_64",
                "product": {
                  "name": "kernel-default-4.12.14-lp151.28.10.1.x86_64",
                  "product_id": "kernel-default-4.12.14-lp151.28.10.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
                "product": {
                  "name": "kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
                  "product_id": "kernel-default-base-4.12.14-lp151.28.10.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
                "product": {
                  "name": "kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
                  "product_id": "kernel-default-devel-4.12.14-lp151.28.10.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
                  "product_id": "kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
                  "product_id": "kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
                  "product_id": "kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
                "product": {
                  "name": "kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
                  "product_id": "kernel-obs-build-4.12.14-lp151.28.10.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
                "product": {
                  "name": "kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
                  "product_id": "kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-syms-4.12.14-lp151.28.10.1.x86_64",
                "product": {
                  "name": "kernel-syms-4.12.14-lp151.28.10.1.x86_64",
                  "product_id": "kernel-syms-4.12.14-lp151.28.10.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
                "product": {
                  "name": "kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
                  "product_id": "kernel-vanilla-4.12.14-lp151.28.10.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
                "product": {
                  "name": "kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
                  "product_id": "kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64",
                "product": {
                  "name": "kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64",
                  "product_id": "kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.1",
                "product": {
                  "name": "openSUSE Leap 15.1",
                  "product_id": "openSUSE Leap 15.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-4.12.14-lp151.28.10.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64"
        },
        "product_reference": "kernel-debug-4.12.14-lp151.28.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-base-4.12.14-lp151.28.10.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64"
        },
        "product_reference": "kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64"
        },
        "product_reference": "kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-4.12.14-lp151.28.10.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64"
        },
        "product_reference": "kernel-default-4.12.14-lp151.28.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-base-4.12.14-lp151.28.10.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64"
        },
        "product_reference": "kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-devel-4.12.14-lp151.28.10.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64"
        },
        "product_reference": "kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-4.12.14-lp151.28.10.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch"
        },
        "product_reference": "kernel-devel-4.12.14-lp151.28.10.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-docs-4.12.14-lp151.28.10.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch"
        },
        "product_reference": "kernel-docs-4.12.14-lp151.28.10.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-docs-html-4.12.14-lp151.28.10.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch"
        },
        "product_reference": "kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-4.12.14-lp151.28.10.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch"
        },
        "product_reference": "kernel-macros-4.12.14-lp151.28.10.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-obs-build-4.12.14-lp151.28.10.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64"
        },
        "product_reference": "kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64"
        },
        "product_reference": "kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-4.12.14-lp151.28.10.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch"
        },
        "product_reference": "kernel-source-4.12.14-lp151.28.10.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch"
        },
        "product_reference": "kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-syms-4.12.14-lp151.28.10.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64"
        },
        "product_reference": "kernel-syms-4.12.14-lp151.28.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-vanilla-4.12.14-lp151.28.10.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64"
        },
        "product_reference": "kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64"
        },
        "product_reference": "kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
        },
        "product_reference": "kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-16871",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16871"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel\u0027s NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the NFS server will be lost.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16871",
          "url": "https://www.suse.com/security/cve/CVE-2018-16871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1137103 for CVE-2018-16871",
          "url": "https://bugzilla.suse.com/1137103"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156320 for CVE-2018-16871",
          "url": "https://bugzilla.suse.com/1156320"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-20T06:26:39Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-16871"
    },
    {
      "cve": "CVE-2018-20836",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-20836"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-20836",
          "url": "https://www.suse.com/security/cve/CVE-2018-20836"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1134395 for CVE-2018-20836",
          "url": "https://bugzilla.suse.com/1134395"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-20T06:26:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-20836"
    },
    {
      "cve": "CVE-2019-10126",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10126"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corruption and possibly other consequences.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10126",
          "url": "https://www.suse.com/security/cve/CVE-2019-10126"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1136935 for CVE-2019-10126",
          "url": "https://bugzilla.suse.com/1136935"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1137944 for CVE-2019-10126",
          "url": "https://bugzilla.suse.com/1137944"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1142129 for CVE-2019-10126",
          "url": "https://bugzilla.suse.com/1142129"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156330 for CVE-2019-10126",
          "url": "https://bugzilla.suse.com/1156330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-20T06:26:39Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-10126"
    },
    {
      "cve": "CVE-2019-10638",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10638"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may be conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10638",
          "url": "https://www.suse.com/security/cve/CVE-2019-10638"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1140575 for CVE-2019-10638",
          "url": "https://bugzilla.suse.com/1140575"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1140577 for CVE-2019-10638",
          "url": "https://bugzilla.suse.com/1140577"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1142129 for CVE-2019-10638",
          "url": "https://bugzilla.suse.com/1142129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-20T06:26:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10638"
    },
    {
      "cve": "CVE-2019-10639",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10639"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. Specifically, it is possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). This key contains enough bits from a kernel address (of a static variable) so when the key is extracted (via enumeration), the offset of the kernel image is exposed. This attack can be carried out remotely, by the attacker forcing the target device to send UDP or ICMP (or certain other) traffic to attacker-controlled IP addresses. Forcing a server to send UDP traffic is trivial if the server is a DNS server. ICMP traffic is trivial if the server answers ICMP Echo requests (ping). For client targets, if the target visits the attacker\u0027s web page, then WebRTC or gQUIC can be used to force UDP traffic to attacker-controlled IP addresses. NOTE: this attack against KASLR became viable in 4.1 because IP ID generation was changed to have a dependency on an address associated with a network namespace.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10639",
          "url": "https://www.suse.com/security/cve/CVE-2019-10639"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1140577 for CVE-2019-10639",
          "url": "https://bugzilla.suse.com/1140577"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-20T06:26:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10639"
    },
    {
      "cve": "CVE-2019-11599",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11599"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11599",
          "url": "https://www.suse.com/security/cve/CVE-2019-11599"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131645 for CVE-2019-11599",
          "url": "https://bugzilla.suse.com/1131645"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133738 for CVE-2019-11599",
          "url": "https://bugzilla.suse.com/1133738"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157905 for CVE-2019-11599",
          "url": "https://bugzilla.suse.com/1157905"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-20T06:26:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-11599"
    },
    {
      "cve": "CVE-2019-12614",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-12614"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup of prop-\u003ename, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-12614",
          "url": "https://www.suse.com/security/cve/CVE-2019-12614"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1137194 for CVE-2019-12614",
          "url": "https://bugzilla.suse.com/1137194"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-20T06:26:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-12614"
    },
    {
      "cve": "CVE-2019-12817",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-12817"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another\u0027s virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-12817",
          "url": "https://www.suse.com/security/cve/CVE-2019-12817"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1138263 for CVE-2019-12817",
          "url": "https://bugzilla.suse.com/1138263"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1138264 for CVE-2019-12817",
          "url": "https://bugzilla.suse.com/1138264"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-20T06:26:39Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-12817"
    },
    {
      "cve": "CVE-2019-13233",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-13233"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-13233",
          "url": "https://www.suse.com/security/cve/CVE-2019-13233"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1140454 for CVE-2019-13233",
          "url": "https://bugzilla.suse.com/1140454"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1144502 for CVE-2019-13233",
          "url": "https://bugzilla.suse.com/1144502"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.10.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.10.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-20T06:26:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-13233"
    }
  ]
}