RHSA-2019:3517
Vulnerability from csaf_opensuse - Published: 2019-11-05 00:00 - Updated: 2026-09-20 11:05Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2019:3517.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2019:3517.
Patchnames: RHSA-2019:3517
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
important
4 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
low
4 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
low
5.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
low
4 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
low
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
low
6.2 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
low
6.8 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
important
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
low
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
important
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
important
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
low
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
low
4.9 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
moderate
5.1 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
low
5.6 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
low
6.4 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
moderate
4.8 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2015-1593
Threats
Impact
moderate
References
133 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2019:3517.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2019:3517.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2019:3517",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2019_3517.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1593 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16884 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-19854 page",
"url": "https://www.suse.com/security/cve/CVE-2018-19854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-19985 page",
"url": "https://www.suse.com/security/cve/CVE-2018-19985/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-20169 page",
"url": "https://www.suse.com/security/cve/CVE-2018-20169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-10126 page",
"url": "https://www.suse.com/security/cve/CVE-2019-10126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-10207 page",
"url": "https://www.suse.com/security/cve/CVE-2019-10207/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-10638 page",
"url": "https://www.suse.com/security/cve/CVE-2019-10638/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11599 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11599/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11833 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11833/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11884 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-12382 page",
"url": "https://www.suse.com/security/cve/CVE-2019-12382/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13233 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13648 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13648/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14821 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-15214 page",
"url": "https://www.suse.com/security/cve/CVE-2019-15214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-15666 page",
"url": "https://www.suse.com/security/cve/CVE-2019-15666/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-15916 page",
"url": "https://www.suse.com/security/cve/CVE-2019-15916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-15919 page",
"url": "https://www.suse.com/security/cve/CVE-2019-15919/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-15920 page",
"url": "https://www.suse.com/security/cve/CVE-2019-15920/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-15921 page",
"url": "https://www.suse.com/security/cve/CVE-2019-15921/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-15924 page",
"url": "https://www.suse.com/security/cve/CVE-2019-15924/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-15927 page",
"url": "https://www.suse.com/security/cve/CVE-2019-15927/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-16994 page",
"url": "https://www.suse.com/security/cve/CVE-2019-16994/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-20811 page",
"url": "https://www.suse.com/security/cve/CVE-2019-20811/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-25160 page",
"url": "https://www.suse.com/security/cve/CVE-2019-25160/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-3459 page",
"url": "https://www.suse.com/security/cve/CVE-2019-3459/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-3460 page",
"url": "https://www.suse.com/security/cve/CVE-2019-3460/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-3874 page",
"url": "https://www.suse.com/security/cve/CVE-2019-3874/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-3882 page",
"url": "https://www.suse.com/security/cve/CVE-2019-3882/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-3900 page",
"url": "https://www.suse.com/security/cve/CVE-2019-3900/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5489 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5489/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7222 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9506 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9506/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-10720 page",
"url": "https://www.suse.com/security/cve/CVE-2020-10720/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:05:49Z",
"generator": {
"date": "2019-11-05T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2019:3517",
"initial_release_date": "2019-11-05T00:00:00Z",
"revision_history": [
{
"date": "2019-11-05T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:05:49Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"product": {
"name": "kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"product_id": "kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-whitelists@4.18.0-147.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:4.18.0-147.el8.noarch",
"product": {
"name": "kernel-doc-0:4.18.0-147.el8.noarch",
"product_id": "kernel-doc-0:4.18.0-147.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@4.18.0-147.el8?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:4.18.0-147.el8.x86_64",
"product": {
"name": "bpftool-0:4.18.0-147.el8.x86_64",
"product_id": "bpftool-0:4.18.0-147.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@4.18.0-147.el8?arch=x86_64\u0026upstream=bpftool-0:4.18.0-147.el8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:4.18.0-147.el8.x86_64",
"product": {
"name": "kernel-0:4.18.0-147.el8.x86_64",
"product_id": "kernel-0:4.18.0-147.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@4.18.0-147.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:4.18.0-147.el8.x86_64",
"product": {
"name": "kernel-core-0:4.18.0-147.el8.x86_64",
"product_id": "kernel-core-0:4.18.0-147.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@4.18.0-147.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"product": {
"name": "kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"product_id": "kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-147.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:4.18.0-147.el8.x86_64",
"product": {
"name": "kernel-debug-0:4.18.0-147.el8.x86_64",
"product_id": "kernel-debug-0:4.18.0-147.el8.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@4.18.0-147.el8?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-147.el8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:4.18.0-147.el8.x86_64",
"product": {
"name": "kernel-debug-core-0:4.18.0-147.el8.x86_64",
"product_id": "kernel-debug-core-0:4.18.0-147.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-147.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"product": {
"name": "kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"product_id": "kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-147.el8?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-147.el8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"product": {
"name": "kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"product_id": "kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-147.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"product_id": "kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-147.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:4.18.0-147.el8.x86_64",
"product": {
"name": "kernel-devel-0:4.18.0-147.el8.x86_64",
"product_id": "kernel-devel-0:4.18.0-147.el8.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@4.18.0-147.el8?arch=x86_64\u0026upstream=kernel-source-0:4.18.0-147.el8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:4.18.0-147.el8.x86_64",
"product": {
"name": "kernel-headers-0:4.18.0-147.el8.x86_64",
"product_id": "kernel-headers-0:4.18.0-147.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@4.18.0-147.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:4.18.0-147.el8.x86_64",
"product": {
"name": "kernel-modules-0:4.18.0-147.el8.x86_64",
"product_id": "kernel-modules-0:4.18.0-147.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@4.18.0-147.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"product": {
"name": "kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"product_id": "kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-147.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:4.18.0-147.el8.x86_64",
"product": {
"name": "kernel-tools-0:4.18.0-147.el8.x86_64",
"product_id": "kernel-tools-0:4.18.0-147.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@4.18.0-147.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"product": {
"name": "kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"product_id": "kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-147.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"product_id": "kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-147.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:4.18.0-147.el8.x86_64",
"product": {
"name": "perf-0:4.18.0-147.el8.x86_64",
"product_id": "perf-0:4.18.0-147.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@4.18.0-147.el8?arch=x86_64\u0026upstream=perf-0:4.18.0-147.el8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:4.18.0-147.el8.x86_64",
"product": {
"name": "python3-perf-0:4.18.0-147.el8.x86_64",
"product_id": "python3-perf-0:4.18.0-147.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@4.18.0-147.el8?arch=x86_64\u0026upstream=perf-0:4.18.0-147.el8.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:4.18.0-147.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64"
},
"product_reference": "bpftool-0:4.18.0-147.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:4.18.0-147.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64"
},
"product_reference": "kernel-0:4.18.0-147.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-whitelists-0:4.18.0-147.el8.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch"
},
"product_reference": "kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:4.18.0-147.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64"
},
"product_reference": "kernel-core-0:4.18.0-147.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-0:4.18.0-147.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64"
},
"product_reference": "kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:4.18.0-147.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64"
},
"product_reference": "kernel-debug-0:4.18.0-147.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:4.18.0-147.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64"
},
"product_reference": "kernel-debug-core-0:4.18.0-147.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:4.18.0-147.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64"
},
"product_reference": "kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:4.18.0-147.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64"
},
"product_reference": "kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:4.18.0-147.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64"
},
"product_reference": "kernel-devel-0:4.18.0-147.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:4.18.0-147.el8.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch"
},
"product_reference": "kernel-doc-0:4.18.0-147.el8.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:4.18.0-147.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64"
},
"product_reference": "kernel-headers-0:4.18.0-147.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:4.18.0-147.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64"
},
"product_reference": "kernel-modules-0:4.18.0-147.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:4.18.0-147.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64"
},
"product_reference": "kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:4.18.0-147.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64"
},
"product_reference": "kernel-tools-0:4.18.0-147.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:4.18.0-147.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64"
},
"product_reference": "kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:4.18.0-147.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64"
},
"product_reference": "perf-0:4.18.0-147.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:4.18.0-147.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
},
"product_reference": "python3-perf-0:4.18.0-147.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-1593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1593"
}
],
"notes": [
{
"category": "general",
"text": "The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, which makes it easier for attackers to bypass the ASLR protection mechanism by predicting the address of the top of the stack, related to the randomize_stack_top function in fs/binfmt_elf.c and the stack_maxrandom_size function in arch/x86/mm/mmap.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1593",
"url": "https://www.suse.com/security/cve/CVE-2015-1593"
},
{
"category": "external",
"summary": "SUSE Bug 1044934 for CVE-2015-1593",
"url": "https://bugzilla.suse.com/1044934"
},
{
"category": "external",
"summary": "SUSE Bug 917839 for CVE-2015-1593",
"url": "https://bugzilla.suse.com/917839"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1593"
},
{
"cve": "CVE-2018-16884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16884"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16884",
"url": "https://www.suse.com/security/cve/CVE-2018-16884"
},
{
"category": "external",
"summary": "SUSE Bug 1119946 for CVE-2018-16884",
"url": "https://bugzilla.suse.com/1119946"
},
{
"category": "external",
"summary": "SUSE Bug 1119947 for CVE-2018-16884",
"url": "https://bugzilla.suse.com/1119947"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-16884"
},
{
"cve": "CVE-2018-19854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-19854"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 4.19.3. crypto_report_one() and related functions in crypto/crypto_user.c (the crypto user configuration API) do not fully initialize structures that are copied to userspace, potentially leaking sensitive memory to user programs. NOTE: this is a CVE-2013-2547 regression but with easier exploitability because the attacker does not need a capability (however, the system must have the CONFIG_CRYPTO_USER kconfig option).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-19854",
"url": "https://www.suse.com/security/cve/CVE-2018-19854"
},
{
"category": "external",
"summary": "SUSE Bug 1118428 for CVE-2018-19854",
"url": "https://bugzilla.suse.com/1118428"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-19854"
},
{
"cve": "CVE-2018-19985",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-19985"
}
],
"notes": [
{
"category": "general",
"text": "The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the kernel address space.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-19985",
"url": "https://www.suse.com/security/cve/CVE-2018-19985"
},
{
"category": "external",
"summary": "SUSE Bug 1120743 for CVE-2018-19985",
"url": "https://bugzilla.suse.com/1120743"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-19985"
},
{
"cve": "CVE-2018-20169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-20169"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-20169",
"url": "https://www.suse.com/security/cve/CVE-2018-20169"
},
{
"category": "external",
"summary": "SUSE Bug 1119714 for CVE-2018-20169",
"url": "https://bugzilla.suse.com/1119714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-20169"
},
{
"cve": "CVE-2019-10126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-10126"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corruption and possibly other consequences.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-10126",
"url": "https://www.suse.com/security/cve/CVE-2019-10126"
},
{
"category": "external",
"summary": "SUSE Bug 1136935 for CVE-2019-10126",
"url": "https://bugzilla.suse.com/1136935"
},
{
"category": "external",
"summary": "SUSE Bug 1137944 for CVE-2019-10126",
"url": "https://bugzilla.suse.com/1137944"
},
{
"category": "external",
"summary": "SUSE Bug 1142129 for CVE-2019-10126",
"url": "https://bugzilla.suse.com/1142129"
},
{
"category": "external",
"summary": "SUSE Bug 1156330 for CVE-2019-10126",
"url": "https://bugzilla.suse.com/1156330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-10126"
},
{
"cve": "CVE-2019-10207",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-10207"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and kernel 5.x.x. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-10207",
"url": "https://www.suse.com/security/cve/CVE-2019-10207"
},
{
"category": "external",
"summary": "SUSE Bug 1123959 for CVE-2019-10207",
"url": "https://bugzilla.suse.com/1123959"
},
{
"category": "external",
"summary": "SUSE Bug 1142857 for CVE-2019-10207",
"url": "https://bugzilla.suse.com/1142857"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-10207"
},
{
"cve": "CVE-2019-10638",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-10638"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may be conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-10638",
"url": "https://www.suse.com/security/cve/CVE-2019-10638"
},
{
"category": "external",
"summary": "SUSE Bug 1140575 for CVE-2019-10638",
"url": "https://bugzilla.suse.com/1140575"
},
{
"category": "external",
"summary": "SUSE Bug 1140577 for CVE-2019-10638",
"url": "https://bugzilla.suse.com/1140577"
},
{
"category": "external",
"summary": "SUSE Bug 1142129 for CVE-2019-10638",
"url": "https://bugzilla.suse.com/1142129"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-10638"
},
{
"cve": "CVE-2019-11599",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11599"
}
],
"notes": [
{
"category": "general",
"text": "The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11599",
"url": "https://www.suse.com/security/cve/CVE-2019-11599"
},
{
"category": "external",
"summary": "SUSE Bug 1131645 for CVE-2019-11599",
"url": "https://bugzilla.suse.com/1131645"
},
{
"category": "external",
"summary": "SUSE Bug 1133738 for CVE-2019-11599",
"url": "https://bugzilla.suse.com/1133738"
},
{
"category": "external",
"summary": "SUSE Bug 1157905 for CVE-2019-11599",
"url": "https://bugzilla.suse.com/1157905"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-11599"
},
{
"cve": "CVE-2019-11833",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11833"
}
],
"notes": [
{
"category": "general",
"text": "fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11833",
"url": "https://www.suse.com/security/cve/CVE-2019-11833"
},
{
"category": "external",
"summary": "SUSE Bug 1135281 for CVE-2019-11833",
"url": "https://bugzilla.suse.com/1135281"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-11833"
},
{
"cve": "CVE-2019-11884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11884"
}
],
"notes": [
{
"category": "general",
"text": "The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15 allows a local user to obtain potentially sensitive information from kernel stack memory via a HIDPCONNADD command, because a name field may not end with a \u0027\\0\u0027 character.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11884",
"url": "https://www.suse.com/security/cve/CVE-2019-11884"
},
{
"category": "external",
"summary": "SUSE Bug 1134848 for CVE-2019-11884",
"url": "https://bugzilla.suse.com/1134848"
},
{
"category": "external",
"summary": "SUSE Bug 1139868 for CVE-2019-11884",
"url": "https://bugzilla.suse.com/1139868"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-11884"
},
{
"cve": "CVE-2019-12382",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-12382"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in drm_load_edid_firmware in drivers/gpu/drm/drm_edid_load.c in the Linux kernel through 5.1.5. There is an unchecked kstrdup of fwstr, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: The vendor disputes this issues as not being a vulnerability because kstrdup() returning NULL is handled sufficiently and there is no chance for a NULL pointer dereference",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-12382",
"url": "https://www.suse.com/security/cve/CVE-2019-12382"
},
{
"category": "external",
"summary": "SUSE Bug 1136586 for CVE-2019-12382",
"url": "https://bugzilla.suse.com/1136586"
},
{
"category": "external",
"summary": "SUSE Bug 1155298 for CVE-2019-12382",
"url": "https://bugzilla.suse.com/1155298"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-12382"
},
{
"cve": "CVE-2019-13233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13233"
}
],
"notes": [
{
"category": "general",
"text": "In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13233",
"url": "https://www.suse.com/security/cve/CVE-2019-13233"
},
{
"category": "external",
"summary": "SUSE Bug 1140454 for CVE-2019-13233",
"url": "https://bugzilla.suse.com/1140454"
},
{
"category": "external",
"summary": "SUSE Bug 1144502 for CVE-2019-13233",
"url": "https://bugzilla.suse.com/1144502"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-13233"
},
{
"cve": "CVE-2019-13648",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13648"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13648",
"url": "https://www.suse.com/security/cve/CVE-2019-13648"
},
{
"category": "external",
"summary": "SUSE Bug 1142254 for CVE-2019-13648",
"url": "https://bugzilla.suse.com/1142254"
},
{
"category": "external",
"summary": "SUSE Bug 1142265 for CVE-2019-13648",
"url": "https://bugzilla.suse.com/1142265"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-13648"
},
{
"cve": "CVE-2019-14821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14821"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel\u0027s KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer \u0027struct kvm_coalesced_mmio\u0027 object, wherein write indices \u0027ring-\u003efirst\u0027 and \u0027ring-\u003elast\u0027 value could be supplied by a host user-space process. An unprivileged host user or process with access to \u0027/dev/kvm\u0027 device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14821",
"url": "https://www.suse.com/security/cve/CVE-2019-14821"
},
{
"category": "external",
"summary": "SUSE Bug 1151350 for CVE-2019-14821",
"url": "https://bugzilla.suse.com/1151350"
},
{
"category": "external",
"summary": "SUSE Bug 1218966 for CVE-2019-14821",
"url": "https://bugzilla.suse.com/1218966"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-14821"
},
{
"cve": "CVE-2019-15214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-15214"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 5.0.10. There is a use-after-free in the sound subsystem because card disconnection causes certain data structures to be deleted too early. This is related to sound/core/init.c and sound/core/info.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-15214",
"url": "https://www.suse.com/security/cve/CVE-2019-15214"
},
{
"category": "external",
"summary": "SUSE Bug 1146519 for CVE-2019-15214",
"url": "https://bugzilla.suse.com/1146519"
},
{
"category": "external",
"summary": "SUSE Bug 1146550 for CVE-2019-15214",
"url": "https://bugzilla.suse.com/1146550"
},
{
"category": "external",
"summary": "SUSE Bug 1158381 for CVE-2019-15214",
"url": "https://bugzilla.suse.com/1158381"
},
{
"category": "external",
"summary": "SUSE Bug 1158834 for CVE-2019-15214",
"url": "https://bugzilla.suse.com/1158834"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-15214"
},
{
"cve": "CVE-2019-15666",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-15666"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 5.0.19. There is an out-of-bounds array access in __xfrm_policy_unlink, which will cause denial of service, because verify_newpolicy_info in net/xfrm/xfrm_user.c mishandles directory validation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-15666",
"url": "https://www.suse.com/security/cve/CVE-2019-15666"
},
{
"category": "external",
"summary": "SUSE Bug 1148394 for CVE-2019-15666",
"url": "https://bugzilla.suse.com/1148394"
},
{
"category": "external",
"summary": "SUSE Bug 1172140 for CVE-2019-15666",
"url": "https://bugzilla.suse.com/1172140"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-15666"
},
{
"cve": "CVE-2019-15916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-15916"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-15916",
"url": "https://www.suse.com/security/cve/CVE-2019-15916"
},
{
"category": "external",
"summary": "SUSE Bug 1149448 for CVE-2019-15916",
"url": "https://bugzilla.suse.com/1149448"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-15916"
},
{
"cve": "CVE-2019-15919",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-15919"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 5.0.10. SMB2_write in fs/cifs/smb2pdu.c has a use-after-free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-15919",
"url": "https://www.suse.com/security/cve/CVE-2019-15919"
},
{
"category": "external",
"summary": "SUSE Bug 1149552 for CVE-2019-15919",
"url": "https://bugzilla.suse.com/1149552"
},
{
"category": "external",
"summary": "SUSE Bug 1172957 for CVE-2019-15919",
"url": "https://bugzilla.suse.com/1172957"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-15919"
},
{
"cve": "CVE-2019-15920",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-15920"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 5.0.10. SMB2_read in fs/cifs/smb2pdu.c has a use-after-free. NOTE: this was not fixed correctly in 5.0.10; see the 5.0.11 ChangeLog, which documents a memory leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-15920",
"url": "https://www.suse.com/security/cve/CVE-2019-15920"
},
{
"category": "external",
"summary": "SUSE Bug 1149626 for CVE-2019-15920",
"url": "https://bugzilla.suse.com/1149626"
},
{
"category": "external",
"summary": "SUSE Bug 1156335 for CVE-2019-15920",
"url": "https://bugzilla.suse.com/1156335"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-15920"
},
{
"cve": "CVE-2019-15921",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-15921"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 5.0.6. There is a memory leak issue when idr_alloc() fails in genl_register_family() in net/netlink/genetlink.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-15921",
"url": "https://www.suse.com/security/cve/CVE-2019-15921"
},
{
"category": "external",
"summary": "SUSE Bug 1149602 for CVE-2019-15921",
"url": "https://bugzilla.suse.com/1149602"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-15921"
},
{
"cve": "CVE-2019-15924",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-15924"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 5.0.11. fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c has a NULL pointer dereference because there is no -ENOMEM upon an alloc_workqueue failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-15924",
"url": "https://www.suse.com/security/cve/CVE-2019-15924"
},
{
"category": "external",
"summary": "SUSE Bug 1149612 for CVE-2019-15924",
"url": "https://bugzilla.suse.com/1149612"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-15924"
},
{
"cve": "CVE-2019-15927",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-15927"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 4.20.2. An out-of-bounds access exists in the function build_audio_procunit in the file sound/usb/mixer.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-15927",
"url": "https://www.suse.com/security/cve/CVE-2019-15927"
},
{
"category": "external",
"summary": "SUSE Bug 1149522 for CVE-2019-15927",
"url": "https://bugzilla.suse.com/1149522"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-15927"
},
{
"cve": "CVE-2019-16994",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-16994"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel before 5.0, a memory leak exists in sit_init_net() in net/ipv6/sit.c when register_netdev() fails to register sitn-\u003efb_tunnel_dev, which may cause denial of service, aka CID-07f12b26e21a.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-16994",
"url": "https://www.suse.com/security/cve/CVE-2019-16994"
},
{
"category": "external",
"summary": "SUSE Bug 1161523 for CVE-2019-16994",
"url": "https://bugzilla.suse.com/1161523"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-16994"
},
{
"cve": "CVE-2019-20811",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-20811"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, a reference count is mishandled, aka CID-a3e23f719f5c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-20811",
"url": "https://www.suse.com/security/cve/CVE-2019-20811"
},
{
"category": "external",
"summary": "SUSE Bug 1172456 for CVE-2019-20811",
"url": "https://bugzilla.suse.com/1172456"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-20811"
},
{
"cve": "CVE-2019-25160",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-25160"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetlabel: fix out-of-bounds memory accesses\n\nThere are two array out-of-bounds memory accesses, one in\ncipso_v4_map_lvl_valid(), the other in netlbl_bitmap_walk(). Both\nerrors are embarassingly simple, and the fixes are straightforward.\n\nAs a FYI for anyone backporting this patch to kernels prior to v4.8,\nyou\u0027ll want to apply the netlbl_bitmap_walk() patch to\ncipso_v4_bitmap_walk() as netlbl_bitmap_walk() doesn\u0027t exist before\nLinux v4.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-25160",
"url": "https://www.suse.com/security/cve/CVE-2019-25160"
},
{
"category": "external",
"summary": "SUSE Bug 1220394 for CVE-2019-25160",
"url": "https://bugzilla.suse.com/1220394"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-25160"
},
{
"cve": "CVE-2019-3459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-3459"
}
],
"notes": [
{
"category": "general",
"text": "A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-3459",
"url": "https://www.suse.com/security/cve/CVE-2019-3459"
},
{
"category": "external",
"summary": "SUSE Bug 1120758 for CVE-2019-3459",
"url": "https://bugzilla.suse.com/1120758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-3459"
},
{
"cve": "CVE-2019-3460",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-3460"
}
],
"notes": [
{
"category": "general",
"text": "A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-3460",
"url": "https://www.suse.com/security/cve/CVE-2019-3460"
},
{
"category": "external",
"summary": "SUSE Bug 1120758 for CVE-2019-3460",
"url": "https://bugzilla.suse.com/1120758"
},
{
"category": "external",
"summary": "SUSE Bug 1155131 for CVE-2019-3460",
"url": "https://bugzilla.suse.com/1155131"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-3460"
},
{
"cve": "CVE-2019-3874",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-3874"
}
],
"notes": [
{
"category": "general",
"text": "The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-3874",
"url": "https://www.suse.com/security/cve/CVE-2019-3874"
},
{
"category": "external",
"summary": "SUSE Bug 1129898 for CVE-2019-3874",
"url": "https://bugzilla.suse.com/1129898"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-3874"
},
{
"cve": "CVE-2019-3882",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-3882"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s vfio interface implementation that permits violation of the user\u0027s locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS). Versions 3.10, 4.14 and 4.18 are vulnerable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-3882",
"url": "https://www.suse.com/security/cve/CVE-2019-3882"
},
{
"category": "external",
"summary": "SUSE Bug 1131416 for CVE-2019-3882",
"url": "https://bugzilla.suse.com/1131416"
},
{
"category": "external",
"summary": "SUSE Bug 1131427 for CVE-2019-3882",
"url": "https://bugzilla.suse.com/1131427"
},
{
"category": "external",
"summary": "SUSE Bug 1133319 for CVE-2019-3882",
"url": "https://bugzilla.suse.com/1133319"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-3882"
},
{
"cve": "CVE-2019-3900",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-3900"
}
],
"notes": [
{
"category": "general",
"text": "An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-3900",
"url": "https://www.suse.com/security/cve/CVE-2019-3900"
},
{
"category": "external",
"summary": "SUSE Bug 1133374 for CVE-2019-3900",
"url": "https://bugzilla.suse.com/1133374"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-3900"
},
{
"cve": "CVE-2019-5489",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5489"
}
],
"notes": [
{
"category": "general",
"text": "The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincore program.) Limited remote exploitation may be possible, as demonstrated by latency differences in accessing public files from an Apache HTTP Server.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5489",
"url": "https://www.suse.com/security/cve/CVE-2019-5489"
},
{
"category": "external",
"summary": "SUSE Bug 1120843 for CVE-2019-5489",
"url": "https://bugzilla.suse.com/1120843"
},
{
"category": "external",
"summary": "SUSE Bug 1120885 for CVE-2019-5489",
"url": "https://bugzilla.suse.com/1120885"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5489"
},
{
"cve": "CVE-2019-7222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7222"
}
],
"notes": [
{
"category": "general",
"text": "The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7222",
"url": "https://www.suse.com/security/cve/CVE-2019-7222"
},
{
"category": "external",
"summary": "SUSE Bug 1124735 for CVE-2019-7222",
"url": "https://bugzilla.suse.com/1124735"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-7222"
},
{
"cve": "CVE-2019-9506",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9506"
}
],
"notes": [
{
"category": "general",
"text": "The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka \"KNOB\") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9506",
"url": "https://www.suse.com/security/cve/CVE-2019-9506"
},
{
"category": "external",
"summary": "SUSE Bug 1137865 for CVE-2019-9506",
"url": "https://bugzilla.suse.com/1137865"
},
{
"category": "external",
"summary": "SUSE Bug 1146042 for CVE-2019-9506",
"url": "https://bugzilla.suse.com/1146042"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-9506"
},
{
"cve": "CVE-2020-10720",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-10720"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s implementation of GRO in versions before 5.2. This flaw allows an attacker with local access to crash the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-10720",
"url": "https://www.suse.com/security/cve/CVE-2020-10720"
},
{
"category": "external",
"summary": "SUSE Bug 1170778 for CVE-2020-10720",
"url": "https://bugzilla.suse.com/1170778"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-147.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-147.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-147.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-10720"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…