RHSA-2021:1578
Vulnerability from csaf_opensuse - Published: 2021-05-18 00:00 - Updated: 2026-09-20 11:14Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2021:1578.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2021:1578.
Patchnames: RHSA-2021:1578
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
important
4.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
important
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
low
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
important
7.4 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
important
6.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
moderate
6.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
important
7.5 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
important
6.2 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
important
6.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
moderate
5.1 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
moderate
4.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
moderate
7.7 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
important
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
important
6.6 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
important
7.4 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
important
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2019-18811
Threats
Impact
important
References
122 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2021:1578.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2021:1578.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2021:1578",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2021_1578.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-18811 page",
"url": "https://www.suse.com/security/cve/CVE-2019-18811/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-19523 page",
"url": "https://www.suse.com/security/cve/CVE-2019-19523/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-19528 page",
"url": "https://www.suse.com/security/cve/CVE-2019-19528/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-0431 page",
"url": "https://www.suse.com/security/cve/CVE-2020-0431/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-11608 page",
"url": "https://www.suse.com/security/cve/CVE-2020-11608/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-12114 page",
"url": "https://www.suse.com/security/cve/CVE-2020-12114/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-12362 page",
"url": "https://www.suse.com/security/cve/CVE-2020-12362/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-12363 page",
"url": "https://www.suse.com/security/cve/CVE-2020-12363/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-12364 page",
"url": "https://www.suse.com/security/cve/CVE-2020-12364/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-12464 page",
"url": "https://www.suse.com/security/cve/CVE-2020-12464/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14314 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14314/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-14356 page",
"url": "https://www.suse.com/security/cve/CVE-2020-14356/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15437 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15437/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-24394 page",
"url": "https://www.suse.com/security/cve/CVE-2020-24394/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-25212 page",
"url": "https://www.suse.com/security/cve/CVE-2020-25212/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-25284 page",
"url": "https://www.suse.com/security/cve/CVE-2020-25284/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-25285 page",
"url": "https://www.suse.com/security/cve/CVE-2020-25285/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-25643 page",
"url": "https://www.suse.com/security/cve/CVE-2020-25643/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-25645 page",
"url": "https://www.suse.com/security/cve/CVE-2020-25645/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-25704 page",
"url": "https://www.suse.com/security/cve/CVE-2020-25704/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-27786 page",
"url": "https://www.suse.com/security/cve/CVE-2020-27786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-27835 page",
"url": "https://www.suse.com/security/cve/CVE-2020-27835/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-28974 page",
"url": "https://www.suse.com/security/cve/CVE-2020-28974/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-35508 page",
"url": "https://www.suse.com/security/cve/CVE-2020-35508/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-36322 page",
"url": "https://www.suse.com/security/cve/CVE-2020-36322/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-36557 page",
"url": "https://www.suse.com/security/cve/CVE-2020-36557/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-36694 page",
"url": "https://www.suse.com/security/cve/CVE-2020-36694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-0342 page",
"url": "https://www.suse.com/security/cve/CVE-2021-0342/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-0605 page",
"url": "https://www.suse.com/security/cve/CVE-2021-0605/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3428 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3428/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1390 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1390/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:14:18Z",
"generator": {
"date": "2021-05-18T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2021:1578",
"initial_release_date": "2021-05-18T00:00:00Z",
"revision_history": [
{
"date": "2021-05-18T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:14:18Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"product": {
"name": "kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"product_id": "kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@4.18.0-305.el8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:4.18.0-305.el8.noarch",
"product": {
"name": "kernel-doc-0:4.18.0-305.el8.noarch",
"product_id": "kernel-doc-0:4.18.0-305.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@4.18.0-305.el8?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:4.18.0-305.el8.x86_64",
"product": {
"name": "bpftool-0:4.18.0-305.el8.x86_64",
"product_id": "bpftool-0:4.18.0-305.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@4.18.0-305.el8?arch=x86_64\u0026upstream=bpftool-0:4.18.0-305.el8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:4.18.0-305.el8.x86_64",
"product": {
"name": "kernel-0:4.18.0-305.el8.x86_64",
"product_id": "kernel-0:4.18.0-305.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@4.18.0-305.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:4.18.0-305.el8.x86_64",
"product": {
"name": "kernel-core-0:4.18.0-305.el8.x86_64",
"product_id": "kernel-core-0:4.18.0-305.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@4.18.0-305.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"product": {
"name": "kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"product_id": "kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-305.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:4.18.0-305.el8.x86_64",
"product": {
"name": "kernel-debug-0:4.18.0-305.el8.x86_64",
"product_id": "kernel-debug-0:4.18.0-305.el8.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@4.18.0-305.el8?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-305.el8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:4.18.0-305.el8.x86_64",
"product": {
"name": "kernel-debug-core-0:4.18.0-305.el8.x86_64",
"product_id": "kernel-debug-core-0:4.18.0-305.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-305.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"product": {
"name": "kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"product_id": "kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-305.el8?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-305.el8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"product": {
"name": "kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"product_id": "kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-305.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"product_id": "kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-305.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:4.18.0-305.el8.x86_64",
"product": {
"name": "kernel-devel-0:4.18.0-305.el8.x86_64",
"product_id": "kernel-devel-0:4.18.0-305.el8.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@4.18.0-305.el8?arch=x86_64\u0026upstream=kernel-source-0:4.18.0-305.el8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:4.18.0-305.el8.x86_64",
"product": {
"name": "kernel-headers-0:4.18.0-305.el8.x86_64",
"product_id": "kernel-headers-0:4.18.0-305.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@4.18.0-305.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:4.18.0-305.el8.x86_64",
"product": {
"name": "kernel-modules-0:4.18.0-305.el8.x86_64",
"product_id": "kernel-modules-0:4.18.0-305.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@4.18.0-305.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"product": {
"name": "kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"product_id": "kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-305.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:4.18.0-305.el8.x86_64",
"product": {
"name": "kernel-tools-0:4.18.0-305.el8.x86_64",
"product_id": "kernel-tools-0:4.18.0-305.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@4.18.0-305.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"product": {
"name": "kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"product_id": "kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-305.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"product_id": "kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-305.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:4.18.0-305.el8.x86_64",
"product": {
"name": "perf-0:4.18.0-305.el8.x86_64",
"product_id": "perf-0:4.18.0-305.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@4.18.0-305.el8?arch=x86_64\u0026upstream=perf-0:4.18.0-305.el8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:4.18.0-305.el8.x86_64",
"product": {
"name": "python3-perf-0:4.18.0-305.el8.x86_64",
"product_id": "python3-perf-0:4.18.0-305.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@4.18.0-305.el8?arch=x86_64\u0026upstream=perf-0:4.18.0-305.el8.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:4.18.0-305.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64"
},
"product_reference": "bpftool-0:4.18.0-305.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:4.18.0-305.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64"
},
"product_reference": "kernel-0:4.18.0-305.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:4.18.0-305.el8.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch"
},
"product_reference": "kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:4.18.0-305.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64"
},
"product_reference": "kernel-core-0:4.18.0-305.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-0:4.18.0-305.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64"
},
"product_reference": "kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:4.18.0-305.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64"
},
"product_reference": "kernel-debug-0:4.18.0-305.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:4.18.0-305.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64"
},
"product_reference": "kernel-debug-core-0:4.18.0-305.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:4.18.0-305.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64"
},
"product_reference": "kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:4.18.0-305.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64"
},
"product_reference": "kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:4.18.0-305.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64"
},
"product_reference": "kernel-devel-0:4.18.0-305.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:4.18.0-305.el8.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch"
},
"product_reference": "kernel-doc-0:4.18.0-305.el8.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:4.18.0-305.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64"
},
"product_reference": "kernel-headers-0:4.18.0-305.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:4.18.0-305.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64"
},
"product_reference": "kernel-modules-0:4.18.0-305.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:4.18.0-305.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64"
},
"product_reference": "kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:4.18.0-305.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64"
},
"product_reference": "kernel-tools-0:4.18.0-305.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:4.18.0-305.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64"
},
"product_reference": "kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:4.18.0-305.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64"
},
"product_reference": "perf-0:4.18.0-305.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:4.18.0-305.el8.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
},
"product_reference": "python3-perf-0:4.18.0-305.el8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-18811",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-18811"
}
],
"notes": [
{
"category": "general",
"text": "A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering sof_get_ctrl_copy_params() failures, aka CID-45c1380358b1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-18811",
"url": "https://www.suse.com/security/cve/CVE-2019-18811"
},
{
"category": "external",
"summary": "SUSE Bug 1159374 for CVE-2019-18811",
"url": "https://bugzilla.suse.com/1159374"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-18811"
},
{
"cve": "CVE-2019-19523",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-19523"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-19523",
"url": "https://www.suse.com/security/cve/CVE-2019-19523"
},
{
"category": "external",
"summary": "SUSE Bug 1158381 for CVE-2019-19523",
"url": "https://bugzilla.suse.com/1158381"
},
{
"category": "external",
"summary": "SUSE Bug 1158823 for CVE-2019-19523",
"url": "https://bugzilla.suse.com/1158823"
},
{
"category": "external",
"summary": "SUSE Bug 1158834 for CVE-2019-19523",
"url": "https://bugzilla.suse.com/1158834"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-19523"
},
{
"cve": "CVE-2019-19528",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-19528"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka CID-edc4746f253d.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-19528",
"url": "https://www.suse.com/security/cve/CVE-2019-19528"
},
{
"category": "external",
"summary": "SUSE Bug 1158381 for CVE-2019-19528",
"url": "https://bugzilla.suse.com/1158381"
},
{
"category": "external",
"summary": "SUSE Bug 1158407 for CVE-2019-19528",
"url": "https://bugzilla.suse.com/1158407"
},
{
"category": "external",
"summary": "SUSE Bug 1158834 for CVE-2019-19528",
"url": "https://bugzilla.suse.com/1158834"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-19528"
},
{
"cve": "CVE-2020-0431",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-0431"
}
],
"notes": [
{
"category": "general",
"text": "In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-144161459",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-0431",
"url": "https://www.suse.com/security/cve/CVE-2020-0431"
},
{
"category": "external",
"summary": "SUSE Bug 1176722 for CVE-2020-0431",
"url": "https://bugzilla.suse.com/1176722"
},
{
"category": "external",
"summary": "SUSE Bug 1176896 for CVE-2020-0431",
"url": "https://bugzilla.suse.com/1176896"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-0431"
},
{
"cve": "CVE-2020-11608",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-11608"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs when there are zero endpoints, aka CID-998912346c0d.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-11608",
"url": "https://www.suse.com/security/cve/CVE-2020-11608"
},
{
"category": "external",
"summary": "SUSE Bug 1168829 for CVE-2020-11608",
"url": "https://bugzilla.suse.com/1168829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-11608"
},
{
"cve": "CVE-2020-12114",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-12114"
}
],
"notes": [
{
"category": "general",
"text": "A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x before 5.3 allows local users to cause a denial of service (panic) by corrupting a mountpoint reference counter.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-12114",
"url": "https://www.suse.com/security/cve/CVE-2020-12114"
},
{
"category": "external",
"summary": "SUSE Bug 1171098 for CVE-2020-12114",
"url": "https://bugzilla.suse.com/1171098"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-12114"
},
{
"cve": "CVE-2020-12362",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-12362"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable an escalation of privilege via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-12362",
"url": "https://www.suse.com/security/cve/CVE-2020-12362"
},
{
"category": "external",
"summary": "SUSE Bug 1181720 for CVE-2020-12362",
"url": "https://bugzilla.suse.com/1181720"
},
{
"category": "external",
"summary": "SUSE Bug 1182033 for CVE-2020-12362",
"url": "https://bugzilla.suse.com/1182033"
},
{
"category": "external",
"summary": "SUSE Bug 1190859 for CVE-2020-12362",
"url": "https://bugzilla.suse.com/1190859"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-12362"
},
{
"cve": "CVE-2020-12363",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-12363"
}
],
"notes": [
{
"category": "general",
"text": "Improper input validation in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable a denial of service via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-12363",
"url": "https://www.suse.com/security/cve/CVE-2020-12363"
},
{
"category": "external",
"summary": "SUSE Bug 1181720 for CVE-2020-12363",
"url": "https://bugzilla.suse.com/1181720"
},
{
"category": "external",
"summary": "SUSE Bug 1181735 for CVE-2020-12363",
"url": "https://bugzilla.suse.com/1181735"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 1.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-12363"
},
{
"cve": "CVE-2020-12364",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-12364"
}
],
"notes": [
{
"category": "general",
"text": "Null pointer reference in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before version Linux kernel version 5.5 may allow a privileged user to potentially enable a denial of service via local access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-12364",
"url": "https://www.suse.com/security/cve/CVE-2020-12364"
},
{
"category": "external",
"summary": "SUSE Bug 1181720 for CVE-2020-12364",
"url": "https://bugzilla.suse.com/1181720"
},
{
"category": "external",
"summary": "SUSE Bug 1181736 for CVE-2020-12364",
"url": "https://bugzilla.suse.com/1181736"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 1.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-12364"
},
{
"cve": "CVE-2020-12464",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-12464"
}
],
"notes": [
{
"category": "general",
"text": "usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-12464",
"url": "https://www.suse.com/security/cve/CVE-2020-12464"
},
{
"category": "external",
"summary": "SUSE Bug 1170901 for CVE-2020-12464",
"url": "https://bugzilla.suse.com/1170901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 1.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2020-12464"
},
{
"cve": "CVE-2020-14314",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14314"
}
],
"notes": [
{
"category": "general",
"text": "A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the way it accesses a directory with broken indexing. This flaw allows a local user to crash the system if the directory exists. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14314",
"url": "https://www.suse.com/security/cve/CVE-2020-14314"
},
{
"category": "external",
"summary": "SUSE Bug 1173798 for CVE-2020-14314",
"url": "https://bugzilla.suse.com/1173798"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14314"
},
{
"cve": "CVE-2020-14356",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-14356"
}
],
"notes": [
{
"category": "general",
"text": "A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way when reboot the system. A local user could use this flaw to crash the system or escalate their privileges on the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-14356",
"url": "https://www.suse.com/security/cve/CVE-2020-14356"
},
{
"category": "external",
"summary": "SUSE Bug 1175213 for CVE-2020-14356",
"url": "https://bugzilla.suse.com/1175213"
},
{
"category": "external",
"summary": "SUSE Bug 1176392 for CVE-2020-14356",
"url": "https://bugzilla.suse.com/1176392"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-14356"
},
{
"cve": "CVE-2020-15437",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15437"
}
],
"notes": [
{
"category": "general",
"text": "The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:serial8250_isa_init_ports() that allows local users to cause a denial of service by using the p-\u003eserial_in pointer which uninitialized.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15437",
"url": "https://www.suse.com/security/cve/CVE-2020-15437"
},
{
"category": "external",
"summary": "SUSE Bug 1179140 for CVE-2020-15437",
"url": "https://bugzilla.suse.com/1179140"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-15437"
},
{
"cve": "CVE-2020-24394",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-24394"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs because the current umask is not considered.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-24394",
"url": "https://www.suse.com/security/cve/CVE-2020-24394"
},
{
"category": "external",
"summary": "SUSE Bug 1175518 for CVE-2020-24394",
"url": "https://bugzilla.suse.com/1175518"
},
{
"category": "external",
"summary": "SUSE Bug 1175992 for CVE-2020-24394",
"url": "https://bugzilla.suse.com/1175992"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-24394"
},
{
"cve": "CVE-2020-25212",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-25212"
}
],
"notes": [
{
"category": "general",
"text": "A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-25212",
"url": "https://www.suse.com/security/cve/CVE-2020-25212"
},
{
"category": "external",
"summary": "SUSE Bug 1176381 for CVE-2020-25212",
"url": "https://bugzilla.suse.com/1176381"
},
{
"category": "external",
"summary": "SUSE Bug 1176382 for CVE-2020-25212",
"url": "https://bugzilla.suse.com/1176382"
},
{
"category": "external",
"summary": "SUSE Bug 1177027 for CVE-2020-25212",
"url": "https://bugzilla.suse.com/1177027"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-25212"
},
{
"cve": "CVE-2020-25284",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-25284"
}
],
"notes": [
{
"category": "general",
"text": "The rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used incomplete permission checking for access to rbd devices, which could be leveraged by local attackers to map or unmap rbd block devices, aka CID-f44d04e696fe.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-25284",
"url": "https://www.suse.com/security/cve/CVE-2020-25284"
},
{
"category": "external",
"summary": "SUSE Bug 1176482 for CVE-2020-25284",
"url": "https://bugzilla.suse.com/1176482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-25284"
},
{
"cve": "CVE-2020-25285",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-25285"
}
],
"notes": [
{
"category": "general",
"text": "A race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8 could be used by local attackers to corrupt memory, cause a NULL pointer dereference, or possibly have unspecified other impact, aka CID-17743798d812.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-25285",
"url": "https://www.suse.com/security/cve/CVE-2020-25285"
},
{
"category": "external",
"summary": "SUSE Bug 1176485 for CVE-2020-25285",
"url": "https://bugzilla.suse.com/1176485"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-25285"
},
{
"cve": "CVE-2020-25643",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-25643"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-25643",
"url": "https://www.suse.com/security/cve/CVE-2020-25643"
},
{
"category": "external",
"summary": "SUSE Bug 1177206 for CVE-2020-25643",
"url": "https://bugzilla.suse.com/1177206"
},
{
"category": "external",
"summary": "SUSE Bug 1177226 for CVE-2020-25643",
"url": "https://bugzilla.suse.com/1177226"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-25643"
},
{
"cve": "CVE-2020-25645",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-25645"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-25645",
"url": "https://www.suse.com/security/cve/CVE-2020-25645"
},
{
"category": "external",
"summary": "SUSE Bug 1177511 for CVE-2020-25645",
"url": "https://bugzilla.suse.com/1177511"
},
{
"category": "external",
"summary": "SUSE Bug 1177513 for CVE-2020-25645",
"url": "https://bugzilla.suse.com/1177513"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-25645"
},
{
"cve": "CVE-2020-25704",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-25704"
}
],
"notes": [
{
"category": "general",
"text": "A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local user could use this flaw to starve the resources causing denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-25704",
"url": "https://www.suse.com/security/cve/CVE-2020-25704"
},
{
"category": "external",
"summary": "SUSE Bug 1178393 for CVE-2020-25704",
"url": "https://bugzilla.suse.com/1178393"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-25704"
},
{
"cve": "CVE-2020-27786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-27786"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a use-after-free issue. A write to this specific memory while freed and before use causes the flow of execution to change and possibly allow for memory corruption or privilege escalation. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-27786",
"url": "https://www.suse.com/security/cve/CVE-2020-27786"
},
{
"category": "external",
"summary": "SUSE Bug 1179601 for CVE-2020-27786",
"url": "https://bugzilla.suse.com/1179601"
},
{
"category": "external",
"summary": "SUSE Bug 1179616 for CVE-2020-27786",
"url": "https://bugzilla.suse.com/1179616"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-27786"
},
{
"cve": "CVE-2020-27835",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-27835"
}
],
"notes": [
{
"category": "general",
"text": "A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-27835",
"url": "https://www.suse.com/security/cve/CVE-2020-27835"
},
{
"category": "external",
"summary": "SUSE Bug 1179878 for CVE-2020-27835",
"url": "https://bugzilla.suse.com/1179878"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-27835"
},
{
"cve": "CVE-2020-28974",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-28974"
}
],
"notes": [
{
"category": "general",
"text": "A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-28974",
"url": "https://www.suse.com/security/cve/CVE-2020-28974"
},
{
"category": "external",
"summary": "SUSE Bug 1178589 for CVE-2020-28974",
"url": "https://bugzilla.suse.com/1178589"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-28974"
},
{
"cve": "CVE-2020-35508",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-35508"
}
],
"notes": [
{
"category": "general",
"text": "A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-35508",
"url": "https://www.suse.com/security/cve/CVE-2020-35508"
},
{
"category": "external",
"summary": "SUSE Bug 1180529 for CVE-2020-35508",
"url": "https://bugzilla.suse.com/1180529"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-35508"
},
{
"cve": "CVE-2020-36322",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-36322"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. fuse_do_getattr() calls make_bad_inode() in inappropriate situations, causing a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-36322",
"url": "https://www.suse.com/security/cve/CVE-2020-36322"
},
{
"category": "external",
"summary": "SUSE Bug 1184211 for CVE-2020-36322",
"url": "https://bugzilla.suse.com/1184211"
},
{
"category": "external",
"summary": "SUSE Bug 1184952 for CVE-2020-36322",
"url": "https://bugzilla.suse.com/1184952"
},
{
"category": "external",
"summary": "SUSE Bug 1189302 for CVE-2020-36322",
"url": "https://bugzilla.suse.com/1189302"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-36322"
},
{
"cve": "CVE-2020-36557",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-36557"
}
],
"notes": [
{
"category": "general",
"text": "A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-36557",
"url": "https://www.suse.com/security/cve/CVE-2020-36557"
},
{
"category": "external",
"summary": "SUSE Bug 1201429 for CVE-2020-36557",
"url": "https://bugzilla.suse.com/1201429"
},
{
"category": "external",
"summary": "SUSE Bug 1201742 for CVE-2020-36557",
"url": "https://bugzilla.suse.com/1201742"
},
{
"category": "external",
"summary": "SUSE Bug 1202874 for CVE-2020-36557",
"url": "https://bugzilla.suse.com/1202874"
},
{
"category": "external",
"summary": "SUSE Bug 1205313 for CVE-2020-36557",
"url": "https://bugzilla.suse.com/1205313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-36557"
},
{
"cve": "CVE-2020-36694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-36694"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in netfilter in the Linux kernel before 5.10. There can be a use-after-free in the packet processing context, because the per-CPU sequence count is mishandled during concurrent iptables rules replacement. This could be exploited with the CAP_NET_ADMIN capability in an unprivileged namespace. NOTE: cc00bca was reverted in 5.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-36694",
"url": "https://www.suse.com/security/cve/CVE-2020-36694"
},
{
"category": "external",
"summary": "SUSE Bug 1211596 for CVE-2020-36694",
"url": "https://bugzilla.suse.com/1211596"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-36694"
},
{
"cve": "CVE-2021-0342",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-0342"
}
],
"notes": [
{
"category": "general",
"text": "In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. User interaction is not required for exploitation. Product: Android; Versions: Android kernel; Android ID: A-146554327.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-0342",
"url": "https://www.suse.com/security/cve/CVE-2021-0342"
},
{
"category": "external",
"summary": "SUSE Bug 1180812 for CVE-2021-0342",
"url": "https://bugzilla.suse.com/1180812"
},
{
"category": "external",
"summary": "SUSE Bug 1180859 for CVE-2021-0342",
"url": "https://bugzilla.suse.com/1180859"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-0342"
},
{
"cve": "CVE-2021-0605",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-0605"
}
],
"notes": [
{
"category": "general",
"text": "In pfkey_dump of af_key.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-110373476",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-0605",
"url": "https://www.suse.com/security/cve/CVE-2021-0605"
},
{
"category": "external",
"summary": "SUSE Bug 1187601 for CVE-2021-0605",
"url": "https://bugzilla.suse.com/1187601"
},
{
"category": "external",
"summary": "SUSE Bug 1187687 for CVE-2021-0605",
"url": "https://bugzilla.suse.com/1187687"
},
{
"category": "external",
"summary": "SUSE Bug 1188381 for CVE-2021-0605",
"url": "https://bugzilla.suse.com/1188381"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-0605"
},
{
"cve": "CVE-2021-3428",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3428"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a crafted ext4 filesystem in fs/ext4/extents.c in ext4_es_cache_extent. Fabricating an integer overflow, A local attacker with a special user privilege may cause a system crash problem which can lead to an availability threat.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3428",
"url": "https://www.suse.com/security/cve/CVE-2021-3428"
},
{
"category": "external",
"summary": "SUSE Bug 1173485 for CVE-2021-3428",
"url": "https://bugzilla.suse.com/1173485"
},
{
"category": "external",
"summary": "SUSE Bug 1183509 for CVE-2021-3428",
"url": "https://bugzilla.suse.com/1183509"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3428"
},
{
"cve": "CVE-2023-1390",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1390"
}
],
"notes": [
{
"category": "general",
"text": "A remote denial of service vulnerability was found in the Linux kernel\u0027s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1390",
"url": "https://www.suse.com/security/cve/CVE-2023-1390"
},
{
"category": "external",
"summary": "SUSE Bug 1209289 for CVE-2023-1390",
"url": "https://bugzilla.suse.com/1209289"
},
{
"category": "external",
"summary": "SUSE Bug 1210779 for CVE-2023-1390",
"url": "https://bugzilla.suse.com/1210779"
},
{
"category": "external",
"summary": "SUSE Bug 1211495 for CVE-2023-1390",
"url": "https://bugzilla.suse.com/1211495"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-305.el8.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-305.el8.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-305.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-05-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-1390"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…