Vulnerability-Lookup

RHSA-2020:1769

Vulnerability from csaf_opensuse - Published: 2020-04-28 00:00 - Updated: 2026-09-20 11:08

Summary

security update for kernel

Severity

Important

Notes

Title of the patch: security update for kernel

Description of the patch: This security update provides a functional equivalent of RHSA-2020:1769. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2020:1769.

Patchnames: RHSA-2020:1769

CVE-2018-16871

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 20 products

Product	Version	Remediation
Unresolved product id: SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2019-10639

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-12819

3.4 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact low

CVE-2019-15090

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-15099

4.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-15221

4.6 (Medium)


                
                  CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-15223

4.6 (Medium)


                
                  CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-16234

4 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact low

CVE-2019-16746

7.3 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-17053

4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-17055

4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-18282

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-18805

2.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact low

CVE-2019-19045

6.2 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-19047

1.9 (Low)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-19055

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact important

CVE-2019-19057

4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-19058

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-19059

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-19065

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact important

CVE-2019-19067

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-19073

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-19074

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-19077

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-19532

6.8 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-19534

2.4 (Low)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact low

CVE-2019-19768

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-19922

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-5108

7.4 (High)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact important

CVE-2019-8980

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact low

CVE-2020-10690

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2020-1749

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact important

CVE-2020-7053

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2021-33630

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2022-50473

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2023-53581

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2023-54064

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 20 products, the same list as for CVE-2018-16871

Threats

Impact moderate

References

133 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/r…	self
https://www.suse.com/security/cve/CVE-2018-16871/	self
https://www.suse.com/security/cve/CVE-2019-10639/	self
https://www.suse.com/security/cve/CVE-2019-12819/	self
https://www.suse.com/security/cve/CVE-2019-15090/	self
https://www.suse.com/security/cve/CVE-2019-15099/	self
https://www.suse.com/security/cve/CVE-2019-15221/	self
https://www.suse.com/security/cve/CVE-2019-15223/	self
https://www.suse.com/security/cve/CVE-2019-16234/	self
https://www.suse.com/security/cve/CVE-2019-16746/	self
https://www.suse.com/security/cve/CVE-2019-17053/	self
https://www.suse.com/security/cve/CVE-2019-17055/	self
https://www.suse.com/security/cve/CVE-2019-18282/	self
https://www.suse.com/security/cve/CVE-2019-18805/	self
https://www.suse.com/security/cve/CVE-2019-19045/	self
https://www.suse.com/security/cve/CVE-2019-19047/	self
https://www.suse.com/security/cve/CVE-2019-19055/	self
https://www.suse.com/security/cve/CVE-2019-19057/	self
https://www.suse.com/security/cve/CVE-2019-19058/	self
https://www.suse.com/security/cve/CVE-2019-19059/	self
https://www.suse.com/security/cve/CVE-2019-19065/	self
https://www.suse.com/security/cve/CVE-2019-19067/	self
https://www.suse.com/security/cve/CVE-2019-19073/	self
https://www.suse.com/security/cve/CVE-2019-19074/	self
https://www.suse.com/security/cve/CVE-2019-19077/	self
https://www.suse.com/security/cve/CVE-2019-19532/	self
https://www.suse.com/security/cve/CVE-2019-19534/	self
https://www.suse.com/security/cve/CVE-2019-19768/	self
https://www.suse.com/security/cve/CVE-2019-19922/	self
https://www.suse.com/security/cve/CVE-2019-5108/	self
https://www.suse.com/security/cve/CVE-2019-8980/	self
https://www.suse.com/security/cve/CVE-2020-10690/	self
https://www.suse.com/security/cve/CVE-2020-1749/	self
https://www.suse.com/security/cve/CVE-2020-7053/	self
https://www.suse.com/security/cve/CVE-2021-33630/	self
https://www.suse.com/security/cve/CVE-2022-50473/	self
https://www.suse.com/security/cve/CVE-2023-53581/	self
https://www.suse.com/security/cve/CVE-2023-54064/	self
https://www.suse.com/security/cve/CVE-2018-16871	external
https://bugzilla.suse.com/1137103	external
https://bugzilla.suse.com/1156320	external
https://www.suse.com/security/cve/CVE-2019-10639	external
https://bugzilla.suse.com/1140577	external
https://www.suse.com/security/cve/CVE-2019-12819	external
https://bugzilla.suse.com/1138291	external
https://www.suse.com/security/cve/CVE-2019-15090	external
https://bugzilla.suse.com/1146399	external
https://www.suse.com/security/cve/CVE-2019-15099	external
https://bugzilla.suse.com/1146368	external
https://www.suse.com/security/cve/CVE-2019-15221	external
https://bugzilla.suse.com/1146519	external
https://bugzilla.suse.com/1146529	external
https://bugzilla.suse.com/1158381	external
https://bugzilla.suse.com/1158834	external
https://www.suse.com/security/cve/CVE-2019-15223	external
https://bugzilla.suse.com/1146519	external
https://bugzilla.suse.com/1146535	external
https://bugzilla.suse.com/1158381	external
https://bugzilla.suse.com/1158834	external
https://www.suse.com/security/cve/CVE-2019-16234	external
https://bugzilla.suse.com/1150452	external
https://www.suse.com/security/cve/CVE-2019-16746	external
https://bugzilla.suse.com/1152107	external
https://bugzilla.suse.com/1173659	external
https://www.suse.com/security/cve/CVE-2019-17053	external
https://bugzilla.suse.com/1152789	external
https://www.suse.com/security/cve/CVE-2019-17055	external
https://bugzilla.suse.com/1152782	external
https://www.suse.com/security/cve/CVE-2019-18282	external
https://bugzilla.suse.com/1161121	external
https://www.suse.com/security/cve/CVE-2019-18805	external
https://bugzilla.suse.com/1156187	external
https://www.suse.com/security/cve/CVE-2019-19045	external
https://bugzilla.suse.com/1161522	external
https://www.suse.com/security/cve/CVE-2019-19047	external
https://bugzilla.suse.com/1157715	external
https://www.suse.com/security/cve/CVE-2019-19055	external
https://bugzilla.suse.com/1157319	external
https://www.suse.com/security/cve/CVE-2019-19057	external
https://bugzilla.suse.com/1157193	external
https://bugzilla.suse.com/1157197	external
https://www.suse.com/security/cve/CVE-2019-19058	external
https://bugzilla.suse.com/1157145	external
https://www.suse.com/security/cve/CVE-2019-19059	external
https://bugzilla.suse.com/1157296	external
https://www.suse.com/security/cve/CVE-2019-19065	external
https://bugzilla.suse.com/1157191	external
https://bugzilla.suse.com/1173961	external
https://www.suse.com/security/cve/CVE-2019-19067	external
https://bugzilla.suse.com/1157180	external
https://www.suse.com/security/cve/CVE-2019-19073	external
https://bugzilla.suse.com/1157070	external
https://www.suse.com/security/cve/CVE-2019-19074	external
https://bugzilla.suse.com/1157143	external
https://www.suse.com/security/cve/CVE-2019-19077	external
https://bugzilla.suse.com/1157171	external
https://www.suse.com/security/cve/CVE-2019-19532	external
https://bugzilla.suse.com/1158381	external
https://bugzilla.suse.com/1158823	external
https://bugzilla.suse.com/1158824	external
https://bugzilla.suse.com/1158834	external
https://www.suse.com/security/cve/CVE-2019-19534	external
https://bugzilla.suse.com/1158381	external
https://bugzilla.suse.com/1158398	external
https://bugzilla.suse.com/1158834	external
https://www.suse.com/security/cve/CVE-2019-19768	external
https://bugzilla.suse.com/1159285	external
https://www.suse.com/security/cve/CVE-2019-19922	external
https://bugzilla.suse.com/1159717	external
https://www.suse.com/security/cve/CVE-2019-5108	external
https://bugzilla.suse.com/1159912	external
https://bugzilla.suse.com/1159913	external
https://www.suse.com/security/cve/CVE-2019-8980	external
https://bugzilla.suse.com/1126209	external
https://www.suse.com/security/cve/CVE-2020-10690	external
https://bugzilla.suse.com/1170056	external
https://www.suse.com/security/cve/CVE-2020-1749	external
https://bugzilla.suse.com/1165629	external
https://bugzilla.suse.com/1165631	external
https://bugzilla.suse.com/1177511	external
https://bugzilla.suse.com/1177513	external
https://bugzilla.suse.com/1189302	external
https://www.suse.com/security/cve/CVE-2020-7053	external
https://bugzilla.suse.com/1160966	external
https://www.suse.com/security/cve/CVE-2021-33630	external
https://bugzilla.suse.com/1219402	external
https://www.suse.com/security/cve/CVE-2022-50473	external
https://bugzilla.suse.com/1251103	external
https://www.suse.com/security/cve/CVE-2023-53581	external
https://bugzilla.suse.com/1251106	external
https://www.suse.com/security/cve/CVE-2023-54064	external
https://bugzilla.suse.com/1256375	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2020:1769.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2020:1769.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2020:1769",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2020_1769.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16871 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16871/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10639 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10639/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-12819 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-12819/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-15090 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-15090/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-15099 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-15099/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-15221 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-15221/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-15223 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-15223/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16234 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16234/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16746 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16746/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-17053 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-17053/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-17055 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-17055/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-18282 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-18282/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-18805 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-18805/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19045 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19045/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19047 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19047/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19055 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19055/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19057 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19057/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19058 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19058/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19059 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19059/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19065 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19065/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19067 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19067/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19073 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19073/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19074 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19074/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19077 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19077/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19532 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19532/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19534 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19534/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19768 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19768/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19922 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19922/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5108 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5108/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-8980 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-8980/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-10690 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-10690/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-1749 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-1749/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-7053 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-7053/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-33630 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-33630/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-50473 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-50473/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-53581 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-53581/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-54064 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-54064/"
      }
    ],
    "title": "security update for kernel",
    "tracking": {
      "current_release_date": "2026-09-20T11:08:37Z",
      "generator": {
        "date": "2020-04-28T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2020:1769",
      "initial_release_date": "2020-04-28T00:00:00Z",
      "revision_history": [
        {
          "date": "2020-04-28T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T11:08:37Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
                "product": {
                  "name": "kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
                  "product_id": "kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-abi-whitelists@4.18.0-193.el8?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-doc-0:4.18.0-193.el8.noarch",
                "product": {
                  "name": "kernel-doc-0:4.18.0-193.el8.noarch",
                  "product_id": "kernel-doc-0:4.18.0-193.el8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-doc@4.18.0-193.el8?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftool-0:4.18.0-193.el8.x86_64",
                "product": {
                  "name": "bpftool-0:4.18.0-193.el8.x86_64",
                  "product_id": "bpftool-0:4.18.0-193.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/bpftool@4.18.0-193.el8?arch=x86_64\u0026upstream=bpftool-0:4.18.0-193.el8.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-0:4.18.0-193.el8.x86_64",
                "product": {
                  "name": "kernel-0:4.18.0-193.el8.x86_64",
                  "product_id": "kernel-0:4.18.0-193.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel@4.18.0-193.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-core-0:4.18.0-193.el8.x86_64",
                "product": {
                  "name": "kernel-core-0:4.18.0-193.el8.x86_64",
                  "product_id": "kernel-core-0:4.18.0-193.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-core@4.18.0-193.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-cross-headers-0:4.18.0-193.el8.x86_64",
                "product": {
                  "name": "kernel-cross-headers-0:4.18.0-193.el8.x86_64",
                  "product_id": "kernel-cross-headers-0:4.18.0-193.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-193.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-0:4.18.0-193.el8.x86_64",
                "product": {
                  "name": "kernel-debug-0:4.18.0-193.el8.x86_64",
                  "product_id": "kernel-debug-0:4.18.0-193.el8.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug@4.18.0-193.el8?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-193.el8.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-core-0:4.18.0-193.el8.x86_64",
                "product": {
                  "name": "kernel-debug-core-0:4.18.0-193.el8.x86_64",
                  "product_id": "kernel-debug-core-0:4.18.0-193.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-193.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-0:4.18.0-193.el8.x86_64",
                "product": {
                  "name": "kernel-debug-devel-0:4.18.0-193.el8.x86_64",
                  "product_id": "kernel-debug-devel-0:4.18.0-193.el8.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-193.el8?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-193.el8.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-modules-0:4.18.0-193.el8.x86_64",
                "product": {
                  "name": "kernel-debug-modules-0:4.18.0-193.el8.x86_64",
                  "product_id": "kernel-debug-modules-0:4.18.0-193.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-193.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
                "product": {
                  "name": "kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
                  "product_id": "kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-193.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-devel-0:4.18.0-193.el8.x86_64",
                "product": {
                  "name": "kernel-devel-0:4.18.0-193.el8.x86_64",
                  "product_id": "kernel-devel-0:4.18.0-193.el8.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel@4.18.0-193.el8?arch=x86_64\u0026upstream=kernel-source-0:4.18.0-193.el8.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-headers-0:4.18.0-193.el8.x86_64",
                "product": {
                  "name": "kernel-headers-0:4.18.0-193.el8.x86_64",
                  "product_id": "kernel-headers-0:4.18.0-193.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-headers@4.18.0-193.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-modules-0:4.18.0-193.el8.x86_64",
                "product": {
                  "name": "kernel-modules-0:4.18.0-193.el8.x86_64",
                  "product_id": "kernel-modules-0:4.18.0-193.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-modules@4.18.0-193.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-modules-extra-0:4.18.0-193.el8.x86_64",
                "product": {
                  "name": "kernel-modules-extra-0:4.18.0-193.el8.x86_64",
                  "product_id": "kernel-modules-extra-0:4.18.0-193.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-193.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-0:4.18.0-193.el8.x86_64",
                "product": {
                  "name": "kernel-tools-0:4.18.0-193.el8.x86_64",
                  "product_id": "kernel-tools-0:4.18.0-193.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools@4.18.0-193.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-0:4.18.0-193.el8.x86_64",
                "product": {
                  "name": "kernel-tools-libs-0:4.18.0-193.el8.x86_64",
                  "product_id": "kernel-tools-libs-0:4.18.0-193.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-193.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
                "product": {
                  "name": "kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
                  "product_id": "kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-193.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perf-0:4.18.0-193.el8.x86_64",
                "product": {
                  "name": "perf-0:4.18.0-193.el8.x86_64",
                  "product_id": "perf-0:4.18.0-193.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/perf@4.18.0-193.el8?arch=x86_64\u0026upstream=perf-0:4.18.0-193.el8.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-perf-0:4.18.0-193.el8.x86_64",
                "product": {
                  "name": "python3-perf-0:4.18.0-193.el8.x86_64",
                  "product_id": "python3-perf-0:4.18.0-193.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python3-perf@4.18.0-193.el8?arch=x86_64\u0026upstream=perf-0:4.18.0-193.el8.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 8",
                "product": {
                  "name": "SUSE Liberty Linux 8",
                  "product_id": "SUSE Liberty Linux 8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftool-0:4.18.0-193.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64"
        },
        "product_reference": "bpftool-0:4.18.0-193.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:4.18.0-193.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64"
        },
        "product_reference": "kernel-0:4.18.0-193.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-abi-whitelists-0:4.18.0-193.el8.noarch as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch"
        },
        "product_reference": "kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-core-0:4.18.0-193.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64"
        },
        "product_reference": "kernel-core-0:4.18.0-193.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-cross-headers-0:4.18.0-193.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64"
        },
        "product_reference": "kernel-cross-headers-0:4.18.0-193.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:4.18.0-193.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64"
        },
        "product_reference": "kernel-debug-0:4.18.0-193.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-core-0:4.18.0-193.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64"
        },
        "product_reference": "kernel-debug-core-0:4.18.0-193.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-0:4.18.0-193.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64"
        },
        "product_reference": "kernel-debug-devel-0:4.18.0-193.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-modules-0:4.18.0-193.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64"
        },
        "product_reference": "kernel-debug-modules-0:4.18.0-193.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64"
        },
        "product_reference": "kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:4.18.0-193.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64"
        },
        "product_reference": "kernel-devel-0:4.18.0-193.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:4.18.0-193.el8.noarch as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch"
        },
        "product_reference": "kernel-doc-0:4.18.0-193.el8.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-0:4.18.0-193.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64"
        },
        "product_reference": "kernel-headers-0:4.18.0-193.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-modules-0:4.18.0-193.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64"
        },
        "product_reference": "kernel-modules-0:4.18.0-193.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-modules-extra-0:4.18.0-193.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64"
        },
        "product_reference": "kernel-modules-extra-0:4.18.0-193.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-0:4.18.0-193.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64"
        },
        "product_reference": "kernel-tools-0:4.18.0-193.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-0:4.18.0-193.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64"
        },
        "product_reference": "kernel-tools-libs-0:4.18.0-193.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64"
        },
        "product_reference": "kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-0:4.18.0-193.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64"
        },
        "product_reference": "perf-0:4.18.0-193.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-perf-0:4.18.0-193.el8.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        },
        "product_reference": "python3-perf-0:4.18.0-193.el8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-16871",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16871"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel\u0027s NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the NFS server will be lost.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16871",
          "url": "https://www.suse.com/security/cve/CVE-2018-16871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1137103 for CVE-2018-16871",
          "url": "https://bugzilla.suse.com/1137103"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156320 for CVE-2018-16871",
          "url": "https://bugzilla.suse.com/1156320"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16871"
    },
    {
      "cve": "CVE-2019-10639",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10639"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. Specifically, it is possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). This key contains enough bits from a kernel address (of a static variable) so when the key is extracted (via enumeration), the offset of the kernel image is exposed. This attack can be carried out remotely, by the attacker forcing the target device to send UDP or ICMP (or certain other) traffic to attacker-controlled IP addresses. Forcing a server to send UDP traffic is trivial if the server is a DNS server. ICMP traffic is trivial if the server answers ICMP Echo requests (ping). For client targets, if the target visits the attacker\u0027s web page, then WebRTC or gQUIC can be used to force UDP traffic to attacker-controlled IP addresses. NOTE: this attack against KASLR became viable in 4.1 because IP ID generation was changed to have a dependency on an address associated with a network namespace.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10639",
          "url": "https://www.suse.com/security/cve/CVE-2019-10639"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1140577 for CVE-2019-10639",
          "url": "https://bugzilla.suse.com/1140577"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10639"
    },
    {
      "cve": "CVE-2019-12819",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-12819"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in the Linux kernel before 5.0. The function __mdiobus_register() in drivers/net/phy/mdio_bus.c calls put_device(), which will trigger a fixed_mdio_bus_init use-after-free. This will cause a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-12819",
          "url": "https://www.suse.com/security/cve/CVE-2019-12819"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1138291 for CVE-2019-12819",
          "url": "https://bugzilla.suse.com/1138291"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.4,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-12819"
    },
    {
      "cve": "CVE-2019-15090",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-15090"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the Linux kernel before 5.1.12. In the qedi_dbg_* family of functions, there is an out-of-bounds read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-15090",
          "url": "https://www.suse.com/security/cve/CVE-2019-15090"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1146399 for CVE-2019-15090",
          "url": "https://bugzilla.suse.com/1146399"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-15090"
    },
    {
      "cve": "CVE-2019-15099",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-15099"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-15099",
          "url": "https://www.suse.com/security/cve/CVE-2019-15099"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1146368 for CVE-2019-15099",
          "url": "https://bugzilla.suse.com/1146368"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-15099"
    },
    {
      "cve": "CVE-2019-15221",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-15221"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-15221",
          "url": "https://www.suse.com/security/cve/CVE-2019-15221"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1146519 for CVE-2019-15221",
          "url": "https://bugzilla.suse.com/1146519"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1146529 for CVE-2019-15221",
          "url": "https://bugzilla.suse.com/1146529"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158381 for CVE-2019-15221",
          "url": "https://bugzilla.suse.com/1158381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158834 for CVE-2019-15221",
          "url": "https://bugzilla.suse.com/1158834"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-15221"
    },
    {
      "cve": "CVE-2019-15223",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-15223"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/driver.c driver.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-15223",
          "url": "https://www.suse.com/security/cve/CVE-2019-15223"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1146519 for CVE-2019-15223",
          "url": "https://bugzilla.suse.com/1146519"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1146535 for CVE-2019-15223",
          "url": "https://bugzilla.suse.com/1146535"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158381 for CVE-2019-15223",
          "url": "https://bugzilla.suse.com/1158381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158834 for CVE-2019-15223",
          "url": "https://bugzilla.suse.com/1158834"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-15223"
    },
    {
      "cve": "CVE-2019-16234",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16234"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16234",
          "url": "https://www.suse.com/security/cve/CVE-2019-16234"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150452 for CVE-2019-16234",
          "url": "https://bugzilla.suse.com/1150452"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-16234"
    },
    {
      "cve": "CVE-2019-16746",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16746"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of variable elements in a beacon head, leading to a buffer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16746",
          "url": "https://www.suse.com/security/cve/CVE-2019-16746"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1152107 for CVE-2019-16746",
          "url": "https://bugzilla.suse.com/1152107"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1173659 for CVE-2019-16746",
          "url": "https://bugzilla.suse.com/1173659"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-16746"
    },
    {
      "cve": "CVE-2019-17053",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-17053"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-e69dbd4619e7.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-17053",
          "url": "https://www.suse.com/security/cve/CVE-2019-17053"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1152789 for CVE-2019-17053",
          "url": "https://bugzilla.suse.com/1152789"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-17053"
    },
    {
      "cve": "CVE-2019-17055",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-17055"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-17055",
          "url": "https://www.suse.com/security/cve/CVE-2019-17055"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1152782 for CVE-2019-17055",
          "url": "https://bugzilla.suse.com/1152782"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-17055"
    },
    {
      "cve": "CVE-2019-18282",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-18282"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash (instead of siphash) is used. The hashrnd value remains the same starting from boot time, and can be inferred by an attacker. This affects net/core/flow_dissector.c and related code.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-18282",
          "url": "https://www.suse.com/security/cve/CVE-2019-18282"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1161121 for CVE-2019-18282",
          "url": "https://bugzilla.suse.com/1161121"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-18282"
    },
    {
      "cve": "CVE-2019-18805",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-18805"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-18805",
          "url": "https://www.suse.com/security/cve/CVE-2019-18805"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156187 for CVE-2019-18805",
          "url": "https://bugzilla.suse.com/1156187"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-18805"
    },
    {
      "cve": "CVE-2019-19045",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19045"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A memory leak in the mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19045",
          "url": "https://www.suse.com/security/cve/CVE-2019-19045"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1161522 for CVE-2019-19045",
          "url": "https://bugzilla.suse.com/1161522"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19045"
    },
    {
      "cve": "CVE-2019-19047",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19047"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A memory leak in the mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5_crdump_collect() failures, aka CID-c7ed6d0183d5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19047",
          "url": "https://www.suse.com/security/cve/CVE-2019-19047"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157715 for CVE-2019-19047",
          "url": "https://bugzilla.suse.com/1157715"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 1.9,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19047"
    },
    {
      "cve": "CVE-2019-19055",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19055"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering nl80211hdr_put() failures, aka CID-1399c59fa929. NOTE: third parties dispute the relevance of this because it occurs on a code path where a successful allocation has already occurred",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19055",
          "url": "https://www.suse.com/security/cve/CVE-2019-19055"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157319 for CVE-2019-19055",
          "url": "https://bugzilla.suse.com/1157319"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-19055"
    },
    {
      "cve": "CVE-2019-19057",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19057"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-d10dcb615c8e.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19057",
          "url": "https://www.suse.com/security/cve/CVE-2019-19057"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157193 for CVE-2019-19057",
          "url": "https://bugzilla.suse.com/1157193"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157197 for CVE-2019-19057",
          "url": "https://bugzilla.suse.com/1157197"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19057"
    },
    {
      "cve": "CVE-2019-19058",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19058"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering alloc_page() failures, aka CID-b4b814fec1a5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19058",
          "url": "https://www.suse.com/security/cve/CVE-2019-19058"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157145 for CVE-2019-19058",
          "url": "https://bugzilla.suse.com/1157145"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19058"
    },
    {
      "cve": "CVE-2019-19059",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19059"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering iwl_pcie_init_fw_sec() or dma_alloc_coherent() failures, aka CID-0f4f199443fa.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19059",
          "url": "https://www.suse.com/security/cve/CVE-2019-19059"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157296 for CVE-2019-19059",
          "url": "https://bugzilla.suse.com/1157296"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19059"
    },
    {
      "cve": "CVE-2019-19065",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19065"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering rhashtable_init() failures, aka CID-34b3be18a04e. NOTE: This has been disputed as not a vulnerability because \"rhashtable_init() can only fail if it is passed invalid values in the second parameter\u0027s struct, but when invoked from sdma_init() that is a pointer to a static const struct, so an attacker could only trigger failure if they could corrupt kernel memory (in which case a small memory leak is not a significant problem).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19065",
          "url": "https://www.suse.com/security/cve/CVE-2019-19065"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157191 for CVE-2019-19065",
          "url": "https://bugzilla.suse.com/1157191"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1173961 for CVE-2019-19065",
          "url": "https://bugzilla.suse.com/1173961"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-19065"
    },
    {
      "cve": "CVE-2019-19067",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19067"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel before 5.3.8 allow attackers to cause a denial of service (memory consumption) by triggering mfd_add_hotplug_devices() or pm_genpd_add_device() failures, aka CID-57be09c6e874. NOTE: third parties dispute the relevance of this because the attacker must already have privileges for module loading",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19067",
          "url": "https://www.suse.com/security/cve/CVE-2019-19067"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157180 for CVE-2019-19067",
          "url": "https://bugzilla.suse.com/1157180"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19067"
    },
    {
      "cve": "CVE-2019-19073",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19073"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function, aka CID-853acf7caf10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19073",
          "url": "https://www.suse.com/security/cve/CVE-2019-19073"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157070 for CVE-2019-19073",
          "url": "https://bugzilla.suse.com/1157070"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19073"
    },
    {
      "cve": "CVE-2019-19074",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19074"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-728c1e2a05e4.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19074",
          "url": "https://www.suse.com/security/cve/CVE-2019-19074"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157143 for CVE-2019-19074",
          "url": "https://bugzilla.suse.com/1157143"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19074"
    },
    {
      "cve": "CVE-2019-19077",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19077"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A memory leak in the bnxt_re_create_srq() function in drivers/infiniband/hw/bnxt_re/ib_verbs.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering copy to udata failures, aka CID-4a9d46a9fe14.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19077",
          "url": "https://www.suse.com/security/cve/CVE-2019-19077"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1157171 for CVE-2019-19077",
          "url": "https://bugzilla.suse.com/1157171"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19077"
    },
    {
      "cve": "CVE-2019-19532",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19532"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka CID-d9d4b1e46d95. This affects drivers/hid/hid-axff.c, drivers/hid/hid-dr.c, drivers/hid/hid-emsff.c, drivers/hid/hid-gaff.c, drivers/hid/hid-holtekff.c, drivers/hid/hid-lg2ff.c, drivers/hid/hid-lg3ff.c, drivers/hid/hid-lg4ff.c, drivers/hid/hid-lgff.c, drivers/hid/hid-logitech-hidpp.c, drivers/hid/hid-microsoft.c, drivers/hid/hid-sony.c, drivers/hid/hid-tmff.c, and drivers/hid/hid-zpff.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19532",
          "url": "https://www.suse.com/security/cve/CVE-2019-19532"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158381 for CVE-2019-19532",
          "url": "https://bugzilla.suse.com/1158381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158823 for CVE-2019-19532",
          "url": "https://bugzilla.suse.com/1158823"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158824 for CVE-2019-19532",
          "url": "https://bugzilla.suse.com/1158824"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158834 for CVE-2019-19532",
          "url": "https://bugzilla.suse.com/1158834"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19532"
    },
    {
      "cve": "CVE-2019-19534",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19534"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver, aka CID-f7a1337f0d29.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19534",
          "url": "https://www.suse.com/security/cve/CVE-2019-19534"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158381 for CVE-2019-19534",
          "url": "https://bugzilla.suse.com/1158381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158398 for CVE-2019-19534",
          "url": "https://bugzilla.suse.com/1158398"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158834 for CVE-2019-19534",
          "url": "https://bugzilla.suse.com/1158834"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.4,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-19534"
    },
    {
      "cve": "CVE-2019-19768",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19768"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19768",
          "url": "https://www.suse.com/security/cve/CVE-2019-19768"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1159285 for CVE-2019-19768",
          "url": "https://bugzilla.suse.com/1159285"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19768"
    },
    {
      "cve": "CVE-2019-19922",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19922"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of service against non-cpu-bound applications by generating a workload that triggers unwanted slice expiration, aka CID-de53fd7aedb1. (In other words, although this slice expiration would typically be seen with benign workloads, it is possible that an attacker could calculate how many stray requests are required to force an entire Kubernetes cluster into a low-performance state caused by slice expiration, and ensure that a DDoS attack sent that number of stray requests. An attack does not affect the stability of the kernel; it only causes mismanagement of application execution.)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19922",
          "url": "https://www.suse.com/security/cve/CVE-2019-19922"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1159717 for CVE-2019-19922",
          "url": "https://bugzilla.suse.com/1159717"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19922"
    },
    {
      "cve": "CVE-2019-5108",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5108"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to different denial-of-service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby APs of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5108",
          "url": "https://www.suse.com/security/cve/CVE-2019-5108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1159912 for CVE-2019-5108",
          "url": "https://bugzilla.suse.com/1159912"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1159913 for CVE-2019-5108",
          "url": "https://bugzilla.suse.com/1159913"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-5108"
    },
    {
      "cve": "CVE-2019-8980",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-8980"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of service (memory consumption) by triggering vfs_read failures.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-8980",
          "url": "https://www.suse.com/security/cve/CVE-2019-8980"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1126209 for CVE-2019-8980",
          "url": "https://bugzilla.suse.com/1126209"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-8980"
    },
    {
      "cve": "CVE-2020-10690",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-10690"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed, it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-10690",
          "url": "https://www.suse.com/security/cve/CVE-2020-10690"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1170056 for CVE-2020-10690",
          "url": "https://bugzilla.suse.com/1170056"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-10690"
    },
    {
      "cve": "CVE-2020-1749",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-1749"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel\u0027s implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn\u0027t correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-1749",
          "url": "https://www.suse.com/security/cve/CVE-2020-1749"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1165629 for CVE-2020-1749",
          "url": "https://bugzilla.suse.com/1165629"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1165631 for CVE-2020-1749",
          "url": "https://bugzilla.suse.com/1165631"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177511 for CVE-2020-1749",
          "url": "https://bugzilla.suse.com/1177511"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177513 for CVE-2020-1749",
          "url": "https://bugzilla.suse.com/1177513"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1189302 for CVE-2020-1749",
          "url": "https://bugzilla.suse.com/1189302"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-1749"
    },
    {
      "cve": "CVE-2020-7053",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-7053"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a use-after-free (write) in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c, aka CID-7dc40713618c. This is related to i915_gem_context_destroy_ioctl in drivers/gpu/drm/i915/i915_gem_context.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-7053",
          "url": "https://www.suse.com/security/cve/CVE-2020-7053"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1160966 for CVE-2020-7053",
          "url": "https://bugzilla.suse.com/1160966"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-7053"
    },
    {
      "cve": "CVE-2021-33630",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-33630"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NULL Pointer Dereference vulnerability in openEuler kernel on Linux (network modules) allows Pointer Manipulation. This vulnerability is associated with program files net/sched/sch_cbs.C.\n\nThis issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-33630",
          "url": "https://www.suse.com/security/cve/CVE-2021-33630"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219402 for CVE-2021-33630",
          "url": "https://bugzilla.suse.com/1219402"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-33630"
    },
    {
      "cve": "CVE-2022-50473",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-50473"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: Init completion before kobject_init_and_add()\n\nIn cpufreq_policy_alloc(), it will call uninitialed completion in\ncpufreq_sysfs_release() when kobject_init_and_add() fails. And\nthat will cause a crash such as the following page fault in complete:\n\nBUG: unable to handle page fault for address: fffffffffffffff8\n[..]\nRIP: 0010:complete+0x98/0x1f0\n[..]\nCall Trace:\n kobject_put+0x1be/0x4c0\n cpufreq_online.cold+0xee/0x1fd\n cpufreq_add_dev+0x183/0x1e0\n subsys_interface_register+0x3f5/0x4e0\n cpufreq_register_driver+0x3b7/0x670\n acpi_cpufreq_init+0x56c/0x1000 [acpi_cpufreq]\n do_one_initcall+0x13d/0x780\n do_init_module+0x1c3/0x630\n load_module+0x6e67/0x73b0\n __do_sys_finit_module+0x181/0x240\n do_syscall_64+0x35/0x80\n entry_SYSCALL_64_after_hwframe+0x63/0xcd",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-50473",
          "url": "https://www.suse.com/security/cve/CVE-2022-50473"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251103 for CVE-2022-50473",
          "url": "https://bugzilla.suse.com/1251103"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-50473"
    },
    {
      "cve": "CVE-2023-53581",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-53581"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Check for NOT_READY flag state after locking\n\nCurrently the check for NOT_READY flag is performed before obtaining the\nnecessary lock. This opens a possibility for race condition when the flow\nis concurrently removed from unready_flows list by the workqueue task,\nwhich causes a double-removal from the list and a crash[0]. Fix the issue\nby moving the flag check inside the section protected by\nuplink_priv-\u003eunready_flows_lock mutex.\n\n[0]:\n[44376.389654] general protection fault, probably for non-canonical address 0xdead000000000108: 0000 [#1] SMP\n[44376.391665] CPU: 7 PID: 59123 Comm: tc Not tainted 6.4.0-rc4+ #1\n[44376.392984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\n[44376.395342] RIP: 0010:mlx5e_tc_del_fdb_flow+0xb3/0x340 [mlx5_core]\n[44376.396857] Code: 00 48 8b b8 68 ce 02 00 e8 8a 4d 02 00 4c 8d a8 a8 01 00 00 4c 89 ef e8 8b 79 88 e1 48 8b 83 98 06 00 00 48 8b 93 90 06 00 00 \u003c48\u003e 89 42 08 48 89 10 48 b8 00 01 00 00 00 00 ad de 48 89 83 90 06\n[44376.399167] RSP: 0018:ffff88812cc97570 EFLAGS: 00010246\n[44376.399680] RAX: dead000000000122 RBX: ffff8881088e3800 RCX: ffff8881881bac00\n[44376.400337] RDX: dead000000000100 RSI: ffff88812cc97500 RDI: ffff8881242f71b0\n[44376.401001] RBP: ffff88811cbb0940 R08: 0000000000000400 R09: 0000000000000001\n[44376.401663] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88812c944000\n[44376.402342] R13: ffff8881242f71a8 R14: ffff8881222b4000 R15: 0000000000000000\n[44376.402999] FS:  00007f0451104800(0000) GS:ffff88852cb80000(0000) knlGS:0000000000000000\n[44376.403787] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[44376.404343] CR2: 0000000000489108 CR3: 0000000123a79003 CR4: 0000000000370ea0\n[44376.405004] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[44376.405665] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[44376.406339] Call Trace:\n[44376.406651]  \u003cTASK\u003e\n[44376.406939]  ? die_addr+0x33/0x90\n[44376.407311]  ? exc_general_protection+0x192/0x390\n[44376.407795]  ? asm_exc_general_protection+0x22/0x30\n[44376.408292]  ? mlx5e_tc_del_fdb_flow+0xb3/0x340 [mlx5_core]\n[44376.408876]  __mlx5e_tc_del_fdb_peer_flow+0xbc/0xe0 [mlx5_core]\n[44376.409482]  mlx5e_tc_del_flow+0x42/0x210 [mlx5_core]\n[44376.410055]  mlx5e_flow_put+0x25/0x50 [mlx5_core]\n[44376.410529]  mlx5e_delete_flower+0x24b/0x350 [mlx5_core]\n[44376.411043]  tc_setup_cb_reoffload+0x22/0x80\n[44376.411462]  fl_reoffload+0x261/0x2f0 [cls_flower]\n[44376.411907]  ? mlx5e_rep_indr_setup_ft_cb+0x160/0x160 [mlx5_core]\n[44376.412481]  ? mlx5e_rep_indr_setup_ft_cb+0x160/0x160 [mlx5_core]\n[44376.413044]  tcf_block_playback_offloads+0x76/0x170\n[44376.413497]  tcf_block_unbind+0x7b/0xd0\n[44376.413881]  tcf_block_setup+0x17d/0x1c0\n[44376.414269]  tcf_block_offload_cmd.isra.0+0xf1/0x130\n[44376.414725]  tcf_block_offload_unbind+0x43/0x70\n[44376.415153]  __tcf_block_put+0x82/0x150\n[44376.415532]  ingress_destroy+0x22/0x30 [sch_ingress]\n[44376.415986]  qdisc_destroy+0x3b/0xd0\n[44376.416343]  qdisc_graft+0x4d0/0x620\n[44376.416706]  tc_get_qdisc+0x1c9/0x3b0\n[44376.417074]  rtnetlink_rcv_msg+0x29c/0x390\n[44376.419978]  ? rep_movs_alternative+0x3a/0xa0\n[44376.420399]  ? rtnl_calcit.isra.0+0x120/0x120\n[44376.420813]  netlink_rcv_skb+0x54/0x100\n[44376.421192]  netlink_unicast+0x1f6/0x2c0\n[44376.421573]  netlink_sendmsg+0x232/0x4a0\n[44376.421980]  sock_sendmsg+0x38/0x60\n[44376.422328]  ____sys_sendmsg+0x1d0/0x1e0\n[44376.422709]  ? copy_msghdr_from_user+0x6d/0xa0\n[44376.423127]  ___sys_sendmsg+0x80/0xc0\n[44376.423495]  ? ___sys_recvmsg+0x8b/0xc0\n[44376.423869]  __sys_sendmsg+0x51/0x90\n[44376.424226]  do_syscall_64+0x3d/0x90\n[44376.424587]  entry_SYSCALL_64_after_hwframe+0x46/0xb0\n[44376.425046] RIP: 0033:0x7f045134f887\n[44376.425403] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00\n---truncated---",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-53581",
          "url": "https://www.suse.com/security/cve/CVE-2023-53581"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1251106 for CVE-2023-53581",
          "url": "https://bugzilla.suse.com/1251106"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-53581"
    },
    {
      "cve": "CVE-2023-54064",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-54064"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipmi:ssif: Fix a memory leak when scanning for an adapter\n\nThe adapter scan ssif_info_find() sets info-\u003eadapter_name if the adapter\ninfo came from SMBIOS, as it\u0027s not set in that case.  However, this\nfunction can be called more than once, and it will leak the adapter name\nif it had already been set.  So check for NULL before setting it.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-54064",
          "url": "https://www.suse.com/security/cve/CVE-2023-54064"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1256375 for CVE-2023-54064",
          "url": "https://bugzilla.suse.com/1256375"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-whitelists-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-193.el8.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-193.el8.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-193.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-04-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-54064"
    }
  ]
}

BDU:2026-12402 (CVE-2023-53581)

Vulnerability from fstec – Published: 2026-08-25 – Updated: 2026-08-25 – View on bdu.fstec.ru Fixed

Title

Уязвимость функций remove_unready_flow(), mlx5e_tc_del_fdb_flow() модуля drivers/net/ethernet/mellanox/mlx5/core/en_tc.c драйвера сетевых адаптеров Ethernet Mellanox ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

Summary

Уязвимость функций remove_unready_flow(), mlx5e_tc_del_fdb_flow() модуля drivers/net/ethernet/mellanox/mlx5/core/en_tc.c драйвера сетевых адаптеров Ethernet Mellanox ядра операционной системы Linux связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

Severity

5.0 (Medium) CVSS 2.0


                      
                        AV:L/AC:H/Au:S/C:P/I:P/A:C

5.8 (Medium) CVSS 3.1


                      
                        CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Timing and state manipulation, Resource manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-362 - Одновременное выполнение с использованием общего ресурса с неправильной синхронизацией («Ситуация гонки»)
CWE-367 - Ситуация гонки Time-of-check Time-of-use (TOCTOU)
CWE-667 - Недостаточная блокировка

Aliases

CVE-2023-53581, RHSA-2020:1769, RHSA-2024:2394, RHSA-2024:3138, RHSA-2026:0537, RHSA-2026:0576, RHSA-2026:1441, RHSA-2026:1443, RHSA-2026:1445, RHSA-2026:2490, RHSA-2026:2664, RHSA-2026:3360

References

8 references

URL
https://git.kernel.org/stable/c/30c281a77fb1b2d362030ea243dd663201d62a21
https://git.kernel.org/stable/c/82ac62d76a000871004f534ad294e763e966d3b0
https://git.kernel.org/stable/c/f7ceedd1d124217a67ed1a67bbd7a7b1288705e3
https://git.kernel.org/stable/c/e962fd5933ebc767ce2a1cf7b7c85035b5a5d04c
https://www.cve.org/CVERecord?id=CVE-2023-53581
https://git.kernel.org/linus/65e64640e97c0f223e77f9ea69b5a46186b93470
https://security-tracker.debian.org/tracker/CVE-2023-53581
https://access.redhat.com/security/cve/CVE-2023-53581

Impacted products

3 products from 3 vendors

Vendors

Red Hat, Inc., Сообщество свободного программного обеспечения

Products

Red Hat Enterprise Linux, Debian GNU/Linux, Linux

Versions

8 (Red Hat Enterprise Linux), 11 (Debian GNU/Linux), 12 (Debian GNU/Linux), 9 (Red Hat Enterprise Linux), 8.2 Advanced Update Support (Red Hat Enterprise Linux), 8.4 Advanced Mission Critical Update Support (Red Hat Enterprise Linux), от 5.11 до 5.15.120 включительно (Linux), от 5.16 до 6.1.39 включительно (Linux), от 6.2 до 6.4.4 включительно (Linux), 9.0 Update Services for SAP Solutions (Red Hat Enterprise Linux), 8.6 Update Services for SAP Solutions (Red Hat Enterprise Linux), 8.6 Telecommunications Update Service (Red Hat Enterprise Linux), 8.6 Advanced Mission Critical Update Support (Red Hat Enterprise Linux), 8.8 Telecommunications Update Service (Red Hat Enterprise Linux), 8.8 Update Services for SAP Solutions (Red Hat Enterprise Linux), 9.2 Update Services for SAP Solutions (Red Hat Enterprise Linux), 8.4 Extended Update Support Long-Life Add-On (Red Hat Enterprise Linux), от 5.4 до 5.10.187 включительно (Linux)

Product types

Operating system

Platforms

Red Hat, Inc. Red Hat Enterprise Linux 8, Сообщество свободного программного обеспечения Debian GNU/Linux 11, Сообщество свободного программного обеспечения Debian GNU/Linux 12, Inc. Red Hat Enterprise Linux 9, Inc. Red Hat Enterprise Linux 8.2 Advanced Update Support, Inc. Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Сообщество свободного программного обеспечения Linux от 5.11 до 5.15.120 включительно, Сообщество свободного программного обеспечения Linux от 5.16 до 6.1.39 включительно, Сообщество свободного программного обеспечения Linux от 6.2 до 6.4.4 включительно, Inc. Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Inc. Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Inc. Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Inc. Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Inc. Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Inc. Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Inc. Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Inc. Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Сообщество свободного программного обеспечения Linux от 5.4 до 5.10.187 включительно

Mitigations

В условиях отсутствия обновлений безопасности от производителя рекомендуется придерживаться "Рекомендаций по безопасной настройке операционных систем LINUX", изложенных в методическом документе ФСТЭК России, утверждённом 25 декабря 2022 года. Использование рекомендаций: Для Linux: https://git.kernel.org/stable/c/30c281a77fb1b2d362030ea243dd663201d62a21 https://git.kernel.org/stable/c/82ac62d76a000871004f534ad294e763e966d3b0 https://git.kernel.org/stable/c/f7ceedd1d124217a67ed1a67bbd7a7b1288705e3 https://git.kernel.org/stable/c/e962fd5933ebc767ce2a1cf7b7c85035b5a5d04c https://git.kernel.org/linus/65e64640e97c0f223e77f9ea69b5a46186b93470 Для Debian GNU/Linux: https://security-tracker.debian.org/tracker/CVE-2023-53581 Для программных продуктов Red Hat Inc.: https://access.redhat.com/security/cve/CVE-2023-53581

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:H/Au:S/C:P/I:P/A:C",
  "CVSS 3.0": "AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Red Hat, Inc., \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "8 (Red Hat Enterprise Linux), 11 (Debian GNU/Linux), 12 (Debian GNU/Linux), 9 (Red Hat Enterprise Linux), 8.2 Advanced Update Support (Red Hat Enterprise Linux), 8.4 Advanced Mission Critical Update Support (Red Hat Enterprise Linux), \u043e\u0442 5.11 \u0434\u043e 5.15.120 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 5.16 \u0434\u043e 6.1.39 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 6.2 \u0434\u043e 6.4.4 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), 9.0 Update Services for SAP Solutions (Red Hat Enterprise Linux), 8.6 Update Services for SAP Solutions (Red Hat Enterprise Linux), 8.6 Telecommunications Update Service (Red Hat Enterprise Linux), 8.6 Advanced Mission Critical Update Support (Red Hat Enterprise Linux), 8.8 Telecommunications Update Service (Red Hat Enterprise Linux), 8.8 Update Services for SAP Solutions (Red Hat Enterprise Linux), 9.2 Update Services for SAP Solutions (Red Hat Enterprise Linux), 8.4 Extended Update Support Long-Life Add-On (Red Hat Enterprise Linux), \u043e\u0442 5.4 \u0434\u043e 5.10.187 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0412 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \"\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c LINUX\", \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0435\u0442\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u043c 25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\n\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\n\u0414\u043b\u044f Linux:\n\nhttps://git.kernel.org/stable/c/30c281a77fb1b2d362030ea243dd663201d62a21\nhttps://git.kernel.org/stable/c/82ac62d76a000871004f534ad294e763e966d3b0\nhttps://git.kernel.org/stable/c/f7ceedd1d124217a67ed1a67bbd7a7b1288705e3\nhttps://git.kernel.org/stable/c/e962fd5933ebc767ce2a1cf7b7c85035b5a5d04c\nhttps://git.kernel.org/linus/65e64640e97c0f223e77f9ea69b5a46186b93470\n\n\n\n\u0414\u043b\u044f Debian GNU/Linux:\n\nhttps://security-tracker.debian.org/tracker/CVE-2023-53581\n\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\n\nhttps://access.redhat.com/security/cve/CVE-2023-53581",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "05.07.2023",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "25.08.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "25.08.2026",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2026-12402",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-53581, RHSA-2020:1769, RHSA-2024:2394, RHSA-2024:3138, RHSA-2026:0537, RHSA-2026:0576, RHSA-2026:1441, RHSA-2026:1443, RHSA-2026:1445, RHSA-2026:2490, RHSA-2026:2664, RHSA-2026:3360",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Red Hat Enterprise Linux, Debian GNU/Linux, Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Red Hat, Inc. Red Hat Enterprise Linux 8 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 11 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 12 , Red Hat, Inc. Red Hat Enterprise Linux 9 , Red Hat, Inc. Red Hat Enterprise Linux 8.2 Advanced Update Support , Red Hat, Inc. Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 5.11 \u0434\u043e 5.15.120 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 5.16 \u0434\u043e 6.1.39 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 6.2 \u0434\u043e 6.4.4 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , Red Hat, Inc. Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions , Red Hat, Inc. Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions , Red Hat, Inc. Red Hat Enterprise Linux 8.6 Telecommunications Update Service , Red Hat, Inc. Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support , Red Hat, Inc. Red Hat Enterprise Linux 8.8 Telecommunications Update Service , Red Hat, Inc. Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions , Red Hat, Inc. Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions , Red Hat, Inc. Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 5.4 \u0434\u043e 5.10.187 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0439 remove_unready_flow(), mlx5e_tc_del_fdb_flow() \u043c\u043e\u0434\u0443\u043b\u044f drivers/net/ethernet/mellanox/mlx5/core/en_tc.c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0430\u0434\u0430\u043f\u0442\u0435\u0440\u043e\u0432 Ethernet Mellanox \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043e\u0431\u0449\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0435\u0439 (\u00ab\u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0433\u043e\u043d\u043a\u0438\u00bb) (CWE-362), \u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0433\u043e\u043d\u043a\u0438 Time-of-check Time-of-use (TOCTOU) (CWE-367), \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 (CWE-667)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0439 remove_unready_flow(), mlx5e_tc_del_fdb_flow() \u043c\u043e\u0434\u0443\u043b\u044f drivers/net/ethernet/mellanox/mlx5/core/en_tc.c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0430\u0434\u0430\u043f\u0442\u0435\u0440\u043e\u0432 Ethernet Mellanox \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043e\u0431\u0449\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u043e\u043a\u0430\u043c\u0438 \u0438 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c, \u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://git.kernel.org/stable/c/30c281a77fb1b2d362030ea243dd663201d62a21\nhttps://git.kernel.org/stable/c/82ac62d76a000871004f534ad294e763e966d3b0\nhttps://git.kernel.org/stable/c/f7ceedd1d124217a67ed1a67bbd7a7b1288705e3\nhttps://git.kernel.org/stable/c/e962fd5933ebc767ce2a1cf7b7c85035b5a5d04c\n\nhttps://www.cve.org/CVERecord?id=CVE-2023-53581\n\nhttps://git.kernel.org/linus/65e64640e97c0f223e77f9ea69b5a46186b93470\n\nhttps://security-tracker.debian.org/tracker/CVE-2023-53581\n\nhttps://access.redhat.com/security/cve/CVE-2023-53581",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-362, CWE-367, CWE-667",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,8)"
}

CVE-2018-16871 (GCVE-0-2018-16871)

Vulnerability from cvelistv5 – Published: 2019-07-30 16:19 – Updated: 2024-08-05 10:32

Summary

A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the NFS server will be lost.

Severity

7.5 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-476

Assigner

redhat redhat root

References

7 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2019:2696	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2730	vendor-advisoryx_refsource_REDHAT
https://support.f5.com/csp/article/K18657134	x_refsource_CONFIRM
https://support.f5.com/csp/article/K18657134?utm_…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2020:0740	vendor-advisoryx_refsource_REDHAT
https://security.netapp.com/advisory/ntap-2021100…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Red Hat	kernel:	Affected: all 3.x, all 4.x up to 4.20

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:32:54.042Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16871"
          },
          {
            "name": "RHSA-2019:2696",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2696"
          },
          {
            "name": "RHSA-2019:2730",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2730"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K18657134"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K18657134?utm_source=f5support\u0026amp%3Butm_medium=RSS"
          },
          {
            "name": "RHSA-2020:0740",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0740"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20211004-0002/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel:",
          "vendor": "Red Hat",
          "versions": [
            {
              "status": "affected",
              "version": "all 3.x, all 4.x up to 4.20"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Linux kernel\u0027s NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the NFS server will be lost."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-10-04T18:06:18.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16871"
        },
        {
          "name": "RHSA-2019:2696",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2696"
        },
        {
          "name": "RHSA-2019:2730",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2730"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K18657134"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K18657134?utm_source=f5support\u0026amp%3Butm_medium=RSS"
        },
        {
          "name": "RHSA-2020:0740",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0740"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20211004-0002/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-16871",
    "datePublished": "2019-07-30T16:19:25.000Z",
    "dateReserved": "2018-09-11T00:00:00.000Z",
    "dateUpdated": "2024-08-05T10:32:54.042Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-10639 (GCVE-0-2019-10639)

Vulnerability from cvelistv5 – Published: 2019-07-05 22:07 – Updated: 2024-08-04 22:32

Summary

The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. Specifically, it is possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). This key contains enough bits from a kernel address (of a static variable) so when the key is extracted (via enumeration), the offset of the kernel image is exposed. This attack can be carried out remotely, by the attacker forcing the target device to send UDP or ICMP (or certain other) traffic to attacker-controlled IP addresses. Forcing a server to send UDP traffic is trivial if the server is a DNS server. ICMP traffic is trivial if the server answers ICMP Echo requests (ping). For client targets, if the target visits the attacker's web page, then WebRTC or gQUIC can be used to force UDP traffic to attacker-controlled IP addresses. NOTE: this attack against KASLR became viable in 4.1 because IP ID generation was changed to have a dependency on an address associated with a network namespace.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

16 references

URL	Tags
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://seclists.org/bugtraq/2019/Aug/18	mailing-listx_refsource_BUGTRAQ
https://www.debian.org/security/2019/dsa-4497	vendor-advisoryx_refsource_DEBIAN
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4115-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4118-1/	vendor-advisoryx_refsource_UBUNTU
https://www.oracle.com/security-alerts/cpuApr2021.html	x_refsource_MISC
https://cdn.kernel.org/pub/linux/kernel/v5.x/Chan…	x_refsource_MISC
https://github.com/torvalds/linux/commit/355b9855…	x_refsource_MISC
https://git.kernel.org/cgit/linux/kernel/git/torv…	x_refsource_MISC
https://arxiv.org/pdf/1906.10478.pdf	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2019080…	x_refsource_CONFIRM
https://support.f5.com/csp/article/K32804955	x_refsource_CONFIRM
https://support.f5.com/csp/article/K32804955?utm_…	x_refsource_CONFIRM

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:32:00.651Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2019:1716",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00014.html"
          },
          {
            "name": "openSUSE-SU-2019:1757",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html"
          },
          {
            "name": "[debian-lts-announce] 20190723 [SECURITY] [DLA 1862-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/07/msg00022.html"
          },
          {
            "name": "20190813 [SECURITY] [DSA 4497-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Aug/18"
          },
          {
            "name": "DSA-4497",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4497"
          },
          {
            "name": "[debian-lts-announce] 20190814 [SECURITY] [DLA 1885-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html"
          },
          {
            "name": "USN-4115-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4115-1/"
          },
          {
            "name": "USN-4118-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4118-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.8"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/355b98553789b646ed97ad801a619ff898471b92"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=355b98553789b646ed97ad801a619ff898471b92"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://arxiv.org/pdf/1906.10478.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190806-0001/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K32804955"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K32804955?utm_source=f5support\u0026amp%3Butm_medium=RSS"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. Specifically, it is possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). This key contains enough bits from a kernel address (of a static variable) so when the key is extracted (via enumeration), the offset of the kernel image is exposed. This attack can be carried out remotely, by the attacker forcing the target device to send UDP or ICMP (or certain other) traffic to attacker-controlled IP addresses. Forcing a server to send UDP traffic is trivial if the server is a DNS server. ICMP traffic is trivial if the server answers ICMP Echo requests (ping). For client targets, if the target visits the attacker\u0027s web page, then WebRTC or gQUIC can be used to force UDP traffic to attacker-controlled IP addresses. NOTE: this attack against KASLR became viable in 4.1 because IP ID generation was changed to have a dependency on an address associated with a network namespace."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-14T17:20:06.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "openSUSE-SU-2019:1716",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00014.html"
        },
        {
          "name": "openSUSE-SU-2019:1757",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html"
        },
        {
          "name": "[debian-lts-announce] 20190723 [SECURITY] [DLA 1862-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/07/msg00022.html"
        },
        {
          "name": "20190813 [SECURITY] [DSA 4497-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Aug/18"
        },
        {
          "name": "DSA-4497",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4497"
        },
        {
          "name": "[debian-lts-announce] 20190814 [SECURITY] [DLA 1885-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html"
        },
        {
          "name": "USN-4115-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4115-1/"
        },
        {
          "name": "USN-4118-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4118-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.8"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/355b98553789b646ed97ad801a619ff898471b92"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=355b98553789b646ed97ad801a619ff898471b92"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://arxiv.org/pdf/1906.10478.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190806-0001/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K32804955"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K32804955?utm_source=f5support\u0026amp%3Butm_medium=RSS"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-10639",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. Specifically, it is possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). This key contains enough bits from a kernel address (of a static variable) so when the key is extracted (via enumeration), the offset of the kernel image is exposed. This attack can be carried out remotely, by the attacker forcing the target device to send UDP or ICMP (or certain other) traffic to attacker-controlled IP addresses. Forcing a server to send UDP traffic is trivial if the server is a DNS server. ICMP traffic is trivial if the server answers ICMP Echo requests (ping). For client targets, if the target visits the attacker\u0027s web page, then WebRTC or gQUIC can be used to force UDP traffic to attacker-controlled IP addresses. NOTE: this attack against KASLR became viable in 4.1 because IP ID generation was changed to have a dependency on an address associated with a network namespace."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2019:1716",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00014.html"
            },
            {
              "name": "openSUSE-SU-2019:1757",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html"
            },
            {
              "name": "[debian-lts-announce] 20190723 [SECURITY] [DLA 1862-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/07/msg00022.html"
            },
            {
              "name": "20190813 [SECURITY] [DSA 4497-1] linux security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Aug/18"
            },
            {
              "name": "DSA-4497",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4497"
            },
            {
              "name": "[debian-lts-announce] 20190814 [SECURITY] [DLA 1885-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html"
            },
            {
              "name": "USN-4115-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4115-1/"
            },
            {
              "name": "USN-4118-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4118-1/"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuApr2021.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
            },
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.8",
              "refsource": "MISC",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.8"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/355b98553789b646ed97ad801a619ff898471b92",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/355b98553789b646ed97ad801a619ff898471b92"
            },
            {
              "name": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=355b98553789b646ed97ad801a619ff898471b92",
              "refsource": "MISC",
              "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=355b98553789b646ed97ad801a619ff898471b92"
            },
            {
              "name": "https://arxiv.org/pdf/1906.10478.pdf",
              "refsource": "MISC",
              "url": "https://arxiv.org/pdf/1906.10478.pdf"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190806-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190806-0001/"
            },
            {
              "name": "https://support.f5.com/csp/article/K32804955",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K32804955"
            },
            {
              "name": "https://support.f5.com/csp/article/K32804955?utm_source=f5support\u0026amp;utm_medium=RSS",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K32804955?utm_source=f5support\u0026amp;utm_medium=RSS"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-10639",
    "datePublished": "2019-07-05T22:07:27.000Z",
    "dateReserved": "2019-03-29T00:00:00.000Z",
    "dateUpdated": "2024-08-04T22:32:00.651Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-12819 (GCVE-0-2019-12819)

Vulnerability from cvelistv5 – Published: 2019-06-14 01:24 – Updated: 2024-08-04 23:32

Summary

An issue was discovered in the Linux kernel before 5.0. The function __mdiobus_register() in drivers/net/phy/mdio_bus.c calls put_device(), which will trigger a fixed_mdio_bus_init use-after-free. This will cause a denial of service.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

10 references

URL	Tags
https://github.com/torvalds/linux/commit/6ff7b060…	x_refsource_MISC
https://git.kernel.org/cgit/linux/kernel/git/torv…	x_refsource_MISC
http://www.securityfocus.com/bid/108768	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.netapp.com/advisory/ntap-2019071…	x_refsource_CONFIRM
https://usn.ubuntu.com/4094-1/	vendor-advisoryx_refsource_UBUNTU
http://packetstormsecurity.com/files/154245/Kerne…	x_refsource_MISC
https://usn.ubuntu.com/4118-1/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:32:55.227Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/6ff7b060535e87c2ae14dd8548512abfdda528fb"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6ff7b060535e87c2ae14dd8548512abfdda528fb"
          },
          {
            "name": "108768",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/108768"
          },
          {
            "name": "openSUSE-SU-2019:1570",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html"
          },
          {
            "name": "openSUSE-SU-2019:1571",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00040.html"
          },
          {
            "name": "openSUSE-SU-2019:1579",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190710-0002/"
          },
          {
            "name": "USN-4094-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4094-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.html"
          },
          {
            "name": "USN-4118-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4118-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in the Linux kernel before 5.0. The function __mdiobus_register() in drivers/net/phy/mdio_bus.c calls put_device(), which will trigger a fixed_mdio_bus_init use-after-free. This will cause a denial of service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-09-02T23:06:16.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/6ff7b060535e87c2ae14dd8548512abfdda528fb"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6ff7b060535e87c2ae14dd8548512abfdda528fb"
        },
        {
          "name": "108768",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/108768"
        },
        {
          "name": "openSUSE-SU-2019:1570",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html"
        },
        {
          "name": "openSUSE-SU-2019:1571",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00040.html"
        },
        {
          "name": "openSUSE-SU-2019:1579",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190710-0002/"
        },
        {
          "name": "USN-4094-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4094-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.html"
        },
        {
          "name": "USN-4118-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4118-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-12819",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in the Linux kernel before 5.0. The function __mdiobus_register() in drivers/net/phy/mdio_bus.c calls put_device(), which will trigger a fixed_mdio_bus_init use-after-free. This will cause a denial of service."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/torvalds/linux/commit/6ff7b060535e87c2ae14dd8548512abfdda528fb",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/6ff7b060535e87c2ae14dd8548512abfdda528fb"
            },
            {
              "name": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6ff7b060535e87c2ae14dd8548512abfdda528fb",
              "refsource": "MISC",
              "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6ff7b060535e87c2ae14dd8548512abfdda528fb"
            },
            {
              "name": "108768",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/108768"
            },
            {
              "name": "openSUSE-SU-2019:1570",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html"
            },
            {
              "name": "openSUSE-SU-2019:1571",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00040.html"
            },
            {
              "name": "openSUSE-SU-2019:1579",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190710-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190710-0002/"
            },
            {
              "name": "USN-4094-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4094-1/"
            },
            {
              "name": "http://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.html"
            },
            {
              "name": "USN-4118-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4118-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-12819",
    "datePublished": "2019-06-14T01:24:52.000Z",
    "dateReserved": "2019-06-13T00:00:00.000Z",
    "dateUpdated": "2024-08-04T23:32:55.227Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-15090 (GCVE-0-2019-15090)

Vulnerability from cvelistv5 – Published: 2019-08-15 23:47 – Updated: 2024-08-05 00:34

Summary

An issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the Linux kernel before 5.1.12. In the qedi_dbg_* family of functions, there is an out-of-bounds read.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

9 references

URL	Tags
https://github.com/torvalds/linux/commit/c09581a5…	x_refsource_MISC
https://git.kernel.org/cgit/linux/kernel/git/torv…	x_refsource_MISC
https://cdn.kernel.org/pub/linux/kernel/v5.x/Chan…	x_refsource_MISC
https://usn.ubuntu.com/4115-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4118-1/	vendor-advisoryx_refsource_UBUNTU
https://security.netapp.com/advisory/ntap-2019090…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4147-1/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:34:53.231Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/c09581a52765a85f19fc35340127396d5e3379cc"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c09581a52765a85f19fc35340127396d5e3379cc"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.12"
          },
          {
            "name": "USN-4115-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4115-1/"
          },
          {
            "name": "USN-4118-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4118-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190905-0002/"
          },
          {
            "name": "openSUSE-SU-2019:2173",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html"
          },
          {
            "name": "openSUSE-SU-2019:2181",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html"
          },
          {
            "name": "USN-4147-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4147-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the Linux kernel before 5.1.12. In the qedi_dbg_* family of functions, there is an out-of-bounds read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-10-04T17:06:53.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/c09581a52765a85f19fc35340127396d5e3379cc"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c09581a52765a85f19fc35340127396d5e3379cc"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.12"
        },
        {
          "name": "USN-4115-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4115-1/"
        },
        {
          "name": "USN-4118-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4118-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190905-0002/"
        },
        {
          "name": "openSUSE-SU-2019:2173",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html"
        },
        {
          "name": "openSUSE-SU-2019:2181",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html"
        },
        {
          "name": "USN-4147-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4147-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-15090",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the Linux kernel before 5.1.12. In the qedi_dbg_* family of functions, there is an out-of-bounds read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/torvalds/linux/commit/c09581a52765a85f19fc35340127396d5e3379cc",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/c09581a52765a85f19fc35340127396d5e3379cc"
            },
            {
              "name": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c09581a52765a85f19fc35340127396d5e3379cc",
              "refsource": "MISC",
              "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c09581a52765a85f19fc35340127396d5e3379cc"
            },
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.12",
              "refsource": "MISC",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.12"
            },
            {
              "name": "USN-4115-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4115-1/"
            },
            {
              "name": "USN-4118-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4118-1/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190905-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190905-0002/"
            },
            {
              "name": "openSUSE-SU-2019:2173",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html"
            },
            {
              "name": "openSUSE-SU-2019:2181",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html"
            },
            {
              "name": "USN-4147-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4147-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-15090",
    "datePublished": "2019-08-15T23:47:47.000Z",
    "dateReserved": "2019-08-15T00:00:00.000Z",
    "dateUpdated": "2024-08-05T00:34:53.231Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-15099 (GCVE-0-2019-15099)

Vulnerability from cvelistv5 – Published: 2019-08-16 01:15 – Updated: 2024-08-05 00:34

Summary

drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

9 references

URL	Tags
https://lore.kernel.org/linux-wireless/2019080400…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2019090…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://support.f5.com/csp/article/K76295179	x_refsource_CONFIRM
https://support.f5.com/csp/article/K76295179?utm_…	x_refsource_CONFIRM
https://usn.ubuntu.com/4258-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4287-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4287-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4284-1/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:34:53.290Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lore.kernel.org/linux-wireless/20190804003101.11541-1-benquike%40gmail.com/T/#u"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190905-0002/"
          },
          {
            "name": "openSUSE-SU-2019:2181",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K76295179"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K76295179?utm_source=f5support\u0026amp%3Butm_medium=RSS"
          },
          {
            "name": "USN-4258-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4258-1/"
          },
          {
            "name": "USN-4287-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4287-1/"
          },
          {
            "name": "USN-4287-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4287-2/"
          },
          {
            "name": "USN-4284-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4284-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-02T20:06:28.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lore.kernel.org/linux-wireless/20190804003101.11541-1-benquike%40gmail.com/T/#u"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190905-0002/"
        },
        {
          "name": "openSUSE-SU-2019:2181",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K76295179"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K76295179?utm_source=f5support\u0026amp%3Butm_medium=RSS"
        },
        {
          "name": "USN-4258-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4258-1/"
        },
        {
          "name": "USN-4287-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4287-1/"
        },
        {
          "name": "USN-4287-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4287-2/"
        },
        {
          "name": "USN-4284-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4284-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-15099",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://lore.kernel.org/linux-wireless/20190804003101.11541-1-benquike@gmail.com/T/#u",
              "refsource": "MISC",
              "url": "https://lore.kernel.org/linux-wireless/20190804003101.11541-1-benquike@gmail.com/T/#u"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190905-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190905-0002/"
            },
            {
              "name": "openSUSE-SU-2019:2181",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html"
            },
            {
              "name": "https://support.f5.com/csp/article/K76295179",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K76295179"
            },
            {
              "name": "https://support.f5.com/csp/article/K76295179?utm_source=f5support\u0026amp;utm_medium=RSS",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K76295179?utm_source=f5support\u0026amp;utm_medium=RSS"
            },
            {
              "name": "USN-4258-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4258-1/"
            },
            {
              "name": "USN-4287-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4287-1/"
            },
            {
              "name": "USN-4287-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4287-2/"
            },
            {
              "name": "USN-4284-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4284-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-15099",
    "datePublished": "2019-08-16T01:15:29.000Z",
    "dateReserved": "2019-08-15T00:00:00.000Z",
    "dateUpdated": "2024-08-05T00:34:53.290Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-15221 (GCVE-0-2019-15221)

Vulnerability from cvelistv5 – Published: 2019-08-19 21:45 – Updated: 2024-08-05 00:42

Summary

An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

15 references

URL	Tags
https://cdn.kernel.org/pub/linux/kernel/v5.x/Chan…	x_refsource_MISC
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_MISC
https://syzkaller.appspot.com/bug?id=240f09164db2…	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2019/08/20/2	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4115-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4118-1/	vendor-advisoryx_refsource_UBUNTU
https://security.netapp.com/advisory/ntap-2019090…	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4147-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4286-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4286-1/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:42:03.373Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.17"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3450121997ce872eb7f1248417225827ea249710"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://syzkaller.appspot.com/bug?id=240f09164db2c3d3af33a117c713dc7650dc29d6"
          },
          {
            "name": "[oss-security] 20190820 Linux kernel: multiple vulnerabilities in the USB subsystem x2",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/08/20/2"
          },
          {
            "name": "USN-4115-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4115-1/"
          },
          {
            "name": "USN-4118-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4118-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190905-0002/"
          },
          {
            "name": "[debian-lts-announce] 20190914 [SECURITY] [DLA 1919-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html"
          },
          {
            "name": "[debian-lts-announce] 20190915 [SECURITY] [DLA 1919-2] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html"
          },
          {
            "name": "openSUSE-SU-2019:2173",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html"
          },
          {
            "name": "openSUSE-SU-2019:2181",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html"
          },
          {
            "name": "[debian-lts-announce] 20190925 [SECURITY] [DLA 1930-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html"
          },
          {
            "name": "USN-4147-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4147-1/"
          },
          {
            "name": "USN-4286-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4286-2/"
          },
          {
            "name": "USN-4286-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4286-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-11T23:06:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.17"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3450121997ce872eb7f1248417225827ea249710"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://syzkaller.appspot.com/bug?id=240f09164db2c3d3af33a117c713dc7650dc29d6"
        },
        {
          "name": "[oss-security] 20190820 Linux kernel: multiple vulnerabilities in the USB subsystem x2",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2019/08/20/2"
        },
        {
          "name": "USN-4115-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4115-1/"
        },
        {
          "name": "USN-4118-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4118-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190905-0002/"
        },
        {
          "name": "[debian-lts-announce] 20190914 [SECURITY] [DLA 1919-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html"
        },
        {
          "name": "[debian-lts-announce] 20190915 [SECURITY] [DLA 1919-2] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html"
        },
        {
          "name": "openSUSE-SU-2019:2173",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html"
        },
        {
          "name": "openSUSE-SU-2019:2181",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html"
        },
        {
          "name": "[debian-lts-announce] 20190925 [SECURITY] [DLA 1930-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html"
        },
        {
          "name": "USN-4147-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4147-1/"
        },
        {
          "name": "USN-4286-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4286-2/"
        },
        {
          "name": "USN-4286-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4286-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-15221",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.17",
              "refsource": "MISC",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.17"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3450121997ce872eb7f1248417225827ea249710",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3450121997ce872eb7f1248417225827ea249710"
            },
            {
              "name": "https://syzkaller.appspot.com/bug?id=240f09164db2c3d3af33a117c713dc7650dc29d6",
              "refsource": "MISC",
              "url": "https://syzkaller.appspot.com/bug?id=240f09164db2c3d3af33a117c713dc7650dc29d6"
            },
            {
              "name": "[oss-security] 20190820 Linux kernel: multiple vulnerabilities in the USB subsystem x2",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2019/08/20/2"
            },
            {
              "name": "USN-4115-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4115-1/"
            },
            {
              "name": "USN-4118-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4118-1/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190905-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190905-0002/"
            },
            {
              "name": "[debian-lts-announce] 20190914 [SECURITY] [DLA 1919-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html"
            },
            {
              "name": "[debian-lts-announce] 20190915 [SECURITY] [DLA 1919-2] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html"
            },
            {
              "name": "openSUSE-SU-2019:2173",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html"
            },
            {
              "name": "openSUSE-SU-2019:2181",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html"
            },
            {
              "name": "[debian-lts-announce] 20190925 [SECURITY] [DLA 1930-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html"
            },
            {
              "name": "USN-4147-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4147-1/"
            },
            {
              "name": "USN-4286-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4286-2/"
            },
            {
              "name": "USN-4286-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4286-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-15221",
    "datePublished": "2019-08-19T21:45:38.000Z",
    "dateReserved": "2019-08-19T00:00:00.000Z",
    "dateUpdated": "2024-08-05T00:42:03.373Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-15223 (GCVE-0-2019-15223)

Vulnerability from cvelistv5 – Published: 2019-08-19 21:45 – Updated: 2024-08-05 00:42

Summary

An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/driver.c driver.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://cdn.kernel.org/pub/linux/kernel/v5.x/Chan…	x_refsource_MISC
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_MISC
https://syzkaller.appspot.com/bug?id=0c1e517c657d…	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2019/08/20/2	mailing-listx_refsource_MLIST
https://security.netapp.com/advisory/ntap-2019090…	x_refsource_CONFIRM
https://usn.ubuntu.com/4147-1/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:42:03.574Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.8"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0b074ab7fc0d575247b9cc9f93bb7e007ca38840"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://syzkaller.appspot.com/bug?id=0c1e517c657d3de2361cb0cc2d3a8663c25039a7"
          },
          {
            "name": "[oss-security] 20190820 Linux kernel: multiple vulnerabilities in the USB subsystem x2",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/08/20/2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190905-0002/"
          },
          {
            "name": "USN-4147-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4147-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/driver.c driver."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-10-04T17:07:03.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.8"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0b074ab7fc0d575247b9cc9f93bb7e007ca38840"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://syzkaller.appspot.com/bug?id=0c1e517c657d3de2361cb0cc2d3a8663c25039a7"
        },
        {
          "name": "[oss-security] 20190820 Linux kernel: multiple vulnerabilities in the USB subsystem x2",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2019/08/20/2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190905-0002/"
        },
        {
          "name": "USN-4147-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4147-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-15223",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/driver.c driver."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.8",
              "refsource": "MISC",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.8"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0b074ab7fc0d575247b9cc9f93bb7e007ca38840",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0b074ab7fc0d575247b9cc9f93bb7e007ca38840"
            },
            {
              "name": "https://syzkaller.appspot.com/bug?id=0c1e517c657d3de2361cb0cc2d3a8663c25039a7",
              "refsource": "MISC",
              "url": "https://syzkaller.appspot.com/bug?id=0c1e517c657d3de2361cb0cc2d3a8663c25039a7"
            },
            {
              "name": "[oss-security] 20190820 Linux kernel: multiple vulnerabilities in the USB subsystem x2",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2019/08/20/2"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190905-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190905-0002/"
            },
            {
              "name": "USN-4147-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4147-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-15223",
    "datePublished": "2019-08-19T21:45:20.000Z",
    "dateReserved": "2019-08-19T00:00:00.000Z",
    "dateUpdated": "2024-08-05T00:42:03.574Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-16234 (GCVE-0-2019-16234)

Vulnerability from cvelistv5 – Published: 2019-09-11 15:29 – Updated: 2024-08-05 01:10

Summary

drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

8 references

URL	Tags
https://lkml.org/lkml/2019/9/9/487	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2019100…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4344-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4345-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4342-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4346-1/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T01:10:41.706Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lkml.org/lkml/2019/9/9/487"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20191004-0001/"
          },
          {
            "name": "openSUSE-SU-2019:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00064.html"
          },
          {
            "name": "openSUSE-SU-2019:2444",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html"
          },
          {
            "name": "USN-4344-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4344-1/"
          },
          {
            "name": "USN-4345-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4345-1/"
          },
          {
            "name": "USN-4342-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4342-1/"
          },
          {
            "name": "USN-4346-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4346-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-05-06T14:06:13.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lkml.org/lkml/2019/9/9/487"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20191004-0001/"
        },
        {
          "name": "openSUSE-SU-2019:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00064.html"
        },
        {
          "name": "openSUSE-SU-2019:2444",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html"
        },
        {
          "name": "USN-4344-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4344-1/"
        },
        {
          "name": "USN-4345-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4345-1/"
        },
        {
          "name": "USN-4342-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4342-1/"
        },
        {
          "name": "USN-4346-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4346-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-16234",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://lkml.org/lkml/2019/9/9/487",
              "refsource": "MISC",
              "url": "https://lkml.org/lkml/2019/9/9/487"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20191004-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20191004-0001/"
            },
            {
              "name": "openSUSE-SU-2019:2392",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00064.html"
            },
            {
              "name": "openSUSE-SU-2019:2444",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html"
            },
            {
              "name": "USN-4344-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4344-1/"
            },
            {
              "name": "USN-4345-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4345-1/"
            },
            {
              "name": "USN-4342-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4342-1/"
            },
            {
              "name": "USN-4346-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4346-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-16234",
    "datePublished": "2019-09-11T15:29:40.000Z",
    "dateReserved": "2019-09-11T00:00:00.000Z",
    "dateUpdated": "2024-08-05T01:10:41.706Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-16746 (GCVE-0-2019-16746)

Vulnerability from cvelistv5 – Published: 2019-09-24 05:55 – Updated: 2024-08-05 01:24

Summary

An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of variable elements in a beacon head, leading to a buffer overflow.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

14 references

URL	Tags
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://seclists.org/bugtraq/2019/Nov/11	mailing-listx_refsource_BUGTRAQ
https://usn.ubuntu.com/4183-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4186-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4209-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4210-1/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.oracle.com/security-alerts/cpuApr2021.html	x_refsource_MISC
http://packetstormsecurity.com/files/155212/Slack…	x_refsource_MISC
https://marc.info/?l=linux-wireless&m=15690139122…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2019103…	x_refsource_CONFIRM

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T01:24:47.916Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2019-057d691fd4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TASE2ESEZAER6DTZH3DJ4K2JNO46TVL7/"
          },
          {
            "name": "20191108 [slackware-security] Slackware 14.2 kernel (SSA:2019-311-01)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Nov/11"
          },
          {
            "name": "USN-4183-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4183-1/"
          },
          {
            "name": "USN-4186-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4186-1/"
          },
          {
            "name": "USN-4209-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4209-1/"
          },
          {
            "name": "USN-4210-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4210-1/"
          },
          {
            "name": "[debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html"
          },
          {
            "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
          },
          {
            "name": "openSUSE-SU-2020:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
          },
          {
            "name": "openSUSE-SU-2020:1153",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://marc.info/?l=linux-wireless\u0026m=156901391225058\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20191031-0005/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of variable elements in a beacon head, leading to a buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-14T17:20:09.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "FEDORA-2019-057d691fd4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TASE2ESEZAER6DTZH3DJ4K2JNO46TVL7/"
        },
        {
          "name": "20191108 [slackware-security] Slackware 14.2 kernel (SSA:2019-311-01)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Nov/11"
        },
        {
          "name": "USN-4183-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4183-1/"
        },
        {
          "name": "USN-4186-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4186-1/"
        },
        {
          "name": "USN-4209-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4209-1/"
        },
        {
          "name": "USN-4210-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4210-1/"
        },
        {
          "name": "[debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html"
        },
        {
          "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
        },
        {
          "name": "openSUSE-SU-2020:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
        },
        {
          "name": "openSUSE-SU-2020:1153",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://marc.info/?l=linux-wireless\u0026m=156901391225058\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20191031-0005/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-16746",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of variable elements in a beacon head, leading to a buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "FEDORA-2019-057d691fd4",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TASE2ESEZAER6DTZH3DJ4K2JNO46TVL7/"
            },
            {
              "name": "20191108 [slackware-security] Slackware 14.2 kernel (SSA:2019-311-01)",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Nov/11"
            },
            {
              "name": "USN-4183-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4183-1/"
            },
            {
              "name": "USN-4186-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4186-1/"
            },
            {
              "name": "USN-4209-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4209-1/"
            },
            {
              "name": "USN-4210-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4210-1/"
            },
            {
              "name": "[debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html"
            },
            {
              "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
            },
            {
              "name": "openSUSE-SU-2020:0336",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
            },
            {
              "name": "openSUSE-SU-2020:1153",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuApr2021.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
            },
            {
              "name": "http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
            },
            {
              "name": "https://marc.info/?l=linux-wireless\u0026m=156901391225058\u0026w=2",
              "refsource": "MISC",
              "url": "https://marc.info/?l=linux-wireless\u0026m=156901391225058\u0026w=2"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20191031-0005/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20191031-0005/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-16746",
    "datePublished": "2019-09-24T05:55:02.000Z",
    "dateReserved": "2019-09-24T00:00:00.000Z",
    "dateUpdated": "2024-08-05T01:24:47.916Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2020:1769

BDU:2026-12402 (CVE-2023-53581)

CVE-2018-16871 (GCVE-0-2018-16871)

CVE-2019-10639 (GCVE-0-2019-10639)

CVE-2019-12819 (GCVE-0-2019-12819)

CVE-2019-15090 (GCVE-0-2019-15090)

CVE-2019-15099 (GCVE-0-2019-15099)

CVE-2019-15221 (GCVE-0-2019-15221)

CVE-2019-15223 (GCVE-0-2019-15223)

CVE-2019-16234 (GCVE-0-2019-16234)

CVE-2019-16746 (GCVE-0-2019-16746)

Tags

Sightings

Nomenclature

Related by attack behaviour