SUSE-SU-2021:1623-1

Vulnerability from csaf_suse - Published: 2021-05-18 08:43 - Updated: 2026-09-20 13:56
Summary
Security update for the Linux Kernel
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel
Description of the patch: The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bnc#1184509). - CVE-2021-29650: Fixed an issue inside the netfilter subsystem that allowed attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignment of a new table value (bnc#1184208). - CVE-2020-27673: Fixed an issue in Xen where a guest OS users could have caused a denial of service (host OS hang) via a high rate of events to dom0 (bnc#1177411, bnc#1184583). - CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute arbitrary code within the kernel context (bnc#1184391). - CVE-2020-25673: Fixed NFC endless loops caused by repeated llcp_sock_connect() (bsc#1178181). - CVE-2020-25672: Fixed NFC memory leak in llcp_sock_connect() (bsc#1178181). - CVE-2020-25671: Fixed NFC refcount leak in llcp_sock_connect() (bsc#1178181). - CVE-2020-25670: Fixed NFC refcount leak in llcp_sock_bind() (bsc#1178181). - CVE-2021-28950: Fixed an issue in fs/fuse/fuse_i.h where a 'stall on CPU' could have occured because a retry loop continually finds the same bad inode (bnc#1184194, bnc#1184211). - CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bnc#1184211). - CVE-2021-30002: Fixed a memory leak issue when a webcam device exists (bnc#1184120). - CVE-2021-3483: Fixed a use-after-free bug in nosy_ioctl() (bsc#1184393). - CVE-2021-20219: Fixed a denial of service vulnerability in drivers/tty/n_tty.c of the Linux kernel. In this flaw a local attacker with a normal user privilege could have delayed the loop and cause a threat to the system availability (bnc#1184397). - CVE-2021-29265: Fixed an issue in usbip_sockfd_store in drivers/usb/usbip/stub_dev.c that allowed attackers to cause a denial of service (GPF) because the stub-up sequence has race conditions during an update of the local and shared status (bnc#1184167). - CVE-2021-29264: Fixed an issue in drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver that allowed attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets are used and NAPI is enabled (bnc#1184168). - CVE-2021-28972: Fixed an issue in drivers/pci/hotplug/rpadlpar_sysfs.c where the RPA PCI Hotplug driver had a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\0' termination (bnc#1184198). - CVE-2021-28660: Fixed rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c that allowed writing beyond the end of the ssid array (bnc#1183593). - CVE-2020-0433: Fixed blk_mq_queue_tag_busy_iter of blk-mq-tag.c, where a possible use after free due to improper locking could have happened. This could have led to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (bnc#1176720). - CVE-2021-28038: Fixed an issue with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931 (bnc#1183022, bnc#1183069). - CVE-2021-27365: Fixed an issue inside the iSCSI data structures that does not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message (bnc#1182715). - CVE-2021-27363: Fixed an issue with a kernel pointer leak that could have been used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables (bnc#1182716). - CVE-2021-27364: Fixed an issue in drivers/scsi/scsi_transport_iscsi.c where an unprivileged user can craft Netlink messages (bnc#1182717). - CVE-2020-1749: Fixed a flaw inside of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality (bnc#1165629). The following non-security bugs were fixed: - bluetooth: eliminate the potential race condition when removing the HCI controller (bsc#1184611). - Btrfs: add missing extents release on file extent cluster relocation error (bsc#1159483). - btrfs: change timing for qgroup reserved space for ordered extents to fix reserved space leak (bsc#1172247). - btrfs: Cleanup try_flush_qgroup (bsc#1182047). - btrfs: Do not flush from btrfs_delayed_inode_reserve_metadata (bsc#1182047). - btrfs: drop unused parameter qgroup_reserved (bsc#1182261). - btrfs: fix qgroup data rsv leak caused by falloc failure (bsc#1182261). - btrfs: fix qgroup_free wrong num_bytes in btrfs_subvolume_reserve_metadata (bsc#1182261). - btrfs: Free correct amount of space in btrfs_delayed_inode_reserve_metadata (bsc#1182047). - btrfs: inode: move qgroup reserved space release to the callers of insert_reserved_file_extent() (bsc#1172247). - btrfs: inode: refactor the parameters of insert_reserved_file_extent() (bsc#1172247). - btrfs: make btrfs_ordered_extent naming consistent with btrfs_file_extent_item (bsc#1172247). - btrfs: qgroup: allow to unreserve range without releasing other ranges (bsc#1120163). - btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() (bsc#1155179). - btrfs: qgroup: do not commit transaction when we already hold the handle (bsc#1178634). - btrfs: qgroup: Do not hold qgroup_ioctl_lock in btrfs_qgroup_inherit() (bsc#1165823). - btrfs: qgroup: do not try to wait flushing if we're already holding a transaction (bsc#1179575). - btrfs: qgroup: Fix a bug that prevents qgroup to be re-enabled after disable (bsc#1172247). - btrfs: qgroup: fix data leak caused by race between writeback and truncate (bsc#1172247). - btrfs: qgroup: fix qgroup meta rsv leak for subvolume operations (bsc#1177856). - btrfs: qgroup: Fix reserved data space leak if we have multiple reserve calls (bsc#1152975). - btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space (bsc#1152974). - btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode (bsc#1177855). - btrfs: qgroup: mark qgroup inconsistent if we're inherting snapshot to a new qgroup (bsc#1165823). - btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve retry-after-EDQUOT (bsc#1120163). - btrfs: qgroup: try to flush qgroup space when we get -EDQUOT (bsc#1120163). - btrfs: remove unused parameter from btrfs_subvolume_release_metadata (bsc#1182261). - btrfs: tracepoints: Fix bad entry members of qgroup events (bsc#1155186). - btrfs: tracepoints: Fix wrong parameter order for qgroup events (bsc#1155184). - ext4: check journal inode extents more carefully (bsc#1173485). - ext4: do not allow overlapping system zones (bsc#1173485). - ext4: handle error of ext4_setup_system_zone() on remount (bsc#1173485). - hv_netvsc: remove ndo_poll_controller (bsc#1185248). - KVM: Add proper lockdep assertion in I/O bus unregister (bsc#1185555). - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (bsc#1185556). - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1185557). - xen-netback: respect gnttab_map_refs()'s return value (bsc#1183022 XSA-367). - Xen/gnttab: handle p2m update errors on a per-slot basis (bsc#1183022 XSA-367).
Patchnames: HPE-Helion-OpenStack-8-2021-1623,SUSE-2021-1623,SUSE-OpenStack-Cloud-8-2021-1623,SUSE-OpenStack-Cloud-Crowbar-8-2021-1623,SUSE-SLE-HA-12-SP3-2021-1623,SUSE-SLE-SAP-12-SP3-2021-1623,SUSE-SLE-SERVER-12-SP3-2021-1623,SUSE-SLE-SERVER-12-SP3-BCL-2021-1623
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Product Identifier Version Remediation
Unresolved product id: HPE Helion OpenStack 8:kernel-default-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: HPE Helion OpenStack 8:kernel-default-base-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: HPE Helion OpenStack 8:kernel-default-devel-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: HPE Helion OpenStack 8:kernel-default-kgraft-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: HPE Helion OpenStack 8:kernel-devel-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: HPE Helion OpenStack 8:kernel-macros-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: HPE Helion OpenStack 8:kernel-source-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: HPE Helion OpenStack 8:kernel-syms-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: HPE Helion OpenStack 8:kgraft-patch-4_4_180-94_144-default-0:1-4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP3:cluster-md-kmp-default-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP3:cluster-md-kmp-default-0:4.4.180-94.144.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP3:cluster-md-kmp-default-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP3:dlm-kmp-default-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP3:dlm-kmp-default-0:4.4.180-94.144.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP3:dlm-kmp-default-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP3:gfs2-kmp-default-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP3:gfs2-kmp-default-0:4.4.180-94.144.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP3:gfs2-kmp-default-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP3:ocfs2-kmp-default-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP3:ocfs2-kmp-default-0:4.4.180-94.144.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP3:ocfs2-kmp-default-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-default-0:4.4.180-94.144.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-default-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-default-0:4.4.180-94.144.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-default-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-default-base-0:4.4.180-94.144.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-default-base-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-default-base-0:4.4.180-94.144.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-default-base-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-default-devel-0:4.4.180-94.144.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-default-devel-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-default-devel-0:4.4.180-94.144.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-default-devel-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-default-kgraft-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-default-kgraft-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-default-man-0:4.4.180-94.144.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-devel-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-macros-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-source-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-syms-0:4.4.180-94.144.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-syms-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-syms-0:4.4.180-94.144.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kernel-syms-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kgraft-patch-4_4_180-94_144-default-0:1-4.3.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP3:kgraft-patch-4_4_180-94_144-default-0:1-4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-default-0:4.4.180-94.144.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-default-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-default-0:4.4.180-94.144.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-default-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-default-base-0:4.4.180-94.144.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-default-base-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-default-base-0:4.4.180-94.144.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-default-base-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-default-devel-0:4.4.180-94.144.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-default-devel-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-default-devel-0:4.4.180-94.144.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-default-devel-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-default-kgraft-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-default-kgraft-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-default-man-0:4.4.180-94.144.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-devel-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-macros-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-source-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-syms-0:4.4.180-94.144.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-syms-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-syms-0:4.4.180-94.144.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kernel-syms-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kgraft-patch-4_4_180-94_144-default-0:1-4.3.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3-LTSS:kgraft-patch-4_4_180-94_144-default-0:1-4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-default-0:4.4.180-94.144.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-default-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-default-0:4.4.180-94.144.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-default-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-default-base-0:4.4.180-94.144.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-default-base-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-default-base-0:4.4.180-94.144.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-default-base-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-default-devel-0:4.4.180-94.144.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-default-devel-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-default-devel-0:4.4.180-94.144.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-default-devel-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-default-kgraft-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-default-kgraft-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-default-man-0:4.4.180-94.144.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-devel-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-macros-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-source-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-syms-0:4.4.180-94.144.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-syms-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-syms-0:4.4.180-94.144.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kernel-syms-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kgraft-patch-4_4_180-94_144-default-0:1-4.3.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:kgraft-patch-4_4_180-94_144-default-0:1-4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-default-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-default-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-default-base-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-default-base-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-default-devel-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-default-devel-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-default-kgraft-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-default-kgraft-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-devel-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-macros-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-source-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-syms-0:4.4.180-94.144.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-syms-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:kgraft-patch-4_4_180-94_144-default-0:1-4.3.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:kgraft-patch-4_4_180-94_144-default-0:1-4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 8:kernel-default-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 8:kernel-default-base-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 8:kernel-default-devel-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 8:kernel-default-kgraft-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 8:kernel-devel-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 8:kernel-macros-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 8:kernel-source-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 8:kernel-syms-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE OpenStack Cloud 8:kgraft-patch-4_4_180-94_144-default-0:1-4.3.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE OpenStack Cloud Crowbar 8:kernel-default-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE OpenStack Cloud Crowbar 8:kernel-default-base-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE OpenStack Cloud Crowbar 8:kernel-default-devel-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE OpenStack Cloud Crowbar 8:kernel-default-kgraft-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE OpenStack Cloud Crowbar 8:kernel-devel-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE OpenStack Cloud Crowbar 8:kernel-macros-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE OpenStack Cloud Crowbar 8:kernel-source-0:4.4.180-94.144.1.noarch —
Vendor Fix
Unresolved product id: SUSE OpenStack Cloud Crowbar 8:kernel-syms-0:4.4.180-94.144.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE OpenStack Cloud Crowbar 8:kgraft-patch-4_4_180-94_144-default-0:1-4.3.1.x86_64 —
Vendor Fix
Threats
Impact important
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact important
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact important
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact important
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact important
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact important
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact moderate
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact low
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact important
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact moderate
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact important
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact important
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact important
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact moderate
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact important
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact moderate
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact moderate
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact important
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact moderate
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact moderate
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact moderate
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact moderate
Affected products
Recommended 133 products, the same list as for CVE-2020-0433
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/s… self
https://www.suse.com/support/update/announcement/… self
https://lists.suse.com/pipermail/sle-security-upd… self
https://bugzilla.suse.com/1120163 self
https://bugzilla.suse.com/1152974 self
https://bugzilla.suse.com/1152975 self
https://bugzilla.suse.com/1155179 self
https://bugzilla.suse.com/1155184 self
https://bugzilla.suse.com/1155186 self
https://bugzilla.suse.com/1159483 self
https://bugzilla.suse.com/1165629 self
https://bugzilla.suse.com/1165823 self
https://bugzilla.suse.com/1172247 self
https://bugzilla.suse.com/1173485 self
https://bugzilla.suse.com/1176720 self
https://bugzilla.suse.com/1177411 self
https://bugzilla.suse.com/1177855 self
https://bugzilla.suse.com/1177856 self
https://bugzilla.suse.com/1178181 self
https://bugzilla.suse.com/1178634 self
https://bugzilla.suse.com/1179575 self
https://bugzilla.suse.com/1182047 self
https://bugzilla.suse.com/1182261 self
https://bugzilla.suse.com/1182715 self
https://bugzilla.suse.com/1182716 self
https://bugzilla.suse.com/1182717 self
https://bugzilla.suse.com/1183022 self
https://bugzilla.suse.com/1183069 self
https://bugzilla.suse.com/1183593 self
https://bugzilla.suse.com/1184120 self
https://bugzilla.suse.com/1184167 self
https://bugzilla.suse.com/1184168 self
https://bugzilla.suse.com/1184194 self
https://bugzilla.suse.com/1184198 self
https://bugzilla.suse.com/1184208 self
https://bugzilla.suse.com/1184211 self
https://bugzilla.suse.com/1184391 self
https://bugzilla.suse.com/1184393 self
https://bugzilla.suse.com/1184397 self
https://bugzilla.suse.com/1184509 self
https://bugzilla.suse.com/1184583 self
https://bugzilla.suse.com/1184611 self
https://bugzilla.suse.com/1185248 self
https://bugzilla.suse.com/1185555 self
https://bugzilla.suse.com/1185556 self
https://bugzilla.suse.com/1185557 self
https://www.suse.com/security/cve/CVE-2020-0433/ self
https://www.suse.com/security/cve/CVE-2020-1749/ self
https://www.suse.com/security/cve/CVE-2020-25670/ self
https://www.suse.com/security/cve/CVE-2020-25671/ self
https://www.suse.com/security/cve/CVE-2020-25672/ self
https://www.suse.com/security/cve/CVE-2020-25673/ self
https://www.suse.com/security/cve/CVE-2020-27673/ self
https://www.suse.com/security/cve/CVE-2020-36312/ self
https://www.suse.com/security/cve/CVE-2020-36322/ self
https://www.suse.com/security/cve/CVE-2021-20219/ self
https://www.suse.com/security/cve/CVE-2021-27363/ self
https://www.suse.com/security/cve/CVE-2021-27364/ self
https://www.suse.com/security/cve/CVE-2021-27365/ self
https://www.suse.com/security/cve/CVE-2021-28038/ self
https://www.suse.com/security/cve/CVE-2021-28660/ self
https://www.suse.com/security/cve/CVE-2021-28950/ self
https://www.suse.com/security/cve/CVE-2021-28972/ self
https://www.suse.com/security/cve/CVE-2021-29154/ self
https://www.suse.com/security/cve/CVE-2021-29264/ self
https://www.suse.com/security/cve/CVE-2021-29265/ self
https://www.suse.com/security/cve/CVE-2021-29650/ self
https://www.suse.com/security/cve/CVE-2021-30002/ self
https://www.suse.com/security/cve/CVE-2021-3483/ self
https://www.suse.com/security/cve/CVE-2020-0433 external
https://bugzilla.suse.com/1176720 external
https://bugzilla.suse.com/1178066 external
https://bugzilla.suse.com/1187135 external
https://bugzilla.suse.com/1189302 external
https://www.suse.com/security/cve/CVE-2020-1749 external
https://bugzilla.suse.com/1165629 external
https://bugzilla.suse.com/1165631 external
https://bugzilla.suse.com/1177511 external
https://bugzilla.suse.com/1177513 external
https://bugzilla.suse.com/1189302 external
https://www.suse.com/security/cve/CVE-2020-25670 external
https://bugzilla.suse.com/1178181 external
https://bugzilla.suse.com/1194680 external
https://www.suse.com/security/cve/CVE-2020-25671 external
https://bugzilla.suse.com/1178181 external
https://www.suse.com/security/cve/CVE-2020-25672 external
https://bugzilla.suse.com/1178181 external
https://www.suse.com/security/cve/CVE-2020-25673 external
https://bugzilla.suse.com/1178181 external
https://www.suse.com/security/cve/CVE-2020-27673 external
https://bugzilla.suse.com/1177411 external
https://bugzilla.suse.com/1184583 external
https://www.suse.com/security/cve/CVE-2020-36312 external
https://bugzilla.suse.com/1184509 external
https://www.suse.com/security/cve/CVE-2020-36322 external
https://bugzilla.suse.com/1184211 external
https://bugzilla.suse.com/1184952 external
https://bugzilla.suse.com/1189302 external
https://www.suse.com/security/cve/CVE-2021-20219 external
https://bugzilla.suse.com/1184397 external
https://www.suse.com/security/cve/CVE-2021-27363 external
https://bugzilla.suse.com/1182716 external
https://bugzilla.suse.com/1182717 external
https://bugzilla.suse.com/1183120 external
https://bugzilla.suse.com/1200084 external
https://www.suse.com/security/cve/CVE-2021-27364 external
https://bugzilla.suse.com/1182715 external
https://bugzilla.suse.com/1182716 external
https://bugzilla.suse.com/1182717 external
https://bugzilla.suse.com/1200084 external
https://bugzilla.suse.com/1214268 external
https://bugzilla.suse.com/1218966 external
https://www.suse.com/security/cve/CVE-2021-27365 external
https://bugzilla.suse.com/1182712 external
https://bugzilla.suse.com/1182715 external
https://bugzilla.suse.com/1183491 external
https://bugzilla.suse.com/1200084 external
https://bugzilla.suse.com/1214268 external
https://bugzilla.suse.com/1218966 external
https://www.suse.com/security/cve/CVE-2021-28038 external
https://bugzilla.suse.com/1183022 external
https://bugzilla.suse.com/1183069 external
https://www.suse.com/security/cve/CVE-2021-28660 external
https://bugzilla.suse.com/1183593 external
https://bugzilla.suse.com/1183658 external
https://www.suse.com/security/cve/CVE-2021-28950 external
https://bugzilla.suse.com/1184194 external
https://bugzilla.suse.com/1184211 external
https://www.suse.com/security/cve/CVE-2021-28972 external
https://bugzilla.suse.com/1184198 external
https://bugzilla.suse.com/1220060 external
https://www.suse.com/security/cve/CVE-2021-29154 external
https://bugzilla.suse.com/1184391 external
https://bugzilla.suse.com/1184710 external
https://bugzilla.suse.com/1186408 external
https://www.suse.com/security/cve/CVE-2021-29264 external
https://bugzilla.suse.com/1184168 external
https://www.suse.com/security/cve/CVE-2021-29265 external
https://bugzilla.suse.com/1184167 external
https://www.suse.com/security/cve/CVE-2021-29650 external
https://bugzilla.suse.com/1184208 external
https://www.suse.com/security/cve/CVE-2021-30002 external
https://bugzilla.suse.com/1184120 external
https://www.suse.com/security/cve/CVE-2021-3483 external
https://bugzilla.suse.com/1184393 external

Loading 1.1 MB of JSON…



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…