SL
Product
Suse Linux Enterprise Real Time Extension
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 9Medium 21Low 1
Watch
Add Suse Linux Enterprise Real Time Extension to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-8812 | 9.8 | Apr 27 | drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause… Affected: 12 |
| CVE-2016-3134 | 8.4 | Apr 27 | The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a denial of service (heap… Affected: 12.0 |
| CVE-2015-8550 | 8.2 | Apr 14 | Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared… Affected: 12 |
| CVE-2016-3707 | 8.1 | Jun 27 | The icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt package before 3.10.0-327.22.1 in Red Hat… Affected: 12.0 |
| CVE-2016-4997 | 7.8 | Jul 3 | The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges… Affected: 12.0 |
| CVE-2016-5829 | 7.8 | Jun 27 | Multiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid/hiddev.c in the Linux kernel through 4.6.3 allow local users to cause a denial of… Affected: 12 |
| CVE-2016-5828 | 7.8 | Jun 27 | The start_thread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms mishandles transactional state, which allows local users to cause… Affected: 12 |
| CVE-2014-9904 | 7.8 | Jun 27 | The snd_compress_check_input function in sound/core/compress_offload.c in the ALSA subsystem in the Linux kernel before 3.17 does not properly check for an integer overflow, which… Affected: 12 |
| CVE-2016-4805 | 7.8 | May 23 | Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash,… Affected: 11.0; 12.0 |
| CVE-2016-3672 | 7.8 | Apr 27 | The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local… Affected: 12.0 |
| CVE-2015-8816 | 6.8 | Apr 27 | The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate… Affected: 11; 12 |
| CVE-2016-4482 | 6.2 | May 23 | The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain… Affected: 12.0 |
| CVE-2016-2847 | 6.2 | Apr 27 | fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service (memory consumption) by creating… Affected: 11.0; 12.0 |
| CVE-2015-1339 | 6.2 | Apr 27 | Memory leak in the cuse_channel_release function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to cause a denial of service (memory consumption) or possibly… Affected: 11 |
| CVE-2016-4470 | 5.5 | Jun 27 | The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to… Affected: 12.0 |
| CVE-2016-4569 | 5.5 | May 23 | The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive… Affected: 12.0 |
| CVE-2016-3156 | 5.5 | Apr 27 | The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service (host OS networking… Affected: 11.0; 12.0 |
| CVE-2016-3951 | 4.6 | May 2 | Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly… Affected: 12 |
| CVE-2016-3689 | 4.6 | May 2 | The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (system… Affected: 12.0 |
| CVE-2016-3140 | 4.6 | May 2 | The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL… Affected: 11.0; 12.0 |
| CVE-2016-3138 | 4.6 | May 2 | The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference… Affected: 11.0; 12.0 |
| CVE-2016-3137 | 4.6 | May 2 | drivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via… Affected: 11.0; 12.0 |
| CVE-2016-3136 | 4.6 | May 2 | The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL… Affected: 12.0 |
| CVE-2016-2188 | 4.6 | May 2 | The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer… Affected: 11.0; 12.0 |
| CVE-2016-2186 | 4.6 | May 2 | The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer… Affected: 11.0; 12.0 |
| CVE-2016-2185 | 4.6 | May 2 | The ati_remote2_probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL… Affected: 11.0; 12.0 |
| CVE-2016-3139 | 4.6 | Apr 27 | The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service (NULL pointer… Affected: 11.0; 12.0 |
| CVE-2016-2384 | 4.6 | Apr 27 | Double free vulnerability in the snd_usbmidi_create function in sound/usb/midi.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service… Affected: 12 |
| CVE-2016-2184 | 4.6 | Apr 27 | The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial… Affected: 11.0; 12.0 |
| CVE-2015-7566 | 4.6 | Feb 8 | The clie_5_attach function in drivers/usb/serial/visor.c in the Linux kernel through 4.4.1 allows physically proximate attackers to cause a denial of service (NULL pointer… Affected: 11; 12 |
| CVE-2015-8552 | 4.4 | Apr 13 | The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate a continuous… Affected: 11; 12 |
| CVE-2016-4486 | 3.3 | May 23 | The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain… Affected: 12.0 |
| CVE-2015-7833 | – | Oct 19 | The usbvision driver in the Linux kernel package 3.10.0-123.20.1.el7 through 3.10.0-229.14.1.el7 in Red Hat Enterprise Linux (RHEL) 7.1 allows physically proximate attackers to… Affected: 12 |
Showing 33