The openSUSE 13.2 kernel was updated to version 3.16.7.

These security issues were fixed :

  - CVE-2014-9322: A local privilege escalation in the     x86_64 32bit compatibility signal handling was fixed,     which could be used by local attackers to crash the     machine or execute code. (bnc#910251)

  - CVE-2014-9090: The do_double_fault function in     arch/x86/kernel/traps.c in the Linux kernel did not     properly handle faults associated with the Stack Segment     (SS) segment register, which allowed local users to     cause a denial of service (panic) via a modify_ldt     system call, as demonstrated by sigreturn_32 in the     linux-clock-tests test suite. (bnc#907818)

  - CVE-2014-8133: Insufficient validation of TLS register     usage could leak information from the kernel stack to     userspace. (bnc#909077)

  - CVE-2014-3673: The SCTP implementation in the Linux     kernel through 3.17.2 allowed remote attackers to cause     a denial of service (system crash) via a malformed     ASCONF chunk, related to net/sctp/sm_make_chunk.c and     net/sctp/sm_statefuns.c (bnc#902346, bnc#902349).

  - CVE-2014-3687: The sctp_assoc_lookup_asconf_ack function     in net/sctp/associola.c in the SCTP implementation in     the Linux kernel through 3.17.2 allowed remote attackers     to cause a denial of service (panic) via duplicate     ASCONF chunks that triggered an incorrect uncork within     the side-effect interpreter (bnc#902349).

  - CVE-2014-3688: The SCTP implementation in the Linux     kernel before 3.17.4 allowed remote attackers to cause a     denial of service (memory consumption) by triggering a     large number of chunks in an association's output queue,     as demonstrated by ASCONF probes, related to     net/sctp/inqueue.c and net/sctp/sm_statefuns.c     (bnc#902351).

  - CVE-2014-7826: kernel/trace/trace_syscalls.c in the     Linux kernel through 3.17.2 did not properly handle     private syscall numbers during use of the ftrace     subsystem, which allowed local users to gain privileges     or cause a denial of service (invalid pointer     dereference) via a crafted application (bnc#904013).

  - CVE-2014-7841: The sctp_process_param function in     net/sctp/sm_make_chunk.c in the SCTP implementation in     the Linux kernel before 3.17.4, when ASCONF is used,     allowed remote attackers to cause a denial of service     (NULL pointer dereference and system crash) via a     malformed INIT chunk (bnc#905100).

These non-security issues were fixed :

  - ahci: Check and set 64-bit DMA mask for platform AHCI     driver (bnc#902632).

  - ahci/xgene: Remove logic to set 64-bit DMA mask     (bnc#902632).

  - ahci_xgene: Skip the PHY and clock initialization if     already configured by the firmware (bnc#902632).

  - ALSA: hda - Add mute LED control for Lenovo Ideapad Z560     (bnc#665315).

  - ALSA: hda/realtek - Add alc_update_coef*_idx() helper     (bnc#905068).

  - ALSA: hda/realtek - Change EAPD to verb control     (bnc#905068).

  - ALSA: hda/realtek - Optimize alc888_coef_init()     (bnc#905068).

  - ALSA: hda/realtek - Restore default value for ALC668     (bnc#905068).

  - ALSA: hda/realtek - Update Initial AMP for EAPD control     (bnc#905068).

  - ALSA: hda/realtek - Update restore default value for     ALC282 (bnc#905068).

  - ALSA: hda/realtek - Update restore default value for     ALC283 (bnc#905068).

  - ALSA: hda/realtek - Use alc_write_coef_idx() in     alc269_quanta_automake() (bnc#905068).

  - ALSA: hda/realtek - Use tables for batch COEF     writes/updtes (bnc#905068).

  - ALSA: usb-audio: Do not resubmit pending URBs at MIDI     error recovery.

  - arm64: Add architectural support for PCI (bnc#902632).

  - arm64: adjust el0_sync so that a function can be called     (bnc#902632).

  - arm64: Do not call enable PCI resources when specify     PCI_PROBE_ONLY (bnc#902632).

  - arm64: dts: Add X-Gene reboot driver dts node     (bnc#902632).

  - arm64/efi: efistub: cover entire static mem footprint in     PE/COFF .text (bnc#902632).

  - arm64/efi: efistub: do not abort if base of DRAM is     occupied (bnc#902632).

  - arm64: fix bug for reloading FPSIMD state after cpu     power off (bnc#902632).

  - arm64: fix VTTBR_BADDR_MASK (bnc#902632).

  - arm64: fpsimd: fix a typo in fpsimd_save_partial_state     ENDPROC (bnc#902632).

  - arm64/mustang: Disable sgenet and xgenet (bnc#902632).

  - arm64: Select reboot driver for X-Gene platform     (bnc#902632).

  - arm: Add APM Mustang network driver (bnc#902632).

  - arm/arm64: KVM: Fix and refactor unmap_range     (bnc#902632).

  - arm: Define PCI_IOBASE as the base of virtual PCI IO     space (bnc#902632).

  - asm-generic/io.h: Fix ioport_map() for     !CONFIG_GENERIC_IOMAP (bnc#902632).

  - ax88179_178a: fix bonding failure (bsc#908253).

  - btrfs: Fix and enhance merge_extent_mapping() to insert     best fitted extent map.

  - btrfs: fix crash of btrfs_release_extent_buffer_page.

  - btrfs: fix invalid leaf slot access in     btrfs_lookup_extent().

  - btrfs: fix kfree on list_head in     btrfs_lookup_csums_range error cleanup.

  - btrfs: fix lockups from btrfs_clear_path_blocking.

  - btrfs: fix race that makes btrfs_lookup_extent_info miss     skinny extent items.

  - btrfs: Fix the wrong condition judgment about subset     extent map.

  - btrfs: fix wrong accounting of raid1 data profile in     statfs.

  - btrfs: send, do not delay dir move if there is a new     parent inode.

  - config: armv7hl: Disable CONFIG_USB_MUSB_TUSB6010     (bnc#906914).

  - cpufreq: arm_big_little: fix module license spec     (bnc#902632).

  - Delete patches.rpmify/chipidea-clean-up-dependencies     (bnc#903986).

  - Disable Exynos cpufreq modules.

  - drivers/net/fddi/skfp/h/skfbi.h: Remove useless     PCI_BASE_2ND macros (bnc#902632).

  - drm/i915: Keep vblank interrupts enabled while     enabling/disabling planes (bnc#904097).

  - drm: Implement O_NONBLOCK support on /dev/dri/cardN     (bnc#904097).

  - drm/nv50/disp: fix dpms regression on certain boards     (bnc#902728).

  - drm/radeon: add locking around atombios scratch space     usage (bnc#904932).

  - drm/radeon: add missing crtc unlock when setting up the     MC (bnc#904932).

  - drm/radeon/dpm: disable ulv support on SI (bnc#904932).

  - drm/radeon: fix endian swapping in vbios fetch for tdp     table (bnc#904932).

  - drm/radeon: fix speaker allocation setup (bnc#904932).

  - drm/radeon: initialize sadb to NULL in the audio code     (bnc#904932).

  - drm/radeon: make sure mode init is complete in     bandwidth_update (bnc#904932).

  - drm/radeon: report disconnected for LVDS/eDP with PX if     ddc fails (bnc#904417).

  - drm/radeon: set correct CE ram size for CIK     (bnc#904932).

  - drm/radeon: Use drm_malloc_ab instead of kmalloc_array     (bnc#904932).

  - drm/radeon: use gart for DMA IB tests (bnc#904932).

  - drm/radeon: use gart memory for DMA ring tests     (bnc#904932).

  - drm/tilcdc: Fix the error path in tilcdc_load()     (bko#86071).

  - hp_accel: Add support for HP ZBook 15 (bnc#905329).

  - ideapad-laptop: Change Lenovo Yoga 2 series rfkill     handling (bnc#904289).

  - Input: i8042 - also set the firmware id for MUXed ports     (bnc#897112).

  - Input: psmouse - add psmouse_matches_pnp_id helper     function (bnc#897112).

  - Input: psmouse - add support for detecting FocalTech     PS/2 touchpads (bnc#897112).

  - Input: synaptics - add min/max quirk for Lenovo T440s     (bnc#903748).

  - irqchip: gic: preserve gic V2 bypass bits in cpu ctrl     register (bnc#902632).

  - iwlwifi: dvm: drop non VO frames when flushing     (bnc#900786).

  - KEYS: Allow special keys (eg. DNS results) to be     invalidated by CAP_SYS_ADMIN (bnc#904717).

  - KEYS: Fix stale key registration at error path     (bnc#908163).

  - KEYS: Fix the size of the key description passed to/from     userspace (bnc#904717).

  - KEYS: Increase root_maxkeys and root_maxbytes sizes     (bnc#904717).

  - KEYS: request_key() should reget expired keys rather     than give EKEYEXPIRED (bnc#904717).

  - KEYS: Simplify KEYRING_SEARCH_(NO,DO)_STATE_CHECK flags     (bnc#904717).

  - KVM: ARM: Add arm,gic-400 compatible support     (bnc#902632).

  - KVM: ARM: Hack to enable VGIC mapping on 64k PAGE_SIZE     kernels (bnc#902633).

  - Limit xgbe a0 driver to arm64

  - net/xgbe: Add A0 silicon support (bnc#902632).

  - of/pci: Add pci_get_new_domain_nr() and     of_get_pci_domain_nr() (bnc#902632).

  - of/pci: Add pci_register_io_range() and     pci_pio_to_address() (bnc#902632).

  - of/pci: Add support for parsing PCI host bridge     resources from DT (bnc#902632).

  - of/pci: Fix the conversion of IO ranges into IO     resources (bnc#902632).

  - of/pci: Move of_pci_range_to_resource() to of/address.c     (bnc#902632).

  - parport: parport_pc, do not remove parent devices early     (bnc#856659).

  - PCI: Add generic domain handling (bnc#902632).

  - PCI: Add pci_remap_iospace() to map bus I/O resources     (bnc#902632).

  - PCI: xgene: Add APM X-Gene PCIe driver (bnc#902632).

  - power: reset: Add generic SYSCON register mapped reset     (bnc#902632).

  - power: reset: Remove X-Gene reboot driver (bnc#902632).

  - quirk for Lenovo Yoga 3: no rfkill switch (bnc#904289).

  - reiserfs: destroy allocated commit workqueue.

  - rtc: ia64: allow other architectures to use EFI RTC     (bnc#902632).

  - scripts/tags.sh: Do not specify kind-spec for emacs     ctags/etags.

  - scripts/tags.sh: fix DEFINE_HASHTABLE in emacs case.

  - tags.sh: Fixup regex definition for etags.

  - ttusb-dec: buffer overflow in ioctl (bnc#905739).

  - usb: Add support for Synopsis H20AHB EHCI host     controller (bnc#902632).

  - usb: fix hcd h20ahb driver depends (bnc#902632).

  - usb: uvc: add a quirk for Dell XPS M1330 webcam     (bnc#904539).

  - usb: uvc: Fix destruction order in uvc_delete()     (bnc#897736).

The 3.14.27 stable update contains a number of important fixes across the tree.\nThe 3.14.26 update contains a number of important fixes across the tree\nThe 3.14.25 stable update contains a number of important fixes across the tree.\nThe 3.14.24 stable update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated kernel packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

* A flaw was found in the way the Linux kernel's SCTP implementation validated INIT chunks when performing Address Configuration Change (ASCONF). A remote attacker could use this flaw to crash the system by sending a specially crafted SCTP packet to trigger a NULL pointer dereference on the system. (CVE-2014-7841, Important)

* An integer overflow flaw was found in the way the Linux kernel's Advanced Linux Sound Architecture (ALSA) implementation handled user controls. A local, privileged user could use this flaw to crash the system. (CVE-2014-4656, Moderate)

The CVE-2014-7841 issue was discovered by Liu Wei of Red Hat.

This update also fixes several bugs. Documentation for these changes will be available shortly from the Technical Notes document linked to in the References section.

All kernel users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. The system must be rebooted for this update to take effect.

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14849-1 advisory.

    The SUSE Linux Enterprise 11 SP4 LTSS kernel was updated to receive various security and bugfixes.

    The following security bugs were fixed:

    - CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c called unregister_netdev without checking     for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601).
    - CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351).
    - CVE-2021-3655: Missing size validations on inbound SCTP packets may have allowed the kernel to read     uninitialized memory (bnc#1188563 bnc#1192267).
    - CVE-2014-7841: The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP implementation,     when ASCONF is used, allowed remote attackers to cause a denial of service (NULL pointer dereference and     system crash) via a malformed INIT chunk (bnc#904899 bnc#905100).
    - CVE-2021-20265: A flaw was found in the way memory resources were freed in the unix_stream_recvmsg     function when a signal was pending. This flaw allowed an unprivileged local user to crash the system by     exhausting available memory. The highest threat from this vulnerability is to system availability     (bnc#1183089).
    - CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-     avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bnc#1184673     bnc#1192036).
    - CVE-2021-33033: The Linux kernel has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c     because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd.
    This leads to writing an arbitrary value (bnc#1186109 bnc#1188876).
    - CVE-2021-43389: There was an array-index-out-of-bounds flaw in the detach_capi_ctr function in     drivers/isdn/capi/kcapi.c (bnc#1191958).
    - CVE-2021-42008: The decode_data function in drivers/net/hamradio/6pack.c had a slab out-of-bounds write.
    Input from a process that has the CAP_NET_ADMIN capability can lead to root access (bnc#1191315).
    - CVE-2021-38160: Data corruption or loss could be triggered by an untrusted device that supplies a     buf->len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190117)
    - CVE-2021-3640: Fixed a Use-After-Free vulnerability in function sco_sock_sendmsg() in the bluetooth     stack (bsc#1188172).
    - CVE-2021-38198: arch/x86/kvm/mmu/paging_tmpl.h incorrectly computed the access permissions of a shadow     page, leading to a missing guest protection page fault (bnc#1189262).
    - CVE-2021-3653: A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw     occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a     nested guest (L2). Due to improper validation of the 'int_ctl' field, this issue could allow a malicious     L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2     guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire     system, leak of sensitive data or potential guest-to-host escape. (bnc#1189399).
    - CVE-2021-3679: A lack of CPU resource in the Linux kernel tracing module functionality was found in the     way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN     capability) could use this flaw to starve the resources causing denial of service (bnc#1189057).
    - CVE-2021-3609: A potential local privilege escalation in the CAN BCM networking protocol was fixed     (bsc#1187215).
    - CVE-2020-36385: drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the     ctx_list in some ucma_migrate_id situations where ucma_close is called, aka CID-f5449e74802c     (bnc#1187050).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A NULL pointer dereference flaw was discovered in the the Linux kernel's SCTP implementation when ASCONF is used. A remote attacker could exploit this flaw to cause a denial of service (system crash) via a malformed INIT chunk. (CVE-2014-7841)

A race condition with MMIO and PIO transactions in the KVM (Kernel Virtual Machine) subsystem of the Linux kernel was discovered. A guest OS user could exploit this flaw to cause a denial of service (guest OS crash) via a specially crafted application. (CVE-2014-7842)

Milos Prchlik reported a flaw in how the ARM64 platform handles a single byte overflow in __clear_user. A local user could exploit this flaw to cause a denial of service (system crash) by reading one byte beyond a /dev/zero page boundary. (CVE-2014-7843)

A stack buffer overflow was discovered in the ioctl command handling for the Technotrend/Hauppauge USB DEC devices driver. A local user could exploit this flaw to cause a denial of service (system crash) or possibly gain privileges. (CVE-2014-8884).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3003 advisory.

    - [CIFS] Possible null ptr deref in SMB2_tcon (Steve French)  [Orabug: 20433140]  {CVE-2014-7145}
    - net: sctp: fix NULL pointer dereference in af->from_addr_param on malformed packet (Daniel Borkmann)     [Orabug: 20425332]  {CVE-2014-7841}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Latest upstream stable release, Linux v3.17.3. A wide variety of fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 3.17.3 stable update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An information leak in the Linux kernel was discovered that could leak the high 16 bits of the kernel stack address on 32-bit Kernel Virtual Machine (KVM) paravirt guests. A user in the guest OS could exploit this leak to obtain information that could potentially be used to aid in attacking the kernel. (CVE-2014-8134)

A flaw in the handling of malformed ASCONF chunks by SCTP (Stream Control Transmission Protocol) implementation in the Linux kernel was discovered. A remote attacker could exploit this flaw to cause a denial of service (system crash). (CVE-2014-3673)

A flaw in the handling of duplicate ASCONF chunks by SCTP (Stream Control Transmission Protocol) implementation in the Linux kernel was discovered. A remote attacker could exploit this flaw to cause a denial of service (panic). (CVE-2014-3687)

It was discovered that excessive queuing by SCTP (Stream Control Transmission Protocol) implementation in the Linux kernel can cause memory pressure. A remote attacker could exploit this flaw to cause a denial of service. (CVE-2014-3688)

A NULL pointer dereference flaw was discovered in the the Linux kernel's SCTP implementation when ASCONF is used. A remote attacker could exploit this flaw to cause a denial of service (system crash) via a malformed INIT chunk. (CVE-2014-7841)

Jouni Malinen reported a flaw in the handling of fragmentation in the mac8Linux subsystem of the kernel. A remote attacker could exploit this flaw to obtain potential sensitive cleartext information by reading packets. (CVE-2014-8709)

A stack buffer overflow was discovered in the ioctl command handling for the Technotrend/Hauppauge USB DEC devices driver. A local user could exploit this flaw to cause a denial of service (system crash) or possibly gain privileges. (CVE-2014-8884)

Andy Lutomirski discovered that the Linux kernel does not properly handle faults associated with the Stack Segment (SS) register on the x86 architecture. A local attacker could exploit this flaw to cause a denial of service (panic). (CVE-2014-9090).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The SUSE Linux Enterprise 11 Service Pack 1 LTSS kernel was updated to fix security issues on kernels on the x86_64 architecture.

The following security bugs have been fixed :

  - CVE-2013-4299: Interpretation conflict in     drivers/md/dm-snap-persistent.c in the Linux kernel     through 3.11.6 allowed remote authenticated users to     obtain sensitive information or modify data via a     crafted mapping to a snapshot block device (bnc#846404).

  - CVE-2014-8160: SCTP firewalling failed until the SCTP     module was loaded (bnc#913059).

  - CVE-2014-9584: The parse_rock_ridge_inode_internal     function in fs/isofs/rock.c in the Linux kernel before     3.18.2 did not validate a length value in the Extensions     Reference (ER) System Use Field, which allowed local     users to obtain sensitive information from kernel memory     via a crafted iso9660 image (bnc#912654).

  - CVE-2014-9585: The vdso_addr function in     arch/x86/vdso/vma.c in the Linux kernel through 3.18.2     did not properly choose memory locations for the vDSO     area, which made it easier for local users to bypass the     ASLR protection mechanism by guessing a location at the     end of a PMD (bnc#912705).

  - CVE-2014-9420: The rock_continue function in     fs/isofs/rock.c in the Linux kernel through 3.18.1 did     not restrict the number of Rock Ridge continuation     entries, which allowed local users to cause a denial of     service (infinite loop, and system crash or hang) via a     crafted iso9660 image (bnc#911325).

  - CVE-2014-0181: The Netlink implementation in the Linux     kernel through 3.14.1 did not provide a mechanism for     authorizing socket operations based on the opener of a     socket, which allowed local users to bypass intended     access restrictions and modify network configurations by     using a Netlink socket for the (1) stdout or (2) stderr     of a setuid program (bnc#875051).

  - CVE-2010-5313: Race condition in arch/x86/kvm/x86.c in     the Linux kernel before 2.6.38 allowed L2 guest OS users     to cause a denial of service (L1 guest OS crash) via a     crafted instruction that triggers an L2 emulation     failure report, a similar issue to CVE-2014-7842     (bnc#907822).

  - CVE-2014-7842: Race condition in arch/x86/kvm/x86.c in     the Linux kernel before 3.17.4 allowed guest OS users to     cause a denial of service (guest OS crash) via a crafted     application that performs an MMIO transaction or a PIO     transaction to trigger a guest userspace emulation error     report, a similar issue to CVE-2010-5313 (bnc#905312).

  - CVE-2014-3688: The SCTP implementation in the Linux     kernel before 3.17.4 allowed remote attackers to cause a     denial of service (memory consumption) by triggering a     large number of chunks in an associations output queue,     as demonstrated by ASCONF probes, related to     net/sctp/inqueue.c and net/sctp/sm_statefuns.c     (bnc#902351).

  - CVE-2014-3687: The sctp_assoc_lookup_asconf_ack function     in net/sctp/associola.c in the SCTP implementation in     the Linux kernel through 3.17.2 allowed remote attackers     to cause a denial of service (panic) via duplicate     ASCONF chunks that trigger an incorrect uncork within     the side-effect interpreter (bnc#902349).

  - CVE-2014-3673: The SCTP implementation in the Linux     kernel through 3.17.2 allowed remote attackers to cause     a denial of service (system crash) via a malformed     ASCONF chunk, related to net/sctp/sm_make_chunk.c and     net/sctp/sm_statefuns.c (bnc#902346).

  - CVE-2014-7841: The sctp_process_param function in     net/sctp/sm_make_chunk.c in the SCTP implementation in     the Linux kernel before 3.17.4, when ASCONF is used,     allowed remote attackers to cause a denial of service     (NULL pointer dereference and system crash) via a     malformed INIT chunk (bnc#905100).

  - CVE-2014-8709: The ieee80211_fragment function in     net/mac80211/tx.c in the Linux kernel before 3.13.5 did     not properly maintain a certain tail pointer, which     allowed remote attackers to obtain sensitive cleartext     information by reading packets (bnc#904700).

  - CVE-2013-7263: The Linux kernel before 3.12.4 updated     certain length values before ensuring that associated     data structures have been initialized, which allowed     local users to obtain sensitive information from kernel     stack memory via a (1) recvfrom, (2) recvmmsg, or (3)     recvmsg system call, related to net/ipv4/ping.c,     net/ipv4/raw.c, net/ipv4/udp.c, net/ipv6/raw.c, and     net/ipv6/udp.c (bnc#857643).

  - CVE-2012-6657: The sock_setsockopt function in     net/core/sock.c in the Linux kernel before 3.5.7 did not     ensure that a keepalive action is associated with a     stream socket, which allowed local users to cause a     denial of service (system crash) by leveraging the     ability to create a raw socket (bnc#896779).

  - CVE-2014-3185: Multiple buffer overflows in the     command_port_read_callback function in     drivers/usb/serial/whiteheat.c in the Whiteheat USB     Serial Driver in the Linux kernel before 3.16.2 allowed     physically proximate attackers to execute arbitrary code     or cause a denial of service (memory corruption and     system crash) via a crafted device that provides a large     amount of (1) EHCI or (2) XHCI data associated with a     bulk response (bnc#896391).

  - CVE-2014-3184: The report_fixup functions in the HID     subsystem in the Linux kernel before 3.16.2 might allow     physically proximate attackers to cause a denial of     service (out-of-bounds write) via a crafted device that     provides a small report descriptor, related to (1)     drivers/hid/hid-cherry.c, (2) drivers/hid/hid-kye.c, (3)     drivers/hid/hid-lg.c, (4) drivers/hid/hid-monterey.c,     (5) drivers/hid/hid-petalynx.c, and (6)     drivers/hid/hid-sunplus.c (bnc#896390).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
80153	openSUSE Security Update : Linux Kernel (openSUSE-SU-2014:1678-1)	Nessus	SuSE Local Security Checks	2014/12/22	2021/1/19	high
80376	Fedora 19 : kernel-3.14.27-100.fc19 (2014-17244)	Nessus	Fedora Local Security Checks	2015/1/6	2021/1/11	medium
81032	RHEL 6 : kernel (RHSA-2015:0087)	Nessus	Red Hat Local Security Checks	2015/1/28	2021/2/5	medium
155814	SUSE SLES11: kernel-default / kernel-default-base / kernel-default-devel / etc (SUSE-SU-2021:14849-1)	Nessus	SuSE Local Security Checks	2021/12/2	2026/6/25	high
80512	Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2465-1)	Nessus	Ubuntu Local Security Checks	2015/1/14	2021/1/19	medium
81100	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3003)	Nessus	Oracle Linux Local Security Checks	2015/1/30	2026/2/9	medium
79319	Fedora 21 : kernel-3.17.3-300.fc21 (2014-15159)	Nessus	Fedora Local Security Checks	2014/11/19	2021/1/11	medium
79363	Fedora 20 : kernel-3.17.3-200.fc20 (2014-15200)	Nessus	Fedora Local Security Checks	2014/11/21	2021/1/11	medium
80028	Ubuntu 10.04 LTS : linux vulnerabilities (USN-2441-1)	Nessus	Ubuntu Local Security Checks	2014/12/15	2021/1/19	high
83708	SUSE SLES11 Security Update : kernel (SUSE-SU-2015:0652-1)	Nessus	SuSE Local Security Checks	2015/5/20	2021/1/19	high

偵測

搜尋 Plugin

high

medium

medium

high

medium

medium

medium

medium

high

high