RHSA-2015:2152
Vulnerability from csaf_opensuse - Published: 2015-11-19 00:00 - Updated: 2026-09-20 10:55Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2015:2152.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2015:2152.
Patchnames: RHSA-2015:2152
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2010-5313
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2010-5313
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2010-5313
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2010-5313
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2010-5313
Threats
Impact
low
Affected products
Recommended
12 products, the same list as for
CVE-2010-5313
Threats
Impact
Important
Affected products
Recommended
12 products, the same list as for
CVE-2010-5313
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2010-5313
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2010-5313
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2010-5313
Threats
Impact
low
Affected products
Recommended
12 products, the same list as for
CVE-2010-5313
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2010-5313
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2010-5313
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2010-5313
Threats
Impact
moderate
References
61 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2015:2152.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2015:2152.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2015:2152",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2015_2152.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2010-5313 page",
"url": "https://www.suse.com/security/cve/CVE-2010-5313/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-7421 page",
"url": "https://www.suse.com/security/cve/CVE-2013-7421/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3647 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3647/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7842 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-8171 page",
"url": "https://www.suse.com/security/cve/CVE-2014-8171/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-9419 page",
"url": "https://www.suse.com/security/cve/CVE-2014-9419/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-9644 page",
"url": "https://www.suse.com/security/cve/CVE-2014-9644/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-0239 page",
"url": "https://www.suse.com/security/cve/CVE-2015-0239/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-2925 page",
"url": "https://www.suse.com/security/cve/CVE-2015-2925/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3339 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3339/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4170 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4170/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5283 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5283/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6526 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6526/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7613 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7613/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7837 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7837/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T10:55:29Z",
"generator": {
"date": "2015-11-19T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2015:2152",
"initial_release_date": "2015-11-19T00:00:00Z",
"revision_history": [
{
"date": "2015-11-19T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T10:55:29Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"product": {
"name": "kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"product_id": "kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-327.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:3.10.0-327.el7.noarch",
"product": {
"name": "kernel-doc-0:3.10.0-327.el7.noarch",
"product_id": "kernel-doc-0:3.10.0-327.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@3.10.0-327.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-0:3.10.0-327.el7.x86_64",
"product": {
"name": "kernel-0:3.10.0-327.el7.x86_64",
"product_id": "kernel-0:3.10.0-327.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@3.10.0-327.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:3.10.0-327.el7.x86_64",
"product": {
"name": "kernel-debug-0:3.10.0-327.el7.x86_64",
"product_id": "kernel-debug-0:3.10.0-327.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@3.10.0-327.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-327.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"product": {
"name": "kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"product_id": "kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-327.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-327.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:3.10.0-327.el7.x86_64",
"product": {
"name": "kernel-devel-0:3.10.0-327.el7.x86_64",
"product_id": "kernel-devel-0:3.10.0-327.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@3.10.0-327.el7?arch=x86_64\u0026upstream=kernel-source-0:3.10.0-327.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:3.10.0-327.el7.x86_64",
"product": {
"name": "kernel-headers-0:3.10.0-327.el7.x86_64",
"product_id": "kernel-headers-0:3.10.0-327.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@3.10.0-327.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:3.10.0-327.el7.x86_64",
"product": {
"name": "kernel-tools-0:3.10.0-327.el7.x86_64",
"product_id": "kernel-tools-0:3.10.0-327.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@3.10.0-327.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"product": {
"name": "kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"product_id": "kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-327.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"product_id": "kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-327.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:3.10.0-327.el7.x86_64",
"product": {
"name": "perf-0:3.10.0-327.el7.x86_64",
"product_id": "perf-0:3.10.0-327.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@3.10.0-327.el7?arch=x86_64\u0026upstream=perf-0:3.10.0-327.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python-perf-0:3.10.0-327.el7.x86_64",
"product": {
"name": "python-perf-0:3.10.0-327.el7.x86_64",
"product_id": "python-perf-0:3.10.0-327.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python-perf@3.10.0-327.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 7",
"product": {
"name": "SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:7"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:3.10.0-327.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64"
},
"product_reference": "kernel-0:3.10.0-327.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-whitelists-0:3.10.0-327.el7.noarch as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch"
},
"product_reference": "kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:3.10.0-327.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64"
},
"product_reference": "kernel-debug-0:3.10.0-327.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:3.10.0-327.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64"
},
"product_reference": "kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:3.10.0-327.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64"
},
"product_reference": "kernel-devel-0:3.10.0-327.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:3.10.0-327.el7.noarch as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch"
},
"product_reference": "kernel-doc-0:3.10.0-327.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:3.10.0-327.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64"
},
"product_reference": "kernel-headers-0:3.10.0-327.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:3.10.0-327.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64"
},
"product_reference": "kernel-tools-0:3.10.0-327.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:3.10.0-327.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64"
},
"product_reference": "kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:3.10.0-327.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64"
},
"product_reference": "perf-0:3.10.0-327.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-0:3.10.0-327.el7.x86_64 as component of SUSE Liberty Linux 7",
"product_id": "SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
},
"product_reference": "python-perf-0:3.10.0-327.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2010-5313",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2010-5313"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in arch/x86/kvm/x86.c in the Linux kernel before 2.6.38 allows L2 guest OS users to cause a denial of service (L1 guest OS crash) via a crafted instruction that triggers an L2 emulation failure report, a similar issue to CVE-2014-7842.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2010-5313",
"url": "https://www.suse.com/security/cve/CVE-2010-5313"
},
{
"category": "external",
"summary": "SUSE Bug 905312 for CVE-2010-5313",
"url": "https://bugzilla.suse.com/905312"
},
{
"category": "external",
"summary": "SUSE Bug 907822 for CVE-2010-5313",
"url": "https://bugzilla.suse.com/907822"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-11-19T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2010-5313"
},
{
"cve": "CVE-2013-7421",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-7421"
}
],
"notes": [
{
"category": "general",
"text": "The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different vulnerability than CVE-2014-9644.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-7421",
"url": "https://www.suse.com/security/cve/CVE-2013-7421"
},
{
"category": "external",
"summary": "SUSE Bug 914423 for CVE-2013-7421",
"url": "https://bugzilla.suse.com/914423"
},
{
"category": "external",
"summary": "SUSE Bug 914660 for CVE-2013-7421",
"url": "https://bugzilla.suse.com/914660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-11-19T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-7421"
},
{
"cve": "CVE-2014-3647",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3647"
}
],
"notes": [
{
"category": "general",
"text": "arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3647",
"url": "https://www.suse.com/security/cve/CVE-2014-3647"
},
{
"category": "external",
"summary": "SUSE Bug 1013038 for CVE-2014-3647",
"url": "https://bugzilla.suse.com/1013038"
},
{
"category": "external",
"summary": "SUSE Bug 1134834 for CVE-2014-3647",
"url": "https://bugzilla.suse.com/1134834"
},
{
"category": "external",
"summary": "SUSE Bug 899192 for CVE-2014-3647",
"url": "https://bugzilla.suse.com/899192"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-11-19T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-3647"
},
{
"cve": "CVE-2014-7842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7842"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in arch/x86/kvm/x86.c in the Linux kernel before 3.17.4 allows guest OS users to cause a denial of service (guest OS crash) via a crafted application that performs an MMIO transaction or a PIO transaction to trigger a guest userspace emulation error report, a similar issue to CVE-2010-5313.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7842",
"url": "https://www.suse.com/security/cve/CVE-2014-7842"
},
{
"category": "external",
"summary": "SUSE Bug 905312 for CVE-2014-7842",
"url": "https://bugzilla.suse.com/905312"
},
{
"category": "external",
"summary": "SUSE Bug 907822 for CVE-2014-7842",
"url": "https://bugzilla.suse.com/907822"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-11-19T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-7842"
},
{
"cve": "CVE-2014-8171",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-8171"
}
],
"notes": [
{
"category": "general",
"text": "The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadlock) by spawning new processes within a memory-constrained cgroup.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-8171",
"url": "https://www.suse.com/security/cve/CVE-2014-8171"
},
{
"category": "external",
"summary": "SUSE Bug 928128 for CVE-2014-8171",
"url": "https://bugzilla.suse.com/928128"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-11-19T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-8171"
},
{
"cve": "CVE-2014-9419",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-9419"
}
],
"notes": [
{
"category": "general",
"text": "The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-9419",
"url": "https://www.suse.com/security/cve/CVE-2014-9419"
},
{
"category": "external",
"summary": "SUSE Bug 911326 for CVE-2014-9419",
"url": "https://bugzilla.suse.com/911326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-11-19T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2014-9419"
},
{
"cve": "CVE-2014-9644",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-9644"
}
],
"notes": [
{
"category": "general",
"text": "The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a parenthesized module template expression in the salg_name field, as demonstrated by the vfat(aes) expression, a different vulnerability than CVE-2013-7421.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-9644",
"url": "https://www.suse.com/security/cve/CVE-2014-9644"
},
{
"category": "external",
"summary": "SUSE Bug 914423 for CVE-2014-9644",
"url": "https://bugzilla.suse.com/914423"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-11-19T00:00:00Z",
"details": "Important"
}
],
"title": "CVE-2014-9644"
},
{
"cve": "CVE-2015-0239",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-0239"
}
],
"notes": [
{
"category": "general",
"text": "The em_sysenter function in arch/x86/kvm/emulate.c in the Linux kernel before 3.18.5, when the guest OS lacks SYSENTER MSR initialization, allows guest OS users to gain guest OS privileges or cause a denial of service (guest OS crash) by triggering use of a 16-bit code segment for emulation of a SYSENTER instruction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-0239",
"url": "https://www.suse.com/security/cve/CVE-2015-0239"
},
{
"category": "external",
"summary": "SUSE Bug 987709 for CVE-2015-0239",
"url": "https://bugzilla.suse.com/987709"
},
{
"category": "external",
"summary": "SUSE Bug 994618 for CVE-2015-0239",
"url": "https://bugzilla.suse.com/994618"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-11-19T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-0239"
},
{
"cve": "CVE-2015-2925",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-2925"
}
],
"notes": [
{
"category": "general",
"text": "The prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to bypass an intended container protection mechanism by renaming a directory, related to a \"double-chroot attack.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-2925",
"url": "https://www.suse.com/security/cve/CVE-2015-2925"
},
{
"category": "external",
"summary": "SUSE Bug 926238 for CVE-2015-2925",
"url": "https://bugzilla.suse.com/926238"
},
{
"category": "external",
"summary": "SUSE Bug 951625 for CVE-2015-2925",
"url": "https://bugzilla.suse.com/951625"
},
{
"category": "external",
"summary": "SUSE Bug 951638 for CVE-2015-2925",
"url": "https://bugzilla.suse.com/951638"
},
{
"category": "external",
"summary": "SUSE Bug 963994 for CVE-2015-2925",
"url": "https://bugzilla.suse.com/963994"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-11-19T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-2925"
},
{
"cve": "CVE-2015-3339",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3339"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3339",
"url": "https://www.suse.com/security/cve/CVE-2015-3339"
},
{
"category": "external",
"summary": "SUSE Bug 903967 for CVE-2015-3339",
"url": "https://bugzilla.suse.com/903967"
},
{
"category": "external",
"summary": "SUSE Bug 928130 for CVE-2015-3339",
"url": "https://bugzilla.suse.com/928130"
},
{
"category": "external",
"summary": "SUSE Bug 939263 for CVE-2015-3339",
"url": "https://bugzilla.suse.com/939263"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-11-19T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-3339"
},
{
"cve": "CVE-2015-4170",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4170"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel before 3.13-rc4-next-20131218 allows local users to cause a denial of service (ldsem_down_read and ldsem_down_write deadlock) by establishing a new tty thread during shutdown of a previous tty thread.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4170",
"url": "https://www.suse.com/security/cve/CVE-2015-4170"
},
{
"category": "external",
"summary": "SUSE Bug 933423 for CVE-2015-4170",
"url": "https://bugzilla.suse.com/933423"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-11-19T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-4170"
},
{
"cve": "CVE-2015-5283",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5283"
}
],
"notes": [
{
"category": "general",
"text": "The sctp_init function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-initialization steps, which allows local users to cause a denial of service (panic or memory corruption) by creating SCTP sockets before all of the steps have finished.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5283",
"url": "https://www.suse.com/security/cve/CVE-2015-5283"
},
{
"category": "external",
"summary": "SUSE Bug 947155 for CVE-2015-5283",
"url": "https://bugzilla.suse.com/947155"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-11-19T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-5283"
},
{
"cve": "CVE-2015-6526",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6526"
}
],
"notes": [
{
"category": "general",
"text": "The perf_callchain_user_64 function in arch/powerpc/perf/callchain.c in the Linux kernel before 4.0.2 on ppc64 platforms allows local users to cause a denial of service (infinite loop) via a deep 64-bit userspace backtrace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6526",
"url": "https://www.suse.com/security/cve/CVE-2015-6526"
},
{
"category": "external",
"summary": "SUSE Bug 942702 for CVE-2015-6526",
"url": "https://bugzilla.suse.com/942702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-11-19T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-6526"
},
{
"cve": "CVE-2015-7613",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7613"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipc_addid call that leads to uid and gid comparisons against uninitialized data, related to msg.c, shm.c, and util.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7613",
"url": "https://www.suse.com/security/cve/CVE-2015-7613"
},
{
"category": "external",
"summary": "SUSE Bug 923755 for CVE-2015-7613",
"url": "https://bugzilla.suse.com/923755"
},
{
"category": "external",
"summary": "SUSE Bug 948536 for CVE-2015-7613",
"url": "https://bugzilla.suse.com/948536"
},
{
"category": "external",
"summary": "SUSE Bug 948701 for CVE-2015-7613",
"url": "https://bugzilla.suse.com/948701"
},
{
"category": "external",
"summary": "SUSE Bug 963994 for CVE-2015-7613",
"url": "https://bugzilla.suse.com/963994"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-11-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-7613"
},
{
"cve": "CVE-2015-7837",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7837"
}
],
"notes": [
{
"category": "general",
"text": "The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7837",
"url": "https://www.suse.com/security/cve/CVE-2015-7837"
},
{
"category": "external",
"summary": "SUSE Bug 950804 for CVE-2015-7837",
"url": "https://bugzilla.suse.com/950804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Liberty Linux 7:kernel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-debug-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-doc-0:3.10.0-327.el7.noarch",
"SUSE Liberty Linux 7:kernel-headers-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:perf-0:3.10.0-327.el7.x86_64",
"SUSE Liberty Linux 7:python-perf-0:3.10.0-327.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-11-19T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7837"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…