Debian Package Tracker

general

source: linux (main)
version: 5.4.8-1
maintainer: Debian Kernel Team (archive) (DMD)
uploaders: maximilian attems [DMD] – Ben Hutchings [DMD] – Salvatore Bonaccorso [DMD] – Bastian Blank [DMD]
arch: all
std-ver: 4.2.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 3.16.56-1+deb8u1
o-o-sec: 3.16.76-1
oldstable: 4.9.189-3
old-sec: 4.9.189-3+deb9u2
old-bpo: 4.19.67-2+deb10u2~bpo9+1
old-p-u: 4.9.189-3+deb9u2
stable: 4.19.67-2+deb10u1
stable-sec: 4.19.67-2+deb10u2
stable-bpo: 5.4.8-1~bpo10+1
stable-p-u: 4.19.87-1
testing: 5.4.8-1
unstable: 5.4.8-1
exp: 5.5~rc5-1~exp1

versioned links

3.16.51-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.16.51-3+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.16.56-1+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.16.76-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.9.189-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.9.189-3+deb9u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.19.67-2+deb10u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.19.67-2+deb10u2~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.19.67-2+deb10u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.19.87-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.3.9-2~bpo10+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.4.2-1~exp1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.4.8-1~bpo10+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.4.8-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.5~rc5-1~exp1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

acpi-modules-5.4.0-2-686-di
acpi-modules-5.4.0-2-686-pae-di
acpi-modules-5.4.0-2-amd64-di
affs-modules-5.4.0-2-4kc-malta-di
affs-modules-5.4.0-2-5kc-malta-di
affs-modules-5.4.0-2-loongson-3-di
affs-modules-5.4.0-2-m68k-di
affs-modules-5.4.0-2-octeon-di
affs-modules-5.4.0-2-powerpc-di
affs-modules-5.4.0-2-powerpc64-di
ata-modules-5.4.0-2-4kc-malta-di
ata-modules-5.4.0-2-5kc-malta-di
ata-modules-5.4.0-2-686-di
ata-modules-5.4.0-2-686-pae-di
ata-modules-5.4.0-2-alpha-generic-di
ata-modules-5.4.0-2-amd64-di
ata-modules-5.4.0-2-arm64-di
ata-modules-5.4.0-2-armmp-di
ata-modules-5.4.0-2-itanium-di
ata-modules-5.4.0-2-loongson-3-di
ata-modules-5.4.0-2-m68k-di
ata-modules-5.4.0-2-parisc-di
ata-modules-5.4.0-2-parisc64-di
ata-modules-5.4.0-2-powerpc-di
ata-modules-5.4.0-2-powerpc64-di
ata-modules-5.4.0-2-powerpc64le-di
ata-modules-5.4.0-2-riscv64-di
ata-modules-5.4.0-2-sparc64-di
btrfs-modules-5.4.0-2-4kc-malta-di
btrfs-modules-5.4.0-2-5kc-malta-di
btrfs-modules-5.4.0-2-686-di
btrfs-modules-5.4.0-2-686-pae-di
btrfs-modules-5.4.0-2-alpha-generic-di
btrfs-modules-5.4.0-2-amd64-di
btrfs-modules-5.4.0-2-arm64-di
btrfs-modules-5.4.0-2-armmp-di
btrfs-modules-5.4.0-2-itanium-di
btrfs-modules-5.4.0-2-loongson-3-di
btrfs-modules-5.4.0-2-m68k-di
btrfs-modules-5.4.0-2-marvell-di
btrfs-modules-5.4.0-2-mips32r6-di
btrfs-modules-5.4.0-2-mips32r6el-di
btrfs-modules-5.4.0-2-mips64r6-di
btrfs-modules-5.4.0-2-mips64r6el-di
btrfs-modules-5.4.0-2-octeon-di
btrfs-modules-5.4.0-2-parisc-di
btrfs-modules-5.4.0-2-parisc64-di
btrfs-modules-5.4.0-2-powerpc-di
btrfs-modules-5.4.0-2-powerpc64-di
btrfs-modules-5.4.0-2-powerpc64le-di
btrfs-modules-5.4.0-2-riscv64-di
btrfs-modules-5.4.0-2-s390x-di
btrfs-modules-5.4.0-2-sh7751r-di
btrfs-modules-5.4.0-2-sh7785lcr-di
btrfs-modules-5.4.0-2-sparc64-di
cdrom-core-modules-5.4.0-2-4kc-malta-di
cdrom-core-modules-5.4.0-2-5kc-malta-di
cdrom-core-modules-5.4.0-2-686-di
cdrom-core-modules-5.4.0-2-686-pae-di
cdrom-core-modules-5.4.0-2-alpha-generic-di
cdrom-core-modules-5.4.0-2-amd64-di
cdrom-core-modules-5.4.0-2-arm64-di
cdrom-core-modules-5.4.0-2-armmp-di
cdrom-core-modules-5.4.0-2-itanium-di
cdrom-core-modules-5.4.0-2-loongson-3-di
cdrom-core-modules-5.4.0-2-m68k-di
cdrom-core-modules-5.4.0-2-marvell-di
cdrom-core-modules-5.4.0-2-octeon-di
cdrom-core-modules-5.4.0-2-parisc-di
cdrom-core-modules-5.4.0-2-parisc64-di
cdrom-core-modules-5.4.0-2-powerpc-di
cdrom-core-modules-5.4.0-2-powerpc64-di
cdrom-core-modules-5.4.0-2-powerpc64le-di
cdrom-core-modules-5.4.0-2-riscv64-di
cdrom-core-modules-5.4.0-2-s390x-di
cdrom-core-modules-5.4.0-2-sh7751r-di
cdrom-core-modules-5.4.0-2-sh7785lcr-di
cdrom-core-modules-5.4.0-2-sparc64-di
compress-modules-5.4.0-2-4kc-malta-di
compress-modules-5.4.0-2-5kc-malta-di
compress-modules-5.4.0-2-686-di
compress-modules-5.4.0-2-686-pae-di
compress-modules-5.4.0-2-alpha-generic-di
compress-modules-5.4.0-2-amd64-di
compress-modules-5.4.0-2-arm64-di
compress-modules-5.4.0-2-armmp-di
compress-modules-5.4.0-2-itanium-di
compress-modules-5.4.0-2-loongson-3-di
compress-modules-5.4.0-2-m68k-di
compress-modules-5.4.0-2-marvell-di
compress-modules-5.4.0-2-mips32r6-di
compress-modules-5.4.0-2-mips32r6el-di
compress-modules-5.4.0-2-mips64r6-di
compress-modules-5.4.0-2-mips64r6el-di
compress-modules-5.4.0-2-octeon-di
compress-modules-5.4.0-2-parisc-di
compress-modules-5.4.0-2-parisc64-di
compress-modules-5.4.0-2-powerpc-di
compress-modules-5.4.0-2-powerpc64-di
compress-modules-5.4.0-2-powerpc64le-di
compress-modules-5.4.0-2-riscv64-di
compress-modules-5.4.0-2-s390x-di
compress-modules-5.4.0-2-sh7751r-di
compress-modules-5.4.0-2-sh7785lcr-di
compress-modules-5.4.0-2-sparc64-di
crc-modules-5.4.0-2-4kc-malta-di
crc-modules-5.4.0-2-5kc-malta-di
crc-modules-5.4.0-2-686-di
crc-modules-5.4.0-2-686-pae-di
crc-modules-5.4.0-2-alpha-generic-di
crc-modules-5.4.0-2-amd64-di
crc-modules-5.4.0-2-arm64-di
crc-modules-5.4.0-2-armmp-di
crc-modules-5.4.0-2-itanium-di
crc-modules-5.4.0-2-loongson-3-di
crc-modules-5.4.0-2-m68k-di
crc-modules-5.4.0-2-marvell-di
crc-modules-5.4.0-2-mips32r6-di
crc-modules-5.4.0-2-mips32r6el-di
crc-modules-5.4.0-2-mips64r6-di
crc-modules-5.4.0-2-mips64r6el-di
crc-modules-5.4.0-2-octeon-di
crc-modules-5.4.0-2-parisc-di
crc-modules-5.4.0-2-parisc64-di
crc-modules-5.4.0-2-powerpc-di
crc-modules-5.4.0-2-powerpc64-di
crc-modules-5.4.0-2-powerpc64le-di
crc-modules-5.4.0-2-riscv64-di
crc-modules-5.4.0-2-s390x-di
crc-modules-5.4.0-2-sh7751r-di
crc-modules-5.4.0-2-sh7785lcr-di
crc-modules-5.4.0-2-sparc64-di
crypto-dm-modules-5.4.0-2-4kc-malta-di
crypto-dm-modules-5.4.0-2-5kc-malta-di
crypto-dm-modules-5.4.0-2-686-di
crypto-dm-modules-5.4.0-2-686-pae-di
crypto-dm-modules-5.4.0-2-alpha-generic-di
crypto-dm-modules-5.4.0-2-amd64-di
crypto-dm-modules-5.4.0-2-arm64-di
crypto-dm-modules-5.4.0-2-armmp-di
crypto-dm-modules-5.4.0-2-itanium-di
crypto-dm-modules-5.4.0-2-loongson-3-di
crypto-dm-modules-5.4.0-2-marvell-di
crypto-dm-modules-5.4.0-2-mips32r6-di
crypto-dm-modules-5.4.0-2-mips32r6el-di
crypto-dm-modules-5.4.0-2-mips64r6-di
crypto-dm-modules-5.4.0-2-mips64r6el-di
crypto-dm-modules-5.4.0-2-octeon-di
crypto-dm-modules-5.4.0-2-parisc-di
crypto-dm-modules-5.4.0-2-parisc64-di
crypto-dm-modules-5.4.0-2-powerpc-di
crypto-dm-modules-5.4.0-2-powerpc64-di
crypto-dm-modules-5.4.0-2-powerpc64le-di
crypto-dm-modules-5.4.0-2-riscv64-di
crypto-dm-modules-5.4.0-2-s390x-di
crypto-dm-modules-5.4.0-2-sh7751r-di
crypto-dm-modules-5.4.0-2-sh7785lcr-di
crypto-dm-modules-5.4.0-2-sparc64-di
crypto-modules-5.4.0-2-4kc-malta-di
crypto-modules-5.4.0-2-5kc-malta-di
crypto-modules-5.4.0-2-686-di
crypto-modules-5.4.0-2-686-pae-di
crypto-modules-5.4.0-2-alpha-generic-di
crypto-modules-5.4.0-2-amd64-di
crypto-modules-5.4.0-2-arm64-di
crypto-modules-5.4.0-2-armmp-di
crypto-modules-5.4.0-2-itanium-di
crypto-modules-5.4.0-2-loongson-3-di
crypto-modules-5.4.0-2-m68k-di
crypto-modules-5.4.0-2-marvell-di
crypto-modules-5.4.0-2-mips32r6-di
crypto-modules-5.4.0-2-mips32r6el-di
crypto-modules-5.4.0-2-mips64r6-di
crypto-modules-5.4.0-2-mips64r6el-di
crypto-modules-5.4.0-2-octeon-di
crypto-modules-5.4.0-2-parisc-di
crypto-modules-5.4.0-2-parisc64-di
crypto-modules-5.4.0-2-powerpc-di
crypto-modules-5.4.0-2-powerpc64-di
crypto-modules-5.4.0-2-powerpc64le-di
crypto-modules-5.4.0-2-riscv64-di
crypto-modules-5.4.0-2-s390x-di
crypto-modules-5.4.0-2-sh7751r-di
crypto-modules-5.4.0-2-sh7785lcr-di
crypto-modules-5.4.0-2-sparc64-di
dasd-extra-modules-5.4.0-2-s390x-di
dasd-modules-5.4.0-2-s390x-di
efi-modules-5.4.0-2-686-di
efi-modules-5.4.0-2-686-pae-di
efi-modules-5.4.0-2-amd64-di
efi-modules-5.4.0-2-arm64-di
efi-modules-5.4.0-2-armmp-di
event-modules-5.4.0-2-4kc-malta-di
event-modules-5.4.0-2-5kc-malta-di
event-modules-5.4.0-2-686-di
event-modules-5.4.0-2-686-pae-di
event-modules-5.4.0-2-alpha-generic-di
event-modules-5.4.0-2-amd64-di
event-modules-5.4.0-2-arm64-di
event-modules-5.4.0-2-armmp-di
event-modules-5.4.0-2-itanium-di
event-modules-5.4.0-2-loongson-3-di
event-modules-5.4.0-2-marvell-di
event-modules-5.4.0-2-octeon-di
event-modules-5.4.0-2-parisc-di
event-modules-5.4.0-2-parisc64-di
event-modules-5.4.0-2-powerpc-di
event-modules-5.4.0-2-powerpc64-di
event-modules-5.4.0-2-powerpc64le-di
event-modules-5.4.0-2-riscv64-di
ext4-modules-5.4.0-2-4kc-malta-di
ext4-modules-5.4.0-2-5kc-malta-di
ext4-modules-5.4.0-2-686-di
ext4-modules-5.4.0-2-686-pae-di
ext4-modules-5.4.0-2-alpha-generic-di
ext4-modules-5.4.0-2-amd64-di
ext4-modules-5.4.0-2-arm64-di
ext4-modules-5.4.0-2-armmp-di
ext4-modules-5.4.0-2-itanium-di
ext4-modules-5.4.0-2-loongson-3-di
ext4-modules-5.4.0-2-m68k-di
ext4-modules-5.4.0-2-marvell-di
ext4-modules-5.4.0-2-mips32r6-di
ext4-modules-5.4.0-2-mips32r6el-di
ext4-modules-5.4.0-2-mips64r6-di
ext4-modules-5.4.0-2-mips64r6el-di
ext4-modules-5.4.0-2-octeon-di
ext4-modules-5.4.0-2-parisc-di
ext4-modules-5.4.0-2-parisc64-di
ext4-modules-5.4.0-2-powerpc-di
ext4-modules-5.4.0-2-powerpc64-di
ext4-modules-5.4.0-2-powerpc64le-di
ext4-modules-5.4.0-2-riscv64-di
ext4-modules-5.4.0-2-s390x-di
ext4-modules-5.4.0-2-sh7751r-di
ext4-modules-5.4.0-2-sh7785lcr-di
ext4-modules-5.4.0-2-sparc64-di
fancontrol-modules-5.4.0-2-powerpc64-di
fancontrol-modules-5.4.0-2-powerpc64le-di
fat-modules-5.4.0-2-4kc-malta-di
fat-modules-5.4.0-2-5kc-malta-di
fat-modules-5.4.0-2-686-di
fat-modules-5.4.0-2-686-pae-di
fat-modules-5.4.0-2-alpha-generic-di
fat-modules-5.4.0-2-amd64-di
fat-modules-5.4.0-2-arm64-di
fat-modules-5.4.0-2-armmp-di
fat-modules-5.4.0-2-itanium-di
fat-modules-5.4.0-2-loongson-3-di
fat-modules-5.4.0-2-m68k-di
fat-modules-5.4.0-2-marvell-di
fat-modules-5.4.0-2-octeon-di
fat-modules-5.4.0-2-parisc-di
fat-modules-5.4.0-2-parisc64-di
fat-modules-5.4.0-2-powerpc-di
fat-modules-5.4.0-2-powerpc64-di
fat-modules-5.4.0-2-powerpc64le-di
fat-modules-5.4.0-2-riscv64-di
fat-modules-5.4.0-2-s390x-di
fat-modules-5.4.0-2-sh7751r-di
fat-modules-5.4.0-2-sh7785lcr-di
fat-modules-5.4.0-2-sparc64-di
fb-modules-5.4.0-2-4kc-malta-di
fb-modules-5.4.0-2-5kc-malta-di
fb-modules-5.4.0-2-686-di
fb-modules-5.4.0-2-686-pae-di
fb-modules-5.4.0-2-alpha-generic-di
fb-modules-5.4.0-2-amd64-di
fb-modules-5.4.0-2-arm64-di
fb-modules-5.4.0-2-armmp-di
fb-modules-5.4.0-2-itanium-di
fb-modules-5.4.0-2-loongson-3-di
fb-modules-5.4.0-2-marvell-di
fb-modules-5.4.0-2-parisc64-di
fb-modules-5.4.0-2-powerpc-di
fb-modules-5.4.0-2-powerpc64-di
fb-modules-5.4.0-2-powerpc64le-di
fb-modules-5.4.0-2-riscv64-di
fb-modules-5.4.0-2-sparc64-di
firewire-core-modules-5.4.0-2-686-di
firewire-core-modules-5.4.0-2-686-pae-di
firewire-core-modules-5.4.0-2-amd64-di
firewire-core-modules-5.4.0-2-itanium-di
firewire-core-modules-5.4.0-2-loongson-3-di
firewire-core-modules-5.4.0-2-powerpc-di
firewire-core-modules-5.4.0-2-powerpc64-di
firewire-core-modules-5.4.0-2-powerpc64le-di
firewire-core-modules-5.4.0-2-sh7751r-di
firewire-core-modules-5.4.0-2-sh7785lcr-di
fuse-modules-5.4.0-2-4kc-malta-di
fuse-modules-5.4.0-2-5kc-malta-di
fuse-modules-5.4.0-2-686-di
fuse-modules-5.4.0-2-686-pae-di
fuse-modules-5.4.0-2-alpha-generic-di
fuse-modules-5.4.0-2-amd64-di
fuse-modules-5.4.0-2-arm64-di
fuse-modules-5.4.0-2-armmp-di
fuse-modules-5.4.0-2-itanium-di
fuse-modules-5.4.0-2-loongson-3-di
fuse-modules-5.4.0-2-m68k-di
fuse-modules-5.4.0-2-marvell-di
fuse-modules-5.4.0-2-mips32r6-di
fuse-modules-5.4.0-2-mips32r6el-di
fuse-modules-5.4.0-2-mips64r6-di
fuse-modules-5.4.0-2-mips64r6el-di
fuse-modules-5.4.0-2-octeon-di
fuse-modules-5.4.0-2-parisc-di
fuse-modules-5.4.0-2-parisc64-di
fuse-modules-5.4.0-2-powerpc-di
fuse-modules-5.4.0-2-powerpc64-di
fuse-modules-5.4.0-2-powerpc64le-di
fuse-modules-5.4.0-2-riscv64-di
fuse-modules-5.4.0-2-s390x-di
fuse-modules-5.4.0-2-sh7751r-di
fuse-modules-5.4.0-2-sh7785lcr-di
fuse-modules-5.4.0-2-sparc64-di
hfs-modules-5.4.0-2-4kc-malta-di
hfs-modules-5.4.0-2-5kc-malta-di
hfs-modules-5.4.0-2-loongson-3-di
hfs-modules-5.4.0-2-m68k-di
hfs-modules-5.4.0-2-octeon-di
hfs-modules-5.4.0-2-powerpc-di
hfs-modules-5.4.0-2-powerpc64-di
hyperv-daemons (3 bugs: 0, 2, 1, 0)
hypervisor-modules-5.4.0-2-powerpc64-di
hypervisor-modules-5.4.0-2-powerpc64le-di
i2c-modules-5.4.0-2-4kc-malta-di
i2c-modules-5.4.0-2-5kc-malta-di
i2c-modules-5.4.0-2-686-di
i2c-modules-5.4.0-2-686-pae-di
i2c-modules-5.4.0-2-alpha-generic-di
i2c-modules-5.4.0-2-amd64-di
i2c-modules-5.4.0-2-arm64-di
i2c-modules-5.4.0-2-armmp-di
i2c-modules-5.4.0-2-itanium-di
i2c-modules-5.4.0-2-powerpc64-di
i2c-modules-5.4.0-2-powerpc64le-di
i2c-modules-5.4.0-2-riscv64-di
i2c-modules-5.4.0-2-sh7751r-di
i2c-modules-5.4.0-2-sparc64-di
ide-core-modules-5.4.0-2-itanium-di
ide-core-modules-5.4.0-2-m68k-di
ide-modules-5.4.0-2-itanium-di
ide-modules-5.4.0-2-m68k-di
input-modules-5.4.0-2-4kc-malta-di
input-modules-5.4.0-2-5kc-malta-di
input-modules-5.4.0-2-686-di
input-modules-5.4.0-2-686-pae-di
input-modules-5.4.0-2-alpha-generic-di
input-modules-5.4.0-2-amd64-di
input-modules-5.4.0-2-arm64-di
input-modules-5.4.0-2-armmp-di
input-modules-5.4.0-2-itanium-di
input-modules-5.4.0-2-loongson-3-di
input-modules-5.4.0-2-marvell-di
input-modules-5.4.0-2-octeon-di
input-modules-5.4.0-2-parisc-di
input-modules-5.4.0-2-parisc64-di
input-modules-5.4.0-2-powerpc-di
input-modules-5.4.0-2-powerpc64-di
input-modules-5.4.0-2-powerpc64le-di
input-modules-5.4.0-2-riscv64-di
input-modules-5.4.0-2-sparc64-di
ipv6-modules-5.4.0-2-marvell-di
isofs-modules-5.4.0-2-4kc-malta-di
isofs-modules-5.4.0-2-5kc-malta-di
isofs-modules-5.4.0-2-686-di
isofs-modules-5.4.0-2-686-pae-di
isofs-modules-5.4.0-2-alpha-generic-di
isofs-modules-5.4.0-2-amd64-di
isofs-modules-5.4.0-2-arm64-di
isofs-modules-5.4.0-2-armmp-di
isofs-modules-5.4.0-2-itanium-di
isofs-modules-5.4.0-2-loongson-3-di
isofs-modules-5.4.0-2-m68k-di
isofs-modules-5.4.0-2-marvell-di
isofs-modules-5.4.0-2-mips32r6-di
isofs-modules-5.4.0-2-mips32r6el-di
isofs-modules-5.4.0-2-mips64r6-di
isofs-modules-5.4.0-2-mips64r6el-di
isofs-modules-5.4.0-2-octeon-di
isofs-modules-5.4.0-2-parisc-di
isofs-modules-5.4.0-2-parisc64-di
isofs-modules-5.4.0-2-powerpc-di
isofs-modules-5.4.0-2-powerpc64-di
isofs-modules-5.4.0-2-powerpc64le-di
isofs-modules-5.4.0-2-riscv64-di
isofs-modules-5.4.0-2-s390x-di
isofs-modules-5.4.0-2-sh7751r-di
isofs-modules-5.4.0-2-sh7785lcr-di
isofs-modules-5.4.0-2-sparc64-di
jffs2-modules-5.4.0-2-marvell-di
jfs-modules-5.4.0-2-4kc-malta-di
jfs-modules-5.4.0-2-5kc-malta-di
jfs-modules-5.4.0-2-686-di
jfs-modules-5.4.0-2-686-pae-di
jfs-modules-5.4.0-2-alpha-generic-di
jfs-modules-5.4.0-2-amd64-di
jfs-modules-5.4.0-2-arm64-di
jfs-modules-5.4.0-2-armmp-di
jfs-modules-5.4.0-2-itanium-di
jfs-modules-5.4.0-2-loongson-3-di
jfs-modules-5.4.0-2-marvell-di
jfs-modules-5.4.0-2-mips32r6-di
jfs-modules-5.4.0-2-mips32r6el-di
jfs-modules-5.4.0-2-mips64r6-di
jfs-modules-5.4.0-2-mips64r6el-di
jfs-modules-5.4.0-2-octeon-di
jfs-modules-5.4.0-2-parisc-di
jfs-modules-5.4.0-2-parisc64-di
jfs-modules-5.4.0-2-powerpc-di
jfs-modules-5.4.0-2-powerpc64-di
jfs-modules-5.4.0-2-powerpc64le-di
jfs-modules-5.4.0-2-riscv64-di
jfs-modules-5.4.0-2-sh7751r-di
jfs-modules-5.4.0-2-sh7785lcr-di
jfs-modules-5.4.0-2-sparc64-di
kernel-image-5.4.0-2-4kc-malta-di
kernel-image-5.4.0-2-5kc-malta-di
kernel-image-5.4.0-2-686-di
kernel-image-5.4.0-2-686-pae-di
kernel-image-5.4.0-2-alpha-generic-di
kernel-image-5.4.0-2-amd64-di
kernel-image-5.4.0-2-arm64-di
kernel-image-5.4.0-2-armmp-di
kernel-image-5.4.0-2-itanium-di
kernel-image-5.4.0-2-loongson-3-di
kernel-image-5.4.0-2-m68k-di
kernel-image-5.4.0-2-marvell-di
kernel-image-5.4.0-2-mips32r6-di
kernel-image-5.4.0-2-mips32r6el-di
kernel-image-5.4.0-2-mips64r6-di
kernel-image-5.4.0-2-mips64r6el-di
kernel-image-5.4.0-2-octeon-di
kernel-image-5.4.0-2-parisc-di
kernel-image-5.4.0-2-parisc64-di
kernel-image-5.4.0-2-powerpc-di
kernel-image-5.4.0-2-powerpc64-di
kernel-image-5.4.0-2-powerpc64le-di
kernel-image-5.4.0-2-riscv64-di
kernel-image-5.4.0-2-s390x-di
kernel-image-5.4.0-2-sh7751r-di
kernel-image-5.4.0-2-sh7785lcr-di
kernel-image-5.4.0-2-sparc64-di
leds-modules-5.4.0-2-arm64-di
leds-modules-5.4.0-2-armmp-di
leds-modules-5.4.0-2-marvell-di
libbpf-dev (2 bugs: 0, 0, 2, 0)
libbpf0
libcpupower-dev
libcpupower2
libtraceevent-dev
libtraceevent1
libtraceevent1-plugin
linux-bootwrapper-5.4.0-2
linux-compiler-gcc-9-arm
linux-compiler-gcc-9-s390
linux-compiler-gcc-9-x86
linux-config-5.4
linux-cpupower (2 bugs: 0, 1, 1, 0)
linux-doc
linux-doc-5.4
linux-headers-4kc-malta
linux-headers-5.4.0-2-4kc-malta
linux-headers-5.4.0-2-5kc-malta
linux-headers-5.4.0-2-686
linux-headers-5.4.0-2-686-pae
linux-headers-5.4.0-2-all
linux-headers-5.4.0-2-all-alpha
linux-headers-5.4.0-2-all-amd64
linux-headers-5.4.0-2-all-arm64
linux-headers-5.4.0-2-all-armel
linux-headers-5.4.0-2-all-armhf
linux-headers-5.4.0-2-all-hppa
linux-headers-5.4.0-2-all-i386
linux-headers-5.4.0-2-all-ia64
linux-headers-5.4.0-2-all-m68k
linux-headers-5.4.0-2-all-mips
linux-headers-5.4.0-2-all-mips64
linux-headers-5.4.0-2-all-mips64el
linux-headers-5.4.0-2-all-mips64r6
linux-headers-5.4.0-2-all-mips64r6el
linux-headers-5.4.0-2-all-mipsel
linux-headers-5.4.0-2-all-mipsr6
linux-headers-5.4.0-2-all-mipsr6el
linux-headers-5.4.0-2-all-powerpc
linux-headers-5.4.0-2-all-ppc64
linux-headers-5.4.0-2-all-ppc64el
linux-headers-5.4.0-2-all-riscv64
linux-headers-5.4.0-2-all-s390x
linux-headers-5.4.0-2-all-sh4
linux-headers-5.4.0-2-all-sparc64
linux-headers-5.4.0-2-alpha-generic
linux-headers-5.4.0-2-alpha-smp
linux-headers-5.4.0-2-amd64
linux-headers-5.4.0-2-arm64
linux-headers-5.4.0-2-armmp
linux-headers-5.4.0-2-armmp-lpae
linux-headers-5.4.0-2-cloud-amd64
linux-headers-5.4.0-2-common
linux-headers-5.4.0-2-common-rt
linux-headers-5.4.0-2-itanium
linux-headers-5.4.0-2-loongson-3
linux-headers-5.4.0-2-m68k
linux-headers-5.4.0-2-marvell
linux-headers-5.4.0-2-mckinley
linux-headers-5.4.0-2-mips32r6
linux-headers-5.4.0-2-mips32r6el
linux-headers-5.4.0-2-mips64r6
linux-headers-5.4.0-2-mips64r6el
linux-headers-5.4.0-2-octeon
linux-headers-5.4.0-2-parisc
linux-headers-5.4.0-2-parisc64
linux-headers-5.4.0-2-powerpc
linux-headers-5.4.0-2-powerpc-smp
linux-headers-5.4.0-2-powerpc64
linux-headers-5.4.0-2-powerpc64le
linux-headers-5.4.0-2-riscv64
linux-headers-5.4.0-2-rpi
linux-headers-5.4.0-2-rt-686-pae
linux-headers-5.4.0-2-rt-amd64
linux-headers-5.4.0-2-rt-arm64
linux-headers-5.4.0-2-rt-armmp
linux-headers-5.4.0-2-s390x
linux-headers-5.4.0-2-sh7751r
linux-headers-5.4.0-2-sh7785lcr
linux-headers-5.4.0-2-sparc64
linux-headers-5.4.0-2-sparc64-smp
linux-headers-5kc-malta
linux-headers-686
linux-headers-686-pae
linux-headers-alpha-generic
linux-headers-alpha-smp
linux-headers-amd64
linux-headers-arm64
linux-headers-armmp
linux-headers-armmp-lpae
linux-headers-cloud-amd64
linux-headers-itanium
linux-headers-loongson-3
linux-headers-m68k
linux-headers-marvell
linux-headers-mckinley
linux-headers-mips32r6
linux-headers-mips32r6el
linux-headers-mips64r6
linux-headers-mips64r6el
linux-headers-octeon
linux-headers-parisc
linux-headers-parisc64
linux-headers-powerpc
linux-headers-powerpc-smp
linux-headers-powerpc64
linux-headers-powerpc64le
linux-headers-riscv64
linux-headers-rpi
linux-headers-rt-686-pae
linux-headers-rt-amd64
linux-headers-rt-arm64
linux-headers-rt-armmp
linux-headers-s390x
linux-headers-sh7751r
linux-headers-sh7785lcr
linux-headers-sparc64
linux-headers-sparc64-smp
linux-image-4kc-malta
linux-image-4kc-malta-dbg
linux-image-5.4.0-2-4kc-malta
linux-image-5.4.0-2-4kc-malta-dbg
linux-image-5.4.0-2-5kc-malta
linux-image-5.4.0-2-5kc-malta-dbg
linux-image-5.4.0-2-686-dbg
linux-image-5.4.0-2-686-pae-dbg
linux-image-5.4.0-2-686-pae-unsigned
linux-image-5.4.0-2-686-unsigned
linux-image-5.4.0-2-alpha-generic
linux-image-5.4.0-2-alpha-generic-dbg
linux-image-5.4.0-2-alpha-smp
linux-image-5.4.0-2-alpha-smp-dbg
linux-image-5.4.0-2-amd64-dbg
linux-image-5.4.0-2-amd64-unsigned
linux-image-5.4.0-2-arm64-dbg
linux-image-5.4.0-2-arm64-unsigned
linux-image-5.4.0-2-armmp
linux-image-5.4.0-2-armmp-dbg
linux-image-5.4.0-2-armmp-lpae
linux-image-5.4.0-2-armmp-lpae-dbg
linux-image-5.4.0-2-cloud-amd64-dbg
linux-image-5.4.0-2-cloud-amd64-unsigned
linux-image-5.4.0-2-itanium
linux-image-5.4.0-2-itanium-dbg
linux-image-5.4.0-2-loongson-3
linux-image-5.4.0-2-loongson-3-dbg
linux-image-5.4.0-2-m68k
linux-image-5.4.0-2-m68k-dbg
linux-image-5.4.0-2-marvell
linux-image-5.4.0-2-marvell-dbg
linux-image-5.4.0-2-mckinley
linux-image-5.4.0-2-mckinley-dbg
linux-image-5.4.0-2-mips32r6
linux-image-5.4.0-2-mips32r6-dbg
linux-image-5.4.0-2-mips32r6el
linux-image-5.4.0-2-mips32r6el-dbg
linux-image-5.4.0-2-mips64r6
linux-image-5.4.0-2-mips64r6-dbg
linux-image-5.4.0-2-mips64r6el
linux-image-5.4.0-2-mips64r6el-dbg
linux-image-5.4.0-2-octeon
linux-image-5.4.0-2-octeon-dbg
linux-image-5.4.0-2-parisc
linux-image-5.4.0-2-parisc64
linux-image-5.4.0-2-powerpc
linux-image-5.4.0-2-powerpc-dbg
linux-image-5.4.0-2-powerpc-smp
linux-image-5.4.0-2-powerpc-smp-dbg
linux-image-5.4.0-2-powerpc64
linux-image-5.4.0-2-powerpc64-dbg
linux-image-5.4.0-2-powerpc64le
linux-image-5.4.0-2-powerpc64le-dbg
linux-image-5.4.0-2-riscv64
linux-image-5.4.0-2-riscv64-dbg
linux-image-5.4.0-2-rpi
linux-image-5.4.0-2-rpi-dbg
linux-image-5.4.0-2-rt-686-pae-dbg
linux-image-5.4.0-2-rt-686-pae-unsigned
linux-image-5.4.0-2-rt-amd64-dbg
linux-image-5.4.0-2-rt-amd64-unsigned
linux-image-5.4.0-2-rt-arm64-dbg
linux-image-5.4.0-2-rt-arm64-unsigned
linux-image-5.4.0-2-rt-armmp
linux-image-5.4.0-2-rt-armmp-dbg
linux-image-5.4.0-2-s390x
linux-image-5.4.0-2-s390x-dbg
linux-image-5.4.0-2-sh7751r
linux-image-5.4.0-2-sh7751r-dbg
linux-image-5.4.0-2-sh7785lcr
linux-image-5.4.0-2-sh7785lcr-dbg
linux-image-5.4.0-2-sparc64
linux-image-5.4.0-2-sparc64-dbg
linux-image-5.4.0-2-sparc64-smp
linux-image-5.4.0-2-sparc64-smp-dbg
linux-image-5kc-malta
linux-image-5kc-malta-dbg
linux-image-686-dbg
linux-image-686-pae-dbg
linux-image-alpha-generic
linux-image-alpha-generic-dbg
linux-image-alpha-smp
linux-image-alpha-smp-dbg
linux-image-amd64-dbg
linux-image-amd64-signed-template
linux-image-arm64-dbg
linux-image-arm64-signed-template
linux-image-armmp
linux-image-armmp-dbg
linux-image-armmp-lpae
linux-image-armmp-lpae-dbg
linux-image-cloud-amd64-dbg
linux-image-i386-signed-template
linux-image-itanium
linux-image-itanium-dbg
linux-image-loongson-3
linux-image-loongson-3-dbg
linux-image-m68k
linux-image-m68k-dbg
linux-image-marvell
linux-image-marvell-dbg
linux-image-mckinley
linux-image-mckinley-dbg
linux-image-mips32r6
linux-image-mips32r6-dbg
linux-image-mips32r6el
linux-image-mips32r6el-dbg
linux-image-mips64r6
linux-image-mips64r6-dbg
linux-image-mips64r6el
linux-image-mips64r6el-dbg
linux-image-octeon
linux-image-octeon-dbg
linux-image-parisc
linux-image-parisc64
linux-image-powerpc
linux-image-powerpc-dbg
linux-image-powerpc-smp
linux-image-powerpc-smp-dbg
linux-image-powerpc64
linux-image-powerpc64-dbg
linux-image-powerpc64le
linux-image-powerpc64le-dbg
linux-image-riscv64
linux-image-riscv64-dbg
linux-image-rpi
linux-image-rpi-dbg
linux-image-rt-686-pae-dbg
linux-image-rt-amd64-dbg
linux-image-rt-arm64-dbg
linux-image-rt-armmp
linux-image-rt-armmp-dbg
linux-image-s390x
linux-image-s390x-dbg
linux-image-sh7751r
linux-image-sh7751r-dbg
linux-image-sh7785lcr
linux-image-sh7785lcr-dbg
linux-image-sparc64
linux-image-sparc64-dbg
linux-image-sparc64-smp
linux-image-sparc64-smp-dbg
linux-kbuild-5.4
linux-libc-dev (10 bugs: 0, 7, 3, 0)
linux-perf
linux-perf-5.4
linux-source (1 bugs: 0, 0, 1, 0)
linux-source-5.4 (1 bugs: 0, 1, 0, 0)
linux-support-5.4.0-2
loop-modules-5.4.0-2-4kc-malta-di
loop-modules-5.4.0-2-5kc-malta-di
loop-modules-5.4.0-2-686-di
loop-modules-5.4.0-2-686-pae-di
loop-modules-5.4.0-2-alpha-generic-di
loop-modules-5.4.0-2-amd64-di
loop-modules-5.4.0-2-arm64-di
loop-modules-5.4.0-2-armmp-di
loop-modules-5.4.0-2-itanium-di
loop-modules-5.4.0-2-loongson-3-di
loop-modules-5.4.0-2-m68k-di
loop-modules-5.4.0-2-marvell-di
loop-modules-5.4.0-2-mips32r6-di
loop-modules-5.4.0-2-mips32r6el-di
loop-modules-5.4.0-2-mips64r6-di
loop-modules-5.4.0-2-mips64r6el-di
loop-modules-5.4.0-2-octeon-di
loop-modules-5.4.0-2-parisc-di
loop-modules-5.4.0-2-parisc64-di
loop-modules-5.4.0-2-powerpc-di
loop-modules-5.4.0-2-powerpc64-di
loop-modules-5.4.0-2-powerpc64le-di
loop-modules-5.4.0-2-riscv64-di
loop-modules-5.4.0-2-s390x-di
loop-modules-5.4.0-2-sh7751r-di
loop-modules-5.4.0-2-sh7785lcr-di
md-modules-5.4.0-2-4kc-malta-di
md-modules-5.4.0-2-5kc-malta-di
md-modules-5.4.0-2-686-di
md-modules-5.4.0-2-686-pae-di
md-modules-5.4.0-2-alpha-generic-di
md-modules-5.4.0-2-amd64-di
md-modules-5.4.0-2-arm64-di
md-modules-5.4.0-2-armmp-di
md-modules-5.4.0-2-itanium-di
md-modules-5.4.0-2-loongson-3-di
md-modules-5.4.0-2-m68k-di
md-modules-5.4.0-2-marvell-di
md-modules-5.4.0-2-mips32r6-di
md-modules-5.4.0-2-mips32r6el-di
md-modules-5.4.0-2-mips64r6-di
md-modules-5.4.0-2-mips64r6el-di
md-modules-5.4.0-2-octeon-di
md-modules-5.4.0-2-parisc-di
md-modules-5.4.0-2-parisc64-di
md-modules-5.4.0-2-powerpc-di
md-modules-5.4.0-2-powerpc64-di
md-modules-5.4.0-2-powerpc64le-di
md-modules-5.4.0-2-riscv64-di
md-modules-5.4.0-2-s390x-di
md-modules-5.4.0-2-sh7751r-di
md-modules-5.4.0-2-sh7785lcr-di
md-modules-5.4.0-2-sparc64-di
minix-modules-5.4.0-2-4kc-malta-di
minix-modules-5.4.0-2-5kc-malta-di
minix-modules-5.4.0-2-loongson-3-di
minix-modules-5.4.0-2-marvell-di
minix-modules-5.4.0-2-octeon-di
minix-modules-5.4.0-2-sh7751r-di
minix-modules-5.4.0-2-sh7785lcr-di
mmc-core-modules-5.4.0-2-4kc-malta-di
mmc-core-modules-5.4.0-2-5kc-malta-di
mmc-core-modules-5.4.0-2-686-di
mmc-core-modules-5.4.0-2-686-pae-di
mmc-core-modules-5.4.0-2-amd64-di
mmc-core-modules-5.4.0-2-marvell-di
mmc-core-modules-5.4.0-2-powerpc-di
mmc-core-modules-5.4.0-2-powerpc64-di
mmc-core-modules-5.4.0-2-riscv64-di
mmc-modules-5.4.0-2-4kc-malta-di
mmc-modules-5.4.0-2-5kc-malta-di
mmc-modules-5.4.0-2-686-di
mmc-modules-5.4.0-2-686-pae-di
mmc-modules-5.4.0-2-amd64-di
mmc-modules-5.4.0-2-arm64-di
mmc-modules-5.4.0-2-armmp-di
mmc-modules-5.4.0-2-marvell-di
mmc-modules-5.4.0-2-riscv64-di
mouse-modules-5.4.0-2-4kc-malta-di
mouse-modules-5.4.0-2-5kc-malta-di
mouse-modules-5.4.0-2-686-di
mouse-modules-5.4.0-2-686-pae-di
mouse-modules-5.4.0-2-alpha-generic-di
mouse-modules-5.4.0-2-amd64-di
mouse-modules-5.4.0-2-itanium-di
mouse-modules-5.4.0-2-marvell-di
mouse-modules-5.4.0-2-parisc-di
mouse-modules-5.4.0-2-parisc64-di
mouse-modules-5.4.0-2-powerpc-di
mouse-modules-5.4.0-2-powerpc64-di
mouse-modules-5.4.0-2-powerpc64le-di
mtd-core-modules-5.4.0-2-4kc-malta-di
mtd-core-modules-5.4.0-2-5kc-malta-di
mtd-core-modules-5.4.0-2-686-di
mtd-core-modules-5.4.0-2-686-pae-di
mtd-core-modules-5.4.0-2-amd64-di
mtd-core-modules-5.4.0-2-arm64-di
mtd-core-modules-5.4.0-2-itanium-di
mtd-core-modules-5.4.0-2-loongson-3-di
mtd-core-modules-5.4.0-2-marvell-di
mtd-core-modules-5.4.0-2-powerpc64-di
mtd-core-modules-5.4.0-2-powerpc64le-di
mtd-core-modules-5.4.0-2-riscv64-di
mtd-core-modules-5.4.0-2-s390x-di
mtd-modules-5.4.0-2-armmp-di
mtd-modules-5.4.0-2-marvell-di
mtd-modules-5.4.0-2-riscv64-di
multipath-modules-5.4.0-2-4kc-malta-di
multipath-modules-5.4.0-2-5kc-malta-di
multipath-modules-5.4.0-2-686-di
multipath-modules-5.4.0-2-686-pae-di
multipath-modules-5.4.0-2-alpha-generic-di
multipath-modules-5.4.0-2-amd64-di
multipath-modules-5.4.0-2-arm64-di
multipath-modules-5.4.0-2-armmp-di
multipath-modules-5.4.0-2-itanium-di
multipath-modules-5.4.0-2-loongson-3-di
multipath-modules-5.4.0-2-marvell-di
multipath-modules-5.4.0-2-mips32r6-di
multipath-modules-5.4.0-2-mips32r6el-di
multipath-modules-5.4.0-2-mips64r6-di
multipath-modules-5.4.0-2-mips64r6el-di
multipath-modules-5.4.0-2-octeon-di
multipath-modules-5.4.0-2-parisc-di
multipath-modules-5.4.0-2-parisc64-di
multipath-modules-5.4.0-2-powerpc-di
multipath-modules-5.4.0-2-powerpc64-di
multipath-modules-5.4.0-2-powerpc64le-di
multipath-modules-5.4.0-2-riscv64-di
multipath-modules-5.4.0-2-s390x-di
multipath-modules-5.4.0-2-sh7751r-di
multipath-modules-5.4.0-2-sh7785lcr-di
multipath-modules-5.4.0-2-sparc64-di
nbd-modules-5.4.0-2-4kc-malta-di
nbd-modules-5.4.0-2-5kc-malta-di
nbd-modules-5.4.0-2-686-di
nbd-modules-5.4.0-2-686-pae-di
nbd-modules-5.4.0-2-alpha-generic-di
nbd-modules-5.4.0-2-amd64-di
nbd-modules-5.4.0-2-arm64-di
nbd-modules-5.4.0-2-armmp-di
nbd-modules-5.4.0-2-itanium-di
nbd-modules-5.4.0-2-loongson-3-di
nbd-modules-5.4.0-2-m68k-di
nbd-modules-5.4.0-2-marvell-di
nbd-modules-5.4.0-2-mips32r6-di
nbd-modules-5.4.0-2-mips32r6el-di
nbd-modules-5.4.0-2-mips64r6-di
nbd-modules-5.4.0-2-mips64r6el-di
nbd-modules-5.4.0-2-octeon-di
nbd-modules-5.4.0-2-parisc-di
nbd-modules-5.4.0-2-parisc64-di
nbd-modules-5.4.0-2-powerpc-di
nbd-modules-5.4.0-2-powerpc64-di
nbd-modules-5.4.0-2-powerpc64le-di
nbd-modules-5.4.0-2-riscv64-di
nbd-modules-5.4.0-2-s390x-di
nbd-modules-5.4.0-2-sh7751r-di
nbd-modules-5.4.0-2-sh7785lcr-di
nbd-modules-5.4.0-2-sparc64-di
nfs-modules-5.4.0-2-loongson-3-di
nic-modules-5.4.0-2-4kc-malta-di
nic-modules-5.4.0-2-5kc-malta-di
nic-modules-5.4.0-2-686-di
nic-modules-5.4.0-2-686-pae-di
nic-modules-5.4.0-2-alpha-generic-di
nic-modules-5.4.0-2-amd64-di
nic-modules-5.4.0-2-arm64-di
nic-modules-5.4.0-2-armmp-di
nic-modules-5.4.0-2-itanium-di
nic-modules-5.4.0-2-loongson-3-di
nic-modules-5.4.0-2-m68k-di
nic-modules-5.4.0-2-marvell-di
nic-modules-5.4.0-2-octeon-di
nic-modules-5.4.0-2-parisc-di
nic-modules-5.4.0-2-parisc64-di
nic-modules-5.4.0-2-powerpc-di
nic-modules-5.4.0-2-powerpc64-di
nic-modules-5.4.0-2-powerpc64le-di
nic-modules-5.4.0-2-riscv64-di
nic-modules-5.4.0-2-s390x-di
nic-modules-5.4.0-2-sh7751r-di
nic-modules-5.4.0-2-sh7785lcr-di
nic-modules-5.4.0-2-sparc64-di
nic-pcmcia-modules-5.4.0-2-686-di
nic-pcmcia-modules-5.4.0-2-686-pae-di
nic-pcmcia-modules-5.4.0-2-alpha-generic-di
nic-pcmcia-modules-5.4.0-2-amd64-di
nic-pcmcia-modules-5.4.0-2-powerpc-di
nic-pcmcia-modules-5.4.0-2-powerpc64-di
nic-shared-modules-5.4.0-2-4kc-malta-di
nic-shared-modules-5.4.0-2-5kc-malta-di
nic-shared-modules-5.4.0-2-686-di
nic-shared-modules-5.4.0-2-686-pae-di
nic-shared-modules-5.4.0-2-alpha-generic-di
nic-shared-modules-5.4.0-2-amd64-di
nic-shared-modules-5.4.0-2-arm64-di
nic-shared-modules-5.4.0-2-armmp-di
nic-shared-modules-5.4.0-2-itanium-di
nic-shared-modules-5.4.0-2-loongson-3-di
nic-shared-modules-5.4.0-2-m68k-di
nic-shared-modules-5.4.0-2-marvell-di
nic-shared-modules-5.4.0-2-mips32r6-di
nic-shared-modules-5.4.0-2-mips32r6el-di
nic-shared-modules-5.4.0-2-mips64r6-di
nic-shared-modules-5.4.0-2-mips64r6el-di
nic-shared-modules-5.4.0-2-octeon-di
nic-shared-modules-5.4.0-2-parisc-di
nic-shared-modules-5.4.0-2-parisc64-di
nic-shared-modules-5.4.0-2-powerpc-di
nic-shared-modules-5.4.0-2-powerpc64-di
nic-shared-modules-5.4.0-2-powerpc64le-di
nic-shared-modules-5.4.0-2-riscv64-di
nic-shared-modules-5.4.0-2-sh7751r-di
nic-shared-modules-5.4.0-2-sh7785lcr-di
nic-shared-modules-5.4.0-2-sparc64-di
nic-usb-modules-5.4.0-2-4kc-malta-di
nic-usb-modules-5.4.0-2-5kc-malta-di
nic-usb-modules-5.4.0-2-686-di
nic-usb-modules-5.4.0-2-686-pae-di
nic-usb-modules-5.4.0-2-alpha-generic-di
nic-usb-modules-5.4.0-2-amd64-di
nic-usb-modules-5.4.0-2-arm64-di
nic-usb-modules-5.4.0-2-armmp-di
nic-usb-modules-5.4.0-2-itanium-di
nic-usb-modules-5.4.0-2-loongson-3-di
nic-usb-modules-5.4.0-2-marvell-di
nic-usb-modules-5.4.0-2-octeon-di
nic-usb-modules-5.4.0-2-parisc-di
nic-usb-modules-5.4.0-2-parisc64-di
nic-usb-modules-5.4.0-2-powerpc-di
nic-usb-modules-5.4.0-2-powerpc64-di
nic-usb-modules-5.4.0-2-powerpc64le-di
nic-usb-modules-5.4.0-2-riscv64-di
nic-usb-modules-5.4.0-2-sh7751r-di
nic-usb-modules-5.4.0-2-sh7785lcr-di
nic-usb-modules-5.4.0-2-sparc64-di
nic-wireless-modules-5.4.0-2-4kc-malta-di
nic-wireless-modules-5.4.0-2-5kc-malta-di
nic-wireless-modules-5.4.0-2-686-di
nic-wireless-modules-5.4.0-2-686-pae-di
nic-wireless-modules-5.4.0-2-alpha-generic-di
nic-wireless-modules-5.4.0-2-amd64-di
nic-wireless-modules-5.4.0-2-arm64-di
nic-wireless-modules-5.4.0-2-armmp-di
nic-wireless-modules-5.4.0-2-loongson-3-di
nic-wireless-modules-5.4.0-2-octeon-di
nic-wireless-modules-5.4.0-2-powerpc-di
nic-wireless-modules-5.4.0-2-powerpc64-di
nic-wireless-modules-5.4.0-2-powerpc64le-di
nic-wireless-modules-5.4.0-2-riscv64-di
pata-modules-5.4.0-2-4kc-malta-di
pata-modules-5.4.0-2-5kc-malta-di
pata-modules-5.4.0-2-686-di
pata-modules-5.4.0-2-686-pae-di
pata-modules-5.4.0-2-alpha-generic-di
pata-modules-5.4.0-2-amd64-di
pata-modules-5.4.0-2-armmp-di
pata-modules-5.4.0-2-itanium-di
pata-modules-5.4.0-2-loongson-3-di
pata-modules-5.4.0-2-m68k-di
pata-modules-5.4.0-2-octeon-di
pata-modules-5.4.0-2-parisc-di
pata-modules-5.4.0-2-parisc64-di
pata-modules-5.4.0-2-powerpc-di
pata-modules-5.4.0-2-powerpc64-di
pata-modules-5.4.0-2-riscv64-di
pata-modules-5.4.0-2-sh7751r-di
pata-modules-5.4.0-2-sh7785lcr-di
pata-modules-5.4.0-2-sparc64-di
pcmcia-modules-5.4.0-2-686-di
pcmcia-modules-5.4.0-2-686-pae-di
pcmcia-modules-5.4.0-2-alpha-generic-di
pcmcia-modules-5.4.0-2-amd64-di
pcmcia-modules-5.4.0-2-itanium-di
pcmcia-modules-5.4.0-2-powerpc-di
pcmcia-modules-5.4.0-2-powerpc64-di
pcmcia-storage-modules-5.4.0-2-686-di
pcmcia-storage-modules-5.4.0-2-686-pae-di
pcmcia-storage-modules-5.4.0-2-amd64-di
pcmcia-storage-modules-5.4.0-2-powerpc-di
pcmcia-storage-modules-5.4.0-2-powerpc64-di
ppp-modules-5.4.0-2-4kc-malta-di
ppp-modules-5.4.0-2-5kc-malta-di
ppp-modules-5.4.0-2-686-di
ppp-modules-5.4.0-2-686-pae-di
ppp-modules-5.4.0-2-alpha-generic-di
ppp-modules-5.4.0-2-amd64-di
ppp-modules-5.4.0-2-arm64-di
ppp-modules-5.4.0-2-armmp-di
ppp-modules-5.4.0-2-itanium-di
ppp-modules-5.4.0-2-loongson-3-di
ppp-modules-5.4.0-2-m68k-di
ppp-modules-5.4.0-2-marvell-di
ppp-modules-5.4.0-2-octeon-di
ppp-modules-5.4.0-2-parisc-di
ppp-modules-5.4.0-2-parisc64-di
ppp-modules-5.4.0-2-powerpc-di
ppp-modules-5.4.0-2-powerpc64-di
ppp-modules-5.4.0-2-powerpc64le-di
ppp-modules-5.4.0-2-riscv64-di
ppp-modules-5.4.0-2-sh7751r-di
ppp-modules-5.4.0-2-sh7785lcr-di
ppp-modules-5.4.0-2-sparc64-di
rfkill-modules-5.4.0-2-686-di
rfkill-modules-5.4.0-2-686-pae-di
rfkill-modules-5.4.0-2-amd64-di
rtc-modules-5.4.0-2-octeon-di
sata-modules-5.4.0-2-4kc-malta-di
sata-modules-5.4.0-2-5kc-malta-di
sata-modules-5.4.0-2-686-di
sata-modules-5.4.0-2-686-pae-di
sata-modules-5.4.0-2-alpha-generic-di
sata-modules-5.4.0-2-amd64-di
sata-modules-5.4.0-2-arm64-di
sata-modules-5.4.0-2-armmp-di
sata-modules-5.4.0-2-itanium-di
sata-modules-5.4.0-2-loongson-3-di
sata-modules-5.4.0-2-marvell-di
sata-modules-5.4.0-2-octeon-di
sata-modules-5.4.0-2-parisc-di
sata-modules-5.4.0-2-parisc64-di
sata-modules-5.4.0-2-powerpc-di
sata-modules-5.4.0-2-powerpc64-di
sata-modules-5.4.0-2-powerpc64le-di
sata-modules-5.4.0-2-riscv64-di
sata-modules-5.4.0-2-sh7751r-di
sata-modules-5.4.0-2-sh7785lcr-di
sata-modules-5.4.0-2-sparc64-di
scsi-core-modules-5.4.0-2-4kc-malta-di
scsi-core-modules-5.4.0-2-5kc-malta-di
scsi-core-modules-5.4.0-2-686-di
scsi-core-modules-5.4.0-2-686-pae-di
scsi-core-modules-5.4.0-2-alpha-generic-di
scsi-core-modules-5.4.0-2-amd64-di
scsi-core-modules-5.4.0-2-arm64-di
scsi-core-modules-5.4.0-2-armmp-di
scsi-core-modules-5.4.0-2-itanium-di
scsi-core-modules-5.4.0-2-loongson-3-di
scsi-core-modules-5.4.0-2-m68k-di
scsi-core-modules-5.4.0-2-marvell-di
scsi-core-modules-5.4.0-2-octeon-di
scsi-core-modules-5.4.0-2-parisc-di
scsi-core-modules-5.4.0-2-parisc64-di
scsi-core-modules-5.4.0-2-powerpc-di
scsi-core-modules-5.4.0-2-powerpc64-di
scsi-core-modules-5.4.0-2-powerpc64le-di
scsi-core-modules-5.4.0-2-riscv64-di
scsi-core-modules-5.4.0-2-s390x-di
scsi-core-modules-5.4.0-2-sparc64-di
scsi-modules-5.4.0-2-4kc-malta-di
scsi-modules-5.4.0-2-5kc-malta-di
scsi-modules-5.4.0-2-686-di
scsi-modules-5.4.0-2-686-pae-di
scsi-modules-5.4.0-2-alpha-generic-di
scsi-modules-5.4.0-2-amd64-di
scsi-modules-5.4.0-2-arm64-di
scsi-modules-5.4.0-2-armmp-di
scsi-modules-5.4.0-2-itanium-di
scsi-modules-5.4.0-2-loongson-3-di
scsi-modules-5.4.0-2-m68k-di
scsi-modules-5.4.0-2-octeon-di
scsi-modules-5.4.0-2-parisc-di
scsi-modules-5.4.0-2-parisc64-di
scsi-modules-5.4.0-2-powerpc-di
scsi-modules-5.4.0-2-powerpc64-di
scsi-modules-5.4.0-2-powerpc64le-di
scsi-modules-5.4.0-2-riscv64-di
scsi-modules-5.4.0-2-s390x-di
scsi-modules-5.4.0-2-sparc64-di
scsi-nic-modules-5.4.0-2-4kc-malta-di
scsi-nic-modules-5.4.0-2-5kc-malta-di
scsi-nic-modules-5.4.0-2-686-di
scsi-nic-modules-5.4.0-2-686-pae-di
scsi-nic-modules-5.4.0-2-alpha-generic-di
scsi-nic-modules-5.4.0-2-amd64-di
scsi-nic-modules-5.4.0-2-arm64-di
scsi-nic-modules-5.4.0-2-armmp-di
scsi-nic-modules-5.4.0-2-itanium-di
scsi-nic-modules-5.4.0-2-loongson-3-di
scsi-nic-modules-5.4.0-2-octeon-di
scsi-nic-modules-5.4.0-2-powerpc-di
scsi-nic-modules-5.4.0-2-powerpc64-di
scsi-nic-modules-5.4.0-2-powerpc64le-di
scsi-nic-modules-5.4.0-2-riscv64-di
serial-modules-5.4.0-2-686-di
serial-modules-5.4.0-2-686-pae-di
serial-modules-5.4.0-2-alpha-generic-di
serial-modules-5.4.0-2-amd64-di
serial-modules-5.4.0-2-itanium-di
serial-modules-5.4.0-2-parisc-di
serial-modules-5.4.0-2-parisc64-di
serial-modules-5.4.0-2-powerpc-di
serial-modules-5.4.0-2-powerpc64-di
serial-modules-5.4.0-2-powerpc64le-di
sound-modules-5.4.0-2-4kc-malta-di
sound-modules-5.4.0-2-5kc-malta-di
sound-modules-5.4.0-2-686-di
sound-modules-5.4.0-2-686-pae-di
sound-modules-5.4.0-2-amd64-di
sound-modules-5.4.0-2-loongson-3-di
sound-modules-5.4.0-2-octeon-di
sound-modules-5.4.0-2-sh7751r-di
sound-modules-5.4.0-2-sh7785lcr-di
speakup-modules-5.4.0-2-686-di
speakup-modules-5.4.0-2-686-pae-di
speakup-modules-5.4.0-2-amd64-di
speakup-modules-5.4.0-2-loongson-3-di
speakup-modules-5.4.0-2-sh7751r-di
speakup-modules-5.4.0-2-sh7785lcr-di
squashfs-modules-5.4.0-2-4kc-malta-di
squashfs-modules-5.4.0-2-5kc-malta-di
squashfs-modules-5.4.0-2-686-di
squashfs-modules-5.4.0-2-686-pae-di
squashfs-modules-5.4.0-2-alpha-generic-di
squashfs-modules-5.4.0-2-amd64-di
squashfs-modules-5.4.0-2-arm64-di
squashfs-modules-5.4.0-2-armmp-di
squashfs-modules-5.4.0-2-itanium-di
squashfs-modules-5.4.0-2-loongson-3-di
squashfs-modules-5.4.0-2-m68k-di
squashfs-modules-5.4.0-2-marvell-di
squashfs-modules-5.4.0-2-mips32r6-di
squashfs-modules-5.4.0-2-mips32r6el-di
squashfs-modules-5.4.0-2-mips64r6-di
squashfs-modules-5.4.0-2-mips64r6el-di
squashfs-modules-5.4.0-2-octeon-di
squashfs-modules-5.4.0-2-parisc-di
squashfs-modules-5.4.0-2-parisc64-di
squashfs-modules-5.4.0-2-powerpc-di
squashfs-modules-5.4.0-2-powerpc64-di
squashfs-modules-5.4.0-2-powerpc64le-di
squashfs-modules-5.4.0-2-riscv64-di
squashfs-modules-5.4.0-2-sh7751r-di
squashfs-modules-5.4.0-2-sh7785lcr-di
squashfs-modules-5.4.0-2-sparc64-di
srm-modules-5.4.0-2-alpha-generic-di
udf-modules-5.4.0-2-4kc-malta-di
udf-modules-5.4.0-2-5kc-malta-di
udf-modules-5.4.0-2-686-di
udf-modules-5.4.0-2-686-pae-di
udf-modules-5.4.0-2-amd64-di
udf-modules-5.4.0-2-arm64-di
udf-modules-5.4.0-2-armmp-di
udf-modules-5.4.0-2-itanium-di
udf-modules-5.4.0-2-loongson-3-di
udf-modules-5.4.0-2-m68k-di
udf-modules-5.4.0-2-marvell-di
udf-modules-5.4.0-2-mips32r6-di
udf-modules-5.4.0-2-mips32r6el-di
udf-modules-5.4.0-2-mips64r6-di
udf-modules-5.4.0-2-mips64r6el-di
udf-modules-5.4.0-2-octeon-di
udf-modules-5.4.0-2-powerpc-di
udf-modules-5.4.0-2-powerpc64-di
udf-modules-5.4.0-2-powerpc64le-di
udf-modules-5.4.0-2-riscv64-di
udf-modules-5.4.0-2-s390x-di
udf-modules-5.4.0-2-sh7751r-di
udf-modules-5.4.0-2-sh7785lcr-di
udf-modules-5.4.0-2-sparc64-di
ufs-modules-5.4.0-2-sparc64-di
uinput-modules-5.4.0-2-686-di
uinput-modules-5.4.0-2-686-pae-di
uinput-modules-5.4.0-2-amd64-di
uinput-modules-5.4.0-2-arm64-di
uinput-modules-5.4.0-2-armmp-di
uinput-modules-5.4.0-2-itanium-di
uinput-modules-5.4.0-2-marvell-di
uinput-modules-5.4.0-2-powerpc-di
uinput-modules-5.4.0-2-powerpc64-di
uinput-modules-5.4.0-2-powerpc64le-di
usb-modules-5.4.0-2-4kc-malta-di
usb-modules-5.4.0-2-5kc-malta-di
usb-modules-5.4.0-2-686-di
usb-modules-5.4.0-2-686-pae-di
usb-modules-5.4.0-2-alpha-generic-di
usb-modules-5.4.0-2-amd64-di
usb-modules-5.4.0-2-arm64-di
usb-modules-5.4.0-2-armmp-di
usb-modules-5.4.0-2-itanium-di
usb-modules-5.4.0-2-loongson-3-di
usb-modules-5.4.0-2-marvell-di
usb-modules-5.4.0-2-octeon-di
usb-modules-5.4.0-2-parisc-di
usb-modules-5.4.0-2-parisc64-di
usb-modules-5.4.0-2-powerpc-di
usb-modules-5.4.0-2-powerpc64-di
usb-modules-5.4.0-2-powerpc64le-di
usb-modules-5.4.0-2-riscv64-di
usb-modules-5.4.0-2-sparc64-di
usb-serial-modules-5.4.0-2-4kc-malta-di
usb-serial-modules-5.4.0-2-5kc-malta-di
usb-serial-modules-5.4.0-2-686-di
usb-serial-modules-5.4.0-2-686-pae-di
usb-serial-modules-5.4.0-2-alpha-generic-di
usb-serial-modules-5.4.0-2-amd64-di
usb-serial-modules-5.4.0-2-arm64-di
usb-serial-modules-5.4.0-2-armmp-di
usb-serial-modules-5.4.0-2-itanium-di
usb-serial-modules-5.4.0-2-loongson-3-di
usb-serial-modules-5.4.0-2-marvell-di
usb-serial-modules-5.4.0-2-octeon-di
usb-serial-modules-5.4.0-2-parisc-di
usb-serial-modules-5.4.0-2-parisc64-di
usb-serial-modules-5.4.0-2-powerpc-di
usb-serial-modules-5.4.0-2-powerpc64-di
usb-serial-modules-5.4.0-2-powerpc64le-di
usb-serial-modules-5.4.0-2-riscv64-di
usb-serial-modules-5.4.0-2-sh7751r-di
usb-serial-modules-5.4.0-2-sh7785lcr-di
usb-serial-modules-5.4.0-2-sparc64-di
usb-storage-modules-5.4.0-2-4kc-malta-di
usb-storage-modules-5.4.0-2-5kc-malta-di
usb-storage-modules-5.4.0-2-686-di
usb-storage-modules-5.4.0-2-686-pae-di
usb-storage-modules-5.4.0-2-alpha-generic-di
usb-storage-modules-5.4.0-2-amd64-di
usb-storage-modules-5.4.0-2-arm64-di
usb-storage-modules-5.4.0-2-armmp-di
usb-storage-modules-5.4.0-2-itanium-di
usb-storage-modules-5.4.0-2-loongson-3-di
usb-storage-modules-5.4.0-2-marvell-di
usb-storage-modules-5.4.0-2-octeon-di
usb-storage-modules-5.4.0-2-parisc-di
usb-storage-modules-5.4.0-2-parisc64-di
usb-storage-modules-5.4.0-2-powerpc-di
usb-storage-modules-5.4.0-2-powerpc64-di
usb-storage-modules-5.4.0-2-powerpc64le-di
usb-storage-modules-5.4.0-2-riscv64-di
usb-storage-modules-5.4.0-2-sh7751r-di
usb-storage-modules-5.4.0-2-sparc64-di
usbip (4 bugs: 0, 4, 0, 0)
xfs-modules-5.4.0-2-4kc-malta-di
xfs-modules-5.4.0-2-5kc-malta-di
xfs-modules-5.4.0-2-686-di
xfs-modules-5.4.0-2-686-pae-di
xfs-modules-5.4.0-2-alpha-generic-di
xfs-modules-5.4.0-2-amd64-di
xfs-modules-5.4.0-2-arm64-di
xfs-modules-5.4.0-2-itanium-di
xfs-modules-5.4.0-2-loongson-3-di
xfs-modules-5.4.0-2-mips32r6-di
xfs-modules-5.4.0-2-mips32r6el-di
xfs-modules-5.4.0-2-mips64r6-di
xfs-modules-5.4.0-2-mips64r6el-di
xfs-modules-5.4.0-2-octeon-di
xfs-modules-5.4.0-2-parisc-di
xfs-modules-5.4.0-2-parisc64-di
xfs-modules-5.4.0-2-powerpc-di
xfs-modules-5.4.0-2-powerpc64-di
xfs-modules-5.4.0-2-powerpc64le-di
xfs-modules-5.4.0-2-s390x-di
xfs-modules-5.4.0-2-sh7751r-di
xfs-modules-5.4.0-2-sh7785lcr-di
xfs-modules-5.4.0-2-sparc64-di
zlib-modules-5.4.0-2-4kc-malta-di
zlib-modules-5.4.0-2-5kc-malta-di
zlib-modules-5.4.0-2-alpha-generic-di
zlib-modules-5.4.0-2-armmp-di
zlib-modules-5.4.0-2-loongson-3-di
zlib-modules-5.4.0-2-m68k-di
zlib-modules-5.4.0-2-marvell-di
zlib-modules-5.4.0-2-mips32r6-di
zlib-modules-5.4.0-2-mips32r6el-di
zlib-modules-5.4.0-2-mips64r6-di
zlib-modules-5.4.0-2-mips64r6el-di
zlib-modules-5.4.0-2-octeon-di
zlib-modules-5.4.0-2-parisc-di
zlib-modules-5.4.0-2-parisc64-di
zlib-modules-5.4.0-2-powerpc-di
zlib-modules-5.4.0-2-riscv64-di
zlib-modules-5.4.0-2-s390x-di
zlib-modules-5.4.0-2-sh7751r-di
zlib-modules-5.4.0-2-sh7785lcr-di
zlib-modules-5.4.0-2-sparc64-di

action needed

A new upstream version is available: 5.4.12 high

A new upstream version 5.4.12 is available, you should consider packaging it.

Created: 2020-01-13 Last update: 2020-01-17 11:05

114 security issues in buster high

There are 114 open security issues in buster.

112 important issues:

CVE-2019-15099: drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.
CVE-2019-15098: drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.
CVE-2019-19965: In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5.
CVE-2019-5108: An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to different denial-of-service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby APs of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.
CVE-2019-19770: In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file).
CVE-2019-18683: An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free.
CVE-2019-19082: Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption). This affects the dce120_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, the dce100_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, and the dce112_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c, aka CID-104c307147ad.
CVE-2019-19080: Four memory leaks in the nfp_flower_spawn_phy_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allow attackers to cause a denial of service (memory consumption), aka CID-8572cea1461a.
CVE-2019-19252: vcs_write in drivers/tty/vt/vc_screen.c in the Linux kernel through 5.3.13 does not prevent write access to vcsu devices, aka CID-0c9acb1af77a.
CVE-2019-17666: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow.
CVE-2019-19318: In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer,
CVE-2019-19319: In the Linux kernel 5.0.21, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call.
CVE-2019-19227: In the AppleTalk subsystem in the Linux kernel before 5.1, there is a potential NULL pointer dereference because register_snap_client may return NULL. This will lead to denial of service in net/appletalk/aarp.c and net/appletalk/ddp.c, as demonstrated by unregister_snap_client, aka CID-9804501fa122.
CVE-2019-19767: The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163.
CVE-2019-19769: In the Linux kernel 5.3.10, there is a use-after-free (read) in the perf_trace_lock_acquire function (related to include/trace/events/lock.h).
CVE-2019-19768: In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).
CVE-2019-15918: An issue was discovered in the Linux kernel before 5.0.10. SMB2_negotiate in fs/cifs/smb2pdu.c has an out-of-bounds read because data structures are incompletely updated after a change from smb30 to smb21.
CVE-2019-18786: In the Linux kernel through 5.3.8, f->fmt.sdr.reserved is uninitialized in rcar_drif_g_fmt_sdr_cap in drivers/media/platform/rcar_drif.c, which could cause a memory disclosure problem.
CVE-2019-17075: An issue was discovered in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2. The cxgb4 driver is directly calling dma_map_single (a DMA function) from a stack variable. This could allow an attacker to trigger a Denial of Service, exploitable if this driver is used on an architecture for which this stack/DMA interaction has security relevance.
CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2019-20096: In the Linux kernel before 5.1, there is a memory leak in __feat_register_sp() in net/dccp/feat.c, which may cause denial of service, aka CID-1d3ff0950e2b.
CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP.
CVE-2019-14897: A stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA.
CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service (system crash) or possibly execute arbitrary code.
CVE-2019-19947: In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c driver, aka CID-da2311a6385c.
CVE-2019-19078: A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-b8d17e7d93d2.
CVE-2019-19447: In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c.
CVE-2019-19448: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
CVE-2019-19449: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).
CVE-2019-9445: In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-19332: An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system, resulting in a denial of service.
CVE-2019-19081: A memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allows attackers to cause a denial of service (memory consumption), aka CID-8ce39eb5a67a.
CVE-2019-17053: ieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-e69dbd4619e7.
CVE-2019-17052: ax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768.
CVE-2019-17056: llcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176.
CVE-2019-17055: base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21.
CVE-2019-17054: atalk_create in net/appletalk/ddp.c in the AF_APPLETALK network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-6cc03e8aa36c.
CVE-2019-15217: An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver.
CVE-2019-19922: kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of service against non-cpu-bound applications by generating a workload that triggers unwanted slice expiration, aka CID-de53fd7aedb1. (In other words, although this slice expiration would typically be seen with benign workloads, it is possible that an attacker could calculate how many stray requests are required to force an entire Kubernetes cluster into a low-performance state caused by slice expiration, and ensure that a DDoS attack sent that number of stray requests. An attack does not affect the stability of the kernel; it only causes mismanagement of application execution.)
CVE-2019-19927: In the Linux kernel 5.0.0-rc7 (as distributed in ubuntu/linux.git on kernel.ubuntu.com), mounting a crafted f2fs filesystem image and performing some operations can lead to slab-out-of-bounds read access in ttm_put_pages in drivers/gpu/drm/ttm/ttm_page_alloc.c. This is related to the vmwgfx or ttm module.
CVE-2019-19045: A memory leak in the mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7.
CVE-2019-14615:
CVE-2019-19048: A memory leak in the crypto_reportstat() function in drivers/virt/vboxguest/vboxguest_utils.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering copy_form_user() failures, aka CID-e0b0cb938864.
CVE-2019-19462: relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.
CVE-2019-18885: fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devices is mishandled within find_device, aka CID-09ba3bc9dd15.
CVE-2019-19057: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-d10dcb615c8e.
CVE-2019-19056: A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-db8fd2cde932.
CVE-2019-19051: A memory leak in the i2400m_op_rfkill_sw_toggle() function in drivers/net/wimax/i2400m/op-rfkill.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-6f3ef5c25cc7.
CVE-2019-19050: A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.
CVE-2019-19052: A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.
CVE-2019-19059: Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering iwl_pcie_init_fw_sec() or dma_alloc_coherent() failures, aka CID-0f4f199443fa.
CVE-2019-19058: A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering alloc_page() failures, aka CID-b4b814fec1a5.
CVE-2018-17977: The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
CVE-2017-0630: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVE-2019-19813: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.
CVE-2019-19816: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandled.
CVE-2019-19062: A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures, aka CID-ffdde5932042.
CVE-2019-19065: A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering rhashtable_init() failures, aka CID-34b3be18a04e.
CVE-2019-19066: A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering bfa_port_get_stats() failures, aka CID-0e62395da2bd.
CVE-2019-19068: A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-a2cdd07488e6.
CVE-2019-3874: The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
CVE-2019-15031: In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c.
CVE-2018-18653: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVE-2019-19079: A memory leak in the qrtr_tun_write_iter() function in net/qrtr/tun.c in the Linux kernel before 5.3 allows attackers to cause a denial of service (memory consumption), aka CID-a21b7f0cff19.
CVE-2019-19077: A memory leak in the bnxt_re_create_srq() function in drivers/infiniband/hw/bnxt_re/ib_verbs.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering copy to udata failures, aka CID-4a9d46a9fe14.
CVE-2019-19074: A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-728c1e2a05e4.
CVE-2019-19073: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function, aka CID-853acf7caf10.
CVE-2019-19072: A memory leak in the predicate_parse() function in kernel/trace/trace_events_filter.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-96c5c6e6a5b6.
CVE-2019-19071: A memory leak in the rsi_send_beacon() function in drivers/net/wireless/rsi/rsi_91x_mgmt.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering rsi_prepare_beacon() failures, aka CID-d563131ef23c.
CVE-2019-18675: The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.
CVE-2020-0009: In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932
CVE-2020-7053: In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a use-after-free (write) in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c, aka CID-7dc40713618c. This is related to i915_gem_context_destroy_ioctl in drivers/gpu/drm/i915/i915_gem_context.c.
CVE-2016-10723: ** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
CVE-2019-14816: There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVE-2019-14814: There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVE-2019-14815: A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.
CVE-2019-19815: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause a NULL pointer dereference in f2fs_recover_fsync_data in fs/f2fs/recovery.c. This is related to F2FS_P_SB in fs/f2fs/f2fs.h.
CVE-2019-19814: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an array is bounded by the number of dirty types (8) but the array index can exceed this.
CVE-2019-15030: In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check.
CVE-2019-18282:
CVE-2019-18660: The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c.
CVE-2019-19537: In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka CID-303911cfc5b9. This affects drivers/usb/core/file.c.
CVE-2019-19534: In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver, aka CID-f7a1337f0d29.
CVE-2019-19532: In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka CID-d9d4b1e46d95. This affects drivers/hid/hid-axff.c, drivers/hid/hid-dr.c, drivers/hid/hid-emsff.c, drivers/hid/hid-gaff.c, drivers/hid/hid-holtekff.c, drivers/hid/hid-lg2ff.c, drivers/hid/hid-lg3ff.c, drivers/hid/hid-lg4ff.c, drivers/hid/hid-lgff.c, drivers/hid/hid-logitech-hidpp.c, drivers/hid/hid-microsoft.c, drivers/hid/hid-sony.c, drivers/hid/hid-tmff.c, and drivers/hid/hid-zpff.c.
CVE-2019-19530: In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef.
CVE-2016-8660: The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation."
CVE-2019-19037: ext4_empty_dir in fs/ext4/namei.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because ext4_read_dirblock(inode,0,DIRENT_HTREE) can be zero.
CVE-2019-15213: An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver.
CVE-2019-19529: In the Linux kernel before 5.3.11, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver, aka CID-4d6636498c41.
CVE-2019-19528: In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka CID-edc4746f253d.
CVE-2019-19525: In the Linux kernel before 5.3.6, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver, aka CID-7fd25e6fc035.
CVE-2019-19524: In the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver, aka CID-fa3a5a1880c9.
CVE-2019-19527: In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e.
CVE-2019-19526: In the Linux kernel before 5.3.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver, aka CID-6af3aa57a098.
CVE-2019-19523: In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79.
CVE-2019-19039: ** DISPUTED ** __btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: The BTRFS development team disputes this issues as not being a vulnerability because ?1) The kernel provide facilities to restrict access to dmesg - dmesg_restrict=1 sysctl option. So it's really up to the system administrator to judge whether dmesg access shall be disallowed or not. 2) WARN/WARN_ON are widely used macros in the linux kernel. If this CVE is considered valid this would mean there are literally thousands CVE lurking in the kernel - something which clearly is not the case.?
CVE-2019-16714: In the Linux kernel before 5.2.14, rds6_inc_info_copy in net/rds/recv.c allows attackers to obtain sensitive information from kernel stack memory because tos and flags fields are not initialized.
CVE-2019-16089: An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value.
CVE-2019-19533: In the Linux kernel before 5.3.4, there is an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver, aka CID-a10feaf8c464.
CVE-2019-18814: An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/apparmor/audit.c.
CVE-2019-19036: btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero.
CVE-2019-12881: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVE-2019-15291: An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver.
CVE-2019-10220: Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.
CVE-2019-18809: A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559.
CVE-2019-17133: In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.
CVE-2019-19378: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c.
CVE-2019-19377: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.
CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of variable elements in a beacon head, leading to a buffer overflow.
CVE-2019-14901: A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system.
CVE-2019-15505: drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be remote via usbip or usbredir).
CVE-2019-15504: drivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic (which may be remote via usbip or usbredir).

2 issues skipped by the security teams:

CVE-2018-12928: In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.
CVE-2013-7445: The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.

Please fix them.

Created: 2017-06-18 Last update: 2020-01-17 06:34

42 security issues in bullseye high

There are 42 open security issues in bullseye.

42 important issues:

CVE-2019-19965: In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5.
CVE-2019-19770: In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file).
CVE-2019-19252: vcs_write in drivers/tty/vt/vc_screen.c in the Linux kernel through 5.3.13 does not prevent write access to vcsu devices, aka CID-0c9acb1af77a.
CVE-2019-19769: In the Linux kernel 5.3.10, there is a use-after-free (read) in the perf_trace_lock_acquire function (related to include/trace/events/lock.h).
CVE-2019-19768: In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).
CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP.
CVE-2019-14897: A stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA.
CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service (system crash) or possibly execute arbitrary code.
CVE-2019-19078: A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-b8d17e7d93d2.
CVE-2018-12928: In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.
CVE-2019-19448: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
CVE-2019-19449: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).
CVE-2019-19043: A memory leak in the i40e_setup_macvlans() function in drivers/net/ethernet/intel/i40e/i40e_main.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering i40e_setup_channel() failures, aka CID-27d461333459.
CVE-2019-14615:
CVE-2019-19462: relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.
CVE-2019-19056: A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-db8fd2cde932.
CVE-2019-19050: A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.
CVE-2019-19053: A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering copy_from_iter_full() failures, aka CID-bbe692e349e2.
CVE-2018-17977: The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
CVE-2017-0630: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVE-2019-19813: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.
CVE-2019-19816: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandled.
CVE-2019-19066: A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering bfa_port_get_stats() failures, aka CID-0e62395da2bd.
CVE-2019-19068: A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-a2cdd07488e6.
CVE-2018-18653: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVE-2019-18675: The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.
CVE-2020-0009: In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932
CVE-2016-10723: ** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
CVE-2019-19814: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an array is bounded by the number of dirty types (8) but the array index can exceed this.
CVE-2013-7445: The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
CVE-2016-8660: The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation."
CVE-2019-15213: An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver.
CVE-2019-19039: ** DISPUTED ** __btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: The BTRFS development team disputes this issues as not being a vulnerability because ?1) The kernel provide facilities to restrict access to dmesg - dmesg_restrict=1 sysctl option. So it's really up to the system administrator to judge whether dmesg access shall be disallowed or not. 2) WARN/WARN_ON are widely used macros in the linux kernel. If this CVE is considered valid this would mean there are literally thousands CVE lurking in the kernel - something which clearly is not the case.?
CVE-2019-16089: An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value.
CVE-2019-18814: An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/apparmor/audit.c.
CVE-2019-19036: btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero.
CVE-2019-12881: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVE-2019-18809: A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559.
CVE-2019-19378: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c.
CVE-2019-19377: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.
CVE-2019-14901: A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system.

Please fix them.

Created: 2019-07-07 Last update: 2020-01-17 06:34

42 security issues in sid high

There are 42 open security issues in sid.

42 important issues:

CVE-2019-19965: In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5.
CVE-2019-19770: In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file).
CVE-2019-19252: vcs_write in drivers/tty/vt/vc_screen.c in the Linux kernel through 5.3.13 does not prevent write access to vcsu devices, aka CID-0c9acb1af77a.
CVE-2019-19769: In the Linux kernel 5.3.10, there is a use-after-free (read) in the perf_trace_lock_acquire function (related to include/trace/events/lock.h).
CVE-2019-19768: In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).
CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP.
CVE-2019-14897: A stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA.
CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service (system crash) or possibly execute arbitrary code.
CVE-2019-19078: A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-b8d17e7d93d2.
CVE-2018-12928: In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.
CVE-2019-19448: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
CVE-2019-19449: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).
CVE-2019-19043: A memory leak in the i40e_setup_macvlans() function in drivers/net/ethernet/intel/i40e/i40e_main.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering i40e_setup_channel() failures, aka CID-27d461333459.
CVE-2019-14615:
CVE-2019-19462: relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.
CVE-2019-19056: A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-db8fd2cde932.
CVE-2019-19050: A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.
CVE-2019-19053: A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering copy_from_iter_full() failures, aka CID-bbe692e349e2.
CVE-2018-17977: The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
CVE-2017-0630: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVE-2019-19813: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.
CVE-2019-19816: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandled.
CVE-2019-19066: A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering bfa_port_get_stats() failures, aka CID-0e62395da2bd.
CVE-2019-19068: A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-a2cdd07488e6.
CVE-2018-18653: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVE-2019-18675: The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.
CVE-2020-0009: In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932
CVE-2016-10723: ** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
CVE-2019-19814: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an array is bounded by the number of dirty types (8) but the array index can exceed this.
CVE-2013-7445: The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
CVE-2016-8660: The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation."
CVE-2019-15213: An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver.
CVE-2019-19039: ** DISPUTED ** __btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: The BTRFS development team disputes this issues as not being a vulnerability because ?1) The kernel provide facilities to restrict access to dmesg - dmesg_restrict=1 sysctl option. So it's really up to the system administrator to judge whether dmesg access shall be disallowed or not. 2) WARN/WARN_ON are widely used macros in the linux kernel. If this CVE is considered valid this would mean there are literally thousands CVE lurking in the kernel - something which clearly is not the case.?
CVE-2019-16089: An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value.
CVE-2019-18814: An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/apparmor/audit.c.
CVE-2019-19036: btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero.
CVE-2019-12881: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVE-2019-18809: A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559.
CVE-2019-19378: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c.
CVE-2019-19377: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.
CVE-2019-14901: A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system.

Please fix them.

Created: 2015-07-12 Last update: 2020-01-17 06:34

129 security issues in jessie high

There are 129 open security issues in jessie.

94 important issues:

CVE-2019-15098: drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.
CVE-2019-19965: In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5.
CVE-2019-5108: An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to different denial-of-service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby APs of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.
CVE-2016-10906: An issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A use-after-free is caused by a race condition between the functions arc_emac_tx and arc_emac_tx_clean.
CVE-2019-19966: In the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service, aka CID-dea37a972655.
CVE-2019-19770: In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file).
CVE-2019-17666: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow.
CVE-2019-19318: In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer,
CVE-2019-19319: In the Linux kernel 5.0.21, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call.
CVE-2019-19227: In the AppleTalk subsystem in the Linux kernel before 5.1, there is a potential NULL pointer dereference because register_snap_client may return NULL. This will lead to denial of service in net/appletalk/aarp.c and net/appletalk/ddp.c, as demonstrated by unregister_snap_client, aka CID-9804501fa122.
CVE-2019-19767: The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163.
CVE-2019-19769: In the Linux kernel 5.3.10, there is a use-after-free (read) in the perf_trace_lock_acquire function (related to include/trace/events/lock.h).
CVE-2019-19768: In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).
CVE-2018-12930: ntfs_end_buffer_async_read in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.
CVE-2018-12931: ntfs_attr_find in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.
CVE-2017-13168: An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233.
CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP.
CVE-2019-14897: A stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA.
CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service (system crash) or possibly execute arbitrary code.
CVE-2019-19947: In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c driver, aka CID-da2311a6385c.
CVE-2017-5967: The time subsystem in the Linux kernel through 4.9.9, when CONFIG_TIMER_STATS is enabled, allows local users to discover real PID values (as distinguished from PID values inside a PID namespace) by reading the /proc/timer_list file, related to the print_timer function in kernel/time/timer_list.c and the __timer_stats_timer_set_start_info function in kernel/time/timer.c.
CVE-2018-12929: ntfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a use-after-free read and possibly cause a denial of service (kernel oops or panic) via a crafted ntfs filesystem.
CVE-2018-12928: In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.
CVE-2019-19447: In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c.
CVE-2019-19448: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
CVE-2019-19449: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).
CVE-2019-9445: In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-19332: An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system, resulting in a denial of service.
CVE-2019-17053: ieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-e69dbd4619e7.
CVE-2019-17052: ax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768.
CVE-2019-17056: llcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176.
CVE-2019-17055: base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21.
CVE-2019-17054: atalk_create in net/appletalk/ddp.c in the AF_APPLETALK network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-6cc03e8aa36c.
CVE-2019-15217: An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver.
CVE-2019-19922: kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of service against non-cpu-bound applications by generating a workload that triggers unwanted slice expiration, aka CID-de53fd7aedb1. (In other words, although this slice expiration would typically be seen with benign workloads, it is possible that an attacker could calculate how many stray requests are required to force an entire Kubernetes cluster into a low-performance state caused by slice expiration, and ensure that a DDoS attack sent that number of stray requests. An attack does not affect the stability of the kernel; it only causes mismanagement of application execution.)
CVE-2019-19927: In the Linux kernel 5.0.0-rc7 (as distributed in ubuntu/linux.git on kernel.ubuntu.com), mounting a crafted f2fs filesystem image and performing some operations can lead to slab-out-of-bounds read access in ttm_put_pages in drivers/gpu/drm/ttm/ttm_page_alloc.c. This is related to the vmwgfx or ttm module.
CVE-2019-2215: A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095
CVE-2019-14615:
CVE-2019-13648: In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c.
CVE-2019-18885: fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devices is mishandled within find_device, aka CID-09ba3bc9dd15.
CVE-2015-9289: In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23.
CVE-2019-19057: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-d10dcb615c8e.
CVE-2019-19056: A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-db8fd2cde932.
CVE-2019-19051: A memory leak in the i2400m_op_rfkill_sw_toggle() function in drivers/net/wimax/i2400m/op-rfkill.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-6f3ef5c25cc7.
CVE-2019-19052: A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.
CVE-2016-10764: In the Linux kernel before 4.9.6, there is an off by one in the drivers/mtd/spi-nor/cadence-quadspi.c cqspi_setup_flash() function. There are CQSPI_MAX_CHIPSELECT elements in the ->f_pdata array so the ">" should be ">=" instead.
CVE-2018-17977: The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
CVE-2017-0630: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVE-2019-19813: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.
CVE-2019-19816: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandled.
CVE-2017-9725: In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail.
CVE-2019-19062: A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures, aka CID-ffdde5932042.
CVE-2019-19066: A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering bfa_port_get_stats() failures, aka CID-0e62395da2bd.
CVE-2018-18653: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVE-2018-14611: An issue was discovered in the Linux kernel through 4.17.10. There is a use-after-free in try_merge_free_space() when mounting a crafted btrfs image, because of a lack of chunk type flag checks in btrfs_check_chunk_valid in fs/btrfs/volumes.c.
CVE-2018-14610: An issue was discovered in the Linux kernel through 4.17.10. There is out-of-bounds access in write_extent_buffer() when mounting and operating a crafted btrfs image, because of a lack of verification that each block group has a corresponding chunk at mount time, within btrfs_read_block_groups in fs/btrfs/extent-tree.c.
CVE-2018-14613: An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in io_ctl_map_page() when mounting and operating a crafted btrfs image, because of a lack of block group item validation in check_leaf_item in fs/btrfs/tree-checker.c.
CVE-2018-14612: An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in btrfs_root_node() when mounting a crafted btrfs image, because of a lack of chunk block group mapping validation in btrfs_read_block_groups in fs/btrfs/extent-tree.c, and a lack of empty-tree checks in check_leaf in fs/btrfs/tree-checker.c.
CVE-2019-19074: A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-728c1e2a05e4.
CVE-2019-19073: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function, aka CID-853acf7caf10.
CVE-2019-18675: The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.
CVE-2020-0009: In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932
CVE-2016-10723: ** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
CVE-2019-19815: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause a NULL pointer dereference in f2fs_recover_fsync_data in fs/f2fs/recovery.c. This is related to F2FS_P_SB in fs/f2fs/f2fs.h.
CVE-2019-19814: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an array is bounded by the number of dirty types (8) but the array index can exceed this.
CVE-2019-18282:
CVE-2019-19536: In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver, aka CID-ead16e53c2f0.
CVE-2019-19537: In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka CID-303911cfc5b9. This affects drivers/usb/core/file.c.
CVE-2019-19534: In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver, aka CID-f7a1337f0d29.
CVE-2019-19532: In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka CID-d9d4b1e46d95. This affects drivers/hid/hid-axff.c, drivers/hid/hid-dr.c, drivers/hid/hid-emsff.c, drivers/hid/hid-gaff.c, drivers/hid/hid-holtekff.c, drivers/hid/hid-lg2ff.c, drivers/hid/hid-lg3ff.c, drivers/hid/hid-lg4ff.c, drivers/hid/hid-lgff.c, drivers/hid/hid-logitech-hidpp.c, drivers/hid/hid-microsoft.c, drivers/hid/hid-sony.c, drivers/hid/hid-tmff.c, and drivers/hid/hid-zpff.c.
CVE-2019-19530: In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef.
CVE-2019-19531: In the Linux kernel before 5.2.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver, aka CID-fc05481b2fca.
CVE-2015-8839: Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to cause a denial of service (disk corruption) by writing to a page that is associated with a different user's file after unsynchronized hole punching and page-fault handling.
CVE-2019-19524: In the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver, aka CID-fa3a5a1880c9.
CVE-2019-19527: In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e.
CVE-2019-19523: In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79.
CVE-2019-19039: ** DISPUTED ** __btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: The BTRFS development team disputes this issues as not being a vulnerability because ?1) The kernel provide facilities to restrict access to dmesg - dmesg_restrict=1 sysctl option. So it's really up to the system administrator to judge whether dmesg access shall be disallowed or not. 2) WARN/WARN_ON are widely used macros in the linux kernel. If this CVE is considered valid this would mean there are literally thousands CVE lurking in the kernel - something which clearly is not the case.?
CVE-2019-19533: In the Linux kernel before 5.3.4, there is an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver, aka CID-a10feaf8c464.
CVE-2019-9453: In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-19036: btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero.
CVE-2019-12881: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVE-2019-15291: An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver.
CVE-2019-10220: Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.
CVE-2019-2213: In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-133758011References: Upstream kernel
CVE-2019-17351: An issue was discovered in drivers/xen/balloon.c in the Linux kernel before 5.2.3, as used in Xen through 4.12.x, allowing guest OS users to cause a denial of service because of unrestricted resource consumption during the mapping of guest memory, aka CID-6ef36ab967c7.
CVE-2019-17133: In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.
CVE-2019-9245: In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-12984: A NULL pointer dereference vulnerability in the function nfc_genl_deactivate_target() in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service.
CVE-2019-19378: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c.
CVE-2019-19377: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.
CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of variable elements in a beacon head, leading to a buffer overflow.
CVE-2019-14901: A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system.
CVE-2019-15505: drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be remote via usbip or usbredir).

35 issues skipped by the security teams:

CVE-2018-10124: The kill_something_info function in kernel/signal.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service via an INT_MIN argument.
CVE-2016-2854: The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.
CVE-2016-2853: The aufs module for the Linux kernel 3.x and 4.x does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an aufs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program.
CVE-2018-13096: An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3. A denial of service (out-of-bounds memory access and BUG) can occur upon encountering an abnormal bitmap size when mounting a crafted f2fs image.
CVE-2018-13097: An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3. There is an out-of-bounds read or a divide-by-zero error for an incorrect user_block_count in a corrupted f2fs image, leading to a denial of service (BUG).
CVE-2018-13095: An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork.
CVE-2018-13099: An issue was discovered in fs/f2fs/inline.c in the Linux kernel through 4.17.3. A denial of service (out-of-bounds memory access and BUG) can occur for a modified f2fs filesystem image in which an inline inode contains an invalid reserved blkaddr.
CVE-2018-12207: Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.
CVE-2019-17075: An issue was discovered in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2. The cxgb4 driver is directly calling dma_map_single (a DMA function) from a stack variable. This could allow an attacker to trigger a Denial of Service, exploitable if this driver is used on an architecture for which this stack/DMA interaction has security relevance.
CVE-2019-2054: In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-119769499
CVE-2019-9444: In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2018-20509: The print_binder_ref_olocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading " ref *desc *node" lines in a debugfs file.
CVE-2017-5972: The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many TCP SYN packets, as demonstrated by an attack against the kernel-3.10.0 package in CentOS Linux 7. NOTE: third parties have been unable to discern any relationship between the GitHub Engineering finding and the Trigemini.c attack code.
CVE-2015-8553: Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not enabling memory and I/O decoding control bits. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0777.
CVE-2015-8952: The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr block caching, which allows local users to cause a denial of service (soft lockup) via filesystem operations in environments that use many attributes, as demonstrated by Ceph and Samba.
CVE-2018-7273: In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function show_floppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel code and data and bypass kernel security protections such as KASLR.
CVE-2019-11487: The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests.
CVE-2019-3874: The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
CVE-2018-1000026: Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large, specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM..
CVE-2018-10087: The kernel_wait4 function in kernel/exit.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service by triggering an attempted use of the -INT_MIN value.
CVE-2018-14614: An issue was discovered in the Linux kernel through 4.17.10. There is an out-of-bounds access in __remove_dirty_segment() in fs/f2fs/segment.c when mounting an f2fs image.
CVE-2014-9717: fs/namespace.c in the Linux kernel before 4.0.2 processes MNT_DETACH umount2 system calls without verifying that the MNT_LOCKED flag is unset, which allows local users to bypass intended access restrictions and navigate to filesystem locations beneath a mount by calling umount2 within a user namespace.
CVE-2016-3139: The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
CVE-2018-7754: The aoedisk_debugfs_show function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by reading "ffree: " lines in a debugfs file.
CVE-2013-7445: The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
CVE-2019-18660: The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c.
CVE-2017-18249: The add_free_nid function in fs/f2fs/node.c in the Linux kernel before 4.12 does not properly track an allocated nid, which allows local users to cause a denial of service (race condition) or possibly have unspecified other impact via concurrent threads.
CVE-2018-13100: An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3, which does not properly validate secs_per_zone in a corrupted f2fs image, as demonstrated by a divide-by-zero error.
CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.
CVE-2018-1128: It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
CVE-2018-1120: A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or environment strings), an attacker can cause utilities from psutils or procps (such as ps, w) or any other program which makes a read() call to the /proc/<pid>/cmdline (or /proc/<pid>/environ) files to block indefinitely (denial of service) or for some controlled time (as a synchronization primitive for other attacks).
CVE-2018-10322: The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereference) via a crafted xfs image.
CVE-2017-10663: The sanity_check_ckpt function in fs/f2fs/super.c in the Linux kernel before 4.12.4 does not validate the blkoff and segno arrays, which allows local users to gain privileges via unspecified vectors.
CVE-2017-10662: The sanity_check_raw_super function in fs/f2fs/super.c in the Linux kernel before 4.11.1 does not validate the segment count, which allows local users to gain privileges via unspecified vectors.
CVE-2018-18021: arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation does not prevent unintended execution modes.

Please fix them.

Created: 2015-07-12 Last update: 2020-01-17 06:34

111 security issues in stretch high

There are 111 open security issues in stretch.

102 important issues:

CVE-2019-15098: drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.
CVE-2019-19965: In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5.
CVE-2019-5108: An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to different denial-of-service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby APs of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.
CVE-2018-13093: An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free during allocation.
CVE-2018-13094: An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp.
CVE-2018-13095: An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork.
CVE-2019-19770: In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file).
CVE-2019-18683: An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free.
CVE-2019-17666: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow.
CVE-2018-9517: In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-38159931.
CVE-2019-19318: In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer,
CVE-2019-19319: In the Linux kernel 5.0.21, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call.
CVE-2019-19227: In the AppleTalk subsystem in the Linux kernel before 5.1, there is a potential NULL pointer dereference because register_snap_client may return NULL. This will lead to denial of service in net/appletalk/aarp.c and net/appletalk/ddp.c, as demonstrated by unregister_snap_client, aka CID-9804501fa122.
CVE-2019-19767: The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163.
CVE-2019-19769: In the Linux kernel 5.3.10, there is a use-after-free (read) in the perf_trace_lock_acquire function (related to include/trace/events/lock.h).
CVE-2019-19768: In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).
CVE-2018-12930: ntfs_end_buffer_async_read in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.
CVE-2018-12931: ntfs_attr_find in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.
CVE-2019-17075: An issue was discovered in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2. The cxgb4 driver is directly calling dma_map_single (a DMA function) from a stack variable. This could allow an attacker to trigger a Denial of Service, exploitable if this driver is used on an architecture for which this stack/DMA interaction has security relevance.
CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2019-20096: In the Linux kernel before 5.1, there is a memory leak in __feat_register_sp() in net/dccp/feat.c, which may cause denial of service, aka CID-1d3ff0950e2b.
CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP.
CVE-2019-14897: A stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA.
CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service (system crash) or possibly execute arbitrary code.
CVE-2019-19947: In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c driver, aka CID-da2311a6385c.
CVE-2018-20976: An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18. A use after free exists, related to xfs_fs_fill_super failure.
CVE-2018-12929: ntfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a use-after-free read and possibly cause a denial of service (kernel oops or panic) via a crafted ntfs filesystem.
CVE-2019-19447: In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c.
CVE-2019-19448: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
CVE-2019-19449: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).
CVE-2019-9445: In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-19332: An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system, resulting in a denial of service.
CVE-2019-17053: ieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-e69dbd4619e7.
CVE-2019-17052: ax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768.
CVE-2019-17056: llcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176.
CVE-2019-17055: base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21.
CVE-2019-17054: atalk_create in net/appletalk/ddp.c in the AF_APPLETALK network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-6cc03e8aa36c.
CVE-2019-15217: An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver.
CVE-2019-19927: In the Linux kernel 5.0.0-rc7 (as distributed in ubuntu/linux.git on kernel.ubuntu.com), mounting a crafted f2fs filesystem image and performing some operations can lead to slab-out-of-bounds read access in ttm_put_pages in drivers/gpu/drm/ttm/ttm_page_alloc.c. This is related to the vmwgfx or ttm module.
CVE-2019-2215: A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095
CVE-2019-14615:
CVE-2018-21008: An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c.
CVE-2019-19462: relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.
CVE-2019-18885: fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devices is mishandled within find_device, aka CID-09ba3bc9dd15.
CVE-2019-15917: An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c.
CVE-2019-19057: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-d10dcb615c8e.
CVE-2019-19056: A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-db8fd2cde932.
CVE-2019-19051: A memory leak in the i2400m_op_rfkill_sw_toggle() function in drivers/net/wimax/i2400m/op-rfkill.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-6f3ef5c25cc7.
CVE-2019-19052: A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.
CVE-2018-17977: The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
CVE-2017-0630: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVE-2019-19813: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.
CVE-2019-19816: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandled.
CVE-2019-19062: A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures, aka CID-ffdde5932042.
CVE-2019-19066: A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering bfa_port_get_stats() failures, aka CID-0e62395da2bd.
CVE-2019-19068: A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-a2cdd07488e6.
CVE-2018-18653: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVE-2019-19074: A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-728c1e2a05e4.
CVE-2019-19073: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function, aka CID-853acf7caf10.
CVE-2019-18675: The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.
CVE-2020-0009: In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932
CVE-2016-10723: ** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
CVE-2019-14816: There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVE-2019-14814: There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVE-2019-14815: A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.
CVE-2019-19815: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause a NULL pointer dereference in f2fs_recover_fsync_data in fs/f2fs/recovery.c. This is related to F2FS_P_SB in fs/f2fs/f2fs.h.
CVE-2019-19814: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an array is bounded by the number of dirty types (8) but the array index can exceed this.
CVE-2019-15030: In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check.
CVE-2019-18282:
CVE-2019-18660: The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c.
CVE-2019-19536: In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver, aka CID-ead16e53c2f0.
CVE-2019-19537: In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka CID-303911cfc5b9. This affects drivers/usb/core/file.c.
CVE-2019-19534: In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver, aka CID-f7a1337f0d29.
CVE-2019-19535: In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka CID-30a8beeb3042.
CVE-2019-19532: In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka CID-d9d4b1e46d95. This affects drivers/hid/hid-axff.c, drivers/hid/hid-dr.c, drivers/hid/hid-emsff.c, drivers/hid/hid-gaff.c, drivers/hid/hid-holtekff.c, drivers/hid/hid-lg2ff.c, drivers/hid/hid-lg3ff.c, drivers/hid/hid-lg4ff.c, drivers/hid/hid-lgff.c, drivers/hid/hid-logitech-hidpp.c, drivers/hid/hid-microsoft.c, drivers/hid/hid-sony.c, drivers/hid/hid-tmff.c, and drivers/hid/hid-zpff.c.
CVE-2019-19530: In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef.
CVE-2019-19531: In the Linux kernel before 5.2.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver, aka CID-fc05481b2fca.
CVE-2016-8660: The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation."
CVE-2019-19037: ext4_empty_dir in fs/ext4/namei.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because ext4_read_dirblock(inode,0,DIRENT_HTREE) can be zero.
CVE-2019-19525: In the Linux kernel before 5.3.6, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver, aka CID-7fd25e6fc035.
CVE-2019-19524: In the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver, aka CID-fa3a5a1880c9.
CVE-2019-19527: In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e.
CVE-2019-19523: In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79.
CVE-2019-19039: ** DISPUTED ** __btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: The BTRFS development team disputes this issues as not being a vulnerability because ?1) The kernel provide facilities to restrict access to dmesg - dmesg_restrict=1 sysctl option. So it's really up to the system administrator to judge whether dmesg access shall be disallowed or not. 2) WARN/WARN_ON are widely used macros in the linux kernel. If this CVE is considered valid this would mean there are literally thousands CVE lurking in the kernel - something which clearly is not the case.?
CVE-2019-19533: In the Linux kernel before 5.3.4, there is an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver, aka CID-a10feaf8c464.
CVE-2019-9453: In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-19036: btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero.
CVE-2019-12881: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVE-2019-15291: An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver.
CVE-2018-10322: The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereference) via a crafted xfs image.
CVE-2019-10220: Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.
CVE-2019-2213: In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-133758011References: Upstream kernel
CVE-2019-2182: In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-18809: A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559.
CVE-2019-17133: In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.
CVE-2019-9245: In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-12984: A NULL pointer dereference vulnerability in the function nfc_genl_deactivate_target() in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service.
CVE-2019-19378: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c.
CVE-2019-19377: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.
CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of variable elements in a beacon head, leading to a buffer overflow.
CVE-2019-14901: A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system.
CVE-2019-15505: drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be remote via usbip or usbredir).

9 issues skipped by the security teams:

CVE-2018-1108: kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated.
CVE-2017-18232: The Serial Attached SCSI (SAS) implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, which allows local users to cause a denial of service (deadlock) by triggering certain error-handling code.
CVE-2018-12928: In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.
CVE-2019-9444: In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2018-7273: In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function show_floppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel code and data and bypass kernel security protections such as KASLR.
CVE-2019-3874: The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
CVE-2018-7754: The aoedisk_debugfs_show function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by reading "ffree: " lines in a debugfs file.
CVE-2013-7445: The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
CVE-2018-20449: The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "callback=" lines in a debugfs file.

Please fix them.

Created: 2015-07-12 Last update: 2020-01-17 06:34

Failed to analyze the VCS repository. Please troubleshoot and fix the issue. high

vcswatch reports that there is an error with this package's VCS, or the debian/changelog file inside it. Please check the error shown below and try to fix it. You might have to update the VCS URL in the debian/control file to point to the correct repository.

error: cannot lock ref 'refs/merge-requests/196/head': is at 176eb3fc479829f596c5bd02250ecd62e325fce8 but expected febedce575da69ff57a26de19db4b4ad40fa0e2f From https://salsa.debian.org/kernel-team/linux ! febedce575d..176eb3fc479 refs/merge-requests/196/head -> refs/merge-requests/196/head (unable to update local ref) + a642f57ea32...a4b685bd20b refs/merge-requests/196/merge -> refs/merge-requests/196/merge (forced update)

Created: 2020-01-16 Last update: 2020-01-16 06:35

87 bugs tagged patch in the BTS normal

The BTS contains patches fixing 87 bugs (89 if counting merged bugs), consider including or untagging them.

Created: 2019-04-01 Last update: 2020-01-17 15:31

Depends on packages which need a new maintainer normal

The packages that linux depends on which need a new maintainer are:

dh-exec (#851746)
- Build-Depends: dh-exec

Created: 2019-11-22 Last update: 2020-01-17 14:07

Fails to build during reproducibility testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2019-12-14 Last update: 2020-01-17 12:43

Multiarch hinter reports 1 issue(s) normal

There are issues with the multiarch metadata for this package.

linux-headers-5.4.0-2-all could be marked Multi-Arch: same

Created: 2019-11-21 Last update: 2020-01-17 11:07

Build log checks report 2 warnings low

Build log checks report 2 warnings

Created: 2019-08-22 Last update: 2019-08-22 01:01

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.1 instead of 4.2.0).

Created: 2017-12-02 Last update: 2020-01-06 00:37

news

[rss feed]

[2020-01-11] linux 5.4.8-1 MIGRATED to testing (Debian testing watch)
[2020-01-09] Accepted linux 5.4.8-1~bpo10+1 (source) into buster-backports, buster-backports (Ben Hutchings)
[2020-01-06] Accepted linux 5.5~rc5-1~exp1 (source) into experimental, experimental (Ben Hutchings)
[2020-01-05] Accepted linux 5.4.8-1 (source) into unstable, unstable (Salvatore Bonaccorso)
[2019-12-28] Accepted linux 5.4.6-1 (source) into unstable, unstable (Ben Hutchings)
[2019-12-14] linux 5.3.15-1 MIGRATED to testing (Debian testing watch)
[2019-12-07] Accepted linux 4.19.87-1 (all source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2019-12-07] Accepted linux 5.3.15-1 (source) into unstable, unstable (Salvatore Bonaccorso)
[2019-12-05] Accepted linux 5.4.2-1~exp1 (source) into experimental (Salvatore Bonaccorso)
[2019-11-27] Accepted linux 5.4-1~exp1 (source) into experimental, experimental (Ben Hutchings)
[2019-11-26] linux 5.3.9-3 MIGRATED to testing (Debian testing watch)
[2019-11-24] Accepted linux 4.9.189-3+deb9u2 (all source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Ben Hutchings)
[2019-11-19] Accepted linux 4.19.67-2+deb10u2 (source) into proposed-updates->stable-new, proposed-updates (Ben Hutchings)
[2019-11-19] Accepted linux 5.3.9-3 (source) into unstable (Ben Hutchings)
[2019-11-18] Accepted linux 4.19.67-2+deb10u2~bpo9+1 (source) into stretch-backports->backports-policy, stretch-backports (Ben Hutchings)
[2019-11-18] Accepted linux 5.3.9-2~bpo10+1 (source) into buster-backports, buster-backports (Ben Hutchings)
[2019-11-12] Accepted linux 5.3.9-2 (source) into unstable (Ben Hutchings)
[2019-11-12] Accepted linux 3.16.76-1 (all source) into oldoldstable (Ben Hutchings)
[2019-11-12] Accepted linux 4.19.67-2+deb10u2 (source) into stable->embargoed, stable (Ben Hutchings)
[2019-11-12] Accepted linux 4.9.189-3+deb9u2 (all source) into oldstable->embargoed, oldstable (Ben Hutchings)
[2019-11-09] Accepted linux 5.3.9-1 (source) into unstable, unstable (Ben Hutchings)
[2019-10-20] Accepted linux 5.3.7-1 (all source) into unstable, unstable (Salvatore Bonaccorso)
[2019-10-08] Accepted linux 5.2.17-1~bpo10+1 (all source) into buster-backports, buster-backports (Ben Hutchings)
[2019-10-03] Accepted linux 5.3.2-1~exp1 (all source) into experimental, experimental (Ben Hutchings)
[2019-10-03] linux 5.2.17-1 MIGRATED to testing (Debian testing watch)
[2019-10-01] Accepted linux 4.19.67-2+deb10u1~bpo9+1 (source) into stretch-backports->backports-policy, stretch-backports (Ben Hutchings)
[2019-09-28] Accepted linux 4.9.189-3+deb9u1 (all source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Salvatore Bonaccorso)
[2019-09-28] Accepted linux 4.19.67-2+deb10u1 (all source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2019-09-26] Accepted linux 5.2.17-1 (all source) into unstable, unstable (Salvatore Bonaccorso)
[2019-09-24] Accepted linux 4.19.67-2+deb10u1 (all source) into stable->embargoed, stable (Salvatore Bonaccorso)

bugs [bug history graph]

all: 2519 2607
RC: 12
I&N: 2325 2404
M&W: 177 186
F&P: 5
patch: 87 89

links

homepage
buildd: logs, exp, checks, clang, reproducibility
popcon
browse source code
edit tags
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 5.4.0-9.12
6419 bugs (266 patches)