Suse Linux Enterprise High Availability Extension vulnerabilities

28 CVEs affecting Suse Linux Enterprise High Availability Extension, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-31431, published 2026-04-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-3153: Linux Kernel Privilege Escalation Vulnerability, published 2014-06-07. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-05-25. EPSS: 37.2% chance of exploitation in the next 30 days. The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a…
CVE-2026-31431: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability, published 2026-04-22. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2026-05-01. EPSS: 3.4% chance of exploitation in the next 30 days. In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the…
CVE-2014-2323, published 2014-03-14. Critical severity, CVSS 9.8. EPSS: 62.8% chance of exploitation in the next 30 days. SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to request_check_hostname.
CVE-2017-18017, published 2018-01-03. Critical severity, CVSS 9.8. EPSS: 52.8% chance of exploitation in the next 30 days. The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and…
CVE-2014-2324, published 2014-03-14. Medium severity, CVSS 5.0. EPSS: 29.5% chance of exploitation in the next 30 days. Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. (dot dot) in the host name,…
CVE-2014-3467, published 2014-06-05. Medium severity, CVSS 5.0. EPSS: 6.8% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via crafted ASN.1 data.
CVE-2014-2706, published 2014-04-14. High severity, CVSS 7.1. EPSS: 4.3% chance of exploitation in the next 30 days. Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via network traffic that improperly interacts with the…
CVE-2015-3281, published 2015-07-06. Medium severity, CVSS 5.0. EPSS: 4.3% chance of exploitation in the next 30 days. The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain…
CVE-2014-3469, published 2014-06-05. Medium severity, CVSS 5.0. EPSS: 3.8% chance of exploitation in the next 30 days. The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via a…
CVE-2014-3468, published 2014-06-05. High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days. The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds…

Latest

CVE-2014-4027, published 2014-06-23. Low severity, CVSS 2.3. EPSS: 0.7% chance of exploitation in the next 30 days. The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain…
CVE-2014-1739, published 2014-06-23. Low severity, CVSS 2.1. EPSS: 1.1% chance of exploitation in the next 30 days. The media_device_enum_entities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initialize a certain data structure, which allows local users to obtain sensitive…
CVE-2014-1738, published 2014-05-11. Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days. The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which…