Suse Linux Enterprise High Availability Extension vulnerabilities

3 CVEs affecting Suse Linux Enterprise High Availability Extension, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0196, published 2014-05-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-0196: Linux Kernel Race Condition Vulnerability, published 2014-05-07. Medium severity, CVSS 5.5. Actively exploited: in CISA KEV since 2023-05-12. EPSS: 22.5% chance of exploitation in the next 30 days. The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial…
CVE-2010-2495, published 2010-09-08. High severity, CVSS 10.0. EPSS: 2.9% chance of exploitation in the next 30 days. The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate certain values associated with an interface, which allows…
CVE-2010-3881, published 2010-12-23. Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days. arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via…