Novell Suse Linux Enterprise Live Patching vulnerabilities

22 CVEs affecting Novell Suse Linux Enterprise Live Patching, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-4997, published 2016-07-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-4997, published 2016-07-03. High severity, CVSS 7.8. EPSS: 5.7% chance of exploitation in the next 30 days. The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of…
CVE-2016-2184, published 2016-04-27. Medium severity, CVSS 4.6. EPSS: 1.9% chance of exploitation in the next 30 days. The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL…
CVE-2016-2188, published 2016-05-02. Medium severity, CVSS 4.6. EPSS: 1.8% chance of exploitation in the next 30 days. The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system…
CVE-2016-3136, published 2016-05-02. Medium severity, CVSS 4.6. EPSS: 1.8% chance of exploitation in the next 30 days. The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and…
CVE-2016-3140, published 2016-05-02. Medium severity, CVSS 4.6. EPSS: 1.8% chance of exploitation in the next 30 days. The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and…
CVE-2016-3139, published 2016-04-27. Medium severity, CVSS 4.6. EPSS: 1.8% chance of exploitation in the next 30 days. The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system…
CVE-2016-4486, published 2016-05-23. Low severity, CVSS 3.3. EPSS: 1.7% chance of exploitation in the next 30 days. The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain sensitive information from…
CVE-2016-1583, published 2016-06-27. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via…
CVE-2016-3134, published 2016-04-27. High severity, CVSS 8.4. EPSS: 1.2% chance of exploitation in the next 30 days. The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a denial of service (heap memory corruption)…
CVE-2016-3672, published 2016-04-27. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local users to defeat the…

Latest

CVE-2016-4805, published 2016-05-23. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash, or spinlock) or…
CVE-2016-4569, published 2016-05-23. Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days. The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from…
CVE-2016-4482, published 2016-05-23. Medium severity, CVSS 6.2. EPSS: 0.6% chance of exploitation in the next 30 days. The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from…
CVE-2016-3951, published 2016-05-02. Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days. Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly have unspecified…
CVE-2016-3689, published 2016-05-02. Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days. The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (system crash) via a USB device…
CVE-2016-3138, published 2016-05-02. Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days. The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash)…