{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Red Hat Enterprise Linux for Real Time 8 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Real Time for NFV 8 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2019-15221",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15221"
    },
    {
      "name": "CVE-2019-8980",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8980"
    },
    {
      "name": "CVE-2019-15099",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15099"
    },
    {
      "name": "CVE-2019-19073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19073"
    },
    {
      "name": "CVE-2018-16871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16871"
    },
    {
      "name": "CVE-2019-19922",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19922"
    },
    {
      "name": "CVE-2019-18805",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18805"
    },
    {
      "name": "CVE-2020-1749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-1749"
    },
    {
      "name": "CVE-2019-10639",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10639"
    },
    {
      "name": "CVE-2019-19057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19057"
    },
    {
      "name": "CVE-2019-19534",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19534"
    },
    {
      "name": "CVE-2019-15090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-15090"
    },
    {
      "name": "CVE-2019-17055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-17055"
    },
    {
      "name": "CVE-2019-19074",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19074"
    },
    {
      "name": "CVE-2019-17053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-17053"
    },
    {
      "name": "CVE-2019-19768",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19768"
    }
  ],
  "initial_release_date": "2020-04-28T00:00:00",
  "last_revision_date": "2020-04-28T00:00:00",
  "links": [],
  "reference": "CERTFR-2020-AVI-243",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2020-04-28T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le noyau Linux de\nRed Hat. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nun d\u00e9ni de service \u00e0 distance, un contournement de la politique de\ns\u00e9curit\u00e9 et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de Red Hat",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2020:1567 du 27 avril 2020",
      "url": "https://access.redhat.com/errata/RHSA-2020:1567"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "HCI Compute Node (Bootstrap OS) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "FAS/AFF Baseboard Management Controller (BMC) - 8300/8700/A400/C400 versions ant\u00e9rieures \u00e0 13.2\n",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "E-Series SANtricity OS Controller software versions 11.x ant\u00e9rieures \u00e0 11.60.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "HCI Baseboard Management Controller (BMC) - H610S versions ant\u00e9rieures \u00e0 2.27\n",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "SolidFire \u0026 HCI Storage Node (Element Software) versions ant\u00e9rieures \u00e0 12.8\n",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "SolidFire \u0026 HCI Management Node sans le dernier correctif de s\u00e9curit\u00e9\n",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "Cloud Backup toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "SolidFire Baseboard Management Controller (BMC) sans le dernier correctif de s\u00e9curit\u00e9\n",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    },
    {
      "description": "AFF Baseboard Management Controller (BMC) - A700s versions ant\u00e9rieures \u00e0 18.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "NetApp",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2019-18812",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18812"
    },
    {
      "name": "CVE-2019-19082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19082"
    },
    {
      "name": "CVE-2019-18811",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18811"
    },
    {
      "name": "CVE-2019-19053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19053"
    },
    {
      "name": "CVE-2019-18809",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18809"
    },
    {
      "name": "CVE-2019-19036",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19036"
    },
    {
      "name": "CVE-2019-19037",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19037"
    },
    {
      "name": "CVE-2019-19079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19079"
    },
    {
      "name": "CVE-2019-19061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19061"
    },
    {
      "name": "CVE-2019-19073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19073"
    },
    {
      "name": "CVE-2019-19047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19047"
    },
    {
      "name": "CVE-2019-18680",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18680"
    },
    {
      "name": "CVE-2019-19060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19060"
    },
    {
      "name": "CVE-2019-19462",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19462"
    },
    {
      "name": "CVE-2019-19072",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19072"
    },
    {
      "name": "CVE-2019-18810",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18810"
    },
    {
      "name": "CVE-2019-19044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19044"
    },
    {
      "name": "CVE-2019-19071",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19071"
    },
    {
      "name": "CVE-2019-19062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19062"
    },
    {
      "name": "CVE-2019-18683",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18683"
    },
    {
      "name": "CVE-2019-19063",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19063"
    },
    {
      "name": "CVE-2019-19078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19078"
    },
    {
      "name": "CVE-2019-19050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19050"
    },
    {
      "name": "CVE-2019-19069",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19069"
    },
    {
      "name": "CVE-2019-18805",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18805"
    },
    {
      "name": "CVE-2019-18813",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18813"
    },
    {
      "name": "CVE-2019-19083",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19083"
    },
    {
      "name": "CVE-2019-19052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19052"
    },
    {
      "name": "CVE-2019-19045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19045"
    },
    {
      "name": "CVE-2019-18885",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18885"
    },
    {
      "name": "CVE-2019-19077",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19077"
    },
    {
      "name": "CVE-2019-19080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19080"
    },
    {
      "name": "CVE-2019-19057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19057"
    },
    {
      "name": "CVE-2019-19048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19048"
    },
    {
      "name": "CVE-2019-18808",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18808"
    },
    {
      "name": "CVE-2019-19056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19056"
    },
    {
      "name": "CVE-2019-19058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19058"
    },
    {
      "name": "CVE-2019-19075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19075"
    },
    {
      "name": "CVE-2019-19051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19051"
    },
    {
      "name": "CVE-2019-19076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19076"
    },
    {
      "name": "CVE-2019-19068",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19068"
    },
    {
      "name": "CVE-2019-19081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19081"
    },
    {
      "name": "CVE-2019-19066",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19066"
    },
    {
      "name": "CVE-2019-19054",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19054"
    },
    {
      "name": "CVE-2019-19059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19059"
    },
    {
      "name": "CVE-2019-18814",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18814"
    },
    {
      "name": "CVE-2019-19065",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19065"
    },
    {
      "name": "CVE-2019-18807",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18807"
    },
    {
      "name": "CVE-2019-19074",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19074"
    },
    {
      "name": "CVE-2019-19043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19043"
    }
  ],
  "initial_release_date": "2025-12-12T00:00:00",
  "last_revision_date": "2025-12-12T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-1102",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-12-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits NetApp. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits NetApp",
  "vendor_advisories": [
    {
      "published_at": "2025-12-09",
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp NTAP-20210129-0004",
      "url": "https://security.netapp.com/advisory/NTAP-20210129-0004"
    },
    {
      "published_at": "2025-12-09",
      "title": "Bulletin de s\u00e9curit\u00e9 NetApp NTAP-20191205-0001",
      "url": "https://security.netapp.com/advisory/NTAP-20191205-0001"
    }
  ]
}

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-18805",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2019-18805"
    }
  },
  "description": "Linux kernel\u662f\u7f8e\u56fdLinux\u57fa\u91d1\u4f1a\u53d1\u5e03\u7684\u5f00\u6e90\u64cd\u4f5c\u7cfb\u7edfLinux\u6240\u4f7f\u7528\u7684\u5185\u6838\u3002\n\nLinux kernel 5.0.11\u4e4b\u524d\u7248\u672c\u4e2d\u7684net/ipv4/sysctl_net_ipv4.c\u6587\u4ef6\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7f51\u7edc\u7cfb\u7edf\u6216\u4ea7\u54c1\u672a\u5bf9\u8f93\u5165\u7684\u6570\u636e\u8fdb\u884c\u6b63\u786e\u7684\u9a8c\u8bc1\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bf9\u7cfb\u7edf\u8fdb\u884c\u975e\u6cd5\u64cd\u4f5c\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19fad20d15a6494f47f85d869f00b11343ee5c78",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2019-40470",
  "openTime": "2019-11-13",
  "patchDescription": "Linux kernel\u662f\u7f8e\u56fdLinux\u57fa\u91d1\u4f1a\u53d1\u5e03\u7684\u5f00\u6e90\u64cd\u4f5c\u7cfb\u7edfLinux\u6240\u4f7f\u7528\u7684\u5185\u6838\u3002\n\nLinux kernel 5.0.11\u4e4b\u524d\u7248\u672c\u4e2d\u7684net/ipv4/sysctl_net_ipv4.c\u6587\u4ef6\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7f51\u7edc\u7cfb\u7edf\u6216\u4ea7\u54c1\u672a\u5bf9\u8f93\u5165\u7684\u6570\u636e\u8fdb\u884c\u6b63\u786e\u7684\u9a8c\u8bc1\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bf9\u7cfb\u7edf\u8fdb\u884c\u975e\u6cd5\u64cd\u4f5c\u3002",
  "patchName": "Linux kernel\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\uff08CNVD-2019-40470\uff09",
  "products": {
    "product": "Linux Linux kernel \u003c5.0.11"
  },
  "referenceLink": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11",
  "serverity": "\u9ad8",
  "submitTime": "2019-11-09",
  "title": "Linux kernel\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\uff08CNVD-2019-40470\uff09"
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "49884052-E8FD-49E4-A9F3-D0964EB0AC31",
              "versionEndExcluding": "4.4.180",
              "versionStartIncluding": "4.4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DF6AB36D-D9AC-4381-88AF-CC4FDA5EC98E",
              "versionEndExcluding": "4.9.172",
              "versionStartIncluding": "4.9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B3562ABD-4F11-4BD1-9BBD-417B7BC9BCF3",
              "versionEndExcluding": "4.14.115",
              "versionStartIncluding": "4.14",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "48FBE002-61C1-4569-B850-E15BD2DBA143",
              "versionEndExcluding": "4.19.38",
              "versionStartIncluding": "4.19",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C23FEFDF-76B5-46C0-9481-CE70EBDB7BFE",
              "versionEndExcluding": "5.0.11",
              "versionStartIncluding": "5.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:5.1:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "2258D313-BAF7-482D-98E0-79F2A448287B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:5.1:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "1578A37C-C7CC-4B36-8668-6A1AED63B0A8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:5.1:rc3:*:*:*:*:*:*",
              "matchCriteriaId": "49BD6839-AB64-48DA-9D1D-18B4508AF652",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:5.1:rc4:*:*:*:*:*:*",
              "matchCriteriaId": "A1E5129A-F85C-432A-988D-6C3ED03EC04D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:5.1:rc5:*:*:*:*:*:*",
              "matchCriteriaId": "0669A9F1-3BFF-4E5A-BEF7-9F2A627CEF03",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:5.1:rc6:*:*:*:*:*:*",
              "matchCriteriaId": "9CC18FCC-3F69-4A7E-9F29-4C4504E83B4D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:5.1:rc7:*:*:*:*:*:*",
              "matchCriteriaId": "12A5D914-5CEB-4D3F-A903-6F1FAD82A125",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1E78106-58E6-4D59-990F-75DA575BFAD9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B620311B-34A3-48A6-82DF-6F078D7A4493",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "142AD0DD-4CF3-4D74-9442-459CE3347E3A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
              "matchCriteriaId": "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:data_availability_services:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0EF46487-B64A-454E-AECC-D74B83170ACD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BD1E9594-C46F-40D1-8BC2-6B16635B55C4",
              "versionEndIncluding": "11.60.3",
              "versionStartIncluding": "11.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A3C19813-E823-456A-B1CE-EC0684CE1953",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E94F7F59-1785-493F-91A7-5F5EA5E87E4D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD7447BC-F315-4298-A822-549942FC118B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "02DEB4FB-A21D-4CB1-B522-EEE5093E8521",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:broadcom:fabric_operating_system:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "046FB51E-B768-44D3-AEB5-D857145CA840",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netapp:aff_a700s_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "952F55C9-7E7C-4539-9D08-E736B3488569",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netapp:aff_a700s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9FED1B0D-F901-413A-85D9-05D4C427570D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netapp:fas8300_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "89706810-031B-49F0-B353-FD27FD7B2776",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netapp:fas8300:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "03BCC59D-C782-4149-B6DC-5DDAFAB48F2D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netapp:fas8700_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDD1E822-1EA6-4E62-A58B-2378149D20DC",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netapp:fas8700:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E07EAE5F-B1B5-4FDA-9B50-8CB1D2AFC5A0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netapp:aff_a400_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "56FD9B9A-BBE5-4CA5-B9F9-B16E1FE738C8",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netapp:aff_a400:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F3E70A56-DBA8-45C7-8C49-1A036501156F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FD7CFE0E-9D1E-4495-B302-89C3096FC0DF",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F63A3FA7-AAED-4A9D-9FDE-6195302DA0F6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6."
    },
    {
      "lang": "es",
      "value": "Se detect\u00f3 un problema en el archivo net/ipv4/sysctl_net_ipv4.c en el kernel de Linux versiones anteriores a 5.0.11. Se presenta un desbordamiento de enteros firmado del archivo net/ipv4/tcp_input.c en la funci\u00f3n tcp_ack_update_rtt() cuando el espacio de usuario escribe un entero muy grande en /proc/sys/net/ipv4/tcp_min_rtt_wlen, lo que conlleva a una denegaci\u00f3n de servicio o posiblemente a otro impacto no especificado, tambi\u00e9n se conoce como CID -19fad20d15a6."
    }
  ],
  "id": "CVE-2019-18805",
  "lastModified": "2024-11-21T04:33:36.167",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2019-11-07T14:15:11.067",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2020:0740"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19fad20d15a6494f47f85d869f00b11343ee5c78"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2020:0740"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19fad20d15a6494f47f85d869f00b11343ee5c78"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-190"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2019-18805"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-190"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2019-11-07T14:15:00Z",
    "severity": "HIGH"
  },
  "details": "An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.",
  "id": "GHSA-wgj3-wxrf-qqg3",
  "modified": "2022-05-24T22:01:05Z",
  "published": "2022-05-24T22:01:05Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18805"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2020:0740"
    },
    {
      "type": "WEB",
      "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19fad20d15a6494f47f85d869f00b11343ee5c78"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20191205-0001"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "GSD": {
    "alias": "CVE-2019-18805",
    "description": "An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.",
    "id": "GSD-2019-18805",
    "references": [
      "https://www.suse.com/security/cve/CVE-2019-18805.html",
      "https://access.redhat.com/errata/RHSA-2020:1769",
      "https://access.redhat.com/errata/RHSA-2020:1567",
      "https://access.redhat.com/errata/RHSA-2020:0740",
      "https://linux.oracle.com/cve/CVE-2019-18805.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2019-18805"
      ],
      "details": "An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.",
      "id": "GSD-2019-18805",
      "modified": "2023-12-13T01:23:50.248745Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2019-18805",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11",
            "refsource": "MISC",
            "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11"
          },
          {
            "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19fad20d15a6494f47f85d869f00b11343ee5c78",
            "refsource": "MISC",
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19fad20d15a6494f47f85d869f00b11343ee5c78"
          },
          {
            "name": "openSUSE-SU-2019:2503",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html"
          },
          {
            "name": "openSUSE-SU-2019:2507",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20191205-0001/",
            "refsource": "CONFIRM",
            "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
          },
          {
            "name": "RHSA-2020:0740",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2020:0740"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.4.180",
                "versionStartIncluding": "4.4",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.9.172",
                "versionStartIncluding": "4.9",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.14.115",
                "versionStartIncluding": "4.14",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.19.38",
                "versionStartIncluding": "4.19",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "5.0.11",
                "versionStartIncluding": "5.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:5.1:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:5.1:rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:5.1:rc3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:5.1:rc4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:5.1:rc5:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:5.1:rc6:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:5.1:rc7:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:netapp:data_availability_services:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "11.60.3",
                "versionStartIncluding": "11.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:broadcom:fabric_operating_system:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:netapp:aff_a700s_firmware:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:netapp:aff_a700s:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:netapp:fas8300_firmware:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:netapp:fas8300:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:netapp:fas8700_firmware:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:netapp:fas8700:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:netapp:aff_a400_firmware:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:netapp:aff_a400:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-18805"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-190"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11",
              "refsource": "MISC",
              "tags": [
                "Mailing List",
                "Patch",
                "Vendor Advisory"
              ],
              "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19fad20d15a6494f47f85d869f00b11343ee5c78",
              "refsource": "MISC",
              "tags": [
                "Mailing List",
                "Patch",
                "Vendor Advisory"
              ],
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19fad20d15a6494f47f85d869f00b11343ee5c78"
            },
            {
              "name": "openSUSE-SU-2019:2503",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html"
            },
            {
              "name": "openSUSE-SU-2019:2507",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20191205-0001/",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
            },
            {
              "name": "RHSA-2020:0740",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2020:0740"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2021-06-22T14:47Z",
      "publishedDate": "2019-11-07T14:15Z"
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\n\nThe openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2019-0154: An unprotected read access to i915 registers has been fixed that could have been abused to facilitate a local denial-of-service attack.  (bsc#1135966)\n- CVE-2019-0155: A privilege escalation vulnerability has been fixed in the i915 module that allowed batch buffers from user mode to gain super user privileges. (bsc#1135967)\n- CVE-2019-16231: drivers/net/fjes/fjes_main.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150466).\n- CVE-2019-18805: There was a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6 (bnc#1156187).\n- CVE-2019-17055: base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module did not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21 (bnc#1152782).\n- CVE-2019-16995: A memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c, if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d (bnc#1152685).\n- CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described \u0027Microarchitectural Data Sampling\u0027 attack.\n\n  The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW).\n\n  The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251\n\n- CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150457).\n- CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional.\n\n  The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in executable pages by splitting / merging huge pages into small pages as needed.\n\n  More information can be found on https://www.suse.com/support/kb/doc/?id=7023735\n\n- CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903).\n\nThe following non-security bugs were fixed:\n\n- ALSA: bebob: Fix prototype of helper function to return negative value (bsc#1051510).\n- ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series (git-fixes).\n- ALSA: hda: Add Elkhart Lake PCI ID (bsc#1051510).\n- ALSA: hda: Add Tigerlake/Jasperlake PCI ID (bsc#1051510).\n- ALSA: hda/ca0132 - Fix possible workqueue stall (bsc#1155836).\n- ALSA: hda/realtek - Add support for ALC623 (bsc#1051510).\n- ALSA: hda/realtek - Add support for ALC711 (bsc#1051510).\n- ALSA: hda/realtek - Fix 2 front mics of codec 0x623 (bsc#1051510).\n- ALSA: timer: Fix incorrectly assigned timer instance (git-fixes).\n- ALSA: timer: Fix mutex deadlock at releasing card (bsc#1051510).\n- arcnet: provide a buffer big enough to actually receive packets (networking-stable-19_09_30).\n- ASoc: rockchip: i2s: Fix RPM imbalance (bsc#1051510).\n- ASoC: rsnd: Reinitialize bit clock inversion flag for every format setting (bsc#1051510).\n- bpf: fix use after free in prog symbol exposure (bsc#1083647).\n- btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() (bsc#1155178).\n- btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() (bsc#1155179).\n- btrfs: tracepoints: Fix bad entry members of qgroup events (bsc#1155186).\n- btrfs: tracepoints: Fix wrong parameter order for qgroup events (bsc#1155184).\n- can: dev: call netif_carrier_off() in register_candev() (bsc#1051510).\n- crypto: af_alg - consolidation of duplicate code (bsc#1154737).\n- crypto: af_alg - fix race accessing cipher request (bsc#1154737).\n- crypto: af_alg - Fix race around ctx-\u003ercvused by making it atomic_t (bsc#1154737).\n- crypto: af_alg - Initialize sg_num_bytes in error code path (bsc#1051510).\n- crypto: af_alg - remove locking in async callback (bsc#1154737).\n- crypto: af_alg - update correct dst SGL entry (bsc#1051510).\n- crypto: af_alg - wait for data at beginning of recvmsg (bsc#1154737).\n- crypto: algif_aead - copy AAD from src to dst (bsc#1154737).\n- crypto: algif_aead - fix reference counting of null skcipher (bsc#1154737).\n- crypto: algif_aead - overhaul memory management (bsc#1154737).\n- crypto: algif_aead - skip SGL entries with NULL page (bsc#1154737).\n- crypto: algif - return error code when no data was processed (bsc#1154737).\n- crypto: algif_skcipher - overhaul memory management (bsc#1154737).\n- cxgb4:Fix out-of-bounds MSI-X info array access (networking-stable-19_10_05).\n- dmaengine: bcm2835: Print error in case setting DMA mask fails (bsc#1051510).\n- dmaengine: imx-sdma: fix size check for sdma script_number (bsc#1051510).\n- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 (bsc#1051510).\n- drm/i915: Add gen9 BCS cmdparsing (bsc#1135967)\n- drm/i915: Add support for mandatory cmdparsing (bsc#1135967)\n- drm/i915: Allow parsing of unsized batches (bsc#1135967)\n- drm/i915/cmdparser: Add support for backward jumps (bsc#1135967)\n- drm/i915/cmdparser: Ignore Length operands during command matching (bsc#1135967)\n- drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967)\n- drm/i915: Disable Secure Batches for gen6+\n- drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967)\n- drm/i915/gtt: Add read only pages to gen8_pte_encode (bsc#1135967)\n- drm/i915/gtt: Disable read-only support under GVT (bsc#1135967)\n- drm/i915/gtt: Read-only pages for insert_entries on bdw (bsc#1135967)\n- drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967)\n- drm/i915: Prevent writing into a read-only object via a GGTT mmap (bsc#1135967)\n- drm/i915: Remove Master tables from cmdparser\n- drm/i915: Rename gen7 cmdparser tables (bsc#1135967)\n- drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (bsc#1135967)\n- efi: cper: print AER info of PCIe fatal error (bsc#1051510).\n- efi/memattr: Do not bail on zero VA if it equals the region\u0027s PA (bsc#1051510).\n- efivar/ssdt: Do not iterate over EFI vars if no SSDT override was specified (bsc#1051510).\n- HID: fix error message in hid_open_report() (bsc#1051510).\n- HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy() (bsc#1051510).\n- hso: fix NULL-deref on tty open (bsc#1051510).\n- hyperv: set nvme msi interrupts to unmanaged (jsc#SLE-8953, jsc#SLE-9221, jsc#SLE-4941, bsc#1119461, bsc#1119465, bsc#1138190, bsc#1154905).\n- IB/core: Add mitigation for Spectre V1 (bsc#1155671)\n- ieee802154: ca8210: prevent memory leak (bsc#1051510).\n- input: synaptics-rmi4 - avoid processing unknown IRQs (bsc#1051510).\n- integrity: prevent deadlock during digsig verification (bsc#1090631).\n- ipv6: drop incoming packets having a v4mapped source address (networking-stable-19_10_05).\n- ipv6: Handle missing host route in __ipv6_ifa_notify (networking-stable-19_10_05).\n- iwlwifi: do not panic in error path on non-msix systems (bsc#1155692).\n- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).\n- kABI workaround for crypto/af_alg changes (bsc#1154737).\n- kABI workaround for drm_vma_offset_node readonly field addition (bsc#1135967)\n- ksm: cleanup stable_node chain collapse case (bnc#1144338).\n- ksm: fix use after free with merge_across_nodes = 0 (bnc#1144338).\n- ksm: introduce ksm_max_page_sharing per page deduplication limit (bnc#1144338).\n- ksm: optimize refile of stable_node_dup at the head of the chain (bnc#1144338).\n- ksm: swap the two output parameters of chain/chain_prune (bnc#1144338).\n- KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (bsc#1117665).\n- mac80211: fix txq null pointer dereference (bsc#1051510).\n- mac80211: Reject malformed SSID elements (bsc#1051510).\n- md/raid0: avoid RAID0 data corruption due to layout confusion (bsc#1140090).\n- md/raid0: fix warning message for parameter default_layout (bsc#1140090).\n- Move upstreamed CA0132 fix into sorted section\n- netfilter: nf_nat: do not bug when mapping already exists (bsc#1146612).\n- net: openvswitch: free vport unless register_netdevice() succeeds (git-fixes).\n- net/phy: fix DP83865 10 Mbps HDX loopback disable function (networking-stable-19_09_30).\n- net: qlogic: Fix memory leak in ql_alloc_large_buffers (networking-stable-19_10_05).\n- net: qrtr: Stop rx_worker before freeing node (networking-stable-19_09_30).\n- net/rds: Fix error handling in rds_ib_add_one() (networking-stable-19_10_05).\n- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).\n- net/rds: remove user triggered WARN_ON in rds_sendmsg (bsc#1154848).\n- net: Replace NF_CT_ASSERT() with WARN_ON() (bsc#1146612).\n- net/sched: act_sample: do not push mac header on ip6gre ingress (networking-stable-19_09_30).\n- net_sched: add policy validation for action attributes (networking-stable-19_09_30).\n- net_sched: fix backward compatibility for TCA_ACT_KIND (git-fixes).\n- net: Unpublish sk from sk_reuseport_cb before call_rcu (networking-stable-19_10_05).\n- NFSv4.1 - backchannel request should hold ref on xprt (bsc#1152624).\n- nl80211: fix null pointer dereference (bsc#1051510).\n- openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC (networking-stable-19_09_30).\n- power: supply: max14656: fix potential use-after-free (bsc#1051510).\n- qmi_wwan: add support for Cinterion CLS8 devices (networking-stable-19_10_05).\n- r8152: Set macpassthru in reset_resume callback (bsc#1051510).\n- rds: Fix warning (bsc#1154848).\n- Revert \u0027ALSA: hda: Flush interrupts on disabling\u0027 (bsc#1051510).\n- Revert \u0027drm/radeon: Fix EEH during kexec\u0027 (bsc#1051510).\n- Revert synaptics-rmi4 patch due to regression (bsc#1155982) Also blacklisting it\n- rpm/kernel-subpackage-spec: Mention debuginfo in the subpackage description (bsc#1149119).\n- s390/cmf: set_schib_wait add timeout (bsc#1153509, bsc#1153476).\n- s390/cpumsf: Check for CPU Measurement sampling (bsc#1153681 LTC#181855).\n- sc16is7xx: Fix for \u0027Unexpected interrupt: 8\u0027 (bsc#1051510).\n- sch_cbq: validate TCA_CBQ_WRROPT to avoid crash (networking-stable-19_10_05).\n- sch_dsmark: fix potential NULL deref in dsmark_init() (networking-stable-19_10_05).\n- sched/fair: Avoid divide by zero when rebalancing domains (bsc#1096254).\n- sch_netem: fix a divide by zero in tabledist() (networking-stable-19_09_30).\n- scsi: lpfc: Fix devices that do not return after devloss followed by rediscovery (bsc#1137040).\n- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).\n- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Do command completion on abort timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: do not use zero for FC4_PRIORITY_NVME (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: Fix device connect issues in P2P configuration (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: Fix memory leak when sending I/O fails (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: Fix N2N link reset (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Fix N2N link up fail (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Fix partial flash write of MBI (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Fix SRB leak on switch command timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: fixup incorrect usage of host_byte (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Fix wait condition in loop (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Improve logging for scan thread (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Initialized mailbox to prevent driver load failure (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: Optimize NPIV tear down process (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Remove an include directive (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: remove redundant assignment to pointer host (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: Set remove flag for all VP (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Silence fwdump template message (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: stop timer in shutdown path (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Update driver version to 10.01.00.21-k (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: sd: Ignore a failure to sync cache due to lack of authorization (git-fixes).\n- scsi: storvsc: Add ability to change scsi queue depth (bsc#1155021).\n- scsi: zfcp: fix reaction on bit error threshold notification (bsc#1154956 LTC#182054).\n- serial: fix kernel-doc warning in comments (bsc#1051510).\n- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).\n- serial: uartlite: fix exit path null pointer (bsc#1051510).\n- skge: fix checksum byte order (networking-stable-19_09_30).\n- staging: rtl8188eu: fix null dereference when kzalloc fails (bsc#1051510).\n- staging: wlan-ng: fix exit return when sme-\u003ekey_idx \u003e= NUM_WEPKEYS (bsc#1051510).\n- supporte.conf: add efivarfs to kernel-default-base (bsc#1154858).\n- tipc: fix unlimited bundling of small messages (networking-stable-19_10_05).\n- tracing: Get trace_array reference for available_tracers files (bsc#1156429).\n- usb: gadget: Reject endpoints with 0 maxpacket value (bsc#1051510).\n- usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode (bsc#1051510).\n- usb: handle warm-reset port requests on hub resume (bsc#1051510).\n- usb: ldusb: fix control-message timeout (bsc#1051510).\n- usb: ldusb: fix memleak on disconnect (bsc#1051510).\n- usb: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).\n- usb: ldusb: fix read info leaks (bsc#1051510).\n- usb: ldusb: fix ring-buffer locking (bsc#1051510).\n- usb: legousbtower: fix a signedness bug in tower_probe() (bsc#1051510).\n- usb: legousbtower: fix memleak on disconnect (bsc#1051510).\n- usb: serial: ti_usb_3410_5052: fix port-close races (bsc#1051510).\n- usb: serial: whiteheat: fix line-speed endianness (bsc#1051510).\n- usb: serial: whiteheat: fix potential slab corruption (bsc#1051510).\n- usb-storage: Revert commit 747668dbc061 (\u0027usb-storage: Set virt_boundary_mask to avoid SG overflows\u0027) (bsc#1051510).\n- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).\n- usb: usblp: fix use-after-free on disconnect (bsc#1051510).\n- vsock: Fix a lockdep warning in __vsock_release() (networking-stable-19_10_05).\n- x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area (bnc#1153969).\n- x86/boot/64: Round memory hole size up to next PMD page (bnc#1153969).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2019-2503",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_2503-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2019:2503-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GT2JTOAOVM6XT2DFUS6CAXI4NAAVMRVR/#GT2JTOAOVM6XT2DFUS6CAXI4NAAVMRVR"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2019:2503-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GT2JTOAOVM6XT2DFUS6CAXI4NAAVMRVR/#GT2JTOAOVM6XT2DFUS6CAXI4NAAVMRVR"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1048942",
        "url": "https://bugzilla.suse.com/1048942"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1051510",
        "url": "https://bugzilla.suse.com/1051510"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1082635",
        "url": "https://bugzilla.suse.com/1082635"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1083647",
        "url": "https://bugzilla.suse.com/1083647"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1090631",
        "url": "https://bugzilla.suse.com/1090631"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1096254",
        "url": "https://bugzilla.suse.com/1096254"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1117665",
        "url": "https://bugzilla.suse.com/1117665"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1119461",
        "url": "https://bugzilla.suse.com/1119461"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1119465",
        "url": "https://bugzilla.suse.com/1119465"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1123034",
        "url": "https://bugzilla.suse.com/1123034"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1135966",
        "url": "https://bugzilla.suse.com/1135966"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1135967",
        "url": "https://bugzilla.suse.com/1135967"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1137040",
        "url": "https://bugzilla.suse.com/1137040"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1138190",
        "url": "https://bugzilla.suse.com/1138190"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1139073",
        "url": "https://bugzilla.suse.com/1139073"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140090",
        "url": "https://bugzilla.suse.com/1140090"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1143706",
        "url": "https://bugzilla.suse.com/1143706"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1144338",
        "url": "https://bugzilla.suse.com/1144338"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1144903",
        "url": "https://bugzilla.suse.com/1144903"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1146612",
        "url": "https://bugzilla.suse.com/1146612"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1149119",
        "url": "https://bugzilla.suse.com/1149119"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1150457",
        "url": "https://bugzilla.suse.com/1150457"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1150466",
        "url": "https://bugzilla.suse.com/1150466"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1152624",
        "url": "https://bugzilla.suse.com/1152624"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1152685",
        "url": "https://bugzilla.suse.com/1152685"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1152782",
        "url": "https://bugzilla.suse.com/1152782"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1153476",
        "url": "https://bugzilla.suse.com/1153476"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1153509",
        "url": "https://bugzilla.suse.com/1153509"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1153681",
        "url": "https://bugzilla.suse.com/1153681"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1153969",
        "url": "https://bugzilla.suse.com/1153969"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154124",
        "url": "https://bugzilla.suse.com/1154124"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154526",
        "url": "https://bugzilla.suse.com/1154526"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154737",
        "url": "https://bugzilla.suse.com/1154737"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154848",
        "url": "https://bugzilla.suse.com/1154848"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154858",
        "url": "https://bugzilla.suse.com/1154858"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154905",
        "url": "https://bugzilla.suse.com/1154905"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154956",
        "url": "https://bugzilla.suse.com/1154956"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155021",
        "url": "https://bugzilla.suse.com/1155021"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155178",
        "url": "https://bugzilla.suse.com/1155178"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155179",
        "url": "https://bugzilla.suse.com/1155179"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155184",
        "url": "https://bugzilla.suse.com/1155184"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155186",
        "url": "https://bugzilla.suse.com/1155186"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155671",
        "url": "https://bugzilla.suse.com/1155671"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155692",
        "url": "https://bugzilla.suse.com/1155692"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155836",
        "url": "https://bugzilla.suse.com/1155836"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155982",
        "url": "https://bugzilla.suse.com/1155982"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156187",
        "url": "https://bugzilla.suse.com/1156187"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156429",
        "url": "https://bugzilla.suse.com/1156429"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-12207 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-12207/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-0154 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-0154/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-0155 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-0155/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10220 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10220/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11135 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11135/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16231 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16231/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16233 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16233/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16995 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16995/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-17055 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-17055/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-18805 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-18805/"
      }
    ],
    "title": "Security update for the Linux Kernel",
    "tracking": {
      "current_release_date": "2019-11-14T05:53:54Z",
      "generator": {
        "date": "2019-11-14T05:53:54Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2019:2503-1",
      "initial_release_date": "2019-11-14T05:53:54Z",
      "revision_history": [
        {
          "date": "2019-11-14T05:53:54Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-4.12.14-lp150.12.82.1.noarch",
                "product": {
                  "name": "kernel-devel-4.12.14-lp150.12.82.1.noarch",
                  "product_id": "kernel-devel-4.12.14-lp150.12.82.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-docs-4.12.14-lp150.12.82.1.noarch",
                "product": {
                  "name": "kernel-docs-4.12.14-lp150.12.82.1.noarch",
                  "product_id": "kernel-docs-4.12.14-lp150.12.82.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
                "product": {
                  "name": "kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
                  "product_id": "kernel-docs-html-4.12.14-lp150.12.82.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-4.12.14-lp150.12.82.1.noarch",
                "product": {
                  "name": "kernel-macros-4.12.14-lp150.12.82.1.noarch",
                  "product_id": "kernel-macros-4.12.14-lp150.12.82.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-4.12.14-lp150.12.82.1.noarch",
                "product": {
                  "name": "kernel-source-4.12.14-lp150.12.82.1.noarch",
                  "product_id": "kernel-source-4.12.14-lp150.12.82.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
                "product": {
                  "name": "kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
                  "product_id": "kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-debug-4.12.14-lp150.12.82.1.x86_64",
                "product": {
                  "name": "kernel-debug-4.12.14-lp150.12.82.1.x86_64",
                  "product_id": "kernel-debug-4.12.14-lp150.12.82.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
                "product": {
                  "name": "kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
                  "product_id": "kernel-debug-base-4.12.14-lp150.12.82.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
                "product": {
                  "name": "kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
                  "product_id": "kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-4.12.14-lp150.12.82.1.x86_64",
                "product": {
                  "name": "kernel-default-4.12.14-lp150.12.82.1.x86_64",
                  "product_id": "kernel-default-4.12.14-lp150.12.82.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
                "product": {
                  "name": "kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
                  "product_id": "kernel-default-base-4.12.14-lp150.12.82.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
                "product": {
                  "name": "kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
                  "product_id": "kernel-default-devel-4.12.14-lp150.12.82.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
                  "product_id": "kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
                  "product_id": "kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
                  "product_id": "kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
                "product": {
                  "name": "kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
                  "product_id": "kernel-obs-build-4.12.14-lp150.12.82.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
                "product": {
                  "name": "kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
                  "product_id": "kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-syms-4.12.14-lp150.12.82.1.x86_64",
                "product": {
                  "name": "kernel-syms-4.12.14-lp150.12.82.1.x86_64",
                  "product_id": "kernel-syms-4.12.14-lp150.12.82.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
                "product": {
                  "name": "kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
                  "product_id": "kernel-vanilla-4.12.14-lp150.12.82.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
                "product": {
                  "name": "kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
                  "product_id": "kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64",
                "product": {
                  "name": "kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64",
                  "product_id": "kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.0",
                "product": {
                  "name": "openSUSE Leap 15.0",
                  "product_id": "openSUSE Leap 15.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-4.12.14-lp150.12.82.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64"
        },
        "product_reference": "kernel-debug-4.12.14-lp150.12.82.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-base-4.12.14-lp150.12.82.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64"
        },
        "product_reference": "kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64"
        },
        "product_reference": "kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-4.12.14-lp150.12.82.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64"
        },
        "product_reference": "kernel-default-4.12.14-lp150.12.82.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-base-4.12.14-lp150.12.82.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64"
        },
        "product_reference": "kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-devel-4.12.14-lp150.12.82.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64"
        },
        "product_reference": "kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-4.12.14-lp150.12.82.1.noarch as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch"
        },
        "product_reference": "kernel-devel-4.12.14-lp150.12.82.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-docs-4.12.14-lp150.12.82.1.noarch as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch"
        },
        "product_reference": "kernel-docs-4.12.14-lp150.12.82.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-docs-html-4.12.14-lp150.12.82.1.noarch as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch"
        },
        "product_reference": "kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-4.12.14-lp150.12.82.1.noarch as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch"
        },
        "product_reference": "kernel-macros-4.12.14-lp150.12.82.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-obs-build-4.12.14-lp150.12.82.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64"
        },
        "product_reference": "kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64"
        },
        "product_reference": "kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-4.12.14-lp150.12.82.1.noarch as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch"
        },
        "product_reference": "kernel-source-4.12.14-lp150.12.82.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch"
        },
        "product_reference": "kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-syms-4.12.14-lp150.12.82.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64"
        },
        "product_reference": "kernel-syms-4.12.14-lp150.12.82.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-vanilla-4.12.14-lp150.12.82.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64"
        },
        "product_reference": "kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64"
        },
        "product_reference": "kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
        },
        "product_reference": "kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-12207",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-12207"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-12207",
          "url": "https://www.suse.com/security/cve/CVE-2018-12207"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1117665 for CVE-2018-12207",
          "url": "https://bugzilla.suse.com/1117665"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1139073 for CVE-2018-12207",
          "url": "https://bugzilla.suse.com/1139073"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1152505 for CVE-2018-12207",
          "url": "https://bugzilla.suse.com/1152505"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1155812 for CVE-2018-12207",
          "url": "https://bugzilla.suse.com/1155812"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1155817 for CVE-2018-12207",
          "url": "https://bugzilla.suse.com/1155817"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1155945 for CVE-2018-12207",
          "url": "https://bugzilla.suse.com/1155945"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2018-12207",
          "url": "https://bugzilla.suse.com/1178658"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201877 for CVE-2018-12207",
          "url": "https://bugzilla.suse.com/1201877"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-14T05:53:54Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-12207"
    },
    {
      "cve": "CVE-2019-0154",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-0154"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 and E-2100 Processor Families may allow an authenticated user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-0154",
          "url": "https://www.suse.com/security/cve/CVE-2019-0154"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135966 for CVE-2019-0154",
          "url": "https://bugzilla.suse.com/1135966"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1181720 for CVE-2019-0154",
          "url": "https://bugzilla.suse.com/1181720"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-14T05:53:54Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-0154"
    },
    {
      "cve": "CVE-2019-0155",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-0155"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6, E-2100 and E-2200 Processor Families; Intel(R) Graphics Driver for Windows before 26.20.100.6813 (DCH) or 26.20.100.6812 and before 21.20.x.5077 (aka15.45.5077), i915 Linux Driver for Intel(R) Processor Graphics before versions 5.4-rc7, 5.3.11, 4.19.84, 4.14.154, 4.9.201, 4.4.201 may allow an authenticated user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-0155",
          "url": "https://www.suse.com/security/cve/CVE-2019-0155"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135966 for CVE-2019-0155",
          "url": "https://bugzilla.suse.com/1135966"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135967 for CVE-2019-0155",
          "url": "https://bugzilla.suse.com/1135967"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1173663 for CVE-2019-0155",
          "url": "https://bugzilla.suse.com/1173663"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-14T05:53:54Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-0155"
    },
    {
      "cve": "CVE-2019-10220",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10220"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10220",
          "url": "https://www.suse.com/security/cve/CVE-2019-10220"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1144903 for CVE-2019-10220",
          "url": "https://bugzilla.suse.com/1144903"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1153108 for CVE-2019-10220",
          "url": "https://bugzilla.suse.com/1153108"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-14T05:53:54Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10220"
    },
    {
      "cve": "CVE-2019-11135",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11135"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11135",
          "url": "https://www.suse.com/security/cve/CVE-2019-11135"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1139073 for CVE-2019-11135",
          "url": "https://bugzilla.suse.com/1139073"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1152497 for CVE-2019-11135",
          "url": "https://bugzilla.suse.com/1152497"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1152505 for CVE-2019-11135",
          "url": "https://bugzilla.suse.com/1152505"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1152506 for CVE-2019-11135",
          "url": "https://bugzilla.suse.com/1152506"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1160120 for CVE-2019-11135",
          "url": "https://bugzilla.suse.com/1160120"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201877 for CVE-2019-11135",
          "url": "https://bugzilla.suse.com/1201877"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-14T05:53:54Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-11135"
    },
    {
      "cve": "CVE-2019-16231",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16231"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16231",
          "url": "https://www.suse.com/security/cve/CVE-2019-16231"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150466 for CVE-2019-16231",
          "url": "https://bugzilla.suse.com/1150466"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-14T05:53:54Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-16231"
    },
    {
      "cve": "CVE-2019-16233",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16233"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16233",
          "url": "https://www.suse.com/security/cve/CVE-2019-16233"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150457 for CVE-2019-16233",
          "url": "https://bugzilla.suse.com/1150457"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-14T05:53:54Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-16233"
    },
    {
      "cve": "CVE-2019-16995",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16995"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16995",
          "url": "https://www.suse.com/security/cve/CVE-2019-16995"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1152685 for CVE-2019-16995",
          "url": "https://bugzilla.suse.com/1152685"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-14T05:53:54Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-16995"
    },
    {
      "cve": "CVE-2019-17055",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-17055"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-17055",
          "url": "https://www.suse.com/security/cve/CVE-2019-17055"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1152782 for CVE-2019-17055",
          "url": "https://bugzilla.suse.com/1152782"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-14T05:53:54Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-17055"
    },
    {
      "cve": "CVE-2019-18805",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-18805"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
          "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
          "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-18805",
          "url": "https://www.suse.com/security/cve/CVE-2019-18805"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156187 for CVE-2019-18805",
          "url": "https://bugzilla.suse.com/1156187"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.0:kernel-debug-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-debug-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-default-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-devel-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-docs-html-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-kvmsmall-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-kvmsmall-devel-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-macros-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-obs-build-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-obs-qa-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-source-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-source-vanilla-4.12.14-lp150.12.82.1.noarch",
            "openSUSE Leap 15.0:kernel-syms-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-base-4.12.14-lp150.12.82.1.x86_64",
            "openSUSE Leap 15.0:kernel-vanilla-devel-4.12.14-lp150.12.82.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-14T05:53:54Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-18805"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\n\nThe openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2019-0154: An unprotected read access to i915 registers has been fixed that could have been abused to facilitate a local denial-of-service attack.  (bsc#1135966)\n- CVE-2019-0155: A privilege escalation vulnerability has been fixed in the i915 module that allowed batch buffers from user mode to gain super user privileges. (bsc#1135967)\n- CVE-2019-16231: drivers/net/fjes/fjes_main.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150466).\n- CVE-2019-18805: There was a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6 (bnc#1156187).\n- CVE-2019-17055: base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module did not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21 (bnc#1152782).\n- CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described \u0027Microarchitectural Data Sampling\u0027 attack.\n\n  The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW).\n\n  The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251\n- CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional.\n\n  The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in executable pages by splitting / merging huge pages into small pages as needed.\n\n  More information can be found on https://www.suse.com/support/kb/doc/?id=7023735\n- CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903).\n\nThe following non-security bugs were fixed:\n\n- ALSA: bebob: Fix prototype of helper function to return negative value (bsc#1051510).\n- ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series (git-fixes).\n- ALSA: firewire-motu: add support for MOTU 4pre (bsc#1111666).\n- ALSA: hda/ca0132 - Fix possible workqueue stall (bsc#1155836).\n- ALSA: hda/realtek - Add support for ALC623 (bsc#1051510).\n- ALSA: hda/realtek - Fix 2 front mics of codec 0x623 (bsc#1051510).\n- ALSA: timer: Fix incorrectly assigned timer instance (git-fixes).\n- ALSA: timer: Fix mutex deadlock at releasing card (bsc#1051510).\n- ALSA: usb-audio: Add DSD support for Gustard U16/X26 USB Interface (bsc#1051510).\n- ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1111666).\n- ALSA: usb-audio: Fix copy\u0026paste error in the validator (bsc#1111666).\n- arm64: Add decoding macros for CP15_32 and CP15_64 traps (jsc#ECO-561).\n- arm64: Add part number for Neoverse N1 (jsc#ECO-561).\n- arm64: Add silicon-errata.txt entry for ARM erratum 1188873 (jsc#ECO-561).\n- arm64: Add support for new control bits CTR_EL0.DIC and CTR_EL0.IDC (jsc#ECO-561,jsc#SLE-10671).\n- arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (jsc#ECO-561).\n- arm64: arch_timer: Add workaround for ARM erratum 1188873 (jsc#ECO-561).\n- arm64: arch_timer: avoid unused function warning (jsc#ECO-561).\n- arm64: compat: Add CNTFRQ trap handler (jsc#ECO-561).\n- arm64: compat: Add CNTVCT trap handler (jsc#ECO-561).\n- arm64: compat: Add condition code checks and IT advance (jsc#ECO-561).\n- arm64: compat: Add cp15_32 and cp15_64 handler arrays (jsc#ECO-561).\n- arm64: compat: Add separate CP15 trapping hook (jsc#ECO-561).\n- arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (jsc#ECO-561,jsc#SLE-10671).\n- arm64: cpu_errata: Remove ARM64_MISMATCHED_CACHE_LINE_SIZE (jsc#ECO-561,jsc#SLE-10671).\n- arm64/cpufeature: Convert hook_lock to raw_spin_lock_t in cpu_enable_ssbs() (jsc#ECO-561).\n- arm64: cpufeature: ctr: Fix cpu capability check for late CPUs (jsc#ECO-561,jsc#SLE-10671).\n- arm64: cpufeature: Detect SSBS and advertise to userspace (jsc#ECO-561).\n- arm64: cpufeature: Fix handling of CTR_EL0.IDC field (jsc#ECO-561,jsc#SLE-10671).\n- arm64: cpufeature: Trap CTR_EL0 access only where it is necessary (jsc#ECO-561,jsc#SLE-10671).\n- arm64: cpu: Move errata and feature enable callbacks closer to callers (jsc#ECO-561).\n- arm64: entry: Allow handling of undefined instructions from EL1 (jsc#ECO-561).\n- arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (jsc#ECO-561,jsc#SLE-10671).\n- arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (jsc#ECO-561,jsc#SLE-10671).\n- arm64: Fix mismatched cache line size detection (jsc#ECO-561,jsc#SLE-10671).\n- arm64: Fix silly typo in comment (jsc#ECO-561).\n- arm64: fix SSBS sanitization (jsc#ECO-561).\n- arm64: force_signal_inject: WARN if called from kernel context (jsc#ECO-561).\n- arm64: Force SSBS on context switch (jsc#ECO-561).\n- arm64: Handle erratum 1418040 as a superset of erratum 1188873 (jsc#ECO-561).\n- arm64: Introduce sysreg_clear_set() (jsc#ECO-561).\n- arm64: kill change_cpacr() (jsc#ECO-561).\n- arm64: kill config_sctlr_el1() (jsc#ECO-561).\n- arm64: KVM: Add invalidate_icache_range helper (jsc#ECO-561,jsc#SLE-10671).\n- arm64: KVM: PTE/PMD S2 XN bit definition (jsc#ECO-561,jsc#SLE-10671).\n- arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (jsc#ECO-561).\n- arm64: move SCTLR_EL{1,2} assertions to \u0026lt;asm/sysreg.h\u003e (jsc#ECO-561).\n- arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (jsc#ECO-561).\n- arm64: ssbd: Add support for PSTATE.SSBS rather than trapping to EL3 (jsc#ECO-561).\n- arm64: ssbd: Drop #ifdefs for PR_SPEC_STORE_BYPASS (jsc#ECO-561).\n- arm: KVM: Add optimized PIPT icache flushing (jsc#ECO-561,jsc#SLE-10671).\n- ath10k: assign \u0027n_cipher_suites = 11\u0027 for WCN3990 to enable WPA3 (bsc#1111666).\n- brcmfmac: sdio: Disable auto-tuning around commands expected to fail (bsc#1111666).\n- brcmfmac: sdio: Do not tune while the card is off (bsc#1111666).\n- can: dev: call netif_carrier_off() in register_candev() (bsc#1051510).\n- config: arm64: enable erratum 1418040 and 1542419\n- dmaengine: bcm2835: Print error in case setting DMA mask fails (bsc#1051510).\n- dmaengine: imx-sdma: fix size check for sdma script_number (bsc#1051510).\n- drm/amd/display: fix odm combine pipe reset (bsc#1111666).\n- drm/amdgpu: fix memory leak (bsc#1111666).\n- drm/amdgpu/powerplay/vega10: allow undervolting in p7 (bsc#1111666).\n- drm/i915: Add gen9 BCS cmdparsing (bsc#1135967)\n- drm/i915: Add gen9 BCS cmdparsing (bsc#1135967)\n- drm/i915: Add support for mandatory cmdparsing (bsc#1135967)\n- drm/i915: Add support for mandatory cmdparsing (bsc#1135967)\n- drm/i915: Allow parsing of unsized batches (bsc#1135967)\n- drm/i915: Allow parsing of unsized batches (bsc#1135967)\n- drm/i915/cmdparser: Add support for backward jumps (bsc#1135967)\n- drm/i915/cmdparser: Add support for backward jumps (bsc#1135967)\n- drm/i915/cmdparser: Ignore Length operands during (bsc#1135967)\n- drm/i915/cmdparser: Ignore Length operands during command matching (bsc#1135967)\n- drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967)\n- drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967)\n- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).\n- drm/i915: Disable Secure Batches for gen6+\n- drm/i915: Disable Secure Batches for gen6+ (bsc#1135967)\n- drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967)\n- drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967)\n- drm/i915/gtt: Add read only pages to gen8_pte_encode (bsc#1135967)\n- drm/i915/gtt: Disable read-only support under GVT (bsc#1135967)\n- drm/i915/gtt: Read-only pages for insert_entries on bdw (bsc#1135967)\n- drm/i915/ilk: Fix warning when reading emon_status with no output (bsc#1111666).\n- drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967)\n- drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967)\n- drm/i915: Prevent writing into a read-only object via a GGTT mmap (bsc#1135967)\n- drm/i915: Remove Master tables from cmdparser\n- drm/i915: Remove Master tables from cmdparser (bsc#1135967)\n- drm/i915: Rename gen7 cmdparser tables (bsc#1135967)\n- drm/i915: Rename gen7 cmdparser tables (bsc#1135967)\n- drm/i915: Support ro ppgtt mapped cmdparser shadow (bsc#1135967)\n- drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (bsc#1135967)\n- drm/msm/dpu: handle failures while initializing displays (bsc#1111666).\n- hyperv: set nvme msi interrupts to unmanaged (jsc#SLE-8953, jsc#SLE-9221, jsc#SLE-4941, bsc#1119461, bsc#1119465, bsc#1138190, bsc#1154905).\n- IB/core: Add mitigation for Spectre V1 (bsc#1155671)\n- integrity: prevent deadlock during digsig verification (bsc#1090631).\n- irqchip/gic-v3-its: Fix command queue pointer comparison bug (jsc#ECO-561).\n- irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices (jsc#ECO-561).\n- irqchip/gic-v3-its: Fix misuse of GENMASK macro (jsc#ECO-561).\n- iwlwifi: do not panic in error path on non-msix systems (bsc#1155692).\n- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).\n- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).\n- iwlwifi: fw: do not send GEO_TX_POWER_LIMIT command to FW version 36 (bsc#1111666).\n- kabi protect enum RDMA_DRIVER_EFA (jsc#SLE-4805)\n- kABI workaround for drm_vma_offset_node readonly field addition (bsc#1135967)\n- kABI workaround for mmc_host retune_crc_disable flag addition (bsc#1111666).\n- KVM: arm64: Set SCTLR_EL2.DSSBS if SSBD is forcefully disabled and !vhe (jsc#ECO-561).\n- KVM: arm/arm64: Clean dcache to PoC when changing PTE due to CoW (jsc#ECO-561,jsc#SLE-10671).\n- KVM: arm/arm64: Detangle kvm_mmu.h from kvm_hyp.h (jsc#ECO-561,jsc#SLE-10671).\n- KVM: arm/arm64: Drop vcpu parameter from guest cache maintenance operartions (jsc#ECO-561,jsc#SLE-10671).\n- KVM: arm/arm64: Limit icache invalidation to prefetch aborts (jsc#ECO-561,jsc#SLE-10671).\n- KVM: arm/arm64: Only clean the dcache on translation fault (jsc#ECO-561,jsc#SLE-10671).\n- KVM: arm/arm64: Preserve Exec permission across R/W permission faults (jsc#ECO-561,jsc#SLE-10671).\n- KVM: arm/arm64: Split dcache/icache flushing (jsc#ECO-561,jsc#SLE-10671).\n- KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (bsc#1117665).\n- md/raid0: avoid RAID0 data corruption due to layout confusion (bsc#1140090).\n- md/raid0: fix warning message for parameter default_layout (bsc#1140090).\n- mmc: core: Add sdio_retune_hold_now() and sdio_retune_release() (bsc#1111666).\n- mmc: core: API to temporarily disable retuning for SDIO CRC errors (bsc#1111666).\n- Move upstreamed CA0132 fix into sorted section\n- net: openvswitch: free vport unless register_netdevice() succeeds (git-fixes).\n- phylink: fix kernel-doc warnings (bsc#1111666).\n- power: supply: max14656: fix potential use-after-free (bsc#1051510).\n- RDMA/efa: Add Amazon EFA driver (jsc#SLE-4805)\n- RDMA/hns: Add reset process for function-clear (bsc#1155061).\n- RDMA/hns: Remove the some magic number (bsc#1155061).\n- RDMA/restrack: Track driver QP types in resource tracker (jsc#SLE-4805)\n- Revert \u0027ALSA: hda: Flush interrupts on disabling\u0027 (bsc#1051510).\n- Revert synaptics-rmi4 patch due to regression (bsc#1155982) Also blacklisting it\n- rpm/kernel-subpackage-spec: Mention debuginfo in the subpackage description (bsc#1149119).\n- s390: add support for IBM z15 machines (bsc#1152696 LTC#181731).\n- s390/cpumsf: Check for CPU Measurement sampling (bsc#1153681 LTC#181855).\n- s390: fix setting of mio addressing control (bsc#1152665 LTC#181729).\n- s390/pci: add mio_enabled attribute (bsc#1152665 LTC#181729).\n- s390/pci: correctly handle MIO opt-out (bsc#1152665 LTC#181729).\n- s390/pci: deal with devices that have no support for MIO instructions (bsc#1152665 LTC#181729).\n- s390/pci: fix MSI message data (bsc#1152697 LTC#181730).\n- sc16is7xx: Fix for \u0027Unexpected interrupt: 8\u0027 (bsc#1051510).\n- sched/fair: Avoid divide by zero when rebalancing domains (bsc#1096254).\n- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).\n- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Do command completion on abort timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: do not use zero for FC4_PRIORITY_NVME (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: Fix device connect issues in P2P configuration (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: Fix memory leak when sending I/O fails (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: Fix N2N link reset (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Fix N2N link up fail (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Fix partial flash write of MBI (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Fix SRB leak on switch command timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: fixup incorrect usage of host_byte (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Improve logging for scan thread (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Initialized mailbox to prevent driver load failure (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: Optimize NPIV tear down process (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Remove an include directive (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: remove redundant assignment to pointer host (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: qla2xxx: Set remove flag for all VP (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Silence fwdump template message (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: stop timer in shutdown path (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1143706 bsc#1082635 bsc#1123034).\n- scsi: qla2xxx: Update driver version to 10.01.00.21-k (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).\n- scsi: sd: Ignore a failure to sync cache due to lack of authorization (git-fixes).\n- scsi: storvsc: Add ability to change scsi queue depth (bsc#1155021).\n- scsi: zfcp: fix reaction on bit error threshold notification (bsc#1154956 LTC#182054).\n- serial: fix kernel-doc warning in comments (bsc#1051510).\n- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).\n- serial: uartlite: fix exit path null pointer (bsc#1051510).\n- staging: rtl8188eu: fix null dereference when kzalloc fails (bsc#1051510).\n- supporte.conf: add efivarfs to kernel-default-base (bsc#1154858).\n- tracing: Get trace_array reference for available_tracers files (bsc#1156429).\n- usb: gadget: Reject endpoints with 0 maxpacket value (bsc#1051510).\n- usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode (bsc#1051510).\n- usb: handle warm-reset port requests on hub resume (bsc#1051510).\n- usb: ldusb: fix control-message timeout (bsc#1051510).\n- usb: ldusb: fix ring-buffer locking (bsc#1051510).\n- usb: serial: whiteheat: fix line-speed endianness (bsc#1051510).\n- usb: serial: whiteheat: fix potential slab corruption (bsc#1051510).\n- usb-storage: Revert commit 747668dbc061 (\u0027usb-storage: Set virt_boundary_mask to avoid SG overflows\u0027) (bsc#1051510).\n- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2019-2507",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_2507-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2019:2507-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/45LLGKHM3X6KQJN67OZHE3KEGCRBVGEJ/#45LLGKHM3X6KQJN67OZHE3KEGCRBVGEJ"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2019:2507-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/45LLGKHM3X6KQJN67OZHE3KEGCRBVGEJ/#45LLGKHM3X6KQJN67OZHE3KEGCRBVGEJ"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1048942",
        "url": "https://bugzilla.suse.com/1048942"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1051510",
        "url": "https://bugzilla.suse.com/1051510"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1082635",
        "url": "https://bugzilla.suse.com/1082635"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1090631",
        "url": "https://bugzilla.suse.com/1090631"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1096254",
        "url": "https://bugzilla.suse.com/1096254"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1111666",
        "url": "https://bugzilla.suse.com/1111666"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1117665",
        "url": "https://bugzilla.suse.com/1117665"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1119461",
        "url": "https://bugzilla.suse.com/1119461"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1119465",
        "url": "https://bugzilla.suse.com/1119465"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1123034",
        "url": "https://bugzilla.suse.com/1123034"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1135966",
        "url": "https://bugzilla.suse.com/1135966"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1135967",
        "url": "https://bugzilla.suse.com/1135967"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1138190",
        "url": "https://bugzilla.suse.com/1138190"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1139073",
        "url": "https://bugzilla.suse.com/1139073"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1140090",
        "url": "https://bugzilla.suse.com/1140090"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1143706",
        "url": "https://bugzilla.suse.com/1143706"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1144903",
        "url": "https://bugzilla.suse.com/1144903"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1149119",
        "url": "https://bugzilla.suse.com/1149119"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1150466",
        "url": "https://bugzilla.suse.com/1150466"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1152665",
        "url": "https://bugzilla.suse.com/1152665"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1152696",
        "url": "https://bugzilla.suse.com/1152696"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1152697",
        "url": "https://bugzilla.suse.com/1152697"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1152782",
        "url": "https://bugzilla.suse.com/1152782"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1153681",
        "url": "https://bugzilla.suse.com/1153681"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154124",
        "url": "https://bugzilla.suse.com/1154124"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154526",
        "url": "https://bugzilla.suse.com/1154526"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154858",
        "url": "https://bugzilla.suse.com/1154858"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154905",
        "url": "https://bugzilla.suse.com/1154905"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154956",
        "url": "https://bugzilla.suse.com/1154956"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155021",
        "url": "https://bugzilla.suse.com/1155021"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155061",
        "url": "https://bugzilla.suse.com/1155061"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155671",
        "url": "https://bugzilla.suse.com/1155671"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155692",
        "url": "https://bugzilla.suse.com/1155692"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155836",
        "url": "https://bugzilla.suse.com/1155836"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155982",
        "url": "https://bugzilla.suse.com/1155982"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156187",
        "url": "https://bugzilla.suse.com/1156187"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156429",
        "url": "https://bugzilla.suse.com/1156429"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-12207 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-12207/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-0154 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-0154/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-0155 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-0155/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10220 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10220/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11135 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11135/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16231 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16231/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-17055 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-17055/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-18805 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-18805/"
      }
    ],
    "title": "Security update for the Linux Kernel",
    "tracking": {
      "current_release_date": "2019-11-14T05:59:09Z",
      "generator": {
        "date": "2019-11-14T05:59:09Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2019:2507-1",
      "initial_release_date": "2019-11-14T05:59:09Z",
      "revision_history": [
        {
          "date": "2019-11-14T05:59:09Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-4.12.14-lp151.28.32.1.noarch",
                "product": {
                  "name": "kernel-devel-4.12.14-lp151.28.32.1.noarch",
                  "product_id": "kernel-devel-4.12.14-lp151.28.32.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-docs-4.12.14-lp151.28.32.1.noarch",
                "product": {
                  "name": "kernel-docs-4.12.14-lp151.28.32.1.noarch",
                  "product_id": "kernel-docs-4.12.14-lp151.28.32.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
                "product": {
                  "name": "kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
                  "product_id": "kernel-docs-html-4.12.14-lp151.28.32.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-4.12.14-lp151.28.32.1.noarch",
                "product": {
                  "name": "kernel-macros-4.12.14-lp151.28.32.1.noarch",
                  "product_id": "kernel-macros-4.12.14-lp151.28.32.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-4.12.14-lp151.28.32.1.noarch",
                "product": {
                  "name": "kernel-source-4.12.14-lp151.28.32.1.noarch",
                  "product_id": "kernel-source-4.12.14-lp151.28.32.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
                "product": {
                  "name": "kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
                  "product_id": "kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-debug-4.12.14-lp151.28.32.1.x86_64",
                "product": {
                  "name": "kernel-debug-4.12.14-lp151.28.32.1.x86_64",
                  "product_id": "kernel-debug-4.12.14-lp151.28.32.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
                "product": {
                  "name": "kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
                  "product_id": "kernel-debug-base-4.12.14-lp151.28.32.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
                "product": {
                  "name": "kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
                  "product_id": "kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-4.12.14-lp151.28.32.1.x86_64",
                "product": {
                  "name": "kernel-default-4.12.14-lp151.28.32.1.x86_64",
                  "product_id": "kernel-default-4.12.14-lp151.28.32.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
                "product": {
                  "name": "kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
                  "product_id": "kernel-default-base-4.12.14-lp151.28.32.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
                "product": {
                  "name": "kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
                  "product_id": "kernel-default-devel-4.12.14-lp151.28.32.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
                  "product_id": "kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
                  "product_id": "kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
                  "product_id": "kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
                "product": {
                  "name": "kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
                  "product_id": "kernel-obs-build-4.12.14-lp151.28.32.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
                "product": {
                  "name": "kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
                  "product_id": "kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-syms-4.12.14-lp151.28.32.1.x86_64",
                "product": {
                  "name": "kernel-syms-4.12.14-lp151.28.32.1.x86_64",
                  "product_id": "kernel-syms-4.12.14-lp151.28.32.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
                "product": {
                  "name": "kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
                  "product_id": "kernel-vanilla-4.12.14-lp151.28.32.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
                "product": {
                  "name": "kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
                  "product_id": "kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64",
                "product": {
                  "name": "kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64",
                  "product_id": "kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.1",
                "product": {
                  "name": "openSUSE Leap 15.1",
                  "product_id": "openSUSE Leap 15.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-4.12.14-lp151.28.32.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64"
        },
        "product_reference": "kernel-debug-4.12.14-lp151.28.32.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-base-4.12.14-lp151.28.32.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64"
        },
        "product_reference": "kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64"
        },
        "product_reference": "kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-4.12.14-lp151.28.32.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64"
        },
        "product_reference": "kernel-default-4.12.14-lp151.28.32.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-base-4.12.14-lp151.28.32.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64"
        },
        "product_reference": "kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-devel-4.12.14-lp151.28.32.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64"
        },
        "product_reference": "kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-4.12.14-lp151.28.32.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch"
        },
        "product_reference": "kernel-devel-4.12.14-lp151.28.32.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-docs-4.12.14-lp151.28.32.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch"
        },
        "product_reference": "kernel-docs-4.12.14-lp151.28.32.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-docs-html-4.12.14-lp151.28.32.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch"
        },
        "product_reference": "kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-4.12.14-lp151.28.32.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch"
        },
        "product_reference": "kernel-macros-4.12.14-lp151.28.32.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-obs-build-4.12.14-lp151.28.32.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64"
        },
        "product_reference": "kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64"
        },
        "product_reference": "kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-4.12.14-lp151.28.32.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch"
        },
        "product_reference": "kernel-source-4.12.14-lp151.28.32.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch"
        },
        "product_reference": "kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-syms-4.12.14-lp151.28.32.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64"
        },
        "product_reference": "kernel-syms-4.12.14-lp151.28.32.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-vanilla-4.12.14-lp151.28.32.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64"
        },
        "product_reference": "kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64"
        },
        "product_reference": "kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
        },
        "product_reference": "kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-12207",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-12207"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-12207",
          "url": "https://www.suse.com/security/cve/CVE-2018-12207"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1117665 for CVE-2018-12207",
          "url": "https://bugzilla.suse.com/1117665"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1139073 for CVE-2018-12207",
          "url": "https://bugzilla.suse.com/1139073"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1152505 for CVE-2018-12207",
          "url": "https://bugzilla.suse.com/1152505"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1155812 for CVE-2018-12207",
          "url": "https://bugzilla.suse.com/1155812"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1155817 for CVE-2018-12207",
          "url": "https://bugzilla.suse.com/1155817"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1155945 for CVE-2018-12207",
          "url": "https://bugzilla.suse.com/1155945"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2018-12207",
          "url": "https://bugzilla.suse.com/1178658"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201877 for CVE-2018-12207",
          "url": "https://bugzilla.suse.com/1201877"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-14T05:59:09Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-12207"
    },
    {
      "cve": "CVE-2019-0154",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-0154"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 and E-2100 Processor Families may allow an authenticated user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-0154",
          "url": "https://www.suse.com/security/cve/CVE-2019-0154"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135966 for CVE-2019-0154",
          "url": "https://bugzilla.suse.com/1135966"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1181720 for CVE-2019-0154",
          "url": "https://bugzilla.suse.com/1181720"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-14T05:59:09Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-0154"
    },
    {
      "cve": "CVE-2019-0155",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-0155"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6, E-2100 and E-2200 Processor Families; Intel(R) Graphics Driver for Windows before 26.20.100.6813 (DCH) or 26.20.100.6812 and before 21.20.x.5077 (aka15.45.5077), i915 Linux Driver for Intel(R) Processor Graphics before versions 5.4-rc7, 5.3.11, 4.19.84, 4.14.154, 4.9.201, 4.4.201 may allow an authenticated user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-0155",
          "url": "https://www.suse.com/security/cve/CVE-2019-0155"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135966 for CVE-2019-0155",
          "url": "https://bugzilla.suse.com/1135966"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135967 for CVE-2019-0155",
          "url": "https://bugzilla.suse.com/1135967"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1173663 for CVE-2019-0155",
          "url": "https://bugzilla.suse.com/1173663"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-14T05:59:09Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-0155"
    },
    {
      "cve": "CVE-2019-10220",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10220"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10220",
          "url": "https://www.suse.com/security/cve/CVE-2019-10220"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1144903 for CVE-2019-10220",
          "url": "https://bugzilla.suse.com/1144903"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1153108 for CVE-2019-10220",
          "url": "https://bugzilla.suse.com/1153108"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-14T05:59:09Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10220"
    },
    {
      "cve": "CVE-2019-11135",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11135"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11135",
          "url": "https://www.suse.com/security/cve/CVE-2019-11135"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1139073 for CVE-2019-11135",
          "url": "https://bugzilla.suse.com/1139073"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1152497 for CVE-2019-11135",
          "url": "https://bugzilla.suse.com/1152497"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1152505 for CVE-2019-11135",
          "url": "https://bugzilla.suse.com/1152505"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1152506 for CVE-2019-11135",
          "url": "https://bugzilla.suse.com/1152506"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1160120 for CVE-2019-11135",
          "url": "https://bugzilla.suse.com/1160120"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201877 for CVE-2019-11135",
          "url": "https://bugzilla.suse.com/1201877"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-14T05:59:09Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-11135"
    },
    {
      "cve": "CVE-2019-16231",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16231"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16231",
          "url": "https://www.suse.com/security/cve/CVE-2019-16231"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150466 for CVE-2019-16231",
          "url": "https://bugzilla.suse.com/1150466"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-14T05:59:09Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-16231"
    },
    {
      "cve": "CVE-2019-17055",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-17055"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-17055",
          "url": "https://www.suse.com/security/cve/CVE-2019-17055"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1152782 for CVE-2019-17055",
          "url": "https://bugzilla.suse.com/1152782"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-14T05:59:09Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-17055"
    },
    {
      "cve": "CVE-2019-18805",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-18805"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-18805",
          "url": "https://www.suse.com/security/cve/CVE-2019-18805"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156187 for CVE-2019-18805",
          "url": "https://bugzilla.suse.com/1156187"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.32.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.32.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.32.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-11-14T05:59:09Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-18805"
    }
  ]
}