[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5LD8Wag3cPVoEH9toi-IPz3Zo9jXEnHGxiHmNAnShLY":3,"g5a-family:suse\u002Flinux_enterprise_real_time_extension":127,"g5a-ex:suse\u002Flinux_enterprise_real_time_extension@*":128},{"success":4,"data":5},true,{"product":6,"versions":28,"topVulnerabilitiesByEpss":33,"kevVulnerabilities":94,"seoMetadata":105,"meta":124},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":27},"suse","linux_enterprise_real_time_extension",4,58,2,"2018-01-03",[14,19,22,24],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"10",1,0,false,{"version":20,"cve_count":21,"kev_count":11,"has_kev":4},"11",54,{"version":23,"cve_count":16,"kev_count":17,"has_kev":18},"11.0",{"version":25,"cve_count":26,"kev_count":17,"has_kev":18},"12",6,"Linux Enterprise Real Time Extension by Suse is a technology product with 4 tracked versions and 58 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[29,30,31,32],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":11,"has_kev":4},{"version":23,"cve_count":16,"kev_count":17,"has_kev":18},{"version":25,"cve_count":26,"kev_count":17,"has_kev":18},[34,41,48,53,59,67,73,78,84,89],{"cveId":35,"description":36,"publishedDate":12,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":18,"epssScore":40},"CVE-2017-18017","The tcpmss_mangle_packet function in net\u002Fnetfilter\u002Fxt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.",9.8,"v3.1","Critical",0.52841,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":38,"severity":46,"isKev":4,"epssScore":47},"CVE-2014-3153","The futex_requeue function in kernel\u002Ffutex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.","2014-06-07",7.8,"High",0.37233,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":45,"cvssVersion":38,"severity":46,"isKev":4,"epssScore":52},"CVE-2010-3904","The rds_page_copy_user function in net\u002Frds\u002Fpage.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.","2010-12-06",0.15861,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":38,"severity":46,"isKev":18,"epssScore":58},"CVE-2014-3687","The sctp_assoc_lookup_asconf_ack function in net\u002Fsctp\u002Fassociola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter.","2014-11-10",7.5,0.08579,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":64,"severity":65,"isKev":18,"epssScore":66},"CVE-2014-4667","The sctp_association_free function in net\u002Fsctp\u002Fassociola.c in the Linux kernel before 3.15.2 does not properly manage a certain backlog value, which allows remote attackers to cause a denial of service (socket outage) via a crafted SCTP packet.","2014-07-03",5,"v2","Medium",0.05926,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":64,"severity":46,"isKev":18,"epssScore":72},"CVE-2014-5077","The sctp_assoc_update function in net\u002Fsctp\u002Fassociola.c in the Linux kernel through 3.15.8, when SCTP authentication is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by starting to establish an association between two endpoints immediately after an exchange of INIT and INIT ACK chunks to establish an earlier association between these endpoints in the opposite direction.","2014-08-01",7.1,0.05794,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":45,"cvssVersion":64,"severity":46,"isKev":18,"epssScore":77},"CVE-2010-3432","The sctp_packet_config function in net\u002Fsctp\u002Foutput.c in the Linux kernel before 2.6.35.6 performs extraneous initializations of packet data structures, which allows remote attackers to cause a denial of service (panic) via a certain sequence of SCTP traffic.","2010-11-22",0.05542,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":57,"cvssVersion":82,"severity":46,"isKev":18,"epssScore":83},"CVE-2016-5244","The rds_inc_info_copy function in net\u002Frds\u002Frecv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message.","2016-06-27","v3.0",0.05521,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":63,"cvssVersion":64,"severity":65,"isKev":18,"epssScore":88},"CVE-2014-8160","net\u002Fnetfilter\u002Fnf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers.","2015-03-02",0.05489,{"cveId":90,"description":91,"publishedDate":62,"cvssScore":92,"cvssVersion":38,"severity":46,"isKev":18,"epssScore":93},"CVE-2014-4608","Multiple integer overflows in the lzo1x_decompress_safe function in lib\u002Flzo\u002Flzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel before 3.15.2 allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Literal Run.  NOTE: the author of the LZO algorithms says \"the Linux kernel is *not* affected; media hype.",7.3,0.05421,[95,100],{"cveId":49,"description":50,"publishedDate":51,"cvssScore":45,"severity":46,"isKev":4,"epssScore":52,"cisaVulnName":96,"cisaDateAdded":97,"cisaShortDescription":98,"cisaRequiredAction":99},"Linux Kernel Improper Input Validation Vulnerability","2023-05-12","Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"severity":46,"isKev":4,"epssScore":47,"cisaVulnName":101,"cisaDateAdded":102,"cisaShortDescription":103,"cisaRequiredAction":104},"Linux Kernel Privilege Escalation Vulnerability","2022-05-25","The futex_requeue function in kernel\u002Ffutex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows local users to gain privileges.","Apply updates per vendor instructions.",{"title":106,"metaDescription":107,"keywords":108,"structuredData":109},"Linux Enterprise Real Time Extension by Suse - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Linux Enterprise Real Time Extension by Suse covering 4 versions with 58 tracked vulnerabilities including 0 critical and 2 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Linux Enterprise Real Time Extension vulnerabilities, Linux Enterprise Real Time Extension security, Linux Enterprise Real Time Extension CVE, Suse Linux Enterprise Real Time Extension, Linux Enterprise Real Time Extension threat intelligence, Suse security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Linux Enterprise Real Time Extension KEV, Linux Enterprise Real Time Extension exploited vulnerabilities",{"@context":110,"@type":111,"name":112,"description":107,"url":113,"manufacturer":114,"applicationCategory":118,"softwareVersion":119,"mainEntity":120},"https:\u002F\u002Fschema.org","SoftwareApplication","Linux Enterprise Real Time Extension","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsuse\u002Flinux_enterprise_real_time_extension",{"@type":115,"name":116,"url":117},"Organization","Suse","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsuse","Security Software","4 versions tracked",{"@type":121,"name":122,"description":123,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Linux Enterprise Real Time Extension Security Vulnerabilities","Security vulnerabilities affecting Linux Enterprise Real Time Extension by Suse",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":125,"apiVersion":126},"2026-10-16T23:10:51.112Z","3.0",[],{"rows":129,"total":11,"capped":18,"failed":17},[130,135],{"cveId":49,"name":96,"severity":46,"cvss":45,"added":97,"epss":52,"published":131,"ranges":132,"checked":4,"hits":134,"covers":18},"2010-12-06T20:13:00.513",[133],"11-sp1",[],{"cveId":42,"name":101,"severity":46,"cvss":45,"added":102,"epss":47,"published":136,"ranges":137,"checked":4,"hits":139,"covers":18},"2014-06-07T14:55:27.24",[138],"11-sp3",[]]