Description
A logic issue was addressed with improved validation. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. An attacker in a privileged network position can modify driver state.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apple | macOS | unspecified – < 10.14 | 10.14 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | kernel-docs +5 | 4.12.14-197.4.1 | SUSE-SU-2019:1550-1 |
| SLES 12 SP2 | kernel-syms +2 | 4.4.121-92.109.2 | SUSE-SU-2019:1287-1 |
| SLES 12 SP2 | kgraft-patch-SLE12-SP2_Update_29 | 1-3.5.2 | SUSE-SU-2019:1287-1 |
| SLES 12 SP1 | kernel-xen +3 | 3.12.74-60.64.110.1 | SUSE-SU-2019:1289-1 |
| SLES 12 SP1 | kgraft-patch-SLE12-SP1_Update_33 | 1-2.3.1 | SUSE-SU-2019:1289-1 |
| SLES 12 SP1 | lttng-modules | 2.7.0-4.4.1 | SUSE-SU-2019:1289-1 |
| SLES 12 | kernel-ec2 | 3.12.74-60.64.110.1 | SUSE-SU-2019:1289-1 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP2 | kernel-syms +2 | 4.4.121-92.109.2 | SUSE-SU-2019:1287-1 |
| SLES for SAP 12 SP2 | kgraft-patch-SLE12-SP2_Update_29 | 1-3.5.2 | SUSE-SU-2019:1287-1 |
| SLES for SAP 12 SP1 | kernel-xen +3 | 3.12.74-60.64.110.1 | SUSE-SU-2019:1289-1 |
| SLES for SAP 12 SP1 | kgraft-patch-SLE12-SP1_Update_33 | 1-2.3.1 | SUSE-SU-2019:1289-1 |
| SLES for SAP 12 SP1 | lttng-modules | 2.7.0-4.4.1 | SUSE-SU-2019:1289-1 |
| SLE Live Patching 15 SP1 | kernel-default | 4.12.14-197.4.1 | SUSE-SU-2019:1550-1 |
| SLE Live Patching 15 SP1 | kernel-livepatch-SLE15-SP1_Update_1 | 1-3.3.1 | SUSE-SU-2019:1550-1 |
| SUSE Real Time Module 15 SP1 | kernel-rt +3 | 4.12.14-14.8.1 | SUSE-SU-2019:2430-1 |
| SUSE OpenStack Cloud 7 | kernel-syms +2 | 4.4.121-92.109.2 | SUSE-SU-2019:1287-1 |
| SUSE OpenStack Cloud 7 | kgraft-patch-SLE12-SP2_Update_29 | 1-3.5.2 | SUSE-SU-2019:1287-1 |
| SUSE Enterprise Storage 4 | kernel-syms +2 | 4.4.121-92.109.2 | SUSE-SU-2019:1287-1 |
| SUSE Enterprise Storage 4 | kgraft-patch-SLE12-SP2_Update_29 | 1-3.5.2 | SUSE-SU-2019:1287-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | kernel-source | 5.14.6-1.4 | openSUSE-SU-2024:13704-1, openSUSE-SU-2024:10728-1 |
Advisories 6
- openSUSE-SU-2024:13704-1 kernel-devel-longterm-6.6.17-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:1287-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:1289-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:1550-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2430-1 Security update for kernel-source-rt SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10728-1 kernel-devel-5.14.6-1.4 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026