View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2019-9003 severity moderate: SUSE including 183 source package names (bpftool-4.18.0-80.1.2.el8_0, cluster-md-kmp-default-4.12.14-120.1, …), 499 product×package rows across 75 product lines (HPE Helion OpenStack 8, SLES for SAP Applications 11 SP3, … (75 product lines)): Fixed 310, Known Not Affected 189.
In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a "service ipmievd restart" loop.