Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:0605-1 Final 1 1 2020-03-06T10:09:59Z current 2020-03-06T10:09:59Z 2020-03-06T10:09:59Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 12 SP5 real-time kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-14615: An information disclosure vulnerability existed due to insufficient control flow in certain data structures for some Intel(R) Processors (bnc#1160195). - CVE-2019-14896: A heap overflow was found in the add_ie_rates() function of the Marvell Wifi Driver (bsc#1157157). - CVE-2019-14897: A stack overflow was found in the lbs_ibss_join_existing() function of the Marvell Wifi Driver (bsc#1157155). - CVE-2019-16994: A memory leak existed in sit_init_net() in net/ipv6/sit.c which might have caused denial of service, aka CID-07f12b26e21a (bnc#1161523). - CVE-2019-19036: An issue discovered in btrfs_root_node in fs/btrfs/ctree.c allowed a NULL pointer dereference because rcu_dereference(root->node) can be zero (bnc#1157692). - CVE-2019-19045: A memory leak in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c allowed attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7 (bnc#1161522). - CVE-2019-19054: A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c allowed attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b (bnc#1161518). - CVE-2019-19318: Mounting a crafted btrfs image twice could have caused a use-after-free (bnc#1158026). - CVE-2019-19927: A slab-out-of-bounds read access could have been caused when mounting a crafted f2fs filesystem image and performing some operations on it, in drivers/gpu/drm/ttm/ttm_page_alloc.c (bnc#1160147). - CVE-2019-19965: There was a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5 (bnc#1159911). - CVE-2020-7053: There was a use-after-free (write) in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c, aka CID-7dc40713618c (bnc#1160966). The following non-security bugs were fixed: - ALSA: hda - Apply sync-write workaround to old Intel platforms, too (bsc#1111666). - ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker (bsc#1111666). - ALSA: hda/realtek - Add new codec supported for ALCS1200A (bsc#1111666). - ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen (bsc#1111666). - ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC (bsc#1111666). - ALSA: hda/realtek - Set EAPD control to default for ALC222 (bsc#1111666). - ALSA: seq: Fix racy access for queue timer in proc read (bsc#1051510). - ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5 (bsc#1111666). - ALSA: usb-audio: fix sync-ep altsetting sanity check (bsc#1051510). - ASoC: au8540: use 64-bit arithmetic instead of 32-bit (bsc#1051510). - ASoC: samsung: i2s: Fix prescaler setting for the secondary DAI (bsc#1111666). - Fix partial checked out tree build ... so that bisection does not break. - Fix the locking in dcache_readdir() and friends (bsc#1123328). - HID: hidraw, uhid: Always report EPOLLOUT (bsc#1051510). - HID: hidraw: Fix returning EPOLLOUT from hidraw_poll (bsc#1051510). - HID: uhid: Fix returning EPOLLOUT from uhid_char_poll (bsc#1051510). - IB/hfi1: Do not cancel unused work item (bsc#1114685 ). - NFC: pn533: fix bulk-message timeout (bsc#1051510). - RDMA/bnxt_re: Avoid freeing MR resources if dereg fails (bsc#1050244). - Temporary workaround for bsc#1159096 should no longer be needed. - USB: serial: ch341: handle unbound port at reset_resume (bsc#1051510). - USB: serial: io_edgeport: add missing active-port sanity check (bsc#1051510). - USB: serial: keyspan: handle unbound ports (bsc#1051510). - USB: serial: opticon: fix control-message timeouts (bsc#1051510). - USB: serial: quatech2: handle unbound ports (bsc#1051510). - USB: serial: suppress driver bind attributes (bsc#1051510). - blk-mq: avoid sysfs buffer overflow with too many CPU cores (bsc#1159377). - blk-mq: make sure that line break can be printed (bsc#1159377). - bnxt: apply computed clamp value for coalece parameter (bsc#1104745). - bnxt_en: Fix MSIX request logic for RDMA driver (bsc#1104745 ). - bnxt_en: Return error if FW returns more data than dump length (bsc#1104745). - bpf/sockmap: Read psock ingress_msg before sk_receive_queue (bsc#1083647). - bpf: Fix incorrect verifier simulation of ARSH under ALU32 (bsc#1083647). - bpf: Reject indirect var_off stack access in raw mode (bsc#1160618). - bpf: Reject indirect var_off stack access in unpriv mode (bco#1160618). - bpf: Sanity check max value for var_off stack access (bco#1160618). - bpf: Support variable offset stack access from helpers (bco#1160618). - bpf: add self-check logic to liveness analysis (bsc#1160618). - bpf: add verifier stats and log_level bit 2 (bsc#1160618). - bpf: improve stacksafe state comparison (bco#1160618). - bpf: improve verification speed by droping states (bsc#1160618). - bpf: improve verification speed by not remarking live_read (bsc#1160618). - bpf: improve verifier branch analysis (bsc#1160618). - bpf: increase complexity limit and maximum program size (bsc#1160618). - bpf: increase verifier log limit (bsc#1160618). - bpf: speed up stacksafe check (bco#1160618). - bpf: verifier: teach the verifier to reason about the BPF_JSET instruction (bco#1160618). - btrfs: Move btrfs_check_chunk_valid() to tree-check.[ch] and export it (dependency for bsc#1157692). - btrfs: fix block group remaining RO forever after error during device replace (bsc#1160442). - btrfs: fix infinite loop during nocow writeback due to race (bsc#1160804). - btrfs: fix integer overflow in calc_reclaim_items_nr (bsc#1160433). - btrfs: fix negative subv_writers counter and data space leak after buffered write (bsc#1160802). - btrfs: fix removal logic of the tree mod log that leads to use-after-free issues (bsc#1160803). - btrfs: fix selftests failure due to uninitialized i_mode in test inodes (Fix for dependency of bsc#1157692). - btrfs: inode: Verify inode mode to avoid NULL pointer dereference (dependency for bsc#1157692). - btrfs: relocation: fix reloc_root lifespan and access (bsc#1159588). - btrfs: tree-checker: Check chunk item at tree block read time (dependency for bsc#1157692). - btrfs: tree-checker: Check level for leaves and nodes (dependency for bsc#1157692). - btrfs: tree-checker: Enhance chunk checker to validate chunk profile (dependency for bsc#1157692). - btrfs: tree-checker: Fix wrong check on max devid (fixes for dependency of bsc#1157692). - btrfs: tree-checker: Make btrfs_check_chunk_valid() return EUCLEAN instead of EIO (dependency for bsc#1157692). - btrfs: tree-checker: Make chunk item checker messages more readable (dependency for bsc#1157692). - btrfs: tree-checker: Verify dev item (dependency for bsc#1157692). - btrfs: tree-checker: Verify inode item (dependency for bsc#1157692). - btrfs: tree-checker: get fs_info from eb in block_group_err (dependency for bsc#1157692). - btrfs: tree-checker: get fs_info from eb in check_block_group_item (dependency for bsc#1157692). - btrfs: tree-checker: get fs_info from eb in check_csum_item (dependency for bsc#1157692). - btrfs: tree-checker: get fs_info from eb in check_dev_item (dependency for bsc#1157692). - btrfs: tree-checker: get fs_info from eb in check_dir_item (dependency for bsc#1157692). - btrfs: tree-checker: get fs_info from eb in check_extent_data_item (dependency for bsc#1157692). - btrfs: tree-checker: get fs_info from eb in check_inode_item (dependency for bsc#1157692). - btrfs: tree-checker: get fs_info from eb in check_leaf (dependency for bsc#1157692). - btrfs: tree-checker: get fs_info from eb in check_leaf_item (dependency for bsc#1157692). - btrfs: tree-checker: get fs_info from eb in chunk_err (dependency for bsc#1157692). - btrfs: tree-checker: get fs_info from eb in dev_item_err (dependency for bsc#1157692). - btrfs: tree-checker: get fs_info from eb in dir_item_err (dependency for bsc#1157692). - btrfs: tree-checker: get fs_info from eb in file_extent_err (dependency for bsc#1157692). - btrfs: tree-checker: get fs_info from eb in generic_err (dependency for bsc#1157692). - can: gs_usb: gs_usb_probe(): use descriptors of current altsetting (bsc#1051510). - can: mscan: mscan_rx_poll(): fix rx path lockup when returning from polling to irq mode (bsc#1051510). - cfg80211/mac80211: make ieee80211_send_layer2_update a public function (bsc#1051510). - cfg80211: fix page refcount issue in A-MSDU decap (bsc#1051510). - cgroup: pids: use atomic64_t for pids->limit (bsc#1161514). - cifs: Close cached root handle only if it had a lease (bsc#1144333). - cifs: Close open handle after interrupted close (bsc#1144333). - cifs: Do not miss cancelled OPEN responses (bsc#1144333). - cifs: Fix NULL pointer dereference in mid callback (bsc#1144333). - cifs: Fix NULL-pointer dereference in smb2_push_mandatory_locks (bsc#1144333). - cifs: Fix lookup of root ses in DFS referral cache (bsc#1144333). - cifs: Fix memory allocation in __smb2_handle_cancelled_cmd() (bsc#1144333). - cifs: Fix mount options set in automount (bsc#1144333). - cifs: Fix potential softlockups while refreshing DFS cache (bsc#1144333). - cifs: Fix retrieval of DFS referrals in cifs_mount() (bsc#1144333). - cifs: Fix use-after-free bug in cifs_reconnect() (bsc#1144333). - cifs: Properly process SMB3 lease breaks (bsc#1144333). - cifs: Respect O_SYNC and O_DIRECT flags during reconnect (bsc#1144333). - cifs: add support for flock (bsc#1144333). - cifs: close the shared root handle on tree disconnect (bsc#1144333). - cifs: remove set but not used variables 'cinode' and 'netfid' (bsc#1144333). - clk: imx: clk-composite-8m: add lock to gate/mux (git-fixes). - clk: rockchip: fix I2S1 clock gate register for rk3328 (bsc#1051510). - clk: rockchip: fix ID of 8ch clock of I2S1 for rk3328 (bsc#1051510). - clk: rockchip: fix rk3188 sclk_mac_lbtest parameter ordering (bsc#1051510). - clk: rockchip: fix rk3188 sclk_smc gate data (bsc#1051510). - drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ (bsc#1051510). - drm/fb-helper: Round up bits_per_pixel if possible (bsc#1051510). - drm/i810: Prevent underflow in ioctl (bsc#1114279) - drm/i915/gvt: Pin vgpu dma address before using (bsc#1112178) - drm/i915/gvt: set guest display buffer as readonly (bsc#1112178) - drm/i915/gvt: use vgpu lock for active state setting (bsc#1112178) - drm/i915: Add missing include file <linux/math64.h> (bsc#1051510). - drm/i915: Fix pid leak with banned clients (bsc#1114279) - drm/qxl: Return error if fbdev is not 32 bpp (bsc#1159028) - drm/qxl: Return error if fbdev is not 32 bpp (bsc#1159028) - drm/radeon: fix r1xx/r2xx register checker for POT textures (bsc#1114279) - drm/sun4i: hdmi: Remove duplicate cleanup calls (bsc#1113956) - drm: limit to INT_MAX in create_blob ioctl (bsc#1051510). - exit: panic before exit_mm() on global init exit (bsc#1161549). - extcon: max8997: Fix lack of path setting in USB device mode (bsc#1051510). - fjes: fix missed check in fjes_acpi_add (bsc#1051510). - fs: cifs: Fix atime update check vs mtime (bsc#1144333). - ftrace: Avoid potential division by zero in function profiler (bsc#1160784). - gpio: Fix error message on out-of-range GPIO in lookup table (bsc#1051510). - hidraw: Return EPOLLOUT from hidraw_poll (bsc#1051510). - iio: buffer: align the size of scan bytes to size of the largest element (bsc#1051510). - inet: protect against too small mtu values (networking-stable-19_12_16). - init: add arch_call_rest_init to allow stack switching (jsc#SLE-11178). - iommu/iova: Init the struct iova to fix the possible memleak (bsc#1160469). - iommu/mediatek: Correct the flush_iotlb_all callback (bsc#1160470). - iommu/vt-d: Unlink device if failed to add to group (bsc#1160756). - iommu: Remove device link to group on failure (bsc#1160755). - iwlwifi: change monitor DMA to be coherent (bsc#1161243). - kABI fixup for alloc_dax_region (bsc#1158071,bsc#1160678). - kABI: Protest new fields in BPF structs (bsc#1160618). - kABI: protect struct sctp_ep_common (kabi). - kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail (bsc#1160787). - kvm: x86: Host feature SSBD does not imply guest feature SPEC_CTRL_SSBD (bsc#1160476). - leds: Allow to call led_classdev_unregister() unconditionally (bsc#1161674). - leds: class: ensure workqueue is initialized before setting brightness (bsc#1161674). - livepatch: Simplify stack trace retrieval (jsc#SLE-11178). - mlxsw: spectrum_qdisc: Ignore grafting of invisible FIFO (bsc#1112374). - mm, debug_pagealloc: do not rely on static keys too early (VM debuging functionality, bsc#1159096). - mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock (bsc#1159394). - mmc: sdhci: Add a quirk for broken command queuing (git-fixes). - mmc: sdhci: Workaround broken command queuing on Intel GLK (git-fixes). - net, sysctl: Fix compiler warning when only cBPF is present (bsc#1109837). - net/mlx4_en: fix mlx4 ethtool -N insertion (networking-stable-19_11_25). - net/mlx5e: Fix set vf link state error flow (networking-stable-19_11_25). - net/mlxfw: Fix out-of-memory error in mfa2 flash burning (bsc#1051858). - net/sched: act_pedit: fix WARN() in the traffic path (networking-stable-19_11_25). - net: bridge: deny dev_set_mac_address() when unregistering (networking-stable-19_12_16). - net: ethernet: ti: cpsw: fix extra rx interrupt (networking-stable-19_12_16). - net: psample: fix skb_over_panic (networking-stable-19_12_03). - net: rtnetlink: prevent underflows in do_setvfinfo() (networking-stable-19_11_25). - net: sched: fix `tc -s class show` no bstats on class with nolock subqueues (networking-stable-19_12_03). - net: usb: lan78xx: limit size of local TSO packets (bsc#1051510). - net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules (networking-stable-19_11_18). - openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() (networking-stable-19_12_03). - openvswitch: remove another BUG_ON() (networking-stable-19_12_03). - openvswitch: support asymmetric conntrack (networking-stable-19_12_16). - platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0 (bsc#1051510). - powerpc/irq: fix stack overflow verification (bsc#1065729). - powerpc/livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (bsc#1071995 bsc#1161875). - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (bsc#1065729). - powerpc/pkeys: remove unused pkey_allows_readwrite (bsc#1065729). - powerpc/pseries/lparcfg: Fix display of Maximum Memory (bsc#1162028 ltc#181740). - powerpc/pseries: Drop pointless static qualifier in vpa_debugfs_init() (git-fixes). - powerpc/security: Fix debugfs data leak on 32-bit (bsc#1065729). - powerpc/tools: Do not quote $objdump in scripts (bsc#1065729). - powerpc/xive: Skip ioremap() of ESB pages for LSI interrupts (bsc#1085030). - powerpc: Allow 64bit VDSO __kernel_sync_dicache to work across ranges >4GB (bnc#1151927 5.3.17). - powerpc: Allow flush_icache_range to work across ranges >4GB (bnc#1151927 5.3.17). - qede: Disable hardware gro when xdp prog is installed (bsc#1086314 bsc#1086313 bsc#1086301 ). - r8152: add missing endpoint sanity check (bsc#1051510). - s390/ftrace: save traced function caller (jsc#SLE-11178). - s390/ftrace: use HAVE_FUNCTION_GRAPH_RET_ADDR_PTR (jsc#SLE-11178). - s390/head64: correct init_task stack setup (jsc#SLE-11178). - s390/kasan: avoid false positives during stack unwind (jsc#SLE-11178). - s390/kasan: avoid report in get_wchan (jsc#SLE-11178). - s390/livepatch: Implement reliable stack tracing for the consistency model (jsc#SLE-11178). - s390/process: avoid custom stack unwinding in get_wchan (jsc#SLE-11178). - s390/stacktrace: use common arch_stack_walk infrastructure (jsc#SLE-11178). - s390/suspend: fix stack setup in swsusp_arch_suspend (jsc#SLE-11178). - s390/test_unwind: print verbose unwinding results (jsc#SLE-11178). - s390/unwind: add stack pointer alignment sanity checks (jsc#SLE-11178). - s390/unwind: always inline get_stack_pointer (jsc#SLE-11178). - s390/unwind: avoid int overflow in outside_of_stack (jsc#SLE-11178). - s390/unwind: cleanup unused READ_ONCE_TASK_STACK (jsc#SLE-11178). - s390/unwind: correct stack switching during unwind (jsc#SLE-11178). - s390/unwind: drop unnecessary code around calling ftrace_graph_ret_addr() (jsc#SLE-11178). - s390/unwind: filter out unreliable bogus %r14 (jsc#SLE-11178). - s390/unwind: fix get_stack_pointer(NULL, NULL) (jsc#SLE-11178). - s390/unwind: fix mixing regs and sp (jsc#SLE-11178). - s390/unwind: introduce stack unwind API (jsc#SLE-11178). - s390/unwind: make reuse_sp default when unwinding pt_regs (jsc#SLE-11178). - s390/unwind: remove stack recursion warning (jsc#SLE-11178). - s390/unwind: report an error if pt_regs are not on stack (jsc#SLE-11178). - s390/unwind: start unwinding from reliable state (jsc#SLE-11178). - s390/unwind: stop gracefully at task pt_regs (jsc#SLE-11178). - s390/unwind: stop gracefully at user mode pt_regs in irq stack (jsc#SLE-11178). - s390/unwind: unify task is current checks (jsc#SLE-11178). - s390: add stack switch helper (jsc#SLE-11178). - s390: add support for virtually mapped kernel stacks (jsc#SLE-11178). - s390: always inline current_stack_pointer() (jsc#SLE-11178). - s390: always inline disabled_wait (jsc#SLE-11178). - s390: avoid misusing CALL_ON_STACK for task stack setup (jsc#SLE-11178). - s390: clean up stacks setup (jsc#SLE-11178). - s390: correct CALL_ON_STACK back_chain saving (jsc#SLE-11178). - s390: disable preemption when switching to nodat stack with CALL_ON_STACK (jsc#SLE-11178). - s390: fine-tune stack switch helper (jsc#SLE-11178). - s390: fix register clobbering in CALL_ON_STACK (jsc#SLE-11178). - s390: kabi workaround for ftrace_ret_stack (jsc#SLE-11178). - s390: kabi workaround for lowcore changes due to vmap stack (jsc#SLE-11178). - s390: kabi workaround for reliable stack tracing (jsc#SLE-11178). - s390: preserve kabi for stack unwind API (jsc#SLE-11178). - s390: unify stack size definitions (jsc#SLE-11178). - scsi: lpfc: fix build failure with DEBUGFS disabled (bsc#1154601). - scsi: qla2xxx: Add D-Port Diagnostic reason explanation logs (bsc#1158013). - scsi: qla2xxx: Add a shadow variable to hold disc_state history of fcport (bsc#1158013). - scsi: qla2xxx: Cleanup unused async_logout_done (bsc#1158013). - scsi: qla2xxx: Consolidate fabric scan (bsc#1158013). - scsi: qla2xxx: Correct fcport flags handling (bsc#1158013). - scsi: qla2xxx: Fix RIDA Format-2 (bsc#1158013). - scsi: qla2xxx: Fix fabric scan hang (bsc#1158013). - scsi: qla2xxx: Fix mtcp dump collection failure (bsc#1158013). - scsi: qla2xxx: Fix stuck login session using prli_pend_timer (bsc#1158013). - scsi: qla2xxx: Fix stuck session in GNL (bsc#1158013). - scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return type (bsc#1158013). - scsi: qla2xxx: Fix update_fcport for current_topology (bsc#1158013). - scsi: qla2xxx: Improve readability of the code that handles qla_flt_header (bsc#1158013). - scsi: qla2xxx: Remove defer flag to indicate immeadiate port loss (bsc#1158013). - scsi: qla2xxx: Update driver version to 10.01.00.22-k (bsc#1158013). - scsi: qla2xxx: Use common routine to free fcport struct (bsc#1158013). - scsi: qla2xxx: Use get_unaligned_*() instead of open-coding these functions (bsc#1158013). - sctp: cache netns in sctp_ep_common (networking-stable-19_12_03). - sfc: Only cancel the PPS workqueue if it exists (networking-stable-19_11_25). - sfc: Remove 'PCIE error reporting unavailable' (bsc#1161472). - smb3: Fix crash in SMB2_open_init due to uninitialized field in compounding path (bsc#1144333). - smb3: Fix persistent handles reconnect (bsc#1144333). - smb3: fix refcount underflow warning on unmount when no directory leases (bsc#1144333). - smb3: remove confusing dmesg when mounting with encryption ('seal') (bsc#1144333). - stacktrace: Do not skip first entry on noncurrent tasks (jsc#SLE-11178). - stacktrace: Force USER_DS for stack_trace_save_user() (jsc#SLE-11178). - stacktrace: Get rid of unneeded '!!' pattern (jsc#SLE-11178). - stacktrace: Provide common infrastructure (jsc#SLE-11178). - stacktrace: Provide helpers for common stack trace operations (jsc#SLE-11178). - stacktrace: Unbreak stack_trace_save_tsk_reliable() (jsc#SLE-11178). - stacktrace: Use PF_KTHREAD to check for kernel threads (jsc#SLE-11178). - tcp: clear tp->packets_out when purging write queue (bsc#1160560). - tcp: exit if nothing to retransmit on RTO timeout (bsc#1160560, stable 4.14.159). - tcp: md5: fix potential overestimation of TCP option space (networking-stable-19_12_16). - tracing: Cleanup stack trace code (jsc#SLE-11178). - tracing: Have the histogram compare functions convert to u64 first (bsc#1160210). - workqueue: Fix pwq ref leak in rescuer_thread() (bsc#1160211). - x86/MCE/AMD: Allow Reserved types to be overwritten in smca_banks (bsc#1114279). - x86/MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure() (bsc#1114279). - x86/kgbd: Use NMI_VECTOR not APIC_DM_NMI (bsc#1114279). - x86/mce/AMD: Allow any CPU to initialize the smca_banks array (bsc#1114279). - x86/mce: Fix possibly incorrect severity calculation on AMD (bsc#1114279). - x86/resctrl: Fix an imbalance in domain_remove_cpu() (bsc#1114279). - x86/resctrl: Fix potential memory leak (bsc#1114279). - xen-blkfront: switch kcalloc to kvcalloc for large array allocation (bsc#1160917). - xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk (bsc#1065600). - xfs: Fix tail rounding in xfs_alloc_file_space() (bsc#1161087, bsc#1153917). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2020-605,SUSE-SLE-RT-12-SP5-2020-605 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20200605-1/ Link for SUSE-SU-2020:0605-1 https://lists.suse.com/pipermail/sle-security-updates/2020-March/006582.html E-Mail link for SUSE-SU-2020:0605-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1050244 SUSE Bug 1050244 https://bugzilla.suse.com/1051510 SUSE Bug 1051510 https://bugzilla.suse.com/1051858 SUSE Bug 1051858 https://bugzilla.suse.com/1065600 SUSE Bug 1065600 https://bugzilla.suse.com/1065729 SUSE Bug 1065729 https://bugzilla.suse.com/1071995 SUSE Bug 1071995 https://bugzilla.suse.com/1083647 SUSE Bug 1083647 https://bugzilla.suse.com/1085030 SUSE Bug 1085030 https://bugzilla.suse.com/1086301 SUSE Bug 1086301 https://bugzilla.suse.com/1086313 SUSE Bug 1086313 https://bugzilla.suse.com/1086314 SUSE Bug 1086314 https://bugzilla.suse.com/1104745 SUSE Bug 1104745 https://bugzilla.suse.com/1109837 SUSE Bug 1109837 https://bugzilla.suse.com/1111666 SUSE Bug 1111666 https://bugzilla.suse.com/1112178 SUSE Bug 1112178 https://bugzilla.suse.com/1112374 SUSE Bug 1112374 https://bugzilla.suse.com/1113956 SUSE Bug 1113956 https://bugzilla.suse.com/1114279 SUSE Bug 1114279 https://bugzilla.suse.com/1114685 SUSE Bug 1114685 https://bugzilla.suse.com/1123328 SUSE Bug 1123328 https://bugzilla.suse.com/1144333 SUSE Bug 1144333 https://bugzilla.suse.com/1151927 SUSE Bug 1151927 https://bugzilla.suse.com/1153917 SUSE Bug 1153917 https://bugzilla.suse.com/1154601 SUSE Bug 1154601 https://bugzilla.suse.com/1157155 SUSE Bug 1157155 https://bugzilla.suse.com/1157157 SUSE Bug 1157157 https://bugzilla.suse.com/1157692 SUSE Bug 1157692 https://bugzilla.suse.com/1158013 SUSE Bug 1158013 https://bugzilla.suse.com/1158026 SUSE Bug 1158026 https://bugzilla.suse.com/1158071 SUSE Bug 1158071 https://bugzilla.suse.com/1159028 SUSE Bug 1159028 https://bugzilla.suse.com/1159096 SUSE Bug 1159096 https://bugzilla.suse.com/1159377 SUSE Bug 1159377 https://bugzilla.suse.com/1159394 SUSE Bug 1159394 https://bugzilla.suse.com/1159588 SUSE Bug 1159588 https://bugzilla.suse.com/1159911 SUSE Bug 1159911 https://bugzilla.suse.com/1160147 SUSE Bug 1160147 https://bugzilla.suse.com/1160195 SUSE Bug 1160195 https://bugzilla.suse.com/1160210 SUSE Bug 1160210 https://bugzilla.suse.com/1160211 SUSE Bug 1160211 https://bugzilla.suse.com/1160433 SUSE Bug 1160433 https://bugzilla.suse.com/1160442 SUSE Bug 1160442 https://bugzilla.suse.com/1160469 SUSE Bug 1160469 https://bugzilla.suse.com/1160470 SUSE Bug 1160470 https://bugzilla.suse.com/1160476 SUSE Bug 1160476 https://bugzilla.suse.com/1160560 SUSE Bug 1160560 https://bugzilla.suse.com/1160618 SUSE Bug 1160618 https://bugzilla.suse.com/1160678 SUSE Bug 1160678 https://bugzilla.suse.com/1160755 SUSE Bug 1160755 https://bugzilla.suse.com/1160756 SUSE Bug 1160756 https://bugzilla.suse.com/1160784 SUSE Bug 1160784 https://bugzilla.suse.com/1160787 SUSE Bug 1160787 https://bugzilla.suse.com/1160802 SUSE Bug 1160802 https://bugzilla.suse.com/1160803 SUSE Bug 1160803 https://bugzilla.suse.com/1160804 SUSE Bug 1160804 https://bugzilla.suse.com/1160917 SUSE Bug 1160917 https://bugzilla.suse.com/1160966 SUSE Bug 1160966 https://bugzilla.suse.com/1161087 SUSE Bug 1161087 https://bugzilla.suse.com/1161243 SUSE Bug 1161243 https://bugzilla.suse.com/1161472 SUSE Bug 1161472 https://bugzilla.suse.com/1161514 SUSE Bug 1161514 https://bugzilla.suse.com/1161518 SUSE Bug 1161518 https://bugzilla.suse.com/1161522 SUSE Bug 1161522 https://bugzilla.suse.com/1161523 SUSE Bug 1161523 https://bugzilla.suse.com/1161549 SUSE Bug 1161549 https://bugzilla.suse.com/1161674 SUSE Bug 1161674 https://bugzilla.suse.com/1161875 SUSE Bug 1161875 https://bugzilla.suse.com/1162028 SUSE Bug 1162028 https://www.suse.com/security/cve/CVE-2019-14615/ SUSE CVE CVE-2019-14615 page https://www.suse.com/security/cve/CVE-2019-14896/ SUSE CVE CVE-2019-14896 page https://www.suse.com/security/cve/CVE-2019-14897/ SUSE CVE CVE-2019-14897 page https://www.suse.com/security/cve/CVE-2019-16994/ SUSE CVE CVE-2019-16994 page https://www.suse.com/security/cve/CVE-2019-19036/ SUSE CVE CVE-2019-19036 page https://www.suse.com/security/cve/CVE-2019-19045/ SUSE CVE CVE-2019-19045 page https://www.suse.com/security/cve/CVE-2019-19054/ SUSE CVE CVE-2019-19054 page https://www.suse.com/security/cve/CVE-2019-19318/ SUSE CVE CVE-2019-19318 page https://www.suse.com/security/cve/CVE-2019-19927/ SUSE CVE CVE-2019-19927 page https://www.suse.com/security/cve/CVE-2019-19965/ SUSE CVE CVE-2019-19965 page https://www.suse.com/security/cve/CVE-2020-7053/ SUSE CVE CVE-2020-7053 page SUSE Linux Enterprise Real Time 12 SP5 cluster-md-kmp-rt-4.12.14-6.3.1 dlm-kmp-rt-4.12.14-6.3.1 gfs2-kmp-rt-4.12.14-6.3.1 kernel-devel-rt-4.12.14-6.3.1 kernel-rt-4.12.14-6.3.1 kernel-rt-base-4.12.14-6.3.1 kernel-rt-devel-4.12.14-6.3.1 kernel-rt_debug-4.12.14-6.3.1 kernel-rt_debug-devel-4.12.14-6.3.1 kernel-source-rt-4.12.14-6.3.1 kernel-syms-rt-4.12.14-6.3.1 ocfs2-kmp-rt-4.12.14-6.3.1 cluster-md-kmp-rt-4.12.14-6.3.1 as a component of SUSE Linux Enterprise Real Time 12 SP5 dlm-kmp-rt-4.12.14-6.3.1 as a component of SUSE Linux Enterprise Real Time 12 SP5 gfs2-kmp-rt-4.12.14-6.3.1 as a component of SUSE Linux Enterprise Real Time 12 SP5 kernel-devel-rt-4.12.14-6.3.1 as a component of SUSE Linux Enterprise Real Time 12 SP5 kernel-rt-4.12.14-6.3.1 as a component of SUSE Linux Enterprise Real Time 12 SP5 kernel-rt-base-4.12.14-6.3.1 as a component of SUSE Linux Enterprise Real Time 12 SP5 kernel-rt-devel-4.12.14-6.3.1 as a component of SUSE Linux Enterprise Real Time 12 SP5 kernel-rt_debug-4.12.14-6.3.1 as a component of SUSE Linux Enterprise Real Time 12 SP5 kernel-rt_debug-devel-4.12.14-6.3.1 as a component of SUSE Linux Enterprise Real Time 12 SP5 kernel-source-rt-4.12.14-6.3.1 as a component of SUSE Linux Enterprise Real Time 12 SP5 kernel-syms-rt-4.12.14-6.3.1 as a component of SUSE Linux Enterprise Real Time 12 SP5 ocfs2-kmp-rt-4.12.14-6.3.1 as a component of SUSE Linux Enterprise Real Time 12 SP5 Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user to potentially enable information disclosure via local access. CVE-2019-14615 SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-6.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200605-1/ https://www.suse.com/security/cve/CVE-2019-14615.html CVE-2019-14615 https://bugzilla.suse.com/1160195 SUSE Bug 1160195 https://bugzilla.suse.com/1165881 SUSE Bug 1165881 A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP. CVE-2019-14896 SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-6.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200605-1/ https://www.suse.com/security/cve/CVE-2019-14896.html CVE-2019-14896 https://bugzilla.suse.com/1157157 SUSE Bug 1157157 https://bugzilla.suse.com/1160468 SUSE Bug 1160468 A stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA. CVE-2019-14897 SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-6.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200605-1/ https://www.suse.com/security/cve/CVE-2019-14897.html CVE-2019-14897 https://bugzilla.suse.com/1157155 SUSE Bug 1157155 https://bugzilla.suse.com/1160467 SUSE Bug 1160467 https://bugzilla.suse.com/1160468 SUSE Bug 1160468 In the Linux kernel before 5.0, a memory leak exists in sit_init_net() in net/ipv6/sit.c when register_netdev() fails to register sitn->fb_tunnel_dev, which may cause denial of service, aka CID-07f12b26e21a. CVE-2019-16994 SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-6.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200605-1/ https://www.suse.com/security/cve/CVE-2019-16994.html CVE-2019-16994 https://bugzilla.suse.com/1161523 SUSE Bug 1161523 btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero. CVE-2019-19036 SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-6.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200605-1/ https://www.suse.com/security/cve/CVE-2019-19036.html CVE-2019-19036 https://bugzilla.suse.com/1157692 SUSE Bug 1157692 A memory leak in the mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7. CVE-2019-19045 SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-6.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200605-1/ https://www.suse.com/security/cve/CVE-2019-19045.html CVE-2019-19045 https://bugzilla.suse.com/1161522 SUSE Bug 1161522 A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b. CVE-2019-19054 SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-6.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200605-1/ https://www.suse.com/security/cve/CVE-2019-19054.html CVE-2019-19054 https://bugzilla.suse.com/1161518 SUSE Bug 1161518 In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer, CVE-2019-19318 SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-6.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200605-1/ https://www.suse.com/security/cve/CVE-2019-19318.html CVE-2019-19318 https://bugzilla.suse.com/1158026 SUSE Bug 1158026 In the Linux kernel 5.0.0-rc7 (as distributed in ubuntu/linux.git on kernel.ubuntu.com), mounting a crafted f2fs filesystem image and performing some operations can lead to slab-out-of-bounds read access in ttm_put_pages in drivers/gpu/drm/ttm/ttm_page_alloc.c. This is related to the vmwgfx or ttm module. CVE-2019-19927 SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-6.3.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200605-1/ https://www.suse.com/security/cve/CVE-2019-19927.html CVE-2019-19927 https://bugzilla.suse.com/1160147 SUSE Bug 1160147 In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5. CVE-2019-19965 SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-6.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200605-1/ https://www.suse.com/security/cve/CVE-2019-19965.html CVE-2019-19965 https://bugzilla.suse.com/1159911 SUSE Bug 1159911 In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a use-after-free (write) in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c, aka CID-7dc40713618c. This is related to i915_gem_context_destroy_ioctl in drivers/gpu/drm/i915/i915_gem_context.c. CVE-2020-7053 SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-6.3.1 SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-6.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200605-1/ https://www.suse.com/security/cve/CVE-2020-7053.html CVE-2020-7053 https://bugzilla.suse.com/1160966 SUSE Bug 1160966