Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:14442-1 Final 1 1 2020-08-03T14:46:47Z current 2020-08-03T14:46:47Z 2020-08-03T14:46:47Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-10773: Fixed a memory leak on s390/s390x, in the cmm_timeout_hander in file arch/s390/mm/cmm.c (bnc#1172999). - CVE-2020-14416: Fixed a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c (bnc#1162002). - CVE-2020-13974: Fixed a integer overflow in drivers/tty/vt/keyboard.c, if k_ascii is called several times in a row (bnc#1172775). - CVE-2020-10732: A flaw was found in the implementation of Userspace core dumps. This flaw allowed an attacker with a local account to crash a trivial program and exfiltrate private kernel data (bnc#1171220). - CVE-2020-12656: Fixed a memory leak in gss_mech_free in the rpcsec_gss_krb5 implementation, caused by a lack of certain domain_release calls (bnc#1171219). - CVE-2020-0305: Fixed a possible use-after-free due to a race condition incdev_get of char_dev.c. This could lead to local escalation of privilege. User interaction is not needed for exploitation (bnc#1174462). - CVE-2020-10769: A buffer over-read flaw was found in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. This flaw allowed a local attacker with user privileges to cause a denial of service (bnc#1173265). - CVE-2020-12652: The __mptctl_ioctl function in drivers/message/fusion/mptctl.c allowed local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a 'double fetch' vulnerability (bnc#1171218). - CVE-2019-5108: Fixed a denial-of-service vulnerability in the wifi stack. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed (bnc#1159912). The following non-security bugs were fixed: - Fix gcc-discovered error in zeroing a struct (bnc#680814) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). slessp4-kernel-source-14442,slexsp3-kernel-source-14442 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/ Link for SUSE-SU-2020:14442-1 https://lists.suse.com/pipermail/sle-security-updates/2020-August/007210.html E-Mail link for SUSE-SU-2020:14442-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1159912 SUSE Bug 1159912 https://bugzilla.suse.com/1159913 SUSE Bug 1159913 https://bugzilla.suse.com/1162002 SUSE Bug 1162002 https://bugzilla.suse.com/1171218 SUSE Bug 1171218 https://bugzilla.suse.com/1171219 SUSE Bug 1171219 https://bugzilla.suse.com/1171220 SUSE Bug 1171220 https://bugzilla.suse.com/1172775 SUSE Bug 1172775 https://bugzilla.suse.com/1172999 SUSE Bug 1172999 https://bugzilla.suse.com/1173265 SUSE Bug 1173265 https://bugzilla.suse.com/1174462 SUSE Bug 1174462 https://bugzilla.suse.com/1174543 SUSE Bug 1174543 https://www.suse.com/security/cve/CVE-2019-5108/ SUSE CVE CVE-2019-5108 page https://www.suse.com/security/cve/CVE-2020-0305/ SUSE CVE CVE-2020-0305 page https://www.suse.com/security/cve/CVE-2020-10732/ SUSE CVE CVE-2020-10732 page https://www.suse.com/security/cve/CVE-2020-10769/ SUSE CVE CVE-2020-10769 page https://www.suse.com/security/cve/CVE-2020-10773/ SUSE CVE CVE-2020-10773 page https://www.suse.com/security/cve/CVE-2020-12652/ SUSE CVE CVE-2020-12652 page https://www.suse.com/security/cve/CVE-2020-12656/ SUSE CVE CVE-2020-12656 page https://www.suse.com/security/cve/CVE-2020-13974/ SUSE CVE CVE-2020-13974 page https://www.suse.com/security/cve/CVE-2020-14416/ SUSE CVE CVE-2020-14416 page SUSE Linux Enterprise Server 11 SP4-LTSS kernel-bigmem-3.0.101-108.117.1 kernel-bigmem-base-3.0.101-108.117.1 kernel-bigmem-devel-3.0.101-108.117.1 kernel-default-3.0.101-108.117.1 kernel-default-base-3.0.101-108.117.1 kernel-default-devel-3.0.101-108.117.1 kernel-default-man-3.0.101-108.117.1 kernel-ec2-3.0.101-108.117.1 kernel-ec2-base-3.0.101-108.117.1 kernel-ec2-devel-3.0.101-108.117.1 kernel-pae-3.0.101-108.117.1 kernel-pae-base-3.0.101-108.117.1 kernel-pae-devel-3.0.101-108.117.1 kernel-ppc64-3.0.101-108.117.1 kernel-ppc64-base-3.0.101-108.117.1 kernel-ppc64-devel-3.0.101-108.117.1 kernel-source-3.0.101-108.117.1 kernel-syms-3.0.101-108.117.1 kernel-trace-3.0.101-108.117.1 kernel-trace-base-3.0.101-108.117.1 kernel-trace-devel-3.0.101-108.117.1 kernel-xen-3.0.101-108.117.1 kernel-xen-base-3.0.101-108.117.1 kernel-xen-devel-3.0.101-108.117.1 kernel-bigmem-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-bigmem-base-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-bigmem-devel-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-default-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-default-base-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-default-devel-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-default-man-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-ec2-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-ec2-base-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-ec2-devel-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-pae-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-pae-base-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-pae-devel-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-ppc64-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-ppc64-base-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-ppc64-devel-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-source-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-syms-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-trace-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-trace-base-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-trace-devel-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-xen-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-xen-base-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-xen-devel-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to different denial-of-service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby APs of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability. CVE-2019-5108 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.117.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/ https://www.suse.com/security/cve/CVE-2019-5108.html CVE-2019-5108 https://bugzilla.suse.com/1159912 SUSE Bug 1159912 https://bugzilla.suse.com/1159913 SUSE Bug 1159913 In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153467744 CVE-2020-0305 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.117.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/ https://www.suse.com/security/cve/CVE-2020-0305.html CVE-2020-0305 https://bugzilla.suse.com/1174462 SUSE Bug 1174462 A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data. CVE-2020-10732 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.117.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/ https://www.suse.com/security/cve/CVE-2020-10732.html CVE-2020-10732 https://bugzilla.suse.com/1171220 SUSE Bug 1171220 A buffer over-read flaw was found in RH kernel versions before 5.0 in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. When a payload longer than 4 bytes, and is not following 4-byte alignment boundary guidelines, it causes a buffer over-read threat, leading to a system crash. This flaw allows a local attacker with user privileges to cause a denial of service. CVE-2020-10769 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.117.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/ https://www.suse.com/security/cve/CVE-2020-10769.html CVE-2020-10769 https://bugzilla.suse.com/1173265 SUSE Bug 1173265 A stack information leak flaw was found in s390/s390x in the Linux kernel’s memory manager functionality, where it incorrectly writes to the /proc/sys/vm/cmm_timeout file. This flaw allows a local user to see the kernel data. CVE-2020-10773 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.117.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/ https://www.suse.com/security/cve/CVE-2020-10773.html CVE-2020-10773 https://bugzilla.suse.com/1172999 SUSE Bug 1172999 The __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a "double fetch" vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states "The security impact of this bug is not as bad as it could have been because these operations are all privileged and root already has enormous destructive power." CVE-2020-12652 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.117.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/ https://www.suse.com/security/cve/CVE-2020-12652.html CVE-2020-12652 https://bugzilla.suse.com/1171218 SUSE Bug 1171218 ** DISPUTED ** gss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation in the Linux kernel through 5.6.10 lacks certain domain_release calls, leading to a memory leak. Note: This was disputed with the assertion that the issue does not grant any access not already available. It is a problem that on unloading a specific kernel module some memory is leaked, but loading kernel modules is a privileged operation. A user could also write a kernel module to consume any amount of memory they like and load that replicating the effect of this bug. CVE-2020-12656 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.117.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/ https://www.suse.com/security/cve/CVE-2020-12656.html CVE-2020-12656 https://bugzilla.suse.com/1171219 SUSE Bug 1171219 An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if k_ascii is called several times in a row, aka CID-b86dab054059. NOTE: Members in the community argue that the integer overflow does not lead to a security issue in this case. CVE-2020-13974 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.117.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/ https://www.suse.com/security/cve/CVE-2020-13974.html CVE-2020-13974 https://bugzilla.suse.com/1172775 SUSE Bug 1172775 In the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c. CVE-2020-14416 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.117.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.117.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/ https://www.suse.com/security/cve/CVE-2020-14416.html CVE-2020-14416 https://bugzilla.suse.com/1162002 SUSE Bug 1162002