Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:1597-1 Final 1 1 2020-06-10T08:31:49Z current 2020-06-10T08:31:49Z 2020-06-10T08:31:49Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it. This attack is known as Special Register Buffer Data Sampling (SRBDS) or 'CrossTalk' (bsc#1154824). - CVE-2020-12656: Fixed an improper handling of certain domain_release calls leadingch could have led to a memory leak (bsc#1171219). - CVE-2020-12654: Fixed an issue in he wifi driver which could have allowed a remote AP to trigger a heap-based buffer overflow (bsc#1171202). - CVE-2020-12653: Fixed an issue in the wifi driver which could have allowed local users to gain privileges or cause a denial of service (bsc#1171195). - CVE-2020-12652: Fixed an issue which could have allowed local users to hold an incorrect lock during the ioctl operation and trigger a race condition (bsc#1171218). - CVE-2020-12114: Fixed A pivot_root race condition which could have allowed local users to cause a denial of service (panic) by corrupting a mountpoint reference counter (bsc#1171098). - CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172317). The following non-security bugs were fixed: - can, slip: Protect tty->disc_data in write_wakeup and close with RCU (bsc#1171698). - KEYS: allow reaching the keys quotas exactly (bsc#1171689). - KEYS: reaching the keys quotas correctly (bsc#1171689). - Revert 'ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()' (bsc#1172221). - random: always use batched entropy for get_random_u{32,64} (bsc#1164871). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2020-1597,SUSE-OpenStack-Cloud-7-2020-1597,SUSE-SLE-HA-12-SP2-2020-1597,SUSE-SLE-SAP-12-SP2-2020-1597,SUSE-SLE-SERVER-12-SP2-2020-1597,SUSE-SLE-SERVER-12-SP2-BCL-2020-1597 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20201597-1/ Link for SUSE-SU-2020:1597-1 https://lists.suse.com/pipermail/sle-security-updates/2020-June/006923.html E-Mail link for SUSE-SU-2020:1597-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1154824 SUSE Bug 1154824 https://bugzilla.suse.com/1164871 SUSE Bug 1164871 https://bugzilla.suse.com/1171098 SUSE Bug 1171098 https://bugzilla.suse.com/1171195 SUSE Bug 1171195 https://bugzilla.suse.com/1171202 SUSE Bug 1171202 https://bugzilla.suse.com/1171218 SUSE Bug 1171218 https://bugzilla.suse.com/1171219 SUSE Bug 1171219 https://bugzilla.suse.com/1171689 SUSE Bug 1171689 https://bugzilla.suse.com/1171698 SUSE Bug 1171698 https://bugzilla.suse.com/1172221 SUSE Bug 1172221 https://bugzilla.suse.com/1172317 SUSE Bug 1172317 https://www.suse.com/security/cve/CVE-2020-0543/ SUSE CVE CVE-2020-0543 page https://www.suse.com/security/cve/CVE-2020-10757/ SUSE CVE CVE-2020-10757 page https://www.suse.com/security/cve/CVE-2020-12114/ SUSE CVE CVE-2020-12114 page https://www.suse.com/security/cve/CVE-2020-12652/ SUSE CVE CVE-2020-12652 page https://www.suse.com/security/cve/CVE-2020-12653/ SUSE CVE CVE-2020-12653 page https://www.suse.com/security/cve/CVE-2020-12654/ SUSE CVE CVE-2020-12654 page https://www.suse.com/security/cve/CVE-2020-12656/ SUSE CVE CVE-2020-12656 page SUSE Linux Enterprise High Availability Extension 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE OpenStack Cloud 7 cluster-md-kmp-debug-4.4.121-92.135.1 cluster-md-kmp-default-4.4.121-92.135.1 cluster-md-kmp-vanilla-4.4.121-92.135.1 cluster-network-kmp-debug-4.4.121-92.135.1 cluster-network-kmp-default-4.4.121-92.135.1 cluster-network-kmp-vanilla-4.4.121-92.135.1 dlm-kmp-debug-4.4.121-92.135.1 dlm-kmp-default-4.4.121-92.135.1 dlm-kmp-vanilla-4.4.121-92.135.1 gfs2-kmp-debug-4.4.121-92.135.1 gfs2-kmp-default-4.4.121-92.135.1 gfs2-kmp-vanilla-4.4.121-92.135.1 kernel-debug-4.4.121-92.135.1 kernel-debug-base-4.4.121-92.135.1 kernel-debug-devel-4.4.121-92.135.1 kernel-debug-extra-4.4.121-92.135.1 kernel-debug-kgraft-4.4.121-92.135.1 kernel-default-4.4.121-92.135.1 kernel-default-base-4.4.121-92.135.1 kernel-default-devel-4.4.121-92.135.1 kernel-default-extra-4.4.121-92.135.1 kernel-default-kgraft-4.4.121-92.135.1 kernel-default-man-4.4.121-92.135.1 kernel-devel-4.4.121-92.135.1 kernel-docs-4.4.121-92.135.1 kernel-docs-html-4.4.121-92.135.1 kernel-docs-pdf-4.4.121-92.135.1 kernel-macros-4.4.121-92.135.1 kernel-obs-build-4.4.121-92.135.1 kernel-obs-qa-4.4.121-92.135.1 kernel-source-4.4.121-92.135.1 kernel-source-vanilla-4.4.121-92.135.1 kernel-syms-4.4.121-92.135.1 kernel-vanilla-4.4.121-92.135.1 kernel-vanilla-base-4.4.121-92.135.1 kernel-vanilla-devel-4.4.121-92.135.1 kernel-zfcpdump-4.4.121-92.135.1 kgraft-patch-4_4_121-92_135-default-1-3.5.1 ocfs2-kmp-debug-4.4.121-92.135.1 ocfs2-kmp-default-4.4.121-92.135.1 ocfs2-kmp-vanilla-4.4.121-92.135.1 cluster-md-kmp-default-4.4.121-92.135.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 cluster-network-kmp-default-4.4.121-92.135.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 dlm-kmp-default-4.4.121-92.135.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 gfs2-kmp-default-4.4.121-92.135.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 ocfs2-kmp-default-4.4.121-92.135.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 kernel-default-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-base-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-devel-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-devel-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-macros-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-source-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-syms-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-base-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-devel-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-man-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-devel-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-macros-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-source-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-syms-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kgraft-patch-4_4_121-92_135-default-1-3.5.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-default-base-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-default-devel-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-devel-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-macros-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-source-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-syms-4.4.121-92.135.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kgraft-patch-4_4_121-92_135-default-1-3.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-default-4.4.121-92.135.1 as a component of SUSE OpenStack Cloud 7 kernel-default-base-4.4.121-92.135.1 as a component of SUSE OpenStack Cloud 7 kernel-default-devel-4.4.121-92.135.1 as a component of SUSE OpenStack Cloud 7 kernel-default-man-4.4.121-92.135.1 as a component of SUSE OpenStack Cloud 7 kernel-devel-4.4.121-92.135.1 as a component of SUSE OpenStack Cloud 7 kernel-macros-4.4.121-92.135.1 as a component of SUSE OpenStack Cloud 7 kernel-source-4.4.121-92.135.1 as a component of SUSE OpenStack Cloud 7 kernel-syms-4.4.121-92.135.1 as a component of SUSE OpenStack Cloud 7 kgraft-patch-4_4_121-92_135-default-1-3.5.1 as a component of SUSE OpenStack Cloud 7 Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. CVE-2020-0543 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_135-default-1-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_135-default-1-3.5.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_135-default-1-3.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201597-1/ https://www.suse.com/security/cve/CVE-2020-0543.html CVE-2020-0543 https://bugzilla.suse.com/1154824 SUSE Bug 1154824 https://bugzilla.suse.com/1172205 SUSE Bug 1172205 https://bugzilla.suse.com/1172206 SUSE Bug 1172206 https://bugzilla.suse.com/1172207 SUSE Bug 1172207 https://bugzilla.suse.com/1172770 SUSE Bug 1172770 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system. CVE-2020-10757 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_135-default-1-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_135-default-1-3.5.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_135-default-1-3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201597-1/ https://www.suse.com/security/cve/CVE-2020-10757.html CVE-2020-10757 https://bugzilla.suse.com/1159281 SUSE Bug 1159281 https://bugzilla.suse.com/1172317 SUSE Bug 1172317 https://bugzilla.suse.com/1172437 SUSE Bug 1172437 A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x before 5.3 allows local users to cause a denial of service (panic) by corrupting a mountpoint reference counter. CVE-2020-12114 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_135-default-1-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_135-default-1-3.5.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_135-default-1-3.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201597-1/ https://www.suse.com/security/cve/CVE-2020-12114.html CVE-2020-12114 https://bugzilla.suse.com/1171098 SUSE Bug 1171098 The __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a "double fetch" vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states "The security impact of this bug is not as bad as it could have been because these operations are all privileged and root already has enormous destructive power." CVE-2020-12652 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_135-default-1-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_135-default-1-3.5.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_135-default-1-3.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201597-1/ https://www.suse.com/security/cve/CVE-2020-12652.html CVE-2020-12652 https://bugzilla.suse.com/1171218 SUSE Bug 1171218 An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea. CVE-2020-12653 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_135-default-1-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_135-default-1-3.5.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_135-default-1-3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201597-1/ https://www.suse.com/security/cve/CVE-2020-12653.html CVE-2020-12653 https://bugzilla.suse.com/1159281 SUSE Bug 1159281 https://bugzilla.suse.com/1171195 SUSE Bug 1171195 https://bugzilla.suse.com/1171254 SUSE Bug 1171254 An issue was found in Linux kernel before 5.5.4. mwifiex_ret_wmm_get_status() in drivers/net/wireless/marvell/mwifiex/wmm.c allows a remote AP to trigger a heap-based buffer overflow because of an incorrect memcpy, aka CID-3a9b153c5591. CVE-2020-12654 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_135-default-1-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_135-default-1-3.5.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_135-default-1-3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201597-1/ https://www.suse.com/security/cve/CVE-2020-12654.html CVE-2020-12654 https://bugzilla.suse.com/1159281 SUSE Bug 1159281 https://bugzilla.suse.com/1171202 SUSE Bug 1171202 https://bugzilla.suse.com/1171252 SUSE Bug 1171252 ** DISPUTED ** gss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation in the Linux kernel through 5.6.10 lacks certain domain_release calls, leading to a memory leak. Note: This was disputed with the assertion that the issue does not grant any access not already available. It is a problem that on unloading a specific kernel module some memory is leaked, but loading kernel modules is a privileged operation. A user could also write a kernel module to consume any amount of memory they like and load that replicating the effect of this bug. CVE-2020-12656 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_135-default-1-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.135.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_135-default-1-3.5.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.135.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_135-default-1-3.5.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201597-1/ https://www.suse.com/security/cve/CVE-2020-12656.html CVE-2020-12656 https://bugzilla.suse.com/1171219 SUSE Bug 1171219