The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
CVE-2019-20934: Fixed a use-after-free in shownumastats() because NUMA fault statistics were inappropriately freed, aka CID-16d51a590a8c (bsc#1179663).
CVE-2020-0444: Fixed a bad kfree due to a logic error in auditdatato_entry (bnc#1180027).
CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180029).
CVE-2020-0466: Fixed a use-after-free due to a logic error in doepollctl and eploopcheck_proc of eventpoll.c (bnc#1180031).
CVE-2020-4788: Fixed an issue with IBM Power9 processors could have allowed a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances (bsc#1177666).
CVE-2020-11668: Fixed an out of bounds write to the heap in drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) caused by mishandling invalid descriptors (bsc#1168952).
CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to gain privileges or cause a denial of service (bsc#1179141).
CVE-2020-27068: Fixed an out-of-bounds read due to a missing bounds check in the nl80211_policy policy of nl80211.c (bnc#1180086).
CVE-2020-27777: Fixed a privilege escalation in the Run-Time Abstraction Services (RTAS) interface, affecting guests running on top of PowerVM or KVM hypervisors (bnc#1179107).
CVE-2020-27786: Fixed an out-of-bounds write in the MIDI implementation (bnc#1179601).
CVE-2020-27825: Fixed a race in the trace_open and buffer resize calls (bsc#1179960).
CVE-2020-29371: Fixed uninitialized memory leaks to userspace (bsc#1179429).
CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bnc#1179745).
CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179745).
The following non-security bugs were fixed:
ACPI: PNP: compare the string length in the matching_id() (git-fixes).
ACPICA: Disassembler: create buffer fields in ACPIPARSELOAD_PASS1 (git-fixes).
ACPICA: Do not increment operation_region reference counts for field units (git-fixes).