SUSE-SU-2020:2623-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2020/suse-su-20202623-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2623-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2020:2623-1

Related

Published

2020-09-14T11:53:34Z

Modified

2020-09-14T11:53:34Z

Summary

Security update for the Linux Kernel

Details

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2020-1749: Use ip6dstlookupflow instead of ip6dst_lookup (bsc#1165629).
CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798).
CVE-2020-14356: Fixed a null pointer dereference in cgroupv2 subsystem which could have led to privilege escalation (bsc#1175213).
CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205).
CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG (bsc#1174757).
CVE-2020-24394: Fixed an issue which could set incorrect permissions on new filesystem objects when the filesystem lacks ACL support (bsc#1175518).
CVE-2020-10135: Legacy pairing and secure-connections pairing authentication Bluetooth might have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access (bsc#1171988).
CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption (bsc#1176069).

The following non-security bugs were fixed:

btrfs: remove a BUGON() from mergereloc_roots() (bsc#1174784).
cifs: document and cleanup dfs mount (bsc#1144333 bsc#1172428).
cifs: Fix an error pointer dereference in cifs_mount() (bsc#1144333 bsc#1172428).
cifs: fix double free error on share and prefix (bsc#1144333 bsc#1172428).
cifs: handle empty list of targets in cifs_reconnect() (bsc#1144333 bsc#1172428).
cifs: handle RESPGETDFS_REFERRAL.PathConsumed in reconnect (bsc#1144333 bsc#1172428).
cifs: merge _{cifs,smb2}reconnecttcon into cifstree_connect() (bsc#1144333 bsc#1172428).
cifs: only update prefix path of DFS links in cifstreeconnect() (bsc#1144333 bsc#1172428).
cifs: reduce number of referral requests in DFS link lookups (bsc#1144333 bsc#1172428).
cifs: rename reconninvaldfs_target() (bsc#1144333 bsc#1172428).
Drivers: hv: vmbus: Only notify Hyper-V for die events that are oops (bsc#1175127).
ibmvnic: Fix IRQ mapping disposal in error path (bsc#1175112 ltc#187459).
ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL (bsc#1175515).
ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL (bsc#1175515).
ipvs: fix the connection sync failed in some cases (bsc#1174699).
kabi: hide new parameter of ip6dstlookup_flow() (bsc#1165629).
kabi: mask changes to struct ipv6_stub (bsc#1165629).
mm: Avoid calling buildallzonelists_init under hotplug context (bsc#1154366).
mm, vmstat: reduce zone->lock holding time by /proc/pagetypeinfo (bsc#1175691).
ocfs2: add trimfs dlm lock resource (bsc#1175228).
ocfs2: add trimfs lock to avoid duplicated trims in cluster (bsc#1175228).
ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963).
ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963).
ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).
ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).
ocfs2: fix remounting needed after setfacl command (bsc#1173954).
ocfs2: fix the application IO timeout when fstrim is running (bsc#1175228).
ocfs2: load globalinodealloc (bsc#1172963).
ocfs2: load globalinodealloc (bsc#1172963).
powerpc/eeh: Fix pserieseehconfigure_bridge() (bsc#1174689).
powerpc/pseries: PCIE PHB reset (bsc#1174689).
Revert 'ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).' This reverts commit 2638f62c6bc33d4c10ce0dddbf240aa80d366d7b.
Revert 'ocfs2: load globalinodealloc (bsc#1172963).' This reverts commit f04f670651f505cb354f26601ec5f5e4428f2f47.
scsi: scsidhalua: skip RTPG for devices only supporting active/optimized (bsc#1174978).
selftests/livepatch: fix mem leaks in test-klp-shadow-vars (bsc#1071995).
selftests/livepatch: more verification in test-klp-shadow-vars (bsc#1071995).
selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
selftests/livepatch: simplify test-klp-callbacks busy target tests (bsc#1071995).
Update patch reference for a tipc fix patch (bsc#1175515)
x86/unwind/orc: Fix ORC for newly forked tasks (bsc#1058115).
xen: do not reschedule in preemption off sections (bsc#1175749).

References

Affected packages

SUSE:OpenStack Cloud 9 / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.60.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.60.1",
            "kernel-devel": "4.12.14-95.60.1",
            "kernel-default-base": "4.12.14-95.60.1",
            "kernel-default": "4.12.14-95.60.1",
            "kernel-source": "4.12.14-95.60.1",
            "kernel-syms": "4.12.14-95.60.1",
            "kernel-default-devel": "4.12.14-95.60.1"
        }
    ]
}

SUSE:OpenStack Cloud 9 / kernel-source

Package

Name: kernel-source
Purl: purl:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.60.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.60.1",
            "kernel-devel": "4.12.14-95.60.1",
            "kernel-default-base": "4.12.14-95.60.1",
            "kernel-default": "4.12.14-95.60.1",
            "kernel-source": "4.12.14-95.60.1",
            "kernel-syms": "4.12.14-95.60.1",
            "kernel-default-devel": "4.12.14-95.60.1"
        }
    ]
}

SUSE:OpenStack Cloud 9 / kernel-syms

Package

Name: kernel-syms
Purl: purl:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.60.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.60.1",
            "kernel-devel": "4.12.14-95.60.1",
            "kernel-default-base": "4.12.14-95.60.1",
            "kernel-default": "4.12.14-95.60.1",
            "kernel-source": "4.12.14-95.60.1",
            "kernel-syms": "4.12.14-95.60.1",
            "kernel-default-devel": "4.12.14-95.60.1"
        }
    ]
}

SUSE:OpenStack Cloud Crowbar 9 / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.60.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.60.1",
            "kernel-devel": "4.12.14-95.60.1",
            "kernel-default-base": "4.12.14-95.60.1",
            "kernel-default": "4.12.14-95.60.1",
            "kernel-source": "4.12.14-95.60.1",
            "kernel-syms": "4.12.14-95.60.1",
            "kernel-default-devel": "4.12.14-95.60.1"
        }
    ]
}

SUSE:OpenStack Cloud Crowbar 9 / kernel-source

Package

Name: kernel-source
Purl: purl:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.60.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.60.1",
            "kernel-devel": "4.12.14-95.60.1",
            "kernel-default-base": "4.12.14-95.60.1",
            "kernel-default": "4.12.14-95.60.1",
            "kernel-source": "4.12.14-95.60.1",
            "kernel-syms": "4.12.14-95.60.1",
            "kernel-default-devel": "4.12.14-95.60.1"
        }
    ]
}

SUSE:OpenStack Cloud Crowbar 9 / kernel-syms

Package

Name: kernel-syms
Purl: purl:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.60.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.60.1",
            "kernel-devel": "4.12.14-95.60.1",
            "kernel-default-base": "4.12.14-95.60.1",
            "kernel-default": "4.12.14-95.60.1",
            "kernel-source": "4.12.14-95.60.1",
            "kernel-syms": "4.12.14-95.60.1",
            "kernel-default-devel": "4.12.14-95.60.1"
        }
    ]
}

SUSE:Linux Enterprise High Availability Extension 12 SP4 / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.60.1

Ecosystem specific

{
    "binaries": [
        {
            "dlm-kmp-default": "4.12.14-95.60.1",
            "gfs2-kmp-default": "4.12.14-95.60.1",
            "ocfs2-kmp-default": "4.12.14-95.60.1",
            "cluster-md-kmp-default": "4.12.14-95.60.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 12 SP4 / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.60.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-4_12_14-95_60-default": "1-6.3.1",
            "kernel-default-kgraft": "4.12.14-95.60.1",
            "kernel-default-kgraft-devel": "4.12.14-95.60.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 12 SP4 / kgraft-patch-SLE12-SP4_Update_16

Package

Name: kgraft-patch-SLE12-SP4_Update_16
Purl: purl:rpm/suse/kgraft-patch-SLE12-SP4_Update_16&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1-6.3.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-4_12_14-95_60-default": "1-6.3.1",
            "kernel-default-kgraft": "4.12.14-95.60.1",
            "kernel-default-kgraft-devel": "4.12.14-95.60.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP4 / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.60.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.60.1",
            "kernel-devel": "4.12.14-95.60.1",
            "kernel-default-base": "4.12.14-95.60.1",
            "kernel-default": "4.12.14-95.60.1",
            "kernel-source": "4.12.14-95.60.1",
            "kernel-syms": "4.12.14-95.60.1",
            "kernel-default-devel": "4.12.14-95.60.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP4 / kernel-source

Package

Name: kernel-source
Purl: purl:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.60.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.60.1",
            "kernel-devel": "4.12.14-95.60.1",
            "kernel-default-base": "4.12.14-95.60.1",
            "kernel-default": "4.12.14-95.60.1",
            "kernel-source": "4.12.14-95.60.1",
            "kernel-syms": "4.12.14-95.60.1",
            "kernel-default-devel": "4.12.14-95.60.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP4 / kernel-syms

Package

Name: kernel-syms
Purl: purl:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.60.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.60.1",
            "kernel-devel": "4.12.14-95.60.1",
            "kernel-default-base": "4.12.14-95.60.1",
            "kernel-default": "4.12.14-95.60.1",
            "kernel-source": "4.12.14-95.60.1",
            "kernel-syms": "4.12.14-95.60.1",
            "kernel-default-devel": "4.12.14-95.60.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP4-LTSS / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.60.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.60.1",
            "kernel-devel": "4.12.14-95.60.1",
            "kernel-default-base": "4.12.14-95.60.1",
            "kernel-default-man": "4.12.14-95.60.1",
            "kernel-default": "4.12.14-95.60.1",
            "kernel-source": "4.12.14-95.60.1",
            "kernel-syms": "4.12.14-95.60.1",
            "kernel-default-devel": "4.12.14-95.60.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP4-LTSS / kernel-source

Package

Name: kernel-source
Purl: purl:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.60.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.60.1",
            "kernel-devel": "4.12.14-95.60.1",
            "kernel-default-base": "4.12.14-95.60.1",
            "kernel-default-man": "4.12.14-95.60.1",
            "kernel-default": "4.12.14-95.60.1",
            "kernel-source": "4.12.14-95.60.1",
            "kernel-syms": "4.12.14-95.60.1",
            "kernel-default-devel": "4.12.14-95.60.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP4-LTSS / kernel-syms

Package

Name: kernel-syms
Purl: purl:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-95.60.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-95.60.1",
            "kernel-devel": "4.12.14-95.60.1",
            "kernel-default-base": "4.12.14-95.60.1",
            "kernel-default-man": "4.12.14-95.60.1",
            "kernel-default": "4.12.14-95.60.1",
            "kernel-source": "4.12.14-95.60.1",
            "kernel-syms": "4.12.14-95.60.1",
            "kernel-default-devel": "4.12.14-95.60.1"
        }
    ]
}