SUSE-SU-2020:2972-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2020/suse-su-20202972-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2972-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2020:2972-1

Related

Published

2020-10-20T15:08:23Z

Modified

2020-10-20T15:08:23Z

Summary

Security update for the Linux Kernel

Details

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724).
CVE-2020-12352: Fixed an information leak when processing certain AMP packets aka 'BleedingTooth' aka 'BadChoice' (bsc#1177725).
CVE-2020-25645: Fixed an issue which traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted (bsc#1177511).

The following non-security bugs were fixed:

drm/sun4i: mixer: Extend regmap max_register (git-fixes).
i2c: meson: fix clock setting overwrite (git-fixes).
iommu/vt-d: Correctly calculate agaw in domain_init() (bsc#1176400).
mac80211: do not allow bigger VHT MPDUs than the hardware supports (git-fixes).
macsec: avoid use-after-free in macsechandleframe() (git-fixes).
mmc: core: do not set limits.discard_granularity as 0 (git-fixes).
mm: memcg: switch to csstryget() in getmemcgroupfrom_mm() (bsc#1177685).
NFS: On fatal writeback errors, we need to call nfsinoderemove_request() (bsc#1177340).
NFS: Revalidate the file mapping on all fatal writeback errors (bsc#1177340).
nvme: add a Identify Namespace Identification Descriptor list quirk (bsc#1174748). add two previous futile attempts to fix the bug to blacklist.conf
nvme: Fix ctrl use-after-free during sysfs deletion (bsc#1174748).
nvme: fix deadlock caused by ANA update wrong locking (bsc#1174748).
nvme: fix possible io failures when removing multipathed ns (bsc#1174748).
nvme: make nvmeidentifyns propagate errors back (bsc#1174748). Refresh: - patches.suse/nvme-flush-scan_work-when-resetting-controller.patch
nvme: make nvmereportns_ids propagate error back (bsc#1174748).
nvme-multipath: do not reset on unknown status (bsc#1174748).
nvme: Namepace identification descriptor list is optional (bsc#1174748).
nvme: pass status to nvmeerrorstatus (bsc#1174748).
nvme-rdma: Avoid double freeing of async event data (bsc#1174748).
nvme: return error from nvmeallocns() (bsc#1174748).
powerpc/dma: Fix dmamapops::getrequiredmask (bsc#1065729).
scsi-hisi-kabi-fixes.patch
scsi-hisi-kabi-fixes.patch
scsi: hisi_sas: Add debugfs ITCT file and add file operations (bsc#1140683).
scsi: hisi_sas: Add manual trigger for debugfs dump (bsc#1140683).
scsi: hisisas: Add missing seqprintf() call in hisisasshowrow32() (bsc#1140683).
scsi: hisisas: Change return variable type in phyupv3hw() (bsc#1140683).
scsi: hisi_sas: Correct memory allocation size for DQ debugfs (bsc#1140683).
scsi: hisi_sas: Do some more tidy-up (bsc#1140683).
scsi: hisi_sas: Fix a timeout race of driver internal and SMP IO (bsc#1140683).
scsi: hisi_sas: Fix type casting and missing static qualifier in debugfs code (bsc#1140683). Refresh:
scsi-hisi_sas-Issue-internal-abort-on-all-relevant-q.patch
scsi: hisisas: No need to check return value of debugfscreate functions (bsc#1140683). Update:
scsi: hisi_sas: Some misc tidy-up (bsc#1140683).
scsi: qla2xxx: Add IOCB resource tracking (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Add rport fields in debugfs (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Add SLER and PI control support (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Allow devlosstmo setting for FC-NVMe devices (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Correct the check for sscanf() return value (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Fix buffer-buffer credit extraction error (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Fix crash on session cleanup with unload (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Fix inconsistent format argument type in qla_dbg.c (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Fix inconsistent format argument type in tcm_qla2xxx.c (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Fix I/O errors during LIP reset tests (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Fix I/O failures during remote port toggle testing (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Fix memory size truncation (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Fix MPI reset needed message (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Fix point-to-point (N2N) device discovery issue (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Fix reset of MPI firmware (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Honor status qualifier in FCP_RSP per spec (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Make tgtportdatabase available in initiator mode (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Performance tweak (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Reduce duplicate code in reporting speed (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Remove unneeded variable 'rval' (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Setup debugfs entries for remote ports (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Update version to 10.02.00.102-k (bsc#1176946 bsc#1175520 bsc#1172538).
scsi: qla2xxx: Update version to 10.02.00.103-k (bsc#1176946 bsc#1175520 bsc#1172538).

References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP1 / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-197.64.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-197.64.1",
            "kernel-devel": "4.12.14-197.64.1",
            "kernel-default-base": "4.12.14-197.64.1",
            "kernel-default-man": "4.12.14-197.64.1",
            "kernel-default-devel": "4.12.14-197.64.1",
            "kernel-default": "4.12.14-197.64.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP1 / kernel-source

Package

Name: kernel-source
Purl: purl:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-197.64.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-197.64.1",
            "kernel-devel": "4.12.14-197.64.1",
            "kernel-default-base": "4.12.14-197.64.1",
            "kernel-default-man": "4.12.14-197.64.1",
            "kernel-default-devel": "4.12.14-197.64.1",
            "kernel-default": "4.12.14-197.64.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP1 / kernel-zfcpdump

Package

Name: kernel-zfcpdump
Purl: purl:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-197.64.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-197.64.1",
            "kernel-devel": "4.12.14-197.64.1",
            "kernel-default-base": "4.12.14-197.64.1",
            "kernel-default-man": "4.12.14-197.64.1",
            "kernel-default-devel": "4.12.14-197.64.1",
            "kernel-default": "4.12.14-197.64.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Development Tools 15 SP1 / kernel-docs

Package

Name: kernel-docs
Purl: purl:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-197.64.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-docs": "4.12.14-197.64.1",
            "kernel-syms": "4.12.14-197.64.1",
            "kernel-source": "4.12.14-197.64.1",
            "kernel-obs-build": "4.12.14-197.64.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Development Tools 15 SP1 / kernel-obs-build

Package

Name: kernel-obs-build
Purl: purl:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-197.64.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-docs": "4.12.14-197.64.1",
            "kernel-syms": "4.12.14-197.64.1",
            "kernel-source": "4.12.14-197.64.1",
            "kernel-obs-build": "4.12.14-197.64.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Development Tools 15 SP1 / kernel-source

Package

Name: kernel-source
Purl: purl:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-197.64.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-docs": "4.12.14-197.64.1",
            "kernel-syms": "4.12.14-197.64.1",
            "kernel-source": "4.12.14-197.64.1",
            "kernel-obs-build": "4.12.14-197.64.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Development Tools 15 SP1 / kernel-syms

Package

Name: kernel-syms
Purl: purl:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-197.64.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-docs": "4.12.14-197.64.1",
            "kernel-syms": "4.12.14-197.64.1",
            "kernel-source": "4.12.14-197.64.1",
            "kernel-obs-build": "4.12.14-197.64.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Legacy 15 SP1 / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-197.64.1

Ecosystem specific

{
    "binaries": [
        {
            "reiserfs-kmp-default": "4.12.14-197.64.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 SP1 / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-197.64.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-default-livepatch": "4.12.14-197.64.1",
            "kernel-default-livepatch-devel": "4.12.14-197.64.1",
            "kernel-livepatch-4_12_14-197_64-default": "1-3.3.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 SP1 / kernel-livepatch-SLE15-SP1_Update_17

Package

Name: kernel-livepatch-SLE15-SP1_Update_17
Purl: purl:rpm/suse/kernel-livepatch-SLE15-SP1_Update_17&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1-3.3.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-default-livepatch": "4.12.14-197.64.1",
            "kernel-default-livepatch-devel": "4.12.14-197.64.1",
            "kernel-livepatch-4_12_14-197_64-default": "1-3.3.1"
        }
    ]
}

SUSE:Linux Enterprise High Availability Extension 15 SP1 / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-197.64.1

Ecosystem specific

{
    "binaries": [
        {
            "dlm-kmp-default": "4.12.14-197.64.1",
            "gfs2-kmp-default": "4.12.14-197.64.1",
            "ocfs2-kmp-default": "4.12.14-197.64.1",
            "cluster-md-kmp-default": "4.12.14-197.64.1"
        }
    ]
}

SUSE:Linux Enterprise Workstation Extension 15 SP1 / kernel-default

Package

Name: kernel-default
Purl: purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.12.14-197.64.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-default-extra": "4.12.14-197.64.1"
        }
    ]
}