SUSE-SU-2020:3272-1
SUSE-SU-2020:3272-1 · Security update for the Linux Kernel
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
Diese Seite zeigt ausgewählte Angaben aus den Quellen. Die vollständige Beschreibung und betroffene Versionen finden Sie in den verlinkten Sicherheitshinweisen.
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bug fixes. The following security bugs were fixed: - CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766). - CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in mm/hugetlb.c (bnc#1176485). - CVE-2020-0430: Fixed an OOB read in skb_headlen of /include/linux/skbuff.h (bnc#1176723). - CVE-2020-14351: Fixed a race in the perf_mmap_close() function (bsc#1177086). - CVE-2020-16120: Fixed a permissions issue in ovl_path_open() (bsc#1177470). - CVE-2020-8694: Restricted energy meter to root access (bsc#1170415). - CVE-2020-27673: Fixed an issue where rogue guests could have caused denial of service of Dom0 via high frequency events (XSA-332 bsc#1177411) - CVE-2020-27675: Fixed a race condition in event handler which may crash dom0 (XSA-331 bsc#1177410). The following non-security bugs were fixed: - ALSA: bebob: potential info leak in hwdep_read() (git-fixes). - ALSA: compress_offload: remove redundant initialization (git-fixes). - ALSA: core: init: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes). - ALSA: core: pcm: simplify locking for timers (git-fixes). - ALSA: core: timer: clarify operator precedence (git-fixes). - ALSA: core: timer: remove redundant assignment (git-fixes). - ALSA: ctl: Workaround for lockdep warning wrt card->ctl_files_rwlock (git-fixes). - ALSA: hda - Do not register a cb func if it is registered already (git-fixes). - ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7 (git-fixes). - ALSA: hda/realtek - The front Mic on a HP machine does not work (git-fixes). - ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (git-fixes). - ALSA: hda: auto_parser: remove shadowed variable declaration (git-fixes). - ALSA: hda: use semicolons rather than commas to separate statements (git-fixes). - ALSA: mixart: Correct comment wrt obsoleted tasklet usage (git-fixes). - ALSA: rawmidi: (cosmetic) align function parameters (git-fixes). - ALSA: seq: oss: Avoid mutex lock for a long-time ioctl (git-fixes). - ALSA: usb-audio: Add mixer support for Pioneer DJ DJM-250MK2 (git-fixes). - ALSA: usb-audio: endpoint.c: fix repeated word 'there' (git-fixes). - ALSA: usb-audio: fix spelling mistake 'Frequence' -> 'Frequency' (git-fixes). - ASoC: qcom: lpass-cpu: fix concurrency issue (git-fixes). - ASoC: qcom: lpass-platform: fix memory leak (git-fixes). - ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() (git-fixes). - ath10k: Fix the size used in a 'dma_free_coherent()' call in an error handling path (git-fixes). - ath10k: provide survey info as accumulated data (git-fixes). - ath6kl: prevent potential array overflow in ath6kl_add_new_sta() (git-fixes). - ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb() (git-fixes). - ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() (git-fixes). - backlight: sky81452-backlight: Fix refcount imbalance on error (git-fixes). - blk-mq: order adding requests to hctx->dispatch and checking SCHED_RESTART (bsc#1177750). - block: ensure bdi->io_pages is always initialized (bsc#1177749). - Bluetooth: MGMT: Fix not checking if BT_HS is enabled (git-fixes). - Bluetooth: Only mark socket zapped after unlocking (git-fixes). - bnxt: do not enable NAPI until rings are ready (networking-stable-20_09_11). - bnxt_en: Check for zero dir entries in NVRAM (networking-stable-20_09_11). - brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach (git-fixes). - brcmfmac: check ndev pointer (git-fixes). - brcmsmac: fix memory leak in wlc_phy_attach_lcnphy (git-fixes). - btrfs: check the right error variable in btrfs_del_dir_entries_in_log (bsc#1177687). - btrfs: do not force read-only after error in drop snapshot (bsc#1176354). - btrfs: do not set the full sync flag on the inode during page release (bsc#1177687). - btrfs: fix incorrect updating of log root tree (bsc#1177687). - btrfs: fix race between page release and a fast fsync (bsc#1177687). - btrfs: only commit delayed items at fsync if we are logging a directory (bsc#1177687). - btrfs: only commit the delayed inode when doing a full fsync (bsc#1177687). - btrfs: qgroup: fix qgroup meta rsv leak for subvolume operations (bsc#1177856). - btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode (bsc#1177855). - btrfs: reduce contention on log trees when logging checksums (bsc#1177687). - btrfs: release old extent maps during page release (bsc#1177687). - btrfs: remove no longer needed use of log_writers for the log root tree (bsc#1177687). - btrfs: remove root usage from can_overcommit (bsc#1131277). - btrfs: stop incremening log_batch for the log root tree when syncing log (bsc#1177687). - btrfs: take overcommit into account in inc_block_group_ro (bsc#1176560). - btrfs: tree-checker: fix false alert caused by legacy btrfs root item (bsc#1177861). - can: c_can: reg_map_{c,d}_can: mark as __maybe_unused (git-fixes). - can: flexcan: flexcan_chip_stop(): add error handling and propagate error value (git-fixes). - can: softing: softing_card_shutdown(): add braces around empty body in an 'if' statement (git-fixes). - ceph: fix memory leak in ceph_cleanup_snapid_map() (bsc#1178234). - ceph: map snapid to anonymous bdev ID (bsc#1178234). - ceph: promote to unsigned long long before shifting (bsc#1178187). - clk: at91: clk-main: update key before writing AT91_CKGR_MOR (git-fixes). - clk: at91: remove the checking of parent_name (git-fixes). - clk: bcm2835: add missing release if devm_clk_hw_register fails (git-fixes). - clk: imx8mq: Fix usdhc parents order (git-fixes). - coredump: fix crash when umh is disabled (bsc#1177753). - crypto: algif_skcipher - EBUSY on aio should be an error (git-fixes). - crypto: ccp - fix error handling (git-fixes). - crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call (git-fixes). - crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc() (git-fixes). - crypto: omap-sham - fix digcnt register handling with export/import (git-fixes). - cxl: Rework error message for incompatible slots (bsc#1055014 git-fixes). - cypto: mediatek - fix leaks in mtk_desc_ring_alloc (git-fixes). - Disable ipa-clones dump for KMP builds (bsc#1178330) The feature is not really useful for KMP, and rather confusing, so let's disable it at building out-of-tree codes - dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status (git-fixes). - drm/amdgpu: prevent double kfree ttm->sg (git-fixes). - drm/gma500: fix error check (git-fixes). - drm/msm: Drop debug print in _dpu_crtc_setup_lm_bounds() (git-fixes). - drm/nouveau/mem: guard against NULL pointer access in mem_del (git-fixes). - EDAC/i5100: Fix error handling order in i5100_init_one() (bsc#1112178). - eeprom: at25: set minimum read/write access stride to 1 (git-fixes). - Fix use after free in get_capset_info callback (git-fixes). - gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY (networking-stable-20_08_24). - gtp: add GTPA_LINK info to msg sent to userspace (networking-stable-20_09_11). - HID: roccat: add bounds checking in kone_sysfs_write_settings() (git-fixes). - HID: wacom: Avoid entering wacom_wac_pen_report for pad / battery (git-fixes). - i2c: imx: Fix external abort on interrupt in exit paths (git-fixes). - ibmveth: Identify ingress large send packets (bsc#1178185 ltc#188897). - ibmveth: Switch order of ibmveth_helper calls (bsc#1061843 git-fixes). - ibmvnic: fix ibmvnic_set_mac (bsc#1066382 ltc#160943 git-fixes). - ibmvnic: save changed mac address to adapter->mac_addr (bsc#1134760 ltc#177449 git-fixes). - iio:accel:bma180: Fix use of true when should be iio_shared_by enum (git-fixes). - iio:adc:max1118 Fix alignment of timestamp and data leak issues (git-fixes). - iio:adc:ti-adc0832 Fix alignment issue with timestamp (git-fixes). - iio:adc:ti-adc12138 Fix alignment issue with timestamp (git-fixes). - iio:dac:ad5592r: Fix use of true for IIO_SHARED_BY_TYPE (git-fixes). - iio
Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
kernel-default SUSE:Linux Enterprise Module for Basesystem 15 SP1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.12.14-197.67.1
Auf 4.12.14-197.67.1 aktualisieren
kernel-source SUSE:Linux Enterprise Module for Basesystem 15 SP1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.12.14-197.67.1
Auf 4.12.14-197.67.1 aktualisieren
kernel-zfcpdump SUSE:Linux Enterprise Module for Basesystem 15 SP1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.12.14-197.67.1
Auf 4.12.14-197.67.1 aktualisieren
kernel-docs SUSE:Linux Enterprise Module for Development Tools 15 SP1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.12.14-197.67.1
Auf 4.12.14-197.67.1 aktualisieren
kernel-obs-build SUSE:Linux Enterprise Module for Development Tools 15 SP1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.12.14-197.67.1
Auf 4.12.14-197.67.1 aktualisieren
kernel-source SUSE:Linux Enterprise Module for Development Tools 15 SP1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.12.14-197.67.1
Auf 4.12.14-197.67.1 aktualisieren
kernel-syms SUSE:Linux Enterprise Module for Development Tools 15 SP1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.12.14-197.67.1
Auf 4.12.14-197.67.1 aktualisieren
kernel-default SUSE:Linux Enterprise Module for Legacy 15 SP1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.12.14-197.67.1
Auf 4.12.14-197.67.1 aktualisieren
kernel-default SUSE:Linux Enterprise Live Patching 15 SP1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.12.14-197.67.1
Auf 4.12.14-197.67.1 aktualisieren
kernel-livepatch-sle15-sp1_update_18 SUSE:Linux Enterprise Live Patching 15 SP1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 1-3.3.1
Auf 1-3.3.1 aktualisieren
kernel-default SUSE:Linux Enterprise High Availability Extension 15 SP1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.12.14-197.67.1
Auf 4.12.14-197.67.1 aktualisieren
kernel-default SUSE:Linux Enterprise Workstation Extension 15 SP1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.12.14-197.67.1
Auf 4.12.14-197.67.1 aktualisieren
Originalquellen
- https://www.suse.com/support/update/announcement/2020/suse-su-20203272-1/
- https://bugzilla.suse.com/1055014
- https://bugzilla.suse.com/1061843
- https://bugzilla.suse.com/1065600
- https://bugzilla.suse.com/1065729
- https://bugzilla.suse.com/1066382
- https://bugzilla.suse.com/1077428
- https://bugzilla.suse.com/1112178
- https://bugzilla.suse.com/1131277
- https://bugzilla.suse.com/1134760
- https://bugzilla.suse.com/1170415
- https://bugzilla.suse.com/1171558
- https://bugzilla.suse.com/1173432
- https://bugzilla.suse.com/1174748
- https://bugzilla.suse.com/1176354
- https://bugzilla.suse.com/1176485
- https://bugzilla.suse.com/1176560
- https://bugzilla.suse.com/1176713
- https://bugzilla.suse.com/1176723
- https://bugzilla.suse.com/1177086
- https://bugzilla.suse.com/1177101
- https://bugzilla.suse.com/1177271
- https://bugzilla.suse.com/1177281
- https://osv.dev/vulnerability/SUSE-SU-2020:3272-1