SUSE-SU-2020:0836-1
SUSE-SU-2020:0836-1 · Security update for the Linux Kernel
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8647: Fixed a use-after-free in the vc_do_resize function in drivers/tty/vt/vt.c (bsc#1162929). - CVE-2020-8649: Fixed a use-after-free in the vgacon_invert_region function in drivers/video/console/vgacon.c (bsc#1162931). - CVE-2020-8648: Fixed a use-after-free in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bsc#1162928). - CVE-2020-9383: Fixed an out-of-bounds read due to improper error condition check of FDC index (bsc#1165111). - CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285). The following non-security bugs were fixed: - ALSA: hda/realtek - Add Headset Button supported for ThinkPad X1 (bsc#1111666). - ALSA: hda/realtek - Add Headset Mic supported (bsc#1111666). - ALSA: hda/realtek - Add more codec supported Headset Button (bsc#1111666). - ALSA: hda/realtek - Apply quirk for MSI GP63, too (bsc#1111666). - ALSA: hda/realtek - Apply quirk for yet another MSI laptop (bsc#1111666). - ALSA: hda/realtek - Enable the headset of ASUS B9450FA with ALC294 (bsc#1111666). - ALSA: hda/realtek - Fix a regression for mute led on Lenovo Carbon X1 (bsc#1111666). - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master (bsc#1111666). - ALSA: usb-audio: Add boot quirk for MOTU M Series (bsc#1111666). - ALSA: usb-audio: Add clock validity quirk for Denon MC7000/MCX8000 (bsc#1111666). - ALSA: usb-audio: add implicit fb quirk for MOTU M Series (bsc#1111666). - ALSA: usb-audio: add quirks for Line6 Helix devices fw>=2.82 (bsc#1111666). - ALSA: usb-audio: Apply 48kHz fixed rate playback for Jabra Evolve 65 headset (bsc#1111666). - ALSA: usb-audio: fix Corsair Virtuoso mixer label collision (bsc#1111666). - ALSA: usb-audio: Fix UAC2/3 effect unit parsing (bsc#1111666). - ALSA: usb-audio: unlock on error in probe (bsc#1111666). - ALSA: usb-audio: Use lower hex numbers for IDs (bsc#1111666). - ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status (bsc#1051510). - amdgpu/gmc_v9: save/restore sdpif regs during S3 (bsc#1113956) - ASoC: dapm: Correct DAPM handling of active widgets during shutdown (bsc#1051510). - ASoC: pcm512x: Fix unbalanced regulator enable call in probe error path (bsc#1051510). - ASoC: pcm: Fix possible buffer overflow in dpcm state sysfs output (bsc#1051510). - ASoC: pcm: update FE/BE trigger order based on the command (bsc#1051510). - ASoC: topology: Fix memleak in soc_tplg_link_elems_load() (bsc#1051510). - atm: zatm: Fix empty body Clang warnings (bsc#1051510). - b43legacy: Fix -Wcast-function-type (bsc#1051510). - blk: Fix kabi due to blk_trace_mutex addition (bsc#1159285). - blktrace: fix dereference after null check (bsc#1159285). - blktrace: fix trace mutex deadlock (bsc#1159285). - bnxt_en: Fix NTUPLE firmware command failures (bsc#1104745 ). - bnxt_en: Fix TC queue mapping (networking-stable-20_02_05). - bnxt_en: Improve device shutdown method (bsc#1104745 ). - bnxt_en: Issue PCIe FLR in kdump kernel to cleanup pending DMAs (bsc#1134090 jsc#SLE-5954). - bonding/alb: properly access headers in bond_alb_xmit() (networking-stable-20_02_09). - bpf, offload: Replace bitwise AND by logical AND in bpf_prog_offload_info_fill (bsc#1109837). - CIFS: add a debug macro that prints \\server\share for errors (bsc#1144333). - CIFS: add missing mount option to /proc/mounts (bsc#1144333). - CIFS: add new debugging macro cifs_server_dbg (bsc#1144333). - CIFS: add passthrough for smb2 setinfo (bsc#1144333). - CIFS: add SMB2_open() arg to return POSIX data (bsc#1144333). - CIFS: add smb2 POSIX info level (bsc#1144333). - CIFS: add SMB3 change notification support (bsc#1144333). - CIFS: add support for fallocate mode 0 for non-sparse files (bsc#1144333). - CIFS: Add support for setting owner info, dos attributes, and create time (bsc#1144333). - CIFS: Add tracepoints for errors on flush or fsync (bsc#1144333). - CIFS: Adjust indentation in smb2_open_file (bsc#1144333). - CIFS: allow chmod to set mode bits using special sid (bsc#1144333). - CIFS: Avoid doing network I/O while holding cache lock (bsc#1144333). - CIFS: call wake_up(server->response_q) inside of cifs_reconnect() (bsc#1144333). - CIFS: Clean up DFS referral cache (bsc#1144333). - CIFS: create a helper function to parse the query-directory response buffer (bsc#1144333). - CIFS: do d_move in rename (bsc#1144333). - CIFS: Do not display RDMA transport on reconnect (bsc#1144333). - CIFS: do not ignore the SYNC flags in getattr (bsc#1144333). - CIFS: do not leak -EAGAIN for stat() during reconnect (bsc#1144333). - CIFS: do not use 'pre:' for MODULE_SOFTDEP (bsc#1144333). - CIFS: enable change notification for SMB2.1 dialect (bsc#1144333). - CIFS: fail i/o on soft mounts if sessionsetup errors out (bsc#1144333). - CIFS: fix a comment for the timeouts when sending echos (bsc#1144333). - CIFS: fix a white space issue in cifs_get_inode_info() (bsc#1144333). - CIFS: fix dereference on ses before it is null checked (bsc#1144333). - CIFS: Fix memory allocation in __smb2_handle_cancelled_cmd() (bsc#1144333). - CIFS: fix mode bits from dir listing when mounted with modefromsid (bsc#1144333). - CIFS: Fix mode output in debugging statements (bsc#1144333). - CIFS: Fix mount options set in automount (bsc#1144333). - CIFS: fix NULL dereference in match_prepath (bsc#1144333). - CIFS: Fix potential deadlock when updating vol in cifs_reconnect() (bsc#1144333). - CIFS: fix potential mismatch of UNC paths (bsc#1144333). - CIFS: fix rename() by ensuring source handle opened with DELETE bit (bsc#1144333). - CIFS: Fix return value in __update_cache_entry (bsc#1144333). - CIFS: fix soft mounts hanging in the reconnect code (bsc#1144333). - CIFS: fix soft mounts hanging in the reconnect code (bsc#1144333). - CIFS: Fix task struct use-after-free on reconnect (bsc#1144333). - CIFS: fix unitialized variable poential problem with network I/O cache lock patch (bsc#1144333). - CIFS: get mode bits from special sid on stat (bsc#1144333). - CIFS: Get rid of kstrdup_const()'d paths (bsc#1144333). - CIFS: handle prefix paths in reconnect (bsc#1144333). - CIFS: Introduce helpers for finding TCP connection (bsc#1144333). - CIFS: log warning message (once) if out of disk space (bsc#1144333). - CIFS: make sure we do not overflow the max EA buffer size (bsc#1144333). - CIFS: make use of cap_unix(ses) in cifs_reconnect_tcon() (bsc#1144333). - CIFS: Merge is_path_valid() into get_normalized_path() (bsc#1144333). - CIFS: modefromsid: make room for 4 ACE (bsc#1144333). - CIFS: modefromsid: write mode ACE first (bsc#1144333). - CIFS: Optimize readdir on reparse points (bsc#1144333). - CIFS: plumb smb2 POSIX dir enumeration (bsc#1144333). - CIFS: potential unintitliazed error code in cifs_getattr() (bsc#1144333). - CIFS: prepare SMB2_query_directory to be used with compounding (bsc#1144333). - CIFS: print warning once if mounting with vers=1.0 (bsc#1144333). - CIFS: refactor cifs_get_inode_info() (bsc#1144333). - CIFS: remove redundant assignment to pointer pneg_ctxt (bsc#1144333). - CIFS: remove redundant assignment to variable rc (bsc#1144333). - CIFS: remove set but not used variables (bsc#1144333). - CIFS: remove set but not used variable 'server' (bsc#1144333). - CIFS: remove unused variable (bsc#1144333). - CIFS: remove unused variable 'sid_user' (bsc#1144333). - CIFS: rename a variable in SendReceive() (bsc#1144333). - CIFS: rename posix create rsp (bsc#1144333). - CIFS: replace various strncpy with strscpy and similar (bsc#1144333). - CIFS: Return directly after a failed build_path_from_dentry() in cifs_do_create() (bsc#1144333). - CIFS: set correct max-buffer-size for smb2_ioctl_init() (bsc#1144333). - CIFS: smbd: Add messages on RDMA session destroy and reconnection (bsc#1144333). - CIFS: smbd: Invalidate and deregister memory registration on re-send for direct I/O (bsc#1144333). - CIFS: smbd: On
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-default SUSE:Linux Enterprise Module for Basesystem 15 SP1
- Affected ranges
- ECOSYSTEM: < 4.12.14-197.37.1
Update to 4.12.14-197.37.1
kernel-source SUSE:Linux Enterprise Module for Basesystem 15 SP1
- Affected ranges
- ECOSYSTEM: < 4.12.14-197.37.1
Update to 4.12.14-197.37.1
kernel-zfcpdump SUSE:Linux Enterprise Module for Basesystem 15 SP1
- Affected ranges
- ECOSYSTEM: < 4.12.14-197.37.1
Update to 4.12.14-197.37.1
kernel-docs SUSE:Linux Enterprise Module for Development Tools 15 SP1
- Affected ranges
- ECOSYSTEM: < 4.12.14-197.37.1
Update to 4.12.14-197.37.1
kernel-obs-build SUSE:Linux Enterprise Module for Development Tools 15 SP1
- Affected ranges
- ECOSYSTEM: < 4.12.14-197.37.1
Update to 4.12.14-197.37.1
kernel-source SUSE:Linux Enterprise Module for Development Tools 15 SP1
- Affected ranges
- ECOSYSTEM: < 4.12.14-197.37.1
Update to 4.12.14-197.37.1
kernel-syms SUSE:Linux Enterprise Module for Development Tools 15 SP1
- Affected ranges
- ECOSYSTEM: < 4.12.14-197.37.1
Update to 4.12.14-197.37.1
kernel-default SUSE:Linux Enterprise Module for Legacy 15 SP1
- Affected ranges
- ECOSYSTEM: < 4.12.14-197.37.1
Update to 4.12.14-197.37.1
kernel-default SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 4.12.14-197.37.1
Update to 4.12.14-197.37.1
kernel-livepatch-sle15-sp1_update_10 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 1-3.3.1
Update to 1-3.3.1
kernel-default SUSE:Linux Enterprise High Availability Extension 15 SP1
- Affected ranges
- ECOSYSTEM: < 4.12.14-197.37.1
Update to 4.12.14-197.37.1
kernel-default SUSE:Linux Enterprise Workstation Extension 15 SP1
- Affected ranges
- ECOSYSTEM: < 4.12.14-197.37.1
Update to 4.12.14-197.37.1
Original sources
- https://www.suse.com/support/update/announcement/2020/suse-su-20200836-1/
- https://bugzilla.suse.com/1044231
- https://bugzilla.suse.com/1051510
- https://bugzilla.suse.com/1051858
- https://bugzilla.suse.com/1056686
- https://bugzilla.suse.com/1060463
- https://bugzilla.suse.com/1065729
- https://bugzilla.suse.com/1103990
- https://bugzilla.suse.com/1103992
- https://bugzilla.suse.com/1104353
- https://bugzilla.suse.com/1104745
- https://bugzilla.suse.com/1109837
- https://bugzilla.suse.com/1111666
- https://bugzilla.suse.com/1111974
- https://bugzilla.suse.com/1112178
- https://bugzilla.suse.com/1112374
- https://bugzilla.suse.com/1113956
- https://bugzilla.suse.com/1114279
- https://bugzilla.suse.com/1114685
- https://bugzilla.suse.com/1119680
- https://bugzilla.suse.com/1127611
- https://bugzilla.suse.com/1133021
- https://bugzilla.suse.com/1134090
- https://osv.dev/vulnerability/SUSE-SU-2020:0836-1