SUSE-SU-2020:2509-1
SUSE-SU-2020:2509-1 · Security update for the Linux Kernel (Live Patch 14 for SLE 12 SP4)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the Linux Kernel 4.12.14-95_54 fixes several issues. The following security issues were fixed: - CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247). - CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186). - CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bsc#1173659). - CVE-2020-1749: Fixed a flaw in IPsec where some IPv6 protocols were not encrypted (bsc#1165631).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kgraft-patch-sle12-sp4_update_14 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 2-2.2
Update to 2-2.2
Original sources
- https://www.suse.com/support/update/announcement/2020/suse-su-20202509-1/
- https://bugzilla.suse.com/1165631
- https://bugzilla.suse.com/1173659
- https://bugzilla.suse.com/1174186
- https://bugzilla.suse.com/1174247
- https://www.suse.com/security/cve/CVE-2019-16746
- https://www.suse.com/security/cve/CVE-2020-14331
- https://www.suse.com/security/cve/CVE-2020-15780
- https://www.suse.com/security/cve/CVE-2020-1749
- https://osv.dev/vulnerability/SUSE-SU-2020:2509-1