SUSE-SU-2020:2980-1
SUSE-SU-2020:2980-1 · Security update for the Linux Kernel
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724). - CVE-2020-24490: Fixed a heap buffer overflow when processing extended advertising report events aka 'BleedingTooth' aka 'BadVibes' (bsc#1177726). - CVE-2020-12352: Fixed an information leak when processing certain AMP packets aka 'BleedingTooth' aka 'BadChoice' (bsc#1177725). - CVE-2020-25641: Fixed a zero-length biovec request issued by the block subsystem could have caused the kernel to enter an infinite loop, causing a denial of service (bsc#1177121). - CVE-2020-25643: Fixed a memory corruption and a read overflow which could have caused by improper input validation in the ppp_cp_parse_cr function (bsc#1177206). - CVE-2020-25645: Fixed an issue which traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted (bsc#1177511). The following non-security bugs were fixed: - 9p: Fix memory leak in v9fs_mount (git-fixes). - ACPI: EC: Reference count query handlers under lock (git-fixes). - airo: Fix read overflows sending packets (git-fixes). - ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter (git-fixes). - arm64: Enable PCI write-combine resources under sysfs (bsc#1175807). - ASoC: img-i2s-out: Fix runtime PM imbalance on error (git-fixes). - ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN Converter9 2-in-1 (git-fixes). - ASoC: kirkwood: fix IRQ error handling (git-fixes). - ASoC: wm8994: Ensure the device is resumed in wm89xx_mic_detect functions (git-fixes). - ASoC: wm8994: Skip setting of the WM8994_MICBIAS register for WM1811 (git-fixes). - ata: ahci: mvebu: Make SATA PHY optional for Armada 3720 (git-fixes). - ath10k: fix array out-of-bounds access (git-fixes). - ath10k: fix memory leak for tpc_stats_final (git-fixes). - ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read (git-fixes). - Bluetooth: Fix refcount use-after-free issue (git-fixes). - Bluetooth: guard against controllers sending zero'd events (git-fixes). - Bluetooth: Handle Inquiry Cancel error after Inquiry Complete (git-fixes). - Bluetooth: L2CAP: handle l2cap config request during open state (git-fixes). - Bluetooth: prefetch channel before killing sock (git-fixes). - brcmfmac: Fix double freeing in the fmac usb data path (git-fixes). - btrfs: block-group: do not set the wrong READA flag for btrfs_read_block_groups() (bsc#1176019). - btrfs: block-group: fix free-space bitmap threshold (bsc#1176019). - btrfs: block-group: refactor how we delete one block group item (bsc#1176019). - btrfs: block-group: refactor how we insert a block group item (bsc#1176019). - btrfs: block-group: refactor how we read one block group item (bsc#1176019). - btrfs: block-group: rename write_one_cache_group() (bsc#1176019). - btrfs: check the right error variable in btrfs_del_dir_entries_in_log (bsc#1177687). - btrfs: do not set the full sync flag on the inode during page release (bsc#1177687). - btrfs: do not take an extra root ref at allocation time (bsc#1176019). - btrfs: drop logs when we've aborted a transaction (bsc#1176019). - btrfs: fix a race between scrub and block group removal/allocation (bsc#1176019). - Btrfs: fix crash during unmount due to race with delayed inode workers (bsc#1176019). - btrfs: fix race between page release and a fast fsync (bsc#1177687). - btrfs: free block groups after free'ing fs trees (bsc#1176019). - btrfs: hold a ref on the root on the dead roots list (bsc#1176019). - btrfs: kill the subvol_srcu (bsc#1176019). - btrfs: make btrfs_cleanup_fs_roots use the radix tree lock (bsc#1176019). - btrfs: make inodes hold a ref on their roots (bsc#1176019). - btrfs: make the extent buffer leak check per fs info (bsc#1176019). - btrfs: move ino_cache_inode dropping out of btrfs_free_fs_root (bsc#1176019). - btrfs: move the block group freeze/unfreeze helpers into block-group.c (bsc#1176019). - btrfs: move the root freeing stuff into btrfs_put_root (bsc#1176019). - btrfs: only commit delayed items at fsync if we are logging a directory (bsc#1177687). - btrfs: only commit the delayed inode when doing a full fsync (bsc#1177687). - btrfs: reduce contention on log trees when logging checksums (bsc#1177687). - btrfs: release old extent maps during page release (bsc#1177687). - btrfs: remove no longer necessary chunk mutex locking cases (bsc#1176019). - btrfs: remove no longer needed use of log_writers for the log root tree (bsc#1177687). - btrfs: rename member 'trimming' of block group to a more generic name (bsc#1176019). - btrfs: scrub, only lookup for csums if we are dealing with a data extent (bsc#1176019). - btrfs: stop incremening log_batch for the log root tree when syncing log (bsc#1177687). - bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal (git-fixes). - clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED (git-fixes). - clk: socfpga: stratix10: fix the divider for the emac_ptp_free_clk (git-fixes). - clk: tegra: Always program PLL_E when enabled (git-fixes). - clk/ti/adpll: allocate room for terminating null (git-fixes). - clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init() (git-fixes). - clocksource/drivers/timer-gx6605s: Fixup counter reload (git-fixes). - create Storage / NVMe subsection - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (git-fixes). - crypto: algif_skcipher - EBUSY on aio should be an error (git-fixes). - crypto: bcm - Verify GCM/CCM key length in setkey (git-fixes). - crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call (git-fixes). - crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc() (git-fixes). - crypto: omap-sham - fix digcnt register handling with export/import (git-fixes). - crypto: picoxcell - Fix potential race condition bug (git-fixes). - crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA (git-fixes). - cypto: mediatek - fix leaks in mtk_desc_ring_alloc (git-fixes). - Disable CONFIG_LIVEPATCH_IPA_CLONES where not needed Explicitly disable CONFIG_LIVEPATCH_IPA_CLONES in configs where it is not needed to avoid confusion and unwanted values due to fragment config files. - dmaengine: mediatek: hsdma_probe: fixed a memory leak when devm_request_irq fails (git-fixes). - dmaengine: stm32-dma: use vchan_terminate_vdesc() in .terminate_all (git-fixes). - dmaengine: stm32-mdma: use vchan_terminate_vdesc() in .terminate_all (git-fixes). - dmaengine: tegra-apb: Prevent race conditions on channel's freeing (git-fixes). - dmaengine: zynqmp_dma: fix burst length configuration (git-fixes). - dma-fence: Serialise signal enabling (dma_fence_enable_sw_signaling) (git-fixes). - drivers: char: tlclk.c: Avoid data race between init and interrupt handler (git-fixes). - drm/amdgpu: restore proper ref count in amdgpu_display_crtc_set_config (git-fixes). - drm/radeon: revert 'Prefer lower feedback dividers' (bsc#1177384). - drop Storage / bsc#1171688 subsection No effect on expanded tree. - e1000: Do not perform reset in reset_task if we are already down (git-fixes). - ftrace: Move RCU is watching check after recursion check (git-fixes). - fuse: do not ignore errors from fuse_writepages_fill() (bsc#1177193). - gpio: mockup: fix resource leak in error path (git-fixes). - gpio: rcar: Fix runtime PM imbalance on error (git-fixes). - gpio: siox: explicitly support only threaded irqs (git-fixes). - gpio: sprd: Clear interrupt when setting the type as edge (git-fixes). - gpio: tc35894: fix up tc35894 interrupt configuration (git-fixes). - hwmon: (applesmc) check status earlier (git-fixes). - hwmon: (mlxreg-fan) Fix double 'Mellanox' (git-fixes). - hwmon: (pmbus/max34440) Fix status register reads for MAX344{51,60,61} (git-fixes). -
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-default SUSE:Linux Enterprise Module for Basesystem 15 SP2
- Affected ranges
- ECOSYSTEM: < 5.3.18-24.29.2
Update to 5.3.18-24.29.2
kernel-default-base SUSE:Linux Enterprise Module for Basesystem 15 SP2
- Affected ranges
- ECOSYSTEM: < 5.3.18-24.29.2.9.9.3
Update to 5.3.18-24.29.2.9.9.3
kernel-preempt SUSE:Linux Enterprise Module for Basesystem 15 SP2
- Affected ranges
- ECOSYSTEM: < 5.3.18-24.29.2
Update to 5.3.18-24.29.2
kernel-source SUSE:Linux Enterprise Module for Basesystem 15 SP2
- Affected ranges
- ECOSYSTEM: < 5.3.18-24.29.2
Update to 5.3.18-24.29.2
kernel-docs SUSE:Linux Enterprise Module for Development Tools 15 SP2
- Affected ranges
- ECOSYSTEM: < 5.3.18-24.29.2
Update to 5.3.18-24.29.2
kernel-obs-build SUSE:Linux Enterprise Module for Development Tools 15 SP2
- Affected ranges
- ECOSYSTEM: < 5.3.18-24.29.2
Update to 5.3.18-24.29.2
kernel-preempt SUSE:Linux Enterprise Module for Development Tools 15 SP2
- Affected ranges
- ECOSYSTEM: < 5.3.18-24.29.2
Update to 5.3.18-24.29.2
kernel-source SUSE:Linux Enterprise Module for Development Tools 15 SP2
- Affected ranges
- ECOSYSTEM: < 5.3.18-24.29.2
Update to 5.3.18-24.29.2
kernel-syms SUSE:Linux Enterprise Module for Development Tools 15 SP2
- Affected ranges
- ECOSYSTEM: < 5.3.18-24.29.2
Update to 5.3.18-24.29.2
kernel-default SUSE:Linux Enterprise Module for Legacy 15 SP2
- Affected ranges
- ECOSYSTEM: < 5.3.18-24.29.2
Update to 5.3.18-24.29.2
kernel-default SUSE:Linux Enterprise Live Patching 15 SP2
- Affected ranges
- ECOSYSTEM: < 5.3.18-24.29.2
Update to 5.3.18-24.29.2
kernel-livepatch-sle15-sp2_update_5 SUSE:Linux Enterprise Live Patching 15 SP2
- Affected ranges
- ECOSYSTEM: < 1-5.3.3
Update to 1-5.3.3
kernel-default SUSE:Linux Enterprise High Availability Extension 15 SP2
- Affected ranges
- ECOSYSTEM: < 5.3.18-24.29.2
Update to 5.3.18-24.29.2
kernel-default SUSE:Linux Enterprise Workstation Extension 15 SP2
- Affected ranges
- ECOSYSTEM: < 5.3.18-24.29.2
Update to 5.3.18-24.29.2
Original sources
- https://www.suse.com/support/update/announcement/2020/suse-su-20202980-1/
- https://bugzilla.suse.com/1065600
- https://bugzilla.suse.com/1065729
- https://bugzilla.suse.com/1155798
- https://bugzilla.suse.com/1165692
- https://bugzilla.suse.com/1168468
- https://bugzilla.suse.com/1171675
- https://bugzilla.suse.com/1171688
- https://bugzilla.suse.com/1174003
- https://bugzilla.suse.com/1174098
- https://bugzilla.suse.com/1175599
- https://bugzilla.suse.com/1175621
- https://bugzilla.suse.com/1175807
- https://bugzilla.suse.com/1176019
- https://bugzilla.suse.com/1176400
- https://bugzilla.suse.com/1176907
- https://bugzilla.suse.com/1176979
- https://bugzilla.suse.com/1177090
- https://bugzilla.suse.com/1177109
- https://bugzilla.suse.com/1177121
- https://bugzilla.suse.com/1177193
- https://bugzilla.suse.com/1177194
- https://bugzilla.suse.com/1177206
- https://osv.dev/vulnerability/SUSE-SU-2020:2980-1