SUSE-SU-2020:3181-1
SUSE-SU-2020:3181-1 · Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP2)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the Linux Kernel 5.3.18-24_15 fixes one issue. The following security issue was fixed: - CVE-2020-25212: A TOCTOU mismatch in the NFS client code could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c (bsc#1176381).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-sle15-sp2_update_4 SUSE:Linux Enterprise Live Patching 15 SP2
- Affected ranges
- ECOSYSTEM: < 2-2.1
Update to 2-2.1
kernel-livepatch-sle15-sp2_update_3 SUSE:Linux Enterprise Live Patching 15 SP2
- Affected ranges
- ECOSYSTEM: < 2-2.1
Update to 2-2.1