SUSE-SU-2020:3670-1
SUSE-SU-2020:3670-1 · Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP1)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
This update for the Linux Kernel 4.12.14-197_64 fixes several issues. The following security issues were fixed: - CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178622). - CVE-2020-8694: Fixed an insufficient access control in the Linux kernel driver for some Intel(R) Processors which might have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1178700). - CVE-2020-25705: Fixed a flaw which could have allowed an off-path remote user to effectively bypass source port UDP randomization (bsc#1178783). - Fixed an issue where system was hanging due to a massive amount of soft lockups in btrfs_drop_and_free_fs_root() (bsc#1178046).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kgraft-patch-sle12-sp4_update_11 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 9-2.2
Update to 9-2.2
kgraft-patch-sle12-sp4_update_12 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 8-2.2
Update to 8-2.2
kgraft-patch-sle12-sp4_update_13 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 7-2.2
Update to 7-2.2
kgraft-patch-sle12-sp4_update_14 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 5-2.2
Update to 5-2.2
kgraft-patch-sle12-sp4_update_15 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 5-2.1
Update to 5-2.1
kgraft-patch-sle12-sp4_update_16 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 4-2.1
Update to 4-2.1
kgraft-patch-sle12-sp5_update_0 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 9-3.2
Update to 9-3.2
kgraft-patch-sle12-sp5_update_1 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 9-2.2
Update to 9-2.2
kgraft-patch-sle12-sp5_update_2 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 9-2.2
Update to 9-2.2
kgraft-patch-sle12-sp5_update_3 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 8-2.2
Update to 8-2.2
kgraft-patch-sle12-sp5_update_4 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 7-2.2
Update to 7-2.2
kgraft-patch-sle12-sp5_update_5 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 5-2.2
Update to 5-2.2
kgraft-patch-sle12-sp5_update_6 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 5-2.2
Update to 5-2.2
kgraft-patch-sle12-sp5_update_7 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 5-2.1
Update to 5-2.1
kgraft-patch-sle12-sp5_update_8 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 5-2.1
Update to 5-2.1
kgraft-patch-sle12-sp5_update_9 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 4-2.1
Update to 4-2.1
kgraft-patch-sle12-sp5_update_10 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 3-2.1
Update to 3-2.1
kgraft-patch-sle12-sp5_update_11 SUSE:Linux Enterprise Live Patching 12 SP5
- Affected ranges
- ECOSYSTEM: < 2-2.1
Update to 2-2.1
kernel-livepatch-sle15-sp1_update_8 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 9-2.2
Update to 9-2.2
kernel-livepatch-sle15-sp1_update_9 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 8-2.2
Update to 8-2.2
kernel-livepatch-sle15-sp1_update_10 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 8-2.2
Update to 8-2.2
kernel-livepatch-sle15-sp1_update_11 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 7-2.2
Update to 7-2.2
kernel-livepatch-sle15-sp1_update_12 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 5-2.2
Update to 5-2.2
kernel-livepatch-sle15-sp1_update_13 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 5-2.1
Update to 5-2.1
Original sources
- https://www.suse.com/support/update/announcement/2020/suse-su-20203670-1/
- https://bugzilla.suse.com/1178046
- https://bugzilla.suse.com/1178622
- https://bugzilla.suse.com/1178700
- https://bugzilla.suse.com/1178783
- https://www.suse.com/security/cve/CVE-2020-25668
- https://www.suse.com/security/cve/CVE-2020-25705
- https://www.suse.com/security/cve/CVE-2020-8694
- https://osv.dev/vulnerability/SUSE-SU-2020:3670-1