| Revision Date: | 2021-02-10 | Version: | 1 |
| Title: | Security update for the Linux Kernel (Live Patch 21 for SLE 15) (Important) |
| Description: |
This update for the Linux Kernel 4.12.14-150_63 fixes several issues.
The following security issues were fixed:
- CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562). - CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180030). - CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. - CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008). - CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877). - CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877). - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1179664
1179877
1180008
1180030
1180032
1180562
CVE-2011-0523
CVE-2011-0524
CVE-2011-3200
CVE-2013-4758
CVE-2013-6370
CVE-2013-6371
CVE-2014-3634
CVE-2014-3683
CVE-2015-3243
CVE-2020-0465
CVE-2020-0466
CVE-2020-29368
CVE-2020-29569
CVE-2020-29660
CVE-2020-29661
CVE-2020-36158
SUSE-SU-2021:0377-1
|
| Platform(s): | SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Module for Basesystem 15 SP1
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
| Product(s): | |
| Definition Synopsis |
| SUSE Linux Enterprise Module for Live Patching 15 is installed AND kernel-livepatch-4_12_14-150_63-default-3-2.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
AND rsyslog-8.33.1-3.9 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed
AND Package Information
libgypsy-devel-0.9-2 is installed
OR libgypsy0-0.9-2 is installed
|