| Revision Date: | 2021-02-10 | Version: | 1 |
| Title: | Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP2) (Important) |
| Description: |
This update for the Linux Kernel 5.3.18-24_29 fixes several issues.
The following security issues were fixed:
- CVE-2020-29373: Fixed an issue where kernel unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations (bsc#1179779). - CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562). - CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. - CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008). - CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877). - CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877). - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1027519
1134506
1155200
1157490
1160932
1165206
1167007
1167152
1168140
1168142
1168143
1169392
1176764
1179664
1179779
1179877
1180008
1180032
1180562
CVE-2019-20919
CVE-2020-0466
CVE-2020-11739
CVE-2020-11740
CVE-2020-11741
CVE-2020-11742
CVE-2020-11743
CVE-2020-29368
CVE-2020-29373
CVE-2020-29569
CVE-2020-29660
CVE-2020-29661
CVE-2020-36158
SUSE-SU-2020:1124-1
SUSE-SU-2020:2827-1
|
| Platform(s): | SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise Module for Basesystem 15 SP1
SUSE Linux Enterprise Module for Live Patching 15 SP2
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP2
| Product(s): | |
| Definition Synopsis |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND Package Information
xen-4.12.2_04-3.15 is installed
OR xen-libs-4.12.2_04-3.15 is installed
OR xen-tools-domU-4.12.2_04-3.15 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Live Patching 15 SP2 is installed
AND kernel-livepatch-5_3_18-24_29-default-3-2.1 is installed
|