SUSE-SU-2020:0836-1
SUSE-SU-2020:0836-1 · Security update for the Linux Kernel
Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.
На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.
The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8647: Fixed a use-after-free in the vc_do_resize function in drivers/tty/vt/vt.c (bsc#1162929). - CVE-2020-8649: Fixed a use-after-free in the vgacon_invert_region function in drivers/video/console/vgacon.c (bsc#1162931). - CVE-2020-8648: Fixed a use-after-free in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bsc#1162928). - CVE-2020-9383: Fixed an out-of-bounds read due to improper error condition check of FDC index (bsc#1165111). - CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285). The following non-security bugs were fixed: - ALSA: hda/realtek - Add Headset Button supported for ThinkPad X1 (bsc#1111666). - ALSA: hda/realtek - Add Headset Mic supported (bsc#1111666). - ALSA: hda/realtek - Add more codec supported Headset Button (bsc#1111666). - ALSA: hda/realtek - Apply quirk for MSI GP63, too (bsc#1111666). - ALSA: hda/realtek - Apply quirk for yet another MSI laptop (bsc#1111666). - ALSA: hda/realtek - Enable the headset of ASUS B9450FA with ALC294 (bsc#1111666). - ALSA: hda/realtek - Fix a regression for mute led on Lenovo Carbon X1 (bsc#1111666). - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master (bsc#1111666). - ALSA: usb-audio: Add boot quirk for MOTU M Series (bsc#1111666). - ALSA: usb-audio: Add clock validity quirk for Denon MC7000/MCX8000 (bsc#1111666). - ALSA: usb-audio: add implicit fb quirk for MOTU M Series (bsc#1111666). - ALSA: usb-audio: add quirks for Line6 Helix devices fw>=2.82 (bsc#1111666). - ALSA: usb-audio: Apply 48kHz fixed rate playback for Jabra Evolve 65 headset (bsc#1111666). - ALSA: usb-audio: fix Corsair Virtuoso mixer label collision (bsc#1111666). - ALSA: usb-audio: Fix UAC2/3 effect unit parsing (bsc#1111666). - ALSA: usb-audio: unlock on error in probe (bsc#1111666). - ALSA: usb-audio: Use lower hex numbers for IDs (bsc#1111666). - ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status (bsc#1051510). - amdgpu/gmc_v9: save/restore sdpif regs during S3 (bsc#1113956) - ASoC: dapm: Correct DAPM handling of active widgets during shutdown (bsc#1051510). - ASoC: pcm512x: Fix unbalanced regulator enable call in probe error path (bsc#1051510). - ASoC: pcm: Fix possible buffer overflow in dpcm state sysfs output (bsc#1051510). - ASoC: pcm: update FE/BE trigger order based on the command (bsc#1051510). - ASoC: topology: Fix memleak in soc_tplg_link_elems_load() (bsc#1051510). - atm: zatm: Fix empty body Clang warnings (bsc#1051510). - b43legacy: Fix -Wcast-function-type (bsc#1051510). - blk: Fix kabi due to blk_trace_mutex addition (bsc#1159285). - blktrace: fix dereference after null check (bsc#1159285). - blktrace: fix trace mutex deadlock (bsc#1159285). - bnxt_en: Fix NTUPLE firmware command failures (bsc#1104745 ). - bnxt_en: Fix TC queue mapping (networking-stable-20_02_05). - bnxt_en: Improve device shutdown method (bsc#1104745 ). - bnxt_en: Issue PCIe FLR in kdump kernel to cleanup pending DMAs (bsc#1134090 jsc#SLE-5954). - bonding/alb: properly access headers in bond_alb_xmit() (networking-stable-20_02_09). - bpf, offload: Replace bitwise AND by logical AND in bpf_prog_offload_info_fill (bsc#1109837). - CIFS: add a debug macro that prints \\server\share for errors (bsc#1144333). - CIFS: add missing mount option to /proc/mounts (bsc#1144333). - CIFS: add new debugging macro cifs_server_dbg (bsc#1144333). - CIFS: add passthrough for smb2 setinfo (bsc#1144333). - CIFS: add SMB2_open() arg to return POSIX data (bsc#1144333). - CIFS: add smb2 POSIX info level (bsc#1144333). - CIFS: add SMB3 change notification support (bsc#1144333). - CIFS: add support for fallocate mode 0 for non-sparse files (bsc#1144333). - CIFS: Add support for setting owner info, dos attributes, and create time (bsc#1144333). - CIFS: Add tracepoints for errors on flush or fsync (bsc#1144333). - CIFS: Adjust indentation in smb2_open_file (bsc#1144333). - CIFS: allow chmod to set mode bits using special sid (bsc#1144333). - CIFS: Avoid doing network I/O while holding cache lock (bsc#1144333). - CIFS: call wake_up(server->response_q) inside of cifs_reconnect() (bsc#1144333). - CIFS: Clean up DFS referral cache (bsc#1144333). - CIFS: create a helper function to parse the query-directory response buffer (bsc#1144333). - CIFS: do d_move in rename (bsc#1144333). - CIFS: Do not display RDMA transport on reconnect (bsc#1144333). - CIFS: do not ignore the SYNC flags in getattr (bsc#1144333). - CIFS: do not leak -EAGAIN for stat() during reconnect (bsc#1144333). - CIFS: do not use 'pre:' for MODULE_SOFTDEP (bsc#1144333). - CIFS: enable change notification for SMB2.1 dialect (bsc#1144333). - CIFS: fail i/o on soft mounts if sessionsetup errors out (bsc#1144333). - CIFS: fix a comment for the timeouts when sending echos (bsc#1144333). - CIFS: fix a white space issue in cifs_get_inode_info() (bsc#1144333). - CIFS: fix dereference on ses before it is null checked (bsc#1144333). - CIFS: Fix memory allocation in __smb2_handle_cancelled_cmd() (bsc#1144333). - CIFS: fix mode bits from dir listing when mounted with modefromsid (bsc#1144333). - CIFS: Fix mode output in debugging statements (bsc#1144333). - CIFS: Fix mount options set in automount (bsc#1144333). - CIFS: fix NULL dereference in match_prepath (bsc#1144333). - CIFS: Fix potential deadlock when updating vol in cifs_reconnect() (bsc#1144333). - CIFS: fix potential mismatch of UNC paths (bsc#1144333). - CIFS: fix rename() by ensuring source handle opened with DELETE bit (bsc#1144333). - CIFS: Fix return value in __update_cache_entry (bsc#1144333). - CIFS: fix soft mounts hanging in the reconnect code (bsc#1144333). - CIFS: fix soft mounts hanging in the reconnect code (bsc#1144333). - CIFS: Fix task struct use-after-free on reconnect (bsc#1144333). - CIFS: fix unitialized variable poential problem with network I/O cache lock patch (bsc#1144333). - CIFS: get mode bits from special sid on stat (bsc#1144333). - CIFS: Get rid of kstrdup_const()'d paths (bsc#1144333). - CIFS: handle prefix paths in reconnect (bsc#1144333). - CIFS: Introduce helpers for finding TCP connection (bsc#1144333). - CIFS: log warning message (once) if out of disk space (bsc#1144333). - CIFS: make sure we do not overflow the max EA buffer size (bsc#1144333). - CIFS: make use of cap_unix(ses) in cifs_reconnect_tcon() (bsc#1144333). - CIFS: Merge is_path_valid() into get_normalized_path() (bsc#1144333). - CIFS: modefromsid: make room for 4 ACE (bsc#1144333). - CIFS: modefromsid: write mode ACE first (bsc#1144333). - CIFS: Optimize readdir on reparse points (bsc#1144333). - CIFS: plumb smb2 POSIX dir enumeration (bsc#1144333). - CIFS: potential unintitliazed error code in cifs_getattr() (bsc#1144333). - CIFS: prepare SMB2_query_directory to be used with compounding (bsc#1144333). - CIFS: print warning once if mounting with vers=1.0 (bsc#1144333). - CIFS: refactor cifs_get_inode_info() (bsc#1144333). - CIFS: remove redundant assignment to pointer pneg_ctxt (bsc#1144333). - CIFS: remove redundant assignment to variable rc (bsc#1144333). - CIFS: remove set but not used variables (bsc#1144333). - CIFS: remove set but not used variable 'server' (bsc#1144333). - CIFS: remove unused variable (bsc#1144333). - CIFS: remove unused variable 'sid_user' (bsc#1144333). - CIFS: rename a variable in SendReceive() (bsc#1144333). - CIFS: rename posix create rsp (bsc#1144333). - CIFS: replace various strncpy with strscpy and similar (bsc#1144333). - CIFS: Return directly after a failed build_path_from_dentry() in cifs_do_create() (bsc#1144333). - CIFS: set correct max-buffer-size for smb2_ioctl_init() (bsc#1144333). - CIFS: smbd: Add messages on RDMA session destroy and reconnection (bsc#1144333). - CIFS: smbd: Invalidate and deregister memory registration on re-send for direct I/O (bsc#1144333). - CIFS: smbd: On
Есть исправление
- Опубликовано
- Обновлено
Стек: system
Затронутые продукты и версии
kernel-default SUSE:Linux Enterprise Module for Basesystem 15 SP1
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-197.37.1
Обновитесь до 4.12.14-197.37.1
kernel-source SUSE:Linux Enterprise Module for Basesystem 15 SP1
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-197.37.1
Обновитесь до 4.12.14-197.37.1
kernel-zfcpdump SUSE:Linux Enterprise Module for Basesystem 15 SP1
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-197.37.1
Обновитесь до 4.12.14-197.37.1
kernel-docs SUSE:Linux Enterprise Module for Development Tools 15 SP1
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-197.37.1
Обновитесь до 4.12.14-197.37.1
kernel-obs-build SUSE:Linux Enterprise Module for Development Tools 15 SP1
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-197.37.1
Обновитесь до 4.12.14-197.37.1
kernel-source SUSE:Linux Enterprise Module for Development Tools 15 SP1
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-197.37.1
Обновитесь до 4.12.14-197.37.1
kernel-syms SUSE:Linux Enterprise Module for Development Tools 15 SP1
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-197.37.1
Обновитесь до 4.12.14-197.37.1
kernel-default SUSE:Linux Enterprise Module for Legacy 15 SP1
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-197.37.1
Обновитесь до 4.12.14-197.37.1
kernel-default SUSE:Linux Enterprise Live Patching 15 SP1
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-197.37.1
Обновитесь до 4.12.14-197.37.1
kernel-livepatch-sle15-sp1_update_10 SUSE:Linux Enterprise Live Patching 15 SP1
- Затронутые диапазоны версий
- ECOSYSTEM: < 1-3.3.1
Обновитесь до 1-3.3.1
kernel-default SUSE:Linux Enterprise High Availability Extension 15 SP1
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-197.37.1
Обновитесь до 4.12.14-197.37.1
kernel-default SUSE:Linux Enterprise Workstation Extension 15 SP1
- Затронутые диапазоны версий
- ECOSYSTEM: < 4.12.14-197.37.1
Обновитесь до 4.12.14-197.37.1
Первоисточники
- https://www.suse.com/support/update/announcement/2020/suse-su-20200836-1/
- https://bugzilla.suse.com/1044231
- https://bugzilla.suse.com/1051510
- https://bugzilla.suse.com/1051858
- https://bugzilla.suse.com/1056686
- https://bugzilla.suse.com/1060463
- https://bugzilla.suse.com/1065729
- https://bugzilla.suse.com/1103990
- https://bugzilla.suse.com/1103992
- https://bugzilla.suse.com/1104353
- https://bugzilla.suse.com/1104745
- https://bugzilla.suse.com/1109837
- https://bugzilla.suse.com/1111666
- https://bugzilla.suse.com/1111974
- https://bugzilla.suse.com/1112178
- https://bugzilla.suse.com/1112374
- https://bugzilla.suse.com/1113956
- https://bugzilla.suse.com/1114279
- https://bugzilla.suse.com/1114685
- https://bugzilla.suse.com/1119680
- https://bugzilla.suse.com/1127611
- https://bugzilla.suse.com/1133021
- https://bugzilla.suse.com/1134090
- https://osv.dev/vulnerability/SUSE-SU-2020:0836-1