SUSE-SU-2020:2486-1
SUSE-SU-2020:2486-1 · Security update for the Linux Kernel
Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.
На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14314: Fixed a potential negative array index in ext4 (bsc#1173798). - CVE-2020-14331: Fixed a missing check in scrollback handling (bsc#1174205 bsc#1174247). - CVE-2020-14356: Fixed a NULL pointer dereference in the cgroupv2 subsystem (bsc#1175213). - CVE-2020-16166: Fixed an information leak in the network RNG (bsc#1174757). The following non-security bugs were fixed: - 9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work (git-fixes). - ACPICA: Do not increment operation_region reference counts for field units (git-fixes). - af_key: pfkey_dump needs parameter validation (git-fixes). - agp/intel: Fix a memory leak on module initialisation failure (git-fixes). - ALSA: atmel: Remove invalid 'fall through' comments (git-fixes). - ALSA: core: pcm_iec958: fix kernel-doc (git-fixes). - ALSA: echoaduio: Drop superfluous volatile modifier (git-fixes). - ALSA: echoaudio: Address bugs in the interrupt handling (git-fixes). - ALSA: echoaudio: Fix potential Oops in snd_echo_resume() (git-fixes). - ALSA: echoaudio: Prevent races in calls to set_audio_format() (git-fixes). - ALSA: echoaudio: Prevent some noise on unloading the module (git-fixes). - ALSA: echoaudio: Race conditions around 'opencount' (git-fixes). - ALSA: echoaudio: re-enable IRQs on failure path (git-fixes). - ALSA: echoaudio: Remove redundant check (git-fixes). - ALSA: firewire: fix kernel-doc (git-fixes). - ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO (git-fixes). - ALSA: hda - reverse the setting value in the micmute_led_set (git-fixes). - ALSA: hda/ca0132 - Add new quirk ID for Recon3D (git-fixes). - ALSA: hda/ca0132 - Fix AE-5 microphone selection commands (git-fixes). - ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value (git-fixes). - ALSA: hda/hdmi: Add quirk to force connectivity (git-fixes). - ALSA: hda/hdmi: Fix keep_power assignment for non-component devices (git-fixes). - ALSA: hda/hdmi: Use force connectivity quirk on another HP desktop (git-fixes). - ALSA: hda/realtek - Fix unused variable warning (git-fixes). - ALSA: hda/realtek - Fixed HP right speaker no sound (git-fixes). - ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops (git-fixes). - ALSA: hda/realtek: Add model alc298-samsung-headphone (git-fixes). - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion (git-fixes). - ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book (git-fixes). - ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G15(GA502) series with ALC289 (git-fixes). - ALSA: hda/realtek: Fix add a 'ultra_low_power' function for intel reference board (alc256) (git-fixes). - ALSA: hda/realtek: Fix pin default on Intel NUC 8 Rugged (git-fixes). - ALSA: hda/realtek: typo_fix: enable headset mic of ASUS ROG Zephyrus G14(GA401) series with ALC289 (git-fixes). - ALSA: hda/tegra: Disable sync-write operation (git-fixes). - ALSA: hda: Add support for Loongson 7A1000 controller (git-fixes). - ALSA: hda: avoid reset of sdo_limit (git-fixes). - ALSA: hda: Enable sync-write operation as default for all controllers (git-fixes). - ALSA: hda: fix NULL pointer dereference during suspend (git-fixes). - ALSA: hda: fix snd_hda_codec_cleanup() documentation (git-fixes). - ALSA: hda: Workaround for spurious wakeups on some Intel platforms (git-fixes). - ALSA: isa/gus: remove 'set but not used' warning (git-fixes). - ALSA: isa/gus: remove -Wmissing-prototypes warnings (git-fixes). - ALSA: isa: fix spelling mistakes in the comments (git-fixes). - ALSA: line6: add hw monitor volume control for POD HD500 (git-fixes). - ALSA: line6: Use kmemdup in podhd_set_monitor_level() (git-fixes). - ALSA: pci/asihpi: fix kernel-doc (git-fixes). - ALSA: pci/asihpi: remove 'set but not used' warning (git-fixes). - ALSA: pci/asihpi: remove 'set but not used' warnings (git-fixes). - ALSA: pci/au88x0: remove 'defined but not used' warnings (git-fixes). - ALSA: pci/aw2-saa7146: remove 'set but not used' warning (git-fixes). - ALSA: pci/ctxfi/ctatc: fix kernel-doc (git-fixes). - ALSA: pci/ctxfi: fix kernel-doc warnings (git-fixes). - ALSA: pci/echoaudio: remove 'set but not used' warning (git-fixes). - ALSA: pci/emu10k1: remove 'set but not used' warning (git-fixes). - ALSA: pci/es1938: remove 'set but not used' warning (git-fixes). - ALSA: pci/fm801: fix kernel-doc (git-fixes). - ALSA: pci/korg1212: remove 'set but not used' warnings (git-fixes). - ALSA: pci/oxygen/xonar_wm87x6: remove always true condition (git-fixes). - ALSA: pci/rme9652/hdspm: remove always true condition (git-fixes). - ALSA: pci/via82xx: remove 'set but not used' warnings (git-fixes). - ALSA: pcmcia/pdaudiocf: fix kernel-doc (git-fixes). - ALSA: seq: oss: Serialize ioctls (git-fixes). - ALSA: usb-audio: Add capture support for Saffire 6 (USB 1.1) (git-fixes). - ALSA: usb-audio: Add implicit feedback quirk for SSL2 (git-fixes). - ALSA: usb-audio: add quirk for Pioneer DDJ-RB (git-fixes). - ALSA: usb-audio: add startech usb audio dock name (git-fixes). - ALSA: usb-audio: Add support for Lenovo ThinkStation P620 (git-fixes). - ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support (git-fixes). - ALSA: usb-audio: Disable Lenovo P620 Rear line-in volume control (git-fixes). - ALSA: usb-audio: endpoint : remove needless check before usb_free_coherent() (git-fixes). - ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109 (bsc#1174625). - ALSA: usb-audio: Fix some typos (git-fixes). - ALSA: usb-audio: fix spelling mistake 'buss' -> 'bus' (git-fixes). - ALSA: usb-audio: ignore broken processing/extension unit (git-fixes). - ALSA: usb-audio: Update documentation comment for MS2109 quirk (git-fixes). - ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109 (git-fixes). - ALSA: usb/line6: remove 'defined but not used' warning (git-fixes). - ALSA: vx_core: remove warning for empty loop body (git-fixes). - ALSA: xen: remove 'set but not used' warning (git-fixes). - ALSA: xen: Remove superfluous fall through comments (git-fixes). - appletalk: Fix atalk_proc_init() return path (git-fixes). - arm/arm64: Make use of the SMCCC 1.1 wrapper (bsc#1174906). - arm/arm64: Provide a wrapper for SMCCC 1.1 calls (bsc#1174906). - arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit() (bsc#1174906). - arm64: armv8_deprecated: Fix undef_hook mask for thumb setend (bsc#1175180). - arm64: cacheflush: Fix KGDB trap detection (bsc#1175188). - arm64: csum: Fix handling of bad packets (bsc#1175192). - arm64: dts: allwinner: a64: Remove unused SPDIF sound card (none bsc#1175016). - arm64: dts: clearfog-gt-8k: set gigabit PHY reset deassert delay (bsc#1175347). - arm64: dts: exynos: Fix silent hang after boot on Espresso (bsc#1175346). - arm64: dts: imx8mm-evk: correct ldo1/ldo2 voltage range (none bsc#1175019). - arm64: dts: imx8qxp-mek: Remove unexisting Ethernet PHY (bsc#1175345). - arm64: dts: librem5-devkit: add a vbus supply to usb0 (none bsc#1175013). - arm64: dts: ls1028a: delete extraneous #interrupt-cells for ENETC RCIE (none bsc#1175012). - arm64: dts: qcom: msm8998-clamshell: Fix label on l15 regulator (git-fixes). - arm64: dts: rockchip: fix rk3399-puma gmac reset gpio (none bsc#1175021). - arm64: dts: rockchip: fix rk3399-puma vcc5v0-host gpio (none bsc#1175020). - arm64: dts: rockchip: Rename dwc3 device nodes on rk3399 to make dtc happy (none bsc#1175015). - arm64: dts: rockchip: Replace RK805 PMIC node name with 'pmic' on rk3328 boards (none bsc#1175014). - arm64: dts: uDPU: fix broken ethernet (bsc#1175344). - arm64: dts: uniphier: Set SCSSI clock and reset IDs for each channel (none bsc#1175011). - arm64: errata: use arm_smccc_1_1_get_conduit() (bsc#1174906). - arm64: Fix PTRACE_SYSEMU semantics (bsc#1175185). - arm64: fix the flush_icache_range arguments in machine_kexec (bsc#1175184). - arm64: hugetlb: avoid potential NULL deref
Есть исправление
- Опубликовано
- Обновлено
Стек: system
Затронутые продукты и версии
kernel-default SUSE:Linux Enterprise Module for Basesystem 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.12.1
Обновитесь до 5.3.18-24.12.1
kernel-default-base SUSE:Linux Enterprise Module for Basesystem 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.12.1.9.4.1
Обновитесь до 5.3.18-24.12.1.9.4.1
kernel-preempt SUSE:Linux Enterprise Module for Basesystem 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.12.1
Обновитесь до 5.3.18-24.12.1
kernel-source SUSE:Linux Enterprise Module for Basesystem 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.12.1
Обновитесь до 5.3.18-24.12.1
kernel-docs SUSE:Linux Enterprise Module for Development Tools 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.12.1
Обновитесь до 5.3.18-24.12.1
kernel-obs-build SUSE:Linux Enterprise Module for Development Tools 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.12.1
Обновитесь до 5.3.18-24.12.1
kernel-preempt SUSE:Linux Enterprise Module for Development Tools 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.12.1
Обновитесь до 5.3.18-24.12.1
kernel-source SUSE:Linux Enterprise Module for Development Tools 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.12.1
Обновитесь до 5.3.18-24.12.1
kernel-syms SUSE:Linux Enterprise Module for Development Tools 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.12.1
Обновитесь до 5.3.18-24.12.1
kernel-default SUSE:Linux Enterprise Module for Legacy 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.12.1
Обновитесь до 5.3.18-24.12.1
kernel-default SUSE:Linux Enterprise Live Patching 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.12.1
Обновитесь до 5.3.18-24.12.1
kernel-livepatch-sle15-sp2_update_2 SUSE:Linux Enterprise Live Patching 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 1-5.3.1
Обновитесь до 1-5.3.1
kernel-default SUSE:Linux Enterprise High Availability Extension 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.12.1
Обновитесь до 5.3.18-24.12.1
kernel-default SUSE:Linux Enterprise Workstation Extension 15 SP2
- Затронутые диапазоны версий
- ECOSYSTEM: < 5.3.18-24.12.1
Обновитесь до 5.3.18-24.12.1
Первоисточники
- https://www.suse.com/support/update/announcement/2020/suse-su-20202486-1/
- https://bugzilla.suse.com/1065600
- https://bugzilla.suse.com/1065729
- https://bugzilla.suse.com/1071995
- https://bugzilla.suse.com/1085030
- https://bugzilla.suse.com/1120163
- https://bugzilla.suse.com/1133021
- https://bugzilla.suse.com/1149032
- https://bugzilla.suse.com/1152472
- https://bugzilla.suse.com/1152489
- https://bugzilla.suse.com/1153274
- https://bugzilla.suse.com/1154353
- https://bugzilla.suse.com/1154488
- https://bugzilla.suse.com/1154492
- https://bugzilla.suse.com/1155518
- https://bugzilla.suse.com/1156395
- https://bugzilla.suse.com/1159058
- https://bugzilla.suse.com/1160634
- https://bugzilla.suse.com/1167773
- https://bugzilla.suse.com/1169790
- https://bugzilla.suse.com/1171634
- https://bugzilla.suse.com/1171688
- https://bugzilla.suse.com/1172108
- https://osv.dev/vulnerability/SUSE-SU-2020:2486-1