Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

openSUSE Leap 15.1: 2020:1379-1 Important: Local Privilege Escalation

opensuse
Calendar Grey September 7, 2020
Dist Opensuse Esm H88
The critical Fedora Security Patch targets a remote code execution vulnerability and introduces numerous enhancements in the system’s Kernel.
An update that solves one vulnerability and has 6 fixes is now available.

Description

The openSUSE Leap 15.1 kernel was updated to receive various security and

bugfixes.

The following security bugs were fixed:

- CVE-2020-14386: Fixed an overflow in tpacket_rcv in af_packet that could

lead to a local privilege escalation ( bsc#1176069).

The following non-security bugs were fixed:

- bonding: check error value of register_netdevice() immediately

(git-fixes).

- bonding: check return value of register_netdevice() in bond_newlink()

(git-fixes).

- hippi: Fix a size used in a 'pci_free_consistent()' in an error handling

path (git-fixes).

- mlx4: disable device on shutdown (git-fixes).

- mlxsw: core: Free EMAD transactions using kfree_rcu() (git-fixes).

- mlxsw: core: Increase scope of RCU read-side critical section

(git-fixes).

- mm, vmstat: reduce zone->lock holding time by /proc/pagetypeinfo

(bsc#1175691).

- net/mlx5: Fix a bug of using ptp channel index as pin index (git-fixes).

- net/mlx5e: Fix...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory local privilege escalation important system reboot openSUSE Linux Kernel CVE-2020-14386

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.1:

zypper in -t patch openSUSE-2020-1379=1

Package List

- openSUSE Leap 15.1 (noarch):

kernel-devel-4.12.14-lp151.28.67.1

kernel-docs-4.12.14-lp151.28.67.3

kernel-docs-html-4.12.14-lp151.28.67.3

kernel-macros-4.12.14-lp151.28.67.1

kernel-source-4.12.14-lp151.28.67.1

kernel-source-vanilla-4.12.14-lp151.28.67.1

- openSUSE Leap 15.1 (x86_64):

kernel-debug-4.12.14-lp151.28.67.2

kernel-debug-base-4.12.14-lp151.28.67.2

kernel-debug-base-debuginfo-4.12.14-lp151.28.67.2

kernel-debug-debuginfo-4.12.14-lp151.28.67.2

kernel-debug-debugsource-4.12.14-lp151.28.67.2

kernel-debug-devel-4.12.14-lp151.28.67.2

kernel-debug-devel-debuginfo-4.12.14-lp151.28.67.2

kernel-default-4.12.14-lp151.28.67.2

kernel-default-base-4.12.14-lp151.28.67.2

kernel-default-base-debuginfo-4.12.14-lp151.28.67.2

kernel-default-debuginfo-4.12.14-lp151.28.67.2

kernel-default-debugsource-4.12.14-lp151.28.67.2

kernel-default-devel-4.12.14-lp151.28.67.2

kernel-default-devel-debuginfo-4.12.14-lp151.28.67.2

kernel-kvmsmall-4.12.14-lp151.28.67.2

kernel-kvmsmall-base-4.12.14-lp151.28.67.2

kernel-kvmsmall-base-debu...

Read the Full Advisory

References

https://www.suse.com/security/cve/CVE-2020-14386.html

https://bugzilla.suse.com/1058115

https://bugzilla.suse.com/1112178

https://bugzilla.suse.com/1136666

https://bugzilla.suse.com/1171558

https://bugzilla.suse.com/1173060

https://bugzilla.suse.com/1175691

https://bugzilla.suse.com/1176069

--

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2020:1379-1
Rating: important
Affected Products: openSUSE Leap 15.1 le.

Topics%20covered

Topics Covered

security advisory local privilege escalation important system reboot openSUSE Linux Kernel CVE-2020-14386

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here