The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-2732: Fixed an issue affecting Intel CPUs where an L2 guest may trick the L0 hypervisor into accessing sensitive L1 resources (bsc#1163971). - CVE-2020-8992: An issue was discovered in ext4_protect_reserved_inode in fs/ext4/block_validity.c that allowed attackers to cause a soft lockup via a crafted journal size (bnc#1164069). - CVE-2020-8648: There was a use-after-free vulnerability in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bnc#1162928). - CVE-2020-8428: There was a use-after-free bug in fs/namei.c, which allowed local users to cause a denial of service or possibly obtain sensitive information from kernel memory (bnc#1162109).
#1050244 #1050549 #1051510 #1051858 #1061840
#1065600 #1065729 #1071995 #1083647 #1085030
#1086301 #1086313 #1086314 #1088810 #1104745
#1105392 #1109837 #1111666 #1112178 #1112374
#1112504 #1113956 #1114279 #1114648 #1114685
#1118338 #1123328 #1127682 #1129551 #1133021
#1133147 #1140025 #1142685 #1144162 #1144333
#1151927 #1153535 #1153917 #1154243 #1154601
#1156609 #1157155 #1157157 #1157424 #1157480
#1157692 #1157966 #1158013 #1158026 #1158071
#1159028 #1159096 #1159271 #1159377 #1159394
#1159588 #1159911 #1159955 #1160147 #1160195
#1160210 #1160211 #1160218 #1160433 #1160442
#1160469 #1160470 #1160476 #1160560 #1160618
#1160678 #1160755 #1160756 #1160784 #1160787
#1160802 #116...
Read the Full AdvisoryGet the latest Linux and open source security news straight to your inbox.