Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 538
Alerts This Week
Warning Icon 1 538

SUSE: 2020:2486-1 Important: Kernel Critical Security Fixes

suse
Calendar Grey September 3, 2020
Dist Suse Esm H88
The latest SUSE Security Patch tackles significant vulnerabilities within the Linux Kernel, implementing numerous bug fixes and enhancing system security.
An update that solves four vulnerabilities and has 116 fixes is now available

Summary

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14314: Fixed a potential negative array index in ext4 (bsc#1173798). - CVE-2020-14331: Fixed a missing check in scrollback handling (bsc#1174205 bsc#1174247). - CVE-2020-14356: Fixed a NULL pointer dereference in the cgroupv2 subsystem (bsc#1175213). - CVE-2020-16166: Fixed an information leak in the network RNG (bsc#1174757). The following non-security bugs were fixed: - 9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work (git-fixes). - ACPICA: Do not increment operation_region reference counts for field units (git-fixes). - af_key: pfkey_dump needs parameter validation (git-fixes).

References

#1065600 #1065729 #1071995 #1085030 #1120163

#1133021 #1149032 #1152472 #1152489 #1153274

#1154353 #1154488 #1154492 #1155518 #1156395

#1159058 #1160634 #1167773 #1169790 #1171634

#1171688 #1172108 #1172197 #1172247 #1172418

#1172871 #1172963 #1173468 #1173485 #1173798

#1173813 #1173954 #1174002 #1174003 #1174026

#1174205 #1174247 #1174362 #1174387 #1174484

#1174625 #1174645 #1174689 #1174699 #1174737

#1174757 #1174762 #1174770 #1174771 #1174777

#1174805 #1174824 #1174825 #1174852 #1174865

#1174880 #1174897 #1174906 #1174969 #1175009

#1175010 #1175011 #1175012 #1175013 #1175014

#1175015 #1175016 #1175017 #1175018 #1175019

#1175020 #1175021 #1175052 #1175112 #1175116

#1175128 #117...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2020:2486-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.