SUSE: 2020:3544-1 Important: Linux Kernel Security Fixes and Updates
suse
November 26, 2020
An update that solves 26 vulnerabilities and has 34 fixes is now available
Summary
The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bug fixes. The following security bugs were fixed: - CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software and services that rely on UDP source port randomization (like DNS) are indirectly affected as well. Kernel versions may be vulnerable to this issue (bsc#1175721, bsc#1178782). - CVE-2020-25704: Fixed a memory leak in perf_event_parse_addr_filter() (bsc#1178393). - CVE-2020-25668: Fixed a use-after-free in con_font_op() (bnc#1178123).
Topics Covered
References
#1051510 #1058115 #1065600 #1131277 #1160947
#1163524 #1166965 #1168468 #1170139 #1170232
#1170415 #1171417 #1171675 #1172073 #1172366
#1173115 #1173233 #1175228 #1175306 #1175721
#1175882 #1176011 #1176235 #1176278 #1176381
#1176423 #1176482 #1176485 #1176698 #1176721
#1176722 #1176723 #1176725 #1176732 #1176869
#1176907 #1176922 #1176935 #1176950 #1176990
#1177027 #1177086 #1177121 #1177206 #1177340
#1177410 #1177411 #1177470 #1177511 #1177724
#1177725 #1177766 #1177816 #1178123 #1178330
#1178393 #1178669 #1178765 #1178782 #1178838
Cross- CVE-2020-0404 CVE-2020-0427 CVE-2020-0430
CVE-2020-0431 CVE-2020-0432 CVE-2020-12351
CVE-2020-12352 CVE-2020-14351 CVE-2020-14381
CVE-2020-143...
Read the Full Advisory
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: SUSE-SU-2020:3544-1
Rating: important
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!