Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 436
Alerts This Week
Warning Icon 1 436

SUSE: 2022:1123-3 Urgent: Linux Kernel Update for SLE 15 SP4

suse
Calendar Grey February 10, 2021
Dist Suse Esm H88
This patch resolves various problems within the Linux Kernel, incorporating crucial updates to address security weaknesses.
An update that fixes 8 vulnerabilities is now available

Summary

This update for the Linux Kernel 5.3.18-24_15 fixes several issues. The following security issues were fixed: - CVE-2020-29373: Fixed an issue where kernel unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations (bsc#1179779). - CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562). - CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180030). - CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. - CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008).

Topics%20covered

Topics Covered

security advisory remote code execution privilege escalation kernel patch SUSE file system issue live patch

References

#1179664 #1179779 #1179877 #1180008 #1180030

#1180032 #1180562

Cross- CVE-2020-0465 CVE-2020-0466 CVE-2020-29368

CVE-2020-29373 CVE-2020-29569 CVE-2020-29660

CVE-2020-29661 CVE-2020-36158

CVSS scores:

CVE-2020-0465 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2020-0465 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2020-0466 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2020-0466 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2020-29368 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2020-29368 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2020-29373 (SUSE): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:0367-1
Rating: important

Topics%20covered

Topics Covered

security advisory remote code execution privilege escalation kernel patch SUSE file system issue live patch

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.