{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Ubuntu 16.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 20.10",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 18.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 20.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 14.04 ESM",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-20261",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-20261"
    },
    {
      "name": "CVE-2020-14390",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14390"
    },
    {
      "name": "CVE-2021-20239",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-20239"
    },
    {
      "name": "CVE-2021-26931",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-26931"
    },
    {
      "name": "CVE-2020-25285",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25285"
    },
    {
      "name": "CVE-2021-3411",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3411"
    },
    {
      "name": "CVE-2019-19061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19061"
    },
    {
      "name": "CVE-2020-0466",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0466"
    },
    {
      "name": "CVE-2021-29154",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-29154"
    },
    {
      "name": "CVE-2015-1350",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-1350"
    },
    {
      "name": "CVE-2021-26930",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-26930"
    },
    {
      "name": "CVE-2019-16231",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16231"
    },
    {
      "name": "CVE-2020-27830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27830"
    },
    {
      "name": "CVE-2020-25639",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25639"
    },
    {
      "name": "CVE-2017-16644",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-16644"
    },
    {
      "name": "CVE-2019-16232",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16232"
    },
    {
      "name": "CVE-2020-36158",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36158"
    },
    {
      "name": "CVE-2021-28038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28038"
    },
    {
      "name": "CVE-2021-28950",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28950"
    },
    {
      "name": "CVE-2020-25669",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25669"
    },
    {
      "name": "CVE-2021-3348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3348"
    },
    {
      "name": "CVE-2021-20194",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-20194"
    },
    {
      "name": "CVE-2021-3347",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3347"
    },
    {
      "name": "CVE-2021-3178",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3178"
    },
    {
      "name": "CVE-2018-13095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-13095"
    },
    {
      "name": "CVE-2021-20268",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-20268"
    },
    {
      "name": "CVE-2020-14351",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14351"
    },
    {
      "name": "CVE-2020-25645",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25645"
    },
    {
      "name": "CVE-2020-0423",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0423"
    },
    {
      "name": "CVE-2017-5967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-5967"
    },
    {
      "name": "CVE-2020-0465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0465"
    },
    {
      "name": "CVE-2021-28375",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28375"
    }
  ],
  "links": [],
  "reference": "CERTFR-2021-AVI-265",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-04-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le noyau Linux\nd\u0027Ubuntu. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire, un d\u00e9ni de service et un contournement\nde la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux d\u0027Ubuntu",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-4912-1 du 13 avril 2021",
      "url": "https://ubuntu.com/security/notices/USN-4912-1"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-4904-1 du 13 avril 2021",
      "url": "https://ubuntu.com/security/notices/USN-4904-1"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-4910-1 du 13 avril 2021",
      "url": "https://ubuntu.com/security/notices/USN-4910-1"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-4907-1 du 13 avril 2021",
      "url": "https://ubuntu.com/security/notices/USN-4907-1"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-4911-1 du 13 avril 2021",
      "url": "https://ubuntu.com/security/notices/USN-4911-1"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-4909-1 du 13 avril 2021",
      "url": "https://ubuntu.com/security/notices/USN-4909-1"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Ubuntu 16.04 ESM",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 20.10",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 18.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 21.04",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 20.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 14.04 ESM",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-29264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-29264"
    },
    {
      "name": "CVE-2021-26931",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-26931"
    },
    {
      "name": "CVE-2020-25672",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25672"
    },
    {
      "name": "CVE-2021-29657",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-29657"
    },
    {
      "name": "CVE-2021-30002",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-30002"
    },
    {
      "name": "CVE-2021-29154",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-29154"
    },
    {
      "name": "CVE-2021-3483",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3483"
    },
    {
      "name": "CVE-2021-26930",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-26930"
    },
    {
      "name": "CVE-2021-31916",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31916"
    },
    {
      "name": "CVE-2021-29649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-29649"
    },
    {
      "name": "CVE-2021-3490",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3490"
    },
    {
      "name": "CVE-2021-29647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-29647"
    },
    {
      "name": "CVE-2020-25639",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25639"
    },
    {
      "name": "CVE-2021-28971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28971"
    },
    {
      "name": "CVE-2020-35519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-35519"
    },
    {
      "name": "CVE-2021-28952",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28952"
    },
    {
      "name": "CVE-2021-3493",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3493"
    },
    {
      "name": "CVE-2021-29265",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-29265"
    },
    {
      "name": "CVE-2021-28038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28038"
    },
    {
      "name": "CVE-2021-29266",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-29266"
    },
    {
      "name": "CVE-2020-25671",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25671"
    },
    {
      "name": "CVE-2021-29650",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-29650"
    },
    {
      "name": "CVE-2021-28951",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28951"
    },
    {
      "name": "CVE-2021-28688",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28688"
    },
    {
      "name": "CVE-2021-3489",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3489"
    },
    {
      "name": "CVE-2020-25670",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25670"
    },
    {
      "name": "CVE-2021-28972",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28972"
    },
    {
      "name": "CVE-2021-20292",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-20292"
    },
    {
      "name": "CVE-2021-28660",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28660"
    },
    {
      "name": "CVE-2021-3491",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3491"
    },
    {
      "name": "CVE-2021-28964",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28964"
    },
    {
      "name": "CVE-2021-28375",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28375"
    },
    {
      "name": "CVE-2021-29646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-29646"
    }
  ],
  "links": [],
  "reference": "CERTFR-2021-AVI-372",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-05-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le noyau Linux\nd\u0027Ubuntu. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de\ncode arbitraire, un d\u00e9ni de service \u00e0 distance et une \u00e9l\u00e9vation de\nprivil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux d\u0027Ubuntu",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-4947-1 du 11 mai 2021",
      "url": "https://ubuntu.com/security/notices/USN-4947-1"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-4946-1 du 11 mai 2021",
      "url": "https://ubuntu.com/security/notices/USN-4946-1"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-4950-1 du 11 mai 2021",
      "url": "https://ubuntu.com/security/notices/USN-4950-1"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-4945-1 du 11 mai 2021",
      "url": "https://ubuntu.com/security/notices/USN-4945-1"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-4948-1 du 11 mai 2021",
      "url": "https://ubuntu.com/security/notices/USN-4948-1"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-4949-1 du 11 mai 2021",
      "url": "https://ubuntu.com/security/notices/USN-4949-1"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu LSN-0076-1 du 11 mai 2021",
      "url": "https://ubuntu.com/security/notices/LSN-0076-1"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Ubuntu 18.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 20.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-30002",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-30002"
    },
    {
      "name": "CVE-2020-25639",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25639"
    },
    {
      "name": "CVE-2021-29265",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-29265"
    },
    {
      "name": "CVE-2021-28038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28038"
    },
    {
      "name": "CVE-2021-29650",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-29650"
    },
    {
      "name": "CVE-2021-28660",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28660"
    },
    {
      "name": "CVE-2021-28375",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28375"
    }
  ],
  "links": [],
  "reference": "CERTFR-2021-AVI-393",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-05-20T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le noyau Linux\nd\u0027Ubuntu. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de\nservice et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux d\u0027Ubuntu",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-4945-2 du 19 mai 2021",
      "url": "https://ubuntu.com/security/notices/USN-4945-2"
    }
  ]
}

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2020-25639",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2020-25639"
    }
  },
  "description": "Linux kernel\u662f\u7f8e\u56fdLinux\u57fa\u91d1\u4f1a\u7684\u5f00\u6e90\u64cd\u4f5c\u7cfb\u7edfLinux\u6240\u4f7f\u7528\u7684\u5185\u6838\u3002\n\nLinux kernel\u5b58\u5728\u4ee3\u7801\u95ee\u9898\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u53ef\u4ee5\u901a\u8fc7DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC\u5f3a\u5236\u7a7a\u6307\u9488\u89e3\u5f15\u7528\uff0c\u4ece\u800c\u89e6\u53d1\u62d2\u7edd\u670d\u52a1\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u6682\u672a\u53d1\u5e03\u4fee\u590d\u63aa\u65bd\u89e3\u51b3\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u5efa\u8bae\u4f7f\u7528\u6b64\u8f6f\u4ef6\u7684\u7528\u6237\u968f\u65f6\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u6216\u53c2\u8003\u7f51\u5740\u4ee5\u83b7\u53d6\u89e3\u51b3\u529e\u6cd5\uff1a\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=1876995",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-19427",
  "openTime": "2021-03-19",
  "products": {
    "product": "Linux  Linux kernel \u003c5.12-rc1"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2020-25639",
  "serverity": "\u4e2d",
  "submitTime": "2021-02-03",
  "title": "Linux kernel\u4ee3\u7801\u95ee\u9898\u6f0f\u6d1e\uff08CNVD-2021-19427\uff09"
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "478A4A43-CD78-4F76-9808-E6E6F474B600",
              "versionEndIncluding": "5.11.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
              "matchCriteriaId": "36D96259-24BD-44E2-96D9-78CE1D41F956",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
              "matchCriteriaId": "E460AA51-FCDA-46B9-AE97-E6676AA5E194",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:redhat:openshift_container_platform:4.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "44C5E433-229C-4BB9-8481-8A74AFA8DB8E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift_container_platform:4.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "D432C063-0805-4151-A819-508FE8954101",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift_container_platform:4.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B62E762-2878-455A-93C9-A5DB430D7BB5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "142AD0DD-4CF3-4D74-9442-459CE3347E3A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F4CFF558-3C47-480D-A2F0-BABF26042943",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:messaging_realtime_grid:2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F0ED77E-6D8E-48DF-9D2E-4E821399F893",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A NULL pointer dereference flaw was found in the Linux kernel\u0027s GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system."
    },
    {
      "lang": "es",
      "value": "Se encontr\u00f3 un fallo de desreferencia del puntero NULL en la funcionalidad del controlador GPU Nouveau del kernel de Linux en versiones anteriores a 5.12-rc1, en la manera en que el usuario llama a ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. Este fallo permite que un usuario local bloquee el sistema"
    }
  ],
  "id": "CVE-2020-25639",
  "lastModified": "2024-11-21T05:18:18.630",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 4.9,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 4.4,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2021-03-04T22:15:13.140",
  "references": [
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Exploit",
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1876995"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HE4CT3NL6OEBRRBUKHIX63GLNVOWCVRW/"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SUCBCKRHWP3UD2AVVYQJE7BIJEMCMXW5/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1876995"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HE4CT3NL6OEBRRBUKHIX63GLNVOWCVRW/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SUCBCKRHWP3UD2AVVYQJE7BIJEMCMXW5/"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-476"
        }
      ],
      "source": "secalert@redhat.com",
      "type": "Secondary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2020-25639"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-476"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2021-03-04T22:15:00Z",
    "severity": "MODERATE"
  },
  "details": "A NULL pointer dereference flaw was found in the Linux kernel\u2019s GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system.",
  "id": "GHSA-9h9r-mqj8-gh3f",
  "modified": "2022-05-24T22:28:30Z",
  "published": "2022-05-24T22:28:30Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25639"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1876995"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HE4CT3NL6OEBRRBUKHIX63GLNVOWCVRW"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SUCBCKRHWP3UD2AVVYQJE7BIJEMCMXW5"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "GSD": {
    "alias": "CVE-2020-25639",
    "description": "A NULL pointer dereference flaw was found in the Linux kernel\u0027s GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system.",
    "id": "GSD-2020-25639",
    "references": [
      "https://www.suse.com/security/cve/CVE-2020-25639.html",
      "https://ubuntu.com/security/CVE-2020-25639",
      "https://advisories.mageia.org/CVE-2020-25639.html",
      "https://security.archlinux.org/CVE-2020-25639",
      "https://linux.oracle.com/cve/CVE-2020-25639.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2020-25639"
      ],
      "details": "A NULL pointer dereference flaw was found in the Linux kernel\u0027s GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system.",
      "id": "GSD-2020-25639",
      "modified": "2023-12-13T01:21:57.087292Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2020-25639",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "kernel",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "Linux kernel versions prior to 5.12-rc1"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A NULL pointer dereference flaw was found in the Linux kernel\u0027s GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "CWE-476"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1876995",
            "refsource": "MISC",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1876995"
          },
          {
            "name": "FEDORA-2021-1db4ab0a3d",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HE4CT3NL6OEBRRBUKHIX63GLNVOWCVRW/"
          },
          {
            "name": "FEDORA-2021-a2d3ad5dda",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SUCBCKRHWP3UD2AVVYQJE7BIJEMCMXW5/"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "5.11.2",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:redhat:openshift_container_platform:4.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:openshift_container_platform:4.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:openshift_container_platform:4.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:messaging_realtime_grid:2.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2020-25639"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "A NULL pointer dereference flaw was found in the Linux kernel\u0027s GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-476"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1876995",
              "refsource": "MISC",
              "tags": [
                "Exploit",
                "Issue Tracking",
                "Third Party Advisory"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1876995"
            },
            {
              "name": "FEDORA-2021-a2d3ad5dda",
              "refsource": "FEDORA",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SUCBCKRHWP3UD2AVVYQJE7BIJEMCMXW5/"
            },
            {
              "name": "FEDORA-2021-1db4ab0a3d",
              "refsource": "FEDORA",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HE4CT3NL6OEBRRBUKHIX63GLNVOWCVRW/"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.9,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 6.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 0.8,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2021-03-10T20:47Z",
      "publishedDate": "2021-03-04T22:15Z"
    }
  }
}

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2020-25639 A NULL pointer dereference flaw was found in the Linux kernel\u0027s GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system. - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2021/msrc_cve-2020-25639.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "A NULL pointer dereference flaw was found in the Linux kernel\u0027s GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system.",
    "tracking": {
      "current_release_date": "2021-12-16T00:00:00.000Z",
      "generator": {
        "date": "2025-10-19T21:50:22.140Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2020-25639",
      "initial_release_date": "2021-03-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2021-03-11T00:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2021-12-16T00:00:00.000Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Added kernel to CBL-Mariner 2.0"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "1.0",
                "product": {
                  "name": "CBL Mariner 1.0",
                  "product_id": "16820"
                }
              },
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "CBL Mariner 2.0",
                  "product_id": "17086"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccm1 kernel 5.10.60.1-1",
                "product": {
                  "name": "\u003ccm1 kernel 5.10.60.1-1",
                  "product_id": "2"
                }
              },
              {
                "category": "product_version",
                "name": "cm1 kernel 5.10.60.1-1",
                "product": {
                  "name": "cm1 kernel 5.10.60.1-1",
                  "product_id": "16919"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 kernel 5.10.78.1-1",
                "product": {
                  "name": "\u003ccbl2 kernel 5.10.78.1-1",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 kernel 5.10.78.1-1",
                "product": {
                  "name": "cbl2 kernel 5.10.78.1-1",
                  "product_id": "16920"
                }
              }
            ],
            "category": "product_name",
            "name": "kernel"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccm1 kernel 5.10.60.1-1 as a component of CBL Mariner 1.0",
          "product_id": "16820-2"
        },
        "product_reference": "2",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cm1 kernel 5.10.60.1-1 as a component of CBL Mariner 1.0",
          "product_id": "16919-16820"
        },
        "product_reference": "16919",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 kernel 5.10.78.1-1 as a component of CBL Mariner 2.0",
          "product_id": "17086-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 kernel 5.10.78.1-1 as a component of CBL Mariner 2.0",
          "product_id": "16920-17086"
        },
        "product_reference": "16920",
        "relates_to_product_reference": "17086"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-25639",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "general",
          "text": "redhat",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "16919-16820",
          "16920-17086"
        ],
        "known_affected": [
          "16820-2",
          "17086-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2020-25639 A NULL pointer dereference flaw was found in the Linux kernel\u0027s GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system. - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2021/msrc_cve-2020-25639.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-03-11T00:00:00.000Z",
          "details": "-:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "16820-2"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2021-03-11T00:00:00.000Z",
          "details": "5.10.78.1-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalsScore": 0.0,
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 4.4,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "16820-2",
            "17086-1"
          ]
        }
      ],
      "title": "A NULL pointer dereference flaw was found in the Linux kernel\u0027s GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system."
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\n\nThe openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2020-27835: A use after free in the Linux kernel infiniband hfi1 driver was found in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system (bnc#1179878).\n- CVE-2020-25639: Fixed a NULL pointer dereference via nouveau ioctl (bnc#1176846).\n- CVE-2020-28374: In drivers/target/target_core_xcopy.c insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an XCOPY request, aka CID-2896c93811e3. For example, an attack can occur over a network if the attacker has access to one iSCSI LUN. The attacker gains control over file access because I/O operations are proxied via an attacker-selected backstore (bnc#1178372).\n- CVE-2020-36158: mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c might have allowed remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332 (bnc#1180559).\n- CVE-2020-27825: A use-after-free flaw was found in kernel/trace/ring_buffer.c. There was a race problem in trace_open and resize of cpu buffer running parallely on different cpus, may cause a denial of service problem (DOS). This flaw could even allow a local attacker with special user privilege to a kernel information leak threat (bnc#1179960).\n- CVE-2020-0466: In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (bnc#1180031).\n- CVE-2020-27068: In the nl80211_policy policy of nl80211.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not required for exploitation (bnc#1180086).\n- CVE-2020-0444: In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (bnc#1180027).\n- CVE-2020-0465: In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (bnc#1180029).\n- CVE-2020-29661: A locking issue was discovered in the tty subsystem of the Linux kernel drivers/tty/tty_jobctrl.c allowed a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b (bnc#1179745).\n- CVE-2020-29660: A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may have allowed a read-after-free attack against TIOCGSID, aka CID-c8bcd9c5be24 (bnc#1179745).\n- CVE-2020-27777: A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel (bnc#1179107).\n- CVE-2020-29373: An issue was discovered in fs/io_uring.c in the Linux kernel It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations, aka CID-ff002b30181d (bnc#1179434).\n- CVE-2020-11668: drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandled invalid descriptors, aka CID-a246b4d54770 (bnc#1168952).\n- CVE-2020-27830: Fixed a NULL-ptr deref bug in spk_ttyio_receive_buf2  (bnc#1179656).\n- CVE-2020-29370: An issue was discovered in kmem_cache_alloc_bulk in mm/slub.c. The slowpath lacks the required TID increment, aka CID-fd4d9c7d0c71 (bnc#1179435).\n- CVE-2020-27786: A flaw was found in the Linux kernels implementation of MIDI, where an attacker with a local account and the permissions to issue an ioctl commands to midi devices, could trigger a use-after-free. A write to this specific memory while freed and before use could cause the flow of execution to change and possibly allow for memory corruption or privilege escalation (bnc#1179601).\n\nThe following non-security bugs were fixed:\n\n- ACPI: APEI: Kick the memory_failure() queue for synchronous errors (jsc#SLE-16610).\n- ACPI: PNP: compare the string length in the matching_id() (git-fixes).\n- ALSA/hda: apply jack fixup for the Acer Veriton N4640G/N6640G/N2510G (git-fixes).\n- ALSA: core: memalloc: add page alignment for iram (git-fixes).\n- ALSA: hda/ca0132 - Change Input Source enum strings (git-fixes).\n- ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg (git-fixes).\n- ALSA: hda/conexant: add a new hda codec CX11970 (git-fixes).\n- ALSA: hda/generic: Add option to enforce preferred_dacs pairs (git-fixes).\n- ALSA: hda/hdmi: always print pin NIDs as hexadecimal (git-fixes).\n- ALSA: hda/hdmi: packet buffer index must be set before reading value (git-fixes).\n- ALSA: hda/proc - print DP-MST connections (git-fixes).\n- ALSA: hda/realtek - Add new codec supported for ALC897 (git-fixes).\n- ALSA: hda/realtek - Add supported for more Lenovo ALC285 Headset Button (git-fixes).\n- ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (git-fixes).\n- ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256 (git-fixes).\n- ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 (git-fixes).\n- ALSA: hda/realtek - Fixed Dell AIO wrong sound tone (git-fixes).\n- ALSA: hda/realtek - Modify Dell platform name (git-fixes).\n- ALSA: hda/realtek - Supported Dell fixed type headset (git-fixes).\n- ALSA: hda/realtek: Add mute LED quirk for more HP laptops (git-fixes).\n- ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model (git-fixes).\n- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).\n- ALSA: hda/realtek: Add two \u0027Intel Reference board\u0027 SSID in the ALC256 (git-fixes).\n- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).\n- ALSA: hda/realtek: Enable headset of ASUS UX482EG \u0026 B9400CEA with ALC294 (git-fixes).\n- ALSA: hda/realtek: Enable mute and micmute LED on HP EliteBook 850 G7 (git-fixes).\n- ALSA: hda/realtek: Fix bass speaker DAC assignment on Asus Zephyrus G14 (git-fixes).\n- ALSA: hda/realtek: Remove dummy lineout on Acer TravelMate P648/P658 (git-fixes).\n- ALSA: hda/realtek: make bass spk volume adjustable on a yoga laptop (git-fixes).\n- ALSA: hda/via: Fix runtime PM for Clevo W35xSS (git-fixes).\n- ALSA: hda: Fix regressions on clear and reconfig sysfs (git-fixes).\n- ALSA: pcm: Clear the full allocated memory at hw_params (git-fixes).\n- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).\n- ALSA: pcm: oss: Fix potential out-of-bounds shift (git-fixes).\n- ALSA: rawmidi: Access runtime-\u003eavail always in spinlock (git-fixes).\n- ALSA: seq: remove useless function (git-fixes).\n- ALSA: usb-audio: Add VID to support native DSD reproduction on FiiO devices (git-fixes).\n- ALSA: usb-audio: Add generic implicit fb parsing (bsc#1178203).\n- ALSA: usb-audio: Add hw constraint for implicit fb sync (bsc#1178203).\n- ALSA: usb-audio: Add implicit fb support for Steinberg UR22 (git-fixes).\n- ALSA: usb-audio: Add implicit_fb module option (bsc#1178203).\n- ALSA: usb-audio: Add quirk for BOSS AD-10 (git-fixes).\n- ALSA: usb-audio: Add quirk for Pioneer DJ DDJ-SR2 (git-fixes).\n- ALSA: usb-audio: Add quirk for RC-505 (git-fixes).\n- ALSA: usb-audio: Add snd_usb_get_endpoint() helper (bsc#1178203).\n- ALSA: usb-audio: Add snd_usb_get_host_interface() helper (bsc#1178203).\n- ALSA: usb-audio: Add support for Pioneer DJ DDJ-RR controller (git-fixes).\n- ALSA: usb-audio: Always set up the parameters after resume (bsc#1178203).\n- ALSA: usb-audio: Avoid doubly initialization for implicit fb (bsc#1178203).\n- ALSA: usb-audio: Check implicit feedback EP generically for UAC2 (bsc#1178203).\n- ALSA: usb-audio: Check valid altsetting at parsing rates for UAC2/3 (bsc#1178203).\n- ALSA: usb-audio: Constify audioformat pointer references (bsc#1178203).\n- ALSA: usb-audio: Convert to the common vmalloc memalloc (bsc#1178203).\n- ALSA: usb-audio: Correct wrongly matching entries with audio class (bsc#1178203).\n- ALSA: usb-audio: Create endpoint objects at parsing phase (bsc#1178203).\n- ALSA: usb-audio: Disable sample read check if firmware does not give back (git-fixes).\n- ALSA: usb-audio: Do not call usb_set_interface() at trigger callback (bsc#1178203).\n- ALSA: usb-audio: Do not set altsetting before initializing sample rate (bsc#1178203).\n- ALSA: usb-audio: Drop debug.h (bsc#1178203).\n- ALSA: usb-audio: Drop keep_interface flag again (bsc#1178203).\n- ALSA: usb-audio: Drop unneeded snd_usb_substream fields (bsc#1178203).\n- ALSA: usb-audio: Factor out the implicit feedback quirk code (bsc#1178203).\n- ALSA: usb-audio: Fix EP matching for continuous rates (bsc#1178203).\n- ALSA: usb-audio: Fix MOTU M-Series quirks (bsc#1178203).\n- ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks (git-fixes).\n- ALSA: usb-audio: Fix control \u0027access overflow\u0027 errors from chmap (git-fixes).\n- ALSA: usb-audio: Fix possible stall of implicit fb packet ring-buffer (bsc#1178203).\n- ALSA: usb-audio: Fix potential out-of-bounds shift (git-fixes).\n- ALSA: usb-audio: Fix quirks for other BOSS devices (bsc#1178203).\n- ALSA: usb-audio: Handle discrete rates properly in hw constraints (bsc#1178203).\n- ALSA: usb-audio: Improve some debug prints (bsc#1178203).\n- ALSA: usb-audio: Move device rename and profile quirks to an internal table (bsc#1178203).\n- ALSA: usb-audio: Move snd_usb_autoresume() call out of setup_hw_info() (bsc#1178203).\n- ALSA: usb-audio: Pass snd_usb_audio object to quirk functions (bsc#1178203).\n- ALSA: usb-audio: Properly match with audio interface class (bsc#1178203).\n- ALSA: usb-audio: Quirk for BOSS GT-001 (bsc#1178203).\n- ALSA: usb-audio: Refactor endpoint management (bsc#1178203).\n- ALSA: usb-audio: Refactoring endpoint URB deactivation (bsc#1178203).\n- ALSA: usb-audio: Replace slave/master terms (bsc#1178203).\n- ALSA: usb-audio: Set and clear sync EP link properly (bsc#1178203).\n- ALSA: usb-audio: Set callbacks via snd_usb_endpoint_set_callback() (bsc#1178203).\n- ALSA: usb-audio: Show sync endpoint information in proc outputs (bsc#1178203).\n- ALSA: usb-audio: Simplify hw_params rules (bsc#1178203).\n- ALSA: usb-audio: Simplify quirk entries with a macro (bsc#1178203).\n- ALSA: usb-audio: Simplify rate_min/max and rates set up (bsc#1178203).\n- ALSA: usb-audio: Simplify snd_usb_init_pitch() arguments (bsc#1178203).\n- ALSA: usb-audio: Simplify snd_usb_init_sample_rate() arguments (bsc#1178203).\n- ALSA: usb-audio: Stop both endpoints properly at error (bsc#1178203).\n- ALSA: usb-audio: Support PCM sync_stop (bsc#1178203).\n- ALSA: usb-audio: Track implicit fb sync endpoint in audioformat list (bsc#1178203).\n- ALSA: usb-audio: US16x08: fix value count for level meters (git-fixes).\n- ALSA: usb-audio: Unify the code for the next packet size calculation (bsc#1178203).\n- ALSA: usb-audio: Use ALC1220-VB-DT mapping for ASUS ROG Strix TRX40 mobo (bsc#1178203).\n- ALSA: usb-audio: Use atomic_t for endpoint use_count (bsc#1178203).\n- ALSA: usb-audio: Use managed buffer allocation (bsc#1178203).\n- ALSA: usb-audio: Use unsigned char for iface and altsettings fields (bsc#1178203).\n- ALSA: usb-audio: workaround for iface reset issue (bsc#1178203).\n- ASoC: Intel: bytcr_rt5640: Fix HP Pavilion x2 Detachable quirks (git-fixes).\n- ASoC: SOF: control: fix size checks for ext_bytes control .get() (git-fixes).\n- ASoC: amd: change clk_get() to devm_clk_get() and add missed checks (git-fixes).\n- ASoC: arizona: Fix a wrong free in wm8997_probe (git-fixes).\n- ASoC: cx2072x: Fix doubly definitions of Playback and Capture streams (git-fixes).\n- ASoC: jz4740-i2s: add missed checks for clk_get() (git-fixes).\n- ASoC: meson: fix COMPILE_TEST error (git-fixes).\n- ASoC: pcm: DRAIN support reactivation (git-fixes).\n- ASoC: sun4i-i2s: Fix lrck_period computation for I2S justified mode (git-fixes).\n- ASoC: tegra20-spdif: remove \u0027default m\u0027 (git-fixes).\n- ASoC: ti: davinci-mcasp: remove always zero of davinci_mcasp_get_dt_params (git-fixes).\n- ASoC: wm8998: Fix PM disable depth imbalance on error (git-fixes).\n- ASoC: wm_adsp: fix error return code in wm_adsp_load() (git-fixes).\n- ASoC: wm_adsp: remove \u0027ctl\u0027 from list on error in wm_adsp_create_control() (git-fixes).\n- Bluetooth: Fix null pointer dereference in hci_event_packet() (git-fixes).\n- Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (git-fixes).\n- Bluetooth: btmtksdio: Add the missed release_firmware() in mtk_setup_firmware() (git-fixes).\n- Bluetooth: btusb: Add the missed release_firmware() in btusb_mtk_setup_firmware() (git-fixes).\n- Bluetooth: hci_h5: close serdev device and free hu in h5_close (git-fixes).\n- Bluetooth: hci_h5: fix memory leak in h5_close (git-fixes).\n- Drop a backported uvcvideo patch that caused a regression (bsc#1180117) Also blacklisting the commit\n- EDAC/amd64: Do not load on family 0x15, model 0x13 (bsc#1179763).\n- EDAC/amd64: Fix PCI component registration (bsc#1152489).\n- EDAC/i10nm: Use readl() to access MMIO registers (bsc#1152489).\n- EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId (bsc#1152489).\n- HID: Add Logitech Dinovo Edge battery quirk (git-fixes).\n- HID: add HID_QUIRK_INCREMENT_USAGE_ON_DUPLICATE for Gamevice devices (git-fixes).\n- HID: add support for Sega Saturn (git-fixes).\n- HID: cypress: Support Varmilo Keyboards\u0027 media hotkeys (git-fixes).\n- HID: hid-sensor-hub: Fix issue with devices with no report ID (git-fixes).\n- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).\n- HID: ite: Replace ABS_MISC 120/121 events with touchpad on/off keypresses (git-fixes).\n- HID: logitech-hidpp: Add HIDPP_CONSUMER_VENDOR_KEYS quirk for the Dinovo Edge (git-fixes).\n- HID: uclogic: Add ID for Trust Flex Design Tablet (git-fixes).\n- HMAT: Register memory-side cache after parsing (bsc#1178660).\n- HMAT: Skip publishing target info for nodes with no online memory (bsc#1178660).\n- HSI: omap_ssi: Do not jump to free ID in ssi_add_controller() (git-fixes).\n- IB/hfi1: Remove kobj from hfi1_devdata (bsc#1179878).\n- IB/hfi1: Remove module parameter for KDETH qpns (bsc#1179878).\n- IB/isert: Fix unaligned immediate-data handling (bsc#1152489)\n- IB/mlx4: Add and improve logging (bsc#1152489)\n- IB/mlx4: Add support for MRA (bsc#1152489)\n- IB/mlx4: Adjust delayed work when a dup is observed (bsc#1152489)\n- IB/mlx4: Fix starvation in paravirt mux/demux (bsc#1152489)\n- IB/mthca: fix return value of error branch in mthca_init_cq() (bsc#1152489)\n- IB/rdmavt: Fix sizeof mismatch (bsc#1152489)\n- IB/srpt: Fix memory leak in srpt_add_one (bsc#1152489)\n- IB/uverbs: Set IOVA on IB MR in uverbs layer (bsc#1152489)\n- Input: ads7846 - fix integer overflow on Rt calculation (git-fixes).\n- Input: ads7846 - fix race that causes missing releases (git-fixes).\n- Input: ads7846 - fix unaligned access on 7845 (git-fixes).\n- Input: cm109 - do not stomp on control URB (git-fixes).\n- Input: cros_ec_keyb - send \u0027scancodes\u0027 in addition to key events (git-fixes).\n- Input: cyapa_gen6 - fix out-of-bounds stack access (git-fixes).\n- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet (git-fixes).\n- Input: i8042 - add Acer laptops to the i8042 reset list (git-fixes).\n- Input: i8042 - add ByteSpeed touchpad to noloop table (git-fixes).\n- Input: i8042 - allow insmod to succeed on devices without an i8042 controller (git-fixes).\n- Input: i8042 - fix error return code in i8042_setup_aux() (git-fixes).\n- Input: omap4-keypad - fix runtime PM error handling (git-fixes).\n- Input: xpad - support Ardwiino Controllers (git-fixes).\n- KVM: PPC: Book3S HV: XIVE: Fix possible oops when accessing ESB page (bsc#1156395).\n- Move \u0027btrfs: qgroup: do not try to wait flushing if we\u0027re already holding a transaction (bsc#1179575).\u0027 to sorted section\n- Move upstreamed USB-audio patches into sorted section\n- PCI: Fix overflow in command-line resource alignment requests (git-fixes).\n- PCI: Fix pci_slot_release() NULL pointer dereference (git-fixes).\n- PCI: brcmstb: Initialize \u0027tmp\u0027 before use (git-fixes).\n- PCI: iproc: Fix out-of-bound array accesses (git-fixes).\n- RDMA/addr: Fix race with netevent_callback()/rdma_addr_cancel() (bsc#1152489)\n- RDMA/bnxt_re: Do not add user qps to flushlist (bsc#1152489)\n- RDMA/bnxt_re: Fix sizeof mismatch for allocation of pbl_tbl. (bsc#1152489)\n- RDMA/core: Fix bogus WARN_ON during ib_unregister_device_queued() (bsc#1152489)\n- RDMA/core: Fix reported speed and width (bsc#1152489)\n- RDMA/core: Fix return error value in _ib_modify_qp() to negative (bsc#1152489)\n- RDMA/core: Free DIM memory in error unwind (bsc#1152489)\n- RDMA/core: Stop DIM before destroying CQ (bsc#1152489)\n- RDMA/counter: Allow manually bind QPs with different pids to same counter (bsc#1152489)\n- RDMA/counter: Only bind user QPs in auto mode (bsc#1152489)\n- RDMA/hns: Add check for the validity of sl configuration (bsc#1152489)\n- RDMA/hns: Bugfix for memory window mtpt configuration (bsc#1152489)\n- RDMA/hns: Correct typo of hns_roce_create_cq() (bsc#1152489)\n- RDMA/hns: Fix missing sq_sig_type when querying QP (bsc#1152489)\n- RDMA/hns: Set the unsupported wr opcode (bsc#1152489)\n- RDMA/ipoib: Set rtnl_link_ops for ipoib interfaces (bsc#1152489)\n- RDMA/mlx5: Disable IB_DEVICE_MEM_MGT_EXTENSIONS if IB_WR_REG_MR can\u0027t work (bsc#1152489)\n- RDMA/netlink: Remove CAP_NET_RAW check when dump a raw QP (bsc#1152489)\n- RDMA/pvrdma: Fix missing kfree() in pvrdma_register_device() (bsc#1152489)\n- RDMA/qedr: Endianness warnings cleanup (bsc#1152489)\n- RDMA/qedr: Fix doorbell setting (bsc#1152489)\n- RDMA/qedr: Fix iWARP active mtu display (bsc#1152489)\n- RDMA/qedr: Fix inline size returned for iWARP (bsc#1152489)\n- RDMA/qedr: Fix memory leak in iWARP CM (bsc#1152489)\n- RDMA/qedr: Fix qp structure memory leak (bsc#1152489)\n- RDMA/qedr: Fix resource leak in qedr_create_qp (bsc#1152489)\n- RDMA/qedr: Fix use of uninitialized field (bsc#1152489)\n- RDMA/qedr: SRQ\u0027s bug fixes (bsc#1152489)\n- RDMA/rxe: Drop pointless checks in rxe_init_ports (bsc#1152489)\n- RDMA/rxe: Fix memleak in rxe_mem_init_user (bsc#1152489)\n- RDMA/rxe: Fix skb lifetime in rxe_rcv_mcast_pkt() (bsc#1152489)\n- RDMA/rxe: Fix the parent sysfs read when the interface has 15 chars (bsc#1152489)\n- RDMA/rxe: Handle skb_clone() failure in rxe_recv.c (bsc#1152489)\n- RDMA/rxe: Prevent access to wr-\u003enext ptr afrer wr is posted to send queue (bsc#1152489)\n- RDMA/rxe: Remove unused rxe_mem_map_pages (bsc#1152489)\n- RDMA/rxe: Return void from rxe_init_port_param() (bsc#1152489)\n- RDMA/rxe: Return void from rxe_mem_init_dma() (bsc#1152489)\n- RDMA/rxe: Skip dgid check in loopback mode (bsc#1152489)\n- RDMA/srpt: Fix typo in srpt_unregister_mad_agent docstring (bsc#1152489)\n- RDMA/umem: Fix ib_umem_find_best_pgsz() for mappings that cross a page boundary (bsc#1152489)\n- RDMA/umem: Prevent small pages from being returned by ib_umem_find_best_pgsz() (bsc#1152489)\n- Re-import the upstream uvcvideo fix; one more fix will be added later (bsc#1180117)\n- Revert \u0027ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks\u0027 (git-fixes).\n- Revert \u0027ceph: allow rename operation under different quota realms\u0027 (bsc#1180541).\n- Revert \u0027geneve: pull IP header before ECN decapsulation\u0027 (git-fixes).\n- Revert \u0027i2c: i2c-qcom-geni: Fix DMA transfer race\u0027 (git-fixes).\n- Revert \u0027platform/x86: wmi: Destroy on cleanup rather than unregister\u0027 (git-fixes).\n- Revert \u0027powerpc/pseries/hotplug-cpu: Remove double free in error path\u0027 (bsc#1065729).\n- USB: UAS: introduce a quirk to set no_write_same (git-fixes).\n- USB: add RESET_RESUME quirk for Snapscan 1212 (git-fixes).\n- USB: dummy-hcd: Fix uninitialized array use in init() (git-fixes).\n- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).\n- USB: gadget: f_midi: setup SuperSpeed Plus descriptors (git-fixes).\n- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above (git-fixes).\n- USB: gadget: legacy: fix return error code in acm_ms_bind() (git-fixes).\n- USB: quirks: Add USB_QUIRK_DISCONNECT_SUSPEND quirk for Lenovo A630Z TIO built-in usb-audio card (git-fixes).\n- USB: serial: ch341: add new Product ID for CH341A (git-fixes).\n- USB: serial: ch341: sort device-id entries (git-fixes).\n- USB: serial: digi_acceleport: fix write-wakeup deadlocks (git-fixes).\n- USB: serial: iuu_phoenix: fix DMA from stack (git-fixes).\n- USB: serial: keyspan_pda: fix dropped unthrottle interrupts (git-fixes).\n- USB: serial: keyspan_pda: fix stalled writes (git-fixes).\n- USB: serial: keyspan_pda: fix tx-unthrottle use-after-free (git-fixes).\n- USB: serial: keyspan_pda: fix write deadlock (git-fixes).\n- USB: serial: keyspan_pda: fix write unthrottling (git-fixes).\n- USB: serial: keyspan_pda: fix write-wakeup use-after-free (git-fixes).\n- USB: serial: kl5kusb105: fix memleak on open (git-fixes).\n- USB: serial: kl5kusb105: fix memleak on open (git-fixes).\n- USB: serial: mos7720: fix parallel-port state restore (git-fixes).\n- USB: serial: option: add Fibocom NL668 variants (git-fixes).\n- USB: serial: option: add interface-number sanity check to flag handling (git-fixes).\n- USB: serial: option: add support for Thales Cinterion EXS82 (git-fixes).\n- USB: serial: option: fix Quectel BG96 matching (git-fixes).\n- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (git-fixes).\n- USB: yurex: fix control-URB timeout handling (git-fixes).\n- arm64: acpi: Make apei_claim_sea() synchronise with APEI\u0027s irq work (jsc#SLE-16610).\n- arm64: mm: Fix ARCH_LOW_ADDRESS_LIMIT when !CONFIG_ZONE_DMA (git-fixes).\n- ath10k: Fix an error handling path (git-fixes).\n- ath10k: Release some resources in an error handling path (git-fixes).\n- ath6kl: fix enum-conversion warning (git-fixes).\n- batman-adv: Consider fragmentation for needed_headroom (git-fixes).\n- batman-adv: Do not always reallocate the fragmentation skb head (git-fixes).\n- batman-adv: Reserve needed_*room for fragments (git-fixes).\n- bitmap: remove unused function declaration (git-fixes).\n- blk-mq-blk-mq-provide-forced-completion-method.patch: (bsc#1175995,jsc#SLE-15608,bsc#1178756).\n- blk-mq: Remove \u0027running from the wrong CPU\u0027 warning (bsc#1174486).\n- block: return status code in blk_mq_end_request() (bsc#1171000, bsc#1165933).\n- bpf: Fix bpf_put_raw_tracepoint()\u0027s use of __module_address() (git-fixes).\n- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).\n- btrfs: allow btrfs_truncate_block() to fallback to nocow for data space reservation (bsc#1161099).\n- btrfs: delete duplicated words + other fixes in comments (bsc#1180566).\n- btrfs: do not commit logs and transactions during link and rename operations (bsc#1180566).\n- btrfs: do not take the log_mutex of the subvolume when pinning the log (bsc#1180566).\n- btrfs: fix missing delalloc new bit for new delalloc ranges (bsc#1180773).\n- btrfs: fix readahead hang and use-after-free after removing a device (bsc#1179963).\n- btrfs: fix use-after-free on readahead extent after failure to create it (bsc#1179963).\n- btrfs: make btrfs_dirty_pages take btrfs_inode (bsc#1180773).\n- btrfs: make btrfs_set_extent_delalloc take btrfs_inode (bsc#1180773).\n- btrfs: qgroup: do not commit transaction when we already hold the handle (bsc#1178634).\n- btrfs: qgroup: do not try to wait flushing if we\u0027re already holding a transaction (bsc#1179575).\n- bus/fsl_mc: Do not rely on caller to provide non NULL mc_io (git-fixes).\n- bus: fsl-mc: fix error return code in fsl_mc_object_allocate() (git-fixes).\n- can: c_can: c_can_power_up(): fix error handling (git-fixes).\n- can: sja1000: sja1000_err(): do not count arbitration lose as an error (git-fixes).\n- can: softing: softing_netdev_open(): fix error handling (git-fixes).\n- can: sun4i_can: sun4i_can_err(): do not count arbitration lose as an error (git-fixes).\n- cfg80211: initialize rekey_data (git-fixes).\n- cifs: Fix an error pointer dereference in cifs_mount() (bsc#1178270).\n- cifs: add NULL check for ses-\u003etcon_ipc (bsc#1178270).\n- cifs: allow syscalls to be restarted in __smb_send_rqst() (bsc#1176956).\n- cifs: do not share tcons with DFS (bsc#1178270).\n- cifs: document and cleanup dfs mount (bsc#1178270).\n- cifs: ensure correct super block for DFS reconnect (bsc#1178270).\n- cifs: fix DFS mount with cifsacl/modefromsid (bsc#1178270).\n- cifs: fix check of tcon dfs in smb1 (bsc#1178270).\n- cifs: fix double free error on share and prefix (bsc#1178270).\n- cifs: fix leaked reference on requeued write (bsc#1178270).\n- cifs: fix potential use-after-free in cifs_echo_request() (bsc#1139944).\n- cifs: fix uninitialised lease_key in open_shroot() (bsc#1178270).\n- cifs: get rid of unused parameter in reconn_setup_dfs_targets() (bsc#1178270).\n- cifs: handle RESP_GET_DFS_REFERRAL.PathConsumed in reconnect (bsc#1178270).\n- cifs: handle empty list of targets in cifs_reconnect() (bsc#1178270).\n- cifs: handle hostnames that resolve to same ip in failover (bsc#1178270).\n- cifs: merge __{cifs,smb2}_reconnect[_tcon]() into cifs_tree_connect() (bsc#1178270).\n- cifs: only update prefix path of DFS links in cifs_tree_connect() (bsc#1178270).\n- cifs: reduce number of referral requests in DFS link lookups (bsc#1178270).\n- cifs: rename reconn_inval_dfs_target() (bsc#1178270).\n- cifs: set up next DFS target before generic_ip_connect() (bsc#1178270).\n- clk: at91: sam9x60: remove atmel,osc-bypass support (git-fixes).\n- clk: ingenic: Fix divider calculation with div tables (git-fixes).\n- clk: mediatek: Make mtk_clk_register_mux() a static function (git-fixes).\n- clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (git-fixes).\n- clk: renesas: r9a06g032: Drop __packed for portability (git-fixes).\n- clk: s2mps11: Fix a resource leak in error handling paths in the probe function (git-fixes).\n- clk: sunxi-ng: Make sure divider tables have sentinel (git-fixes).\n- clk: tegra: Do not return 0 on failure (git-fixes).\n- clk: tegra: Fix duplicated SE clock entry (git-fixes).\n- clk: ti: Fix memleak in ti_fapll_synth_setup (git-fixes).\n- clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI (git-fixes).\n- clocksource/drivers/arm_arch_timer: Use stable count reader in erratum sne (git-fixes).\n- clocksource/drivers/cadence_ttc: Fix memory leak in ttc_setup_clockevent() (git-fixes).\n- clocksource/drivers/orion: Add missing clk_disable_unprepare() on error path (git-fixes).\n- compiler_attributes.h: Add \u0027fallthrough\u0027 pseudo keyword for switch/case use (bsc#1178203).\n- coredump: fix core_pattern parse error (git-fixes).\n- cpufreq: ap806: Add missing MODULE_DEVICE_TABLE (git-fixes).\n- cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (git-fixes).\n- cpufreq: loongson1: Add missing MODULE_ALIAS (git-fixes).\n- cpufreq: mediatek: Add missing MODULE_DEVICE_TABLE (git-fixes).\n- cpufreq: scpi: Add missing MODULE_ALIAS (git-fixes).\n- cpufreq: st: Add missing MODULE_DEVICE_TABLE (git-fixes).\n- cpufreq: vexpress-spc: Add missing MODULE_ALIAS (git-fixes).\n- crypto: af_alg - avoid undefined behavior accessing salg_name (git-fixes).\n- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).\n- crypto: crypto4xx - Replace bitwise OR with logical OR in crypto4xx_build_pd (git-fixes).\n- crypto: ecdh - avoid buffer overflow in ecdh_set_secret() (git-fixes).\n- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret() (git-fixes).\n- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).\n- crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (git-fixes).\n- crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (git-fixes).\n- crypto: sun4i-ss - add the A33 variant of SS (git-fixes).\n- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).\n- crypto: talitos - Fix return type of current_desc_hdr() (git-fixes).\n- cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (git-fixes).\n- dmaengine: at_hdmac: Substitute kzalloc with kmalloc (git-fixes).\n- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate() (git-fixes).\n- dmaengine: at_hdmac: add missing put_device() call in at_dma_xlate() (git-fixes).\n- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk() (git-fixes).\n- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the error handling path of the probe function (git-fixes).\n- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe() (git-fixes).\n- dmaengine: xilinx_dma: check dma_async_device_register return value (git-fixes).\n- dmaengine: xilinx_dma: fix incompatible param warning in _child_probe() (git-fixes).\n- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (git-fixes).\n- drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (git-fixes).\n- drm/amd/display: Fix wrong return value in dm_update_plane_state() (bsc#1152489)\n- drm/amdgpu: pass NULL pointer instead of 0 (bsc#1152489) Backporting changes: \t* context fixes\n- drm/crc-debugfs: Fix memleak in crc_control_write (bsc#1152472)\n- drm/gma500: fix error check (bsc#1152472) Backporting changes: \t* context fixes\n- drm/i915/gem: Avoid implicit vmap for highmem on x86-32 (bsc#1152489) Backporting changes: \t* context fixes\n- drm/i915: Fix sha_text population code (bsc#1152489) Backporting changes: \t* context fixes \t* adapted I/O functions to old driver\n- drm/imx: tve remove extraneous type qualifier (bsc#1152489)\n- drm/mediatek: Add exception handing in mtk_drm_probe() if component (bsc#1152472)\n- drm/mediatek: Add missing put_device() call in (bsc#1152472)\n- drm/mediatek: Add missing put_device() call in mtk_drm_kms_init() (bsc#1152472) Backporting changes: \t* context fixes \t* adapted to function layout\n- drm/msm: Avoid div-by-zero in dpu_crtc_atomic_check() (bsc#1152489)\n- drm/msm: Drop debug print in _dpu_crtc_setup_lm_bounds() (bsc#1152489) Backporting changes: \t* context fixes\n- drm/panfrost: Ensure GPU quirks are always initialised (bsc#1152489)\n- drm/panfrost: increase readl_relaxed_poll_timeout values (bsc#1152472) Backporting changes: \t* context fixes\n- drm/radeon: Prefer lower feedback dividers (bsc#1152489)\n- drm/sun4i: sun8i-csc: Secondary CSC register correction (bsc#1152489)\n- drm/vc4/vc4_hdmi: fill ASoC card owner (bsc#1152489)\n- drm/vc4: crtc: Rework a bit the CRTC state code (bsc#1152472) Backporting changes: \t* context fixes\n- drm/vc4: hdmi: Avoid sleeping in atomic context (bsc#1152489) Backporting changes: \t* context fixes\n- drm/vkms: fix xrgb on compute crc (bsc#1152472) Backporting changes: \t* changed filename from vkms_composer.c to vkms_crc.c \t* context fixes\n- drm: mxsfb: Remove fbdev leftovers (bsc#1152472) Backporting changes: \t* context fixes\n- drm: mxsfb: check framebuffer pitch (bsc#1152472) Backporting changes: \t* context fixes\n- drm: panel: Fix bpc for OrtusTech COM43H4M85ULC panel (bsc#1152489)\n- drm: panel: Fix bus format for OrtusTech COM43H4M85ULC panel (bsc#1152472) Backporting changes: \t* context fixes\n- drm: rcar-du: Put reference to VSP device (bsc#1152489)\n- epoll: Keep a reference on files added to the check list (bsc#1180031).\n- ethtool: fix error handling in ethtool_phys_id (git-fixes).\n- ext4: correctly report \u0027not supported\u0027 for {usr,grp}jquota when !CONFIG_QUOTA (bsc#1179672).\n- ext4: fix bogus warning in ext4_update_dx_flag() (bsc#1179716).\n- ext4: fix leaking sysfs kobject after failed mount (bsc#1179670).\n- ext4: limit entries returned when counting fsmap records (bsc#1179671).\n- ext4: unlock xattr_sem properly in ext4_inline_data_truncate() (bsc#1179673).\n- extcon: max77693: Fix modalias string (git-fixes).\n- fail_function: Remove a redundant mutex unlock (bsc#1149032).\n- fbcon: Remove the superfluous break (bsc#1152472)\n- firmware: arm_sdei: Document the motivation behind these set_fs() calls (jsc#SLE-16610).\n- fix regression in \u0027epoll: Keep a reference on files added to the check list\u0027 (bsc#1180031, git-fixes).\n- fs/minix: check return value of sb_getblk() (bsc#1179676).\n- fs/minix: do not allow getting deleted inodes (bsc#1179677).\n- fs/minix: fix block limit check for V1 filesystems (bsc#1179680).\n- fs/minix: reject too-large maximum file size (bsc#1179678).\n- fs/minix: remove expected error message in block_to_path() (bsc#1179681).\n- fs/minix: set s_maxbytes correctly (bsc#1179679).\n- fs/ufs: avoid potential u32 multiplication overflow (bsc#1179682).\n- fs: Do not invalidate page buffers in block_write_full_page() (bsc#1179711).\n- ftrace: Fix updating FTRACE_FL_TRAMP (git-fixes).\n- geneve: pull IP header before ECN decapsulation (git-fixes).\n- genirq/irqdomain: Add an irq_create_mapping_affinity() function (bsc#1065729).\n- genirq/matrix: Deal with the sillyness of for_each_cpu() on UP (bsc#1156315).\n- gpio: mvebu: fix potential user-after-free on probe (git-fixes).\n- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).\n- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly terminated (git-fixes).\n- i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() (git-fixes).\n- i2c: sprd: use a specific timeout to avoid system hang up issue (git-fixes).\n- i3c master: fix missing destroy_workqueue() on error in i3c_master_register (git-fixes).\n- ibmvnic: add some debugs (bsc#1179896 ltc#190255).\n- ibmvnic: avoid memset null scrq msgs (bsc#1044767 ltc#155231 git-fixes).\n- ibmvnic: continue fatal error reset after passive init (bsc#1171078 ltc#184239 git-fixes).\n- ibmvnic: delay next reset if hard reset fails (bsc#1094840 ltc#167098 git-fixes).\n- ibmvnic: enhance resetting status check during module exit (bsc#1065729).\n- ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues (bsc#1040855 ltc#155067 git-fixes).\n- ibmvnic: fix call_netdevice_notifiers in do_reset (bsc#1115431 ltc#171853 git-fixes).\n- ibmvnic: fix: NULL pointer dereference (bsc#1044767 ltc#155231 git-fixes).\n- ibmvnic: notify peers when failover and migration happen (bsc#1044120 ltc#155423 git-fixes).\n- ibmvnic: restore adapter state on failed reset (bsc#1152457 ltc#174432 git-fixes).\n- iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (git-fixes).\n- iio: buffer: Fix demux update (git-fixes).\n- iio:adc:ti-ads124s08: Fix alignment and data leak issues (git-fixes).\n- iio:adc:ti-ads124s08: Fix buffer being too long (git-fixes).\n- iio:imu:bmi160: Fix too large a buffer (git-fixes).\n- iio:light:rpr0521: Fix timestamp alignment and prevent data leak (git-fixes).\n- iio:light:st_uvis25: Fix timestamp alignment and prevent data leak (git-fixes).\n- iio:magnetometer:mag3110: Fix alignment and data leak issues (git-fixes).\n- iio:pressure:mpl3115: Force alignment of buffer (git-fixes).\n- inet_ecn: Fix endianness of checksum update when setting ECT(1) (git-fixes).\n- iomap: Clear page error before beginning a write (bsc#1179683).\n- iomap: Mark read blocks uptodate in write_begin (bsc#1179684).\n- iomap: Set all uptodate bits for an Uptodate page (bsc#1179685).\n- iommu-amd-Increase-interrupt-remapping-table-limit-t.patch: (bsc#1179652).\n- iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs (bsc#1179652).\n- iwlwifi: mvm: fix kernel panic in case of assert during CSA (git-fixes).\n- iwlwifi: mvm: hook up missing RX handlers (git-fixes).\n- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).\n- iwlwifi: pcie: limit memory read spin time (git-fixes).\n- jbd2: fix up sparse warnings in checkpoint code (bsc#1179707).\n- kABI workaround for HD-audio generic parser (git-fixes).\n- kABI workaround for USB audio driver (bsc#1178203).\n- kABI: genirq: add back irq_create_mapping (bsc#1065729).\n- kdb: Fix pager search for multi-line strings (git-fixes).\n- kernel/cpu: add arch override for clear_tasks_mm_cpumask() mm handling (bsc#1055117 ltc#159753 git-fixes bsc#1179888 ltc#190253).\n- kgdb: Drop malformed kernel doc comment (git-fixes).\n- lan743x: fix for potential NULL pointer dereference with bare card (git-fixes).\n- lib/string: remove unnecessary #undefs (git-fixes).\n- libfs: fix error cast of negative value in simple_attr_write() (bsc#1179709).\n- locking/percpu-rwsem: Use this_cpu_{inc,dec}() for read_count (bsc#1149032).\n- mac80211: do not set set TDLS STA bandwidth wider than possible (git-fixes).\n- mac80211: mesh: fix mesh_pathtbl_init() error path (git-fixes).\n- md-cluster: fix rmmod issue when md_cluster convert bitmap to none (bsc#1163727).\n- md-cluster: fix safemode_delay value when converting to clustered bitmap (bsc#1163727).\n- md-cluster: fix wild pointer of unlock_all_bitmaps() (bsc#1163727).\n- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).\n- md/bitmap: md_bitmap_get_counter returns wrong blocks (bsc#1163727).\n- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks (bsc#1163727).\n- md/cluster: block reshape with remote resync job (bsc#1163727).\n- md/cluster: fix deadlock when node is doing resync job (bsc#1163727).\n- media: gp8psk: initialize stats at power control logic (git-fixes).\n- media: gspca: Fix memory leak in probe (git-fixes).\n- media: imx214: Fix stop streaming (git-fixes).\n- media: ipu3-cio2: Make the field on subdev format V4L2_FIELD_NONE (git-fixes).\n- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).\n- media: ipu3-cio2: Return actual subdev format (git-fixes).\n- media: ipu3-cio2: Serialise access to pad format (git-fixes).\n- media: ipu3-cio2: Validate mbus format in setting subdev format (git-fixes).\n- media: max2175: fix max2175_set_csm_mode() error code (git-fixes).\n- media: msi2500: assign SPI bus number dynamically (git-fixes).\n- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_dec_pm() (git-fixes).\n- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_enc_pm() (git-fixes).\n- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (git-fixes).\n- media: saa7146: fix array overflow in vidioc_s_audio() (git-fixes).\n- media: siano: fix memory leak of debugfs members in smsdvb_hotplug (git-fixes).\n- media: solo6x10: fix missing snd_card_free in error handling case (git-fixes).\n- media: sunxi-cir: ensure IR is handled when it is continuous (git-fixes).\n- media: tm6000: Fix sizeof() mismatches (git-fixes).\n- media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values (bsc#1180117).\n- memstick: fix a double-free bug in memstick_check (git-fixes).\n- memstick: r592: Fix error return in r592_probe() (git-fixes).\n- mfd: rt5033: Fix errorneous defines (git-fixes).\n- misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() (git-fixes).\n- mm,memory_failure: always pin the page in madvise_inject_error (bsc#1180258).\n- mm/error_inject: Fix allow_error_inject function signatures (bsc#1179710).\n- mm/memory-failure: Add memory_failure_queue_kick() (jsc#SLE-16610).\n- mm/memory_hotplug: shrink zones when offlining memory (bsc#1177679).\n- mm/userfaultfd: do not access vma-\u003evm_mm after calling handle_userfault() (bsc#1179204).\n- mm: memcg: fix memcg reclaim soft lockup (VM Functionality, bsc#1180056).\n- mmc: block: Fixup condition for CMD13 polling for RPMB requests (git-fixes).\n- mmc: pxamci: Fix error return code in pxamci_probe (git-fixes).\n- mtd: rawnand: gpmi: Fix the random DMA timeout issue (git-fixes).\n- mtd: rawnand: gpmi: fix reference count leak in gpmi ops (git-fixes).\n- mtd: rawnand: meson: Fix a resource leak in init (git-fixes).\n- mtd: rawnand: meson: fix meson_nfc_dma_buffer_release() arguments (git-fixes).\n- mtd: rawnand: qcom: Fix DMA sync on FLASH_STATUS register read (git-fixes).\n- mtd: spinand: Fix OOB read (git-fixes).\n- mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (git-fixes).\n- net/x25: prevent a couple of overflows (bsc#1178590).\n- net: sctp: Rename fallthrough label to unhandled (bsc#1178203).\n- nfc: s3fwrn5: Release the nfc firmware (git-fixes).\n- nvme-fabrics: allow to queue requests for live queues (git-fixes).\n- nvme-fabrics: do not check state NVME_CTRL_NEW for request acceptance (bsc#1179519).\n- nvme-fc: avoid calling _nvme_fc_abort_outstanding_ios from interrupt context (bsc#1177326).\n- nvme-fc: cancel async events before freeing event struct (git-fixes).\n- nvme-fc: eliminate terminate_io use by nvme_fc_error_recovery (bsc#1177326).\n- nvme-fc: fix error loop in create_hw_io_queues (git-fixes).\n- nvme-fc: fix io timeout to abort I/O (bsc#1177326).\n- nvme-fc: remove err_work work item (bsc#1177326).\n- nvme-fc: remove nvme_fc_terminate_io() (bsc#1177326).\n- nvme-fc: shorten reconnect delay if possible for FC (git-fixes).\n- nvme-fc: track error_recovery while connecting (bsc#1177326).\n- nvme-fc: wait for queues to freeze before calling (git-fixes).\n- nvme-force-complete-cancelled-requests.patch: (bsc#1175995,bsc#1178756,jsc#SLE-15608). Without this we can end up with a series of nvme QID timeouts, regardless of filesystem when fstests is used or any error injection mechanism is used. Without this fix, we end up with 9 failures on xfs, but due to its generic nature, will likely end up with other failures on other filesystems. This does not allow a clean slate reliable fstests run. This fixes that issue. Through code inspection I found these changes were already present on SLE15-SP3 but not on SLE15-SP2.\n- nvme-multipath: fix bogus request queue reference put (bsc#1175389).\n- nvme-multipath: fix deadlock between ana_work and scan_work (git-fixes).\n- nvme-multipath: fix deadlock due to head-\u003elock (git-fixes).\n- nvme-pci: properly print controller address (git-fixes).\n- nvme-rdma: avoid race between time out and tear down (bsc#1179519).\n- nvme-rdma: avoid repeated request completion (bsc#1179519).\n- nvme-rdma: cancel async events before freeing event struct (git-fixes).\n- nvme-rdma: fix controller reset hang during traffic (bsc#1179519).\n- nvme-rdma: fix reset hang if controller died in the middle of a reset (bsc#1179519).\n- nvme-rdma: fix timeout handler (bsc#1179519).\n- nvme-rdma: handle unexpected nvme completion data length (bsc#1178612).\n- nvme-rdma: serialize controller teardown sequences (bsc#1179519).\n- nvme-tcp: avoid race between time out and tear down (bsc#1179519).\n- nvme-tcp: avoid repeated request completion (bsc#1179519).\n- nvme-tcp: avoid scheduling io_work if we are already polling (bsc#1179519).\n- nvme-tcp: break from io_work loop if recv failed (bsc#1179519).\n- nvme-tcp: cancel async events before freeing event struct (git-fixes).\n- nvme-tcp: do not poll a non-live queue (bsc#1179519).\n- nvme-tcp: fix controller reset hang during traffic (bsc#1179519).\n- nvme-tcp: fix possible crash in recv error flow (bsc#1179519).\n- nvme-tcp: fix possible leakage during error flow (git-fixes).\n- nvme-tcp: fix reset hang if controller died in the middle of a reset (bsc#1179519).\n- nvme-tcp: fix timeout handler (bsc#1179519).\n- nvme-tcp: have queue prod/cons send list become a llist (bsc#1179519).\n- nvme-tcp: leverage request plugging (bsc#1179519).\n- nvme-tcp: move send failure to nvme_tcp_try_send (bsc#1179519).\n- nvme-tcp: optimize network stack with setting msg flags (bsc#1179519).\n- nvme-tcp: optimize queue io_cpu assignment for multiple queue (git-fixes).\n- nvme-tcp: serialize controller teardown sequences (bsc#1179519).\n- nvme-tcp: set MSG_SENDPAGE_NOTLAST with MSG_MORE when we have (bsc#1179519).\n- nvme-tcp: try to send request in queue_rq context (bsc#1179519).\n- nvme-tcp: use bh_lock in data_ready (bsc#1179519).\n- nvme: Revert: Fix controller creation races with teardown (git-fixes).\n- nvme: do not protect ns mutation with ns-\u003ehead-\u003elock (git-fixes).\n- nvme: have nvme_wait_freeze_timeout return if it timed out (bsc#1179519).\n- nvme: introduce nvme_sync_io_queues (bsc#1179519).\n- nvmet-fc: fix missing check for no hostport struct (bsc#1176942).\n- nvmet-tcp: fix maxh2cdata icresp parameter (bsc#1179892).\n- ocfs2: fix unbalanced locking (bsc#1180506).\n- orinoco: Move context allocation after processing the skb (git-fixes).\n- pinctrl: amd: remove debounce filter setting in IRQ type setting (git-fixes).\n- pinctrl: aspeed: Fix GPIO requests on pass-through banks (git-fixes).\n- pinctrl: baytrail: Avoid clearing debounce value when turning it off (git-fixes).\n- pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (git-fixes).\n- pinctrl: merrifield: Set default bias in case no particular value given (git-fixes).\n- platform/chrome: cros_ec_spi: Do not overwrite spi::mode (git-fixes).\n- platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (git-fixes).\n- platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init (git-fixes).\n- platform/x86: intel-vbtn: Allow switch events on Acer Switch Alpha 12 (git-fixes).\n- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC (git-fixes).\n- platform/x86: mlx-platform: Fix item counter assignment for MSN2700, MSN24xx systems (git-fixes).\n- platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform configuration (git-fixes).\n- platform/x86: mlx-platform: Remove PSU EEPROM from default platform configuration (git-fixes).\n- platform/x86: mlx-platform: remove an unused variable (git-fixes).\n- platform/x86: thinkpad_acpi: Add BAT1 is primary battery quirk for Thinkpad Yoga 11e 4th gen (git-fixes).\n- platform/x86: thinkpad_acpi: Do not report SW_TABLET_MODE on Yoga 11e (git-fixes).\n- platform/x86: touchscreen_dmi: Add info for the Irbis TW118 tablet (git-fixes).\n- power: supply: axp288_charger: Fix HP Pavilion x2 10 DMI matching (git-fixes).\n- power: supply: bq24190_charger: fix reference leak (git-fixes).\n- powerpc/64: Set up a kernel stack for secondaries before cpu_restore() (bsc#1065729).\n- powerpc/64s/powernv: Fix memory corruption when saving SLB entries on MCE (jsc#SLE-9246 git-fixes).\n- powerpc/64s/pseries: Fix hash tlbiel_all_isa300 for guest kernels (bsc#1179888 ltc#190253).\n- powerpc/64s: Fix allnoconfig build since uaccess flush (bsc#1177666 git-fixes).\n- powerpc/64s: Fix hash ISA v3.0 TLBIEL instruction generation (bsc#1055117 ltc#159753 git-fixes bsc#1179888 ltc#190253).\n- powerpc/64s: Trim offlined CPUs from mm_cpumasks (bsc#1055117 ltc#159753 git-fixes bsc#1179888 ltc#190253).\n- powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() (bsc#1156395).\n- powerpc/eeh_cache: Fix a possible debugfs deadlock (bsc#1156395).\n- powerpc/numa: Fix a regression on memoryless node 0 (bsc#1179639 ltc#189002).\n- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145 ltc#184630).\n- powerpc/perf: Fix crash with is_sier_available when pmu is not set (bsc#1179578 ltc#189313).\n- powerpc/pseries/hibernation: remove redundant cacheinfo update (bsc#1138374 ltc#178199 git-fixes).\n- powerpc/pseries: Pass MSI affinity to irq_create_mapping() (bsc#1065729).\n- powerpc/smp: Add __init to init_big_cores() (bsc#1109695 ltc#171067 git-fixes).\n- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).\n- powerpc: Avoid broken GCC __attribute__((optimize)) (bsc#1156395).\n- powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (bsc#1065729).\n- pwm: lp3943: Dynamically allocate PWM chip base (git-fixes).\n- pwm: zx: Add missing cleanup in error path (git-fixes).\n- qede: Notify qedr when mtu has changed (bsc#1152489)\n- qtnfmac: fix error return code in qtnf_pcie_probe() (git-fixes).\n- quota: clear padding in v2r1_mem2diskdqb() (bsc#1179714).\n- r8169: work around power-saving bug on some chip versions (git-fixes).\n- regmap: Remove duplicate `type` field from regmap `regcache_sync` trace event (git-fixes).\n- regmap: debugfs: Fix a memory leak when calling regmap_attach_dev (git-fixes).\n- regmap: debugfs: Fix a reversed if statement in regmap_debugfs_init() (git-fixes).\n- regulator: axp20x: Fix DLDO2 voltage control register mask for AXP22x (git-fixes).\n- regulator: mcp16502: add linear_min_sel (git-fixes).\n- reiserfs: Fix oops during mount (bsc#1179715).\n- reiserfs: Initialize inode keys properly (bsc#1179713).\n- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable (git-fixes).\n- remoteproc: qcom: Fix potential NULL dereference in adsp_init_mmio() (git-fixes).\n- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).\n- rsi: fix error return code in rsi_reset_card() (git-fixes).\n- rtc: ep93xx: Fix NULL pointer dereference in ep93xx_rtc_read_time (git-fixes).\n- rtc: hym8563: enable wakeup when applicable (git-fixes).\n- rtc: pl031: fix resource leak in pl031_probe (git-fixes).\n- rtc: sun6i: Fix memleak in sun6i_rtc_clk_init (git-fixes).\n- rtw88: debug: Fix uninitialized memory in debugfs code (git-fixes).\n- s390/cpuinfo: show processor physical address (git-fixes).\n- s390/pci: fix CPU address in MSI for directed IRQ (git-fixes).\n- s390/qeth: delay draining the TX buffers (git-fixes).\n- s390/qeth: fix af_iucv notification race (git-fixes).\n- s390/qeth: fix tear down of async TX buffers (git-fixes).\n- s390/qeth: make af_iucv TX notification call more robust (bsc#1179604 LTC#190151).\n- s390: add 3f program exception handler (git-fixes).\n- samples/bpf: Remove unused test_ipip.sh (bsc#1155518).\n- samples: bpf: Refactor test_cgrp2_sock2 program with libbpf (bsc#1155518).\n- sched/fair: Check for idle core in wake_affine (git fixes (sched)).\n- sched/fair: Fix overutilized update in enqueue_task_fair() (git-fixes)\n- sched/fair: Fix race between runtime distribution and (git-fixes)\n- sched/fair: Fix wrong cpu selecting from isolated domain (git-fixes)\n- sched/fair: Refill bandwidth before scaling (git-fixes)\n- sched: correct SD_flags returned by tl-\u003esd_flags() (git-fixes)\n- scsi: Remove unneeded break statements (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: core: Fix VPD LUN ID designator priorities (bsc#1178049).\n- scsi: core: Return BLK_STS_AGAIN for ALUA transitioning (bsc#1165933, bsc#1171000).\n- scsi: fnic: Avoid looping in TRANS ETH on unload (bsc#1175079).\n- scsi: fnic: Change shost_printk() to FNIC_FCS_DBG() (bsc#1175079).\n- scsi: fnic: Change shost_printk() to FNIC_MAIN_DBG() (bsc#1175079).\n- scsi: fnic: Set scsi_set_resid() only for underflow (bsc#1175079).\n- scsi: fnic: Validate io_req before others (bsc#1175079).\n- scsi: lpfc: Add FDMI Vendor MIB support (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Convert SCSI I/O completions to SLI-3 and SLI-4 handlers (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Convert SCSI path to use common I/O submission path (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Convert abort handling to SLI-3 and SLI-4 handlers (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Correct null ndlp reference on routine exit (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Drop nodelist reference on error in lpfc_gen_req() (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Enable common send_io interface for SCSI and NVMe (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Enable common wqe_template support for both SCSI and NVMe (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Enlarge max_sectors in scsi host templates (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Extend the RDF FPIN Registration descriptor for additional events (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Fix FLOGI/PLOGI receive race condition in pt2pt discovery (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Fix NPIV Fabric Node reference counting (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Fix NPIV discovery and Fabric Node detection (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Fix duplicate wq_create_version check (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Fix fall-through warnings for Clang (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Fix invalid sleeping context in lpfc_sli4_nvmet_alloc() (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Fix memory leak on lcb_context (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Fix missing prototype for lpfc_nvmet_prep_abort_wqe() (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Fix missing prototype warning for lpfc_fdmi_vendor_attr_mi() (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Fix pointer defereference before it is null checked issue (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Fix refcounting around SCSI and NVMe transport APIs (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Fix removal of SCSI transport device get and put on dev structure (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Fix scheduling call while in softirq context in lpfc_unreg_rpi (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Fix set but not used warnings from Rework remote port lock handling (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Fix set but unused variables in lpfc_dev_loss_tmo_handler() (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Fix spelling mistake \u0027Cant\u0027 -\u003e \u0027Can\u0027t\u0027 (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Fix variable \u0027vport\u0027 set but not used in lpfc_sli4_abts_err_handler() (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Re-fix use after free in lpfc_rq_buf_free() (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Refactor WQE structure definitions for common use (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Reject CT request for MIB commands (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Remove dead code on second !ndlp check (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Remove ndlp when a PLOGI/ADISC/PRLI/REG_RPI ultimately fails (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Remove set but not used \u0027qp\u0027 (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Remove unneeded variable \u0027status\u0027 in lpfc_fcp_cpu_map_store() (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Removed unused macros in lpfc_attr.c (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Rework locations of ndlp reference taking (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Rework remote port lock handling (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Rework remote port ref counting and node freeing (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Unsolicited ELS leaves node in incorrect state while dropping it (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Update changed file copyrights for 2020 (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Update lpfc version to 12.8.0.4 (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Update lpfc version to 12.8.0.5 (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Update lpfc version to 12.8.0.6 (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: Use generic power management (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: lpfc_attr: Demote kernel-doc format for redefined functions (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: lpfc_attr: Fix-up a bunch of kernel-doc misdemeanours (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: lpfc_bsg: Provide correct documentation for a bunch of functions (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: lpfc_debugfs: Fix a couple of function documentation issues (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: lpfc_nvme: Fix some kernel-doc related issues (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: lpfc_nvme: Remove unused variable \u0027phba\u0027 (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: lpfc_nvmet: Fix-up some formatting and doc-rot issues (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: lpfc: lpfc_scsi: Fix a whole host of kernel-doc issues (bsc#1175480 bsc#1176396 bsc#1176942 bsc#1177500).\n- scsi: mpt3sas: A small correction in _base_process_reply_queue (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Add bypass_dirty_port_flag parameter (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Add functions to check if any cmd is outstanding on Target and LUN (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Add module parameter multipath_on_hba (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Allocate memory for hba_port objects (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Bump driver version to 35.101.00.00 (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Cancel the running work during host reset (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Capture IOC data for debugging purposes (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Define hba_port structure (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Detect tampered Aero and Sea adapters (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Disable DIF when prot_mask set to zero (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Do not call disable_irq from IRQ poll handler (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Do not change the DMA coherent mask after allocations (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Dump system registers for debugging (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Fix double free warnings (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Fix error returns in BRM_status_show (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Fix memset() in non-RDPQ mode (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Fix reply queue count in non RDPQ mode (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Fix set but unused variable (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Fix sync irqs (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Fix unlock imbalance (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Get device objects using sas_address \u0026 portID (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Get sas_device objects using device\u0027s rphy (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Handle RDPQ DMA allocation in same 4G region (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Handle vSES vphy object during HBA reset (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Handling HBA vSES device (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Memset config_cmds.reply buffer with zeros (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Postprocessing of target and LUN reset (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Rearrange _scsih_mark_responding_sas_device() (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Remove NULL check before freeing function (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Remove pci-dma-compat wrapper API (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Remove superfluous memset() (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Rename and export interrupt mask/unmask functions (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Rename function name is_MSB_are_same (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Rename transport_del_phy_from_an_existing_port() (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Separate out RDPQ allocation to new function (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Set valid PhysicalPort in SMPPassThrough (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Update driver version to 35.100.00.00 (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Update hba_port objects after host reset (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Update hba_port\u0027s sas_address \u0026 phy_mask (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Update mpt3sas version to 33.101.00.00 (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: Use true, false for ioc-\u003euse_32bit_dma (jsc#SLE-16914, bsc#1177733).\n- scsi: mpt3sas: use true,false for bool variables (jsc#SLE-16914, bsc#1177733).\n- scsi: qla2xxx: Change post del message from debug level to log level (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Do not check for fw_started while posting NVMe command (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Do not consume srb greedily (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Fix FW initialization error on big endian machines (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Fix N2N and NVMe connect retry failure (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Fix compilation issue in PPC systems (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Fix crash during driver load on big endian machines (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Fix device loss on 4G and older HBAs (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Fix flash update in 28XX adapters on big endian machines (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Fix return of uninitialized value in rval (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Fix the call trace for flush workqueue (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Handle aborts correctly for port undergoing deletion (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Handle incorrect entry_type entries (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: If fcport is undergoing deletion complete I/O with retry (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Initialize variable in qla8044_poll_reg() (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Limit interrupt vectors to number of CPUs (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Move sess cmd list/lock to driver (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Remove in_interrupt() from qla82xx-specific code (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Remove in_interrupt() from qla83xx-specific code (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Return EBUSY on fcport deletion (bsc#1171688 bsc#1172733). Replace patches.suse/qla2xxx-return-ebusy-on-fcport-deletion.patch with upstream version.\n- scsi: qla2xxx: Tear down session if FW say it is down (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Update version to 10.02.00.104-k (bsc#1171688 bsc#1172733).\n- scsi: qla2xxx: Use constant when it is known (bsc#1171688 bsc#1172733). Refresh:  - patches.suse/qla2xxx-return-ebusy-on-fcport-deletion.patch\n- scsi: qla2xxx: remove incorrect sparse #ifdef (bsc#1171688 bsc#1172733).\n- scsi: storvsc: Fix error return in storvsc_probe() (git-fixes).\n- scsi: target: tcm_qla2xxx: Remove BUG_ON(in_interrupt()) (bsc#1171688 bsc#1172733).\n- scsi_dh_alua: return BLK_STS_AGAIN for ALUA transitioning state (bsc#1165933, bsc#1171000).\n- scsi_dh_alua: set \u0027transitioning\u0027 state on unit attention (bsc#1171000, bsc#1165933).\n- selftest/bpf: Add missed ip6ip6 test back (bsc#1155518).\n- selftests/bpf/test_offload.py: Reset ethtool features after failed setting (bsc#1155518).\n- selftests/bpf: Fix invalid use of strncat in test_sockmap (bsc#1155518).\n- selftests/bpf: Print reason when a tester could not run a program (bsc#1155518).\n- serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (git-fixes).\n- serial_core: Check for port state when tty is in error state (git-fixes).\n- slimbus: qcom-ngd-ctrl: Avoid sending power requests without QMI (git-fixes).\n- soc/tegra: fuse: Fix index bug in get_process_id (git-fixes).\n- soc: amlogic: canvas: add missing put_device() call in meson_canvas_get() (git-fixes).\n- soc: fsl: dpio: Get the cpumask through cpumask_of(cpu) (git-fixes).\n- soc: mediatek: Check if power domains can be powered on at boot time (git-fixes).\n- soc: qcom: geni: More properly switch to DMA mode (git-fixes).\n- soc: qcom: smp2p: Safely acquire spinlock without IRQs (git-fixes).\n- soc: renesas: rmobile-sysc: Fix some leaks in rmobile_init_pm_domains() (git-fixes).\n- soc: ti: Fix reference imbalance in knav_dma_probe (git-fixes).\n- soc: ti: knav_qmss: fix reference leak in knav_queue_probe (git-fixes).\n- speakup: fix uninitialized flush_lock (git-fixes).\n- spi: atmel-quadspi: Disable clock in probe error path (git-fixes).\n- spi: atmel-quadspi: Fix AHB memory accesses (git-fixes).\n- spi: bcm63xx-hsspi: fix missing clk_disable_unprepare() on error in bcm63xx_hsspi_resume (git-fixes).\n- spi: davinci: Fix use-after-free on unbind (git-fixes).\n- spi: fix resource leak for drivers without .remove callback (git-fixes).\n- spi: img-spfi: fix reference leak in img_spfi_resume (git-fixes).\n- spi: mt7621: Disable clock in probe error path (git-fixes).\n- spi: mt7621: fix missing clk_disable_unprepare() on error in mt7621_spi_probe (git-fixes).\n- spi: mxs: fix reference leak in mxs_spi_probe (git-fixes).\n- spi: pic32: Do not leak DMA channels in probe error path (git-fixes).\n- spi: spi-mem: Fix passing zero to \u0027PTR_ERR\u0027 warning (git-fixes).\n- spi: spi-mem: fix reference leak in spi_mem_access_start (git-fixes).\n- spi: spi-nxp-fspi: fix fspi panic by unexpected interrupts (git-fixes).\n- spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (git-fixes).\n- spi: sprd: fix reference leak in sprd_spi_remove (git-fixes).\n- spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (git-fixes).\n- spi: stm32: FIFO threshold level - fix align packet size (git-fixes).\n- spi: stm32: fix reference leak in stm32_spi_resume (git-fixes).\n- spi: synquacer: Disable clock in probe error path (git-fixes).\n- spi: tegra114: fix reference leak in tegra spi ops (git-fixes).\n- spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (git-fixes).\n- spi: tegra20-slink: fix reference leak in slink ops of tegra20 (git-fixes).\n- staging: comedi: mf6x4: Fix AI end-of-conversion detection (git-fixes).\n- staging: mt7621-dma: Fix a resource leak in an error handling path (git-fixes).\n- staging: olpc_dcon: Do not call platform_device_unregister() in dcon_probe() (git-fixes).\n- staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb() (git-fixes).\n- swiotlb: fix \u0027x86: Do not panic if can not alloc buffer for swiotlb\u0027 (git-fixes).\n- swiotlb: using SIZE_MAX needs limits.h included (git-fixes).\n- thunderbolt: Fix use-after-free in remove_unplugged_switch() (git-fixes).\n- tty: Fix -\u003epgrp locking in tiocspgrp() (git-fixes).\n- tty: Fix -\u003esession locking (bsc#1179745).\n- ubifs: Do not parse authentication mount options in remount process (bsc#1179688).\n- ubifs: Fix a memleak after dumping authentication mount options (bsc#1179687).\n- ubifs: Fix wrong orphan node deletion in ubifs_jnl_update|rename (bsc#1179675).\n- ubifs: dent: Fix some potential memory leaks while iterating entries (bsc#1179703).\n- ubifs: journal: Make sure to not dirty twice for auth nodes (bsc#1179704).\n- ubifs: mount_ubifs: Release authentication resource in error handling path (bsc#1179689).\n- ubifs: xattr: Fix some potential memory leaks while iterating entries (bsc#1179690).\n- udf: Fix memory leak when mounting (bsc#1179712).\n- usb/max3421: fix return error code in max3421_probe() (git-fixes).\n- usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (git-fixes).\n- usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() (git-fixes).\n- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion (git-fixes).\n- usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (git-fixes).\n- usb: gadget: configfs: Preserve function ordering after bind failure (git-fixes).\n- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus (git-fixes).\n- usb: gadget: f_fs: Use local copy of descriptors for userspace copy (git-fixes).\n- usb: gadget: f_uac2: reset wMaxPacketSize (git-fixes).\n- usb: gadget: select CONFIG_CRC32 (git-fixes).\n- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size (git-fixes).\n- usb: host: ehci-tegra: Fix error handling in tegra_ehci_probe() (git-fixes).\n- usb: mtu3: fix memory corruption in mtu3_debugfs_regset() (git-fixes).\n- usb: oxu210hp-hcd: Fix memory leak in oxu_create (git-fixes).\n- usb: usbip: vhci_hcd: protect shift size (git-fixes).\n- usbnet: ipheth: fix connectivity with iOS 14 (git-fixes).\n- video: fbdev: radeon: Fix memleak in radeonfb_pci_register (bsc#1152472)\n- video: fbdev: sis: fix null ptr dereference (bsc#1152472)\n- wan: ds26522: select CONFIG_BITREVERSE (git-fixes).\n- watchdog: Fix potential dereferencing of null pointer (git-fixes).\n- watchdog: armada_37xx: Add missing dependency on HAS_IOMEM (git-fixes).\n- watchdog: coh901327: add COMMON_CLK dependency (git-fixes).\n- watchdog: qcom: Avoid context switch in restart handler (git-fixes).\n- watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (git-fixes).\n- watchdog: sprd: change to use usleep_range() instead of busy loop (git-fixes).\n- watchdog: sprd: check busy bit before new loading rather than after that (git-fixes).\n- watchdog: sprd: remove watchdog disable from resume fail path (git-fixes).\n- wil6210: select CONFIG_CRC32 (git-fixes).\n- wimax: fix duplicate initializer warning (git-fixes).\n- x86/CPU/AMD: Remove amd_get_nb_id() (bsc#1152489).\n- x86/CPU/AMD: Save AMD NodeId as cpu_die_id (bsc#1152489).\n- x86/apic/vector: Fix ordering in vector assignment (bsc#1156315).\n- x86/ima: use correct identifier for SetupMode variable (bsc#1152489).\n- x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes (bsc#1152489).\n- x86/mce: Do not overwrite no_way_out if mce_end() fails (bsc#1152489).\n- x86/mm/ident_map: Check for errors from ident_pud_init() (bsc#1152489).\n- x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (bsc#1152489).\n- x86/mm/numa: Remove uninitialized_var() usage (bsc#1152489).\n- x86/mm: Fix leak of pmd ptlock (bsc#1152489).\n- x86/mtrr: Correct the range check before performing MTRR type lookups (bsc#1152489).\n- x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak (bsc#1152489).\n- x86/resctrl: Do not move a task to the same resource group (bsc#1152489).\n- x86/resctrl: Fix AMD L3 QOS CDP enable/disable (bsc#1152489).\n- x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled (bsc#1152489).\n- x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak (bsc#1152489).\n- x86/resctrl: Remove unused struct mbm_state::chunks_bw (bsc#1152489).\n- x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR (bsc#1152489).\n- x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb (bsc#1152489).\n- x86/topology: Set cpu_die_id only if DIE_TYPE found (bsc#1152489).\n- x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes (bsc#1152489).\n- xhci-pci: Allow host runtime PM as default for Intel Alpine Ridge LP (git-fixes).\n- xhci: Give USB2 ports time to enter U3 in bus suspend (git-fixes).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2021-60",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_0060-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2021:0060-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IGMHKFBCILMH7EZ36H75HXZ2RO2WG2GR/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2021:0060-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IGMHKFBCILMH7EZ36H75HXZ2RO2WG2GR/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1040855",
        "url": "https://bugzilla.suse.com/1040855"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1044120",
        "url": "https://bugzilla.suse.com/1044120"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1044767",
        "url": "https://bugzilla.suse.com/1044767"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1055117",
        "url": "https://bugzilla.suse.com/1055117"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1065729",
        "url": "https://bugzilla.suse.com/1065729"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1094840",
        "url": "https://bugzilla.suse.com/1094840"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1109695",
        "url": "https://bugzilla.suse.com/1109695"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1115431",
        "url": "https://bugzilla.suse.com/1115431"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1138374",
        "url": "https://bugzilla.suse.com/1138374"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1139944",
        "url": "https://bugzilla.suse.com/1139944"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1149032",
        "url": "https://bugzilla.suse.com/1149032"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1152457",
        "url": "https://bugzilla.suse.com/1152457"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1152472",
        "url": "https://bugzilla.suse.com/1152472"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1152489",
        "url": "https://bugzilla.suse.com/1152489"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155518",
        "url": "https://bugzilla.suse.com/1155518"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156315",
        "url": "https://bugzilla.suse.com/1156315"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156395",
        "url": "https://bugzilla.suse.com/1156395"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1158775",
        "url": "https://bugzilla.suse.com/1158775"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1161099",
        "url": "https://bugzilla.suse.com/1161099"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1163727",
        "url": "https://bugzilla.suse.com/1163727"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1165933",
        "url": "https://bugzilla.suse.com/1165933"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1168952",
        "url": "https://bugzilla.suse.com/1168952"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171000",
        "url": "https://bugzilla.suse.com/1171000"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171078",
        "url": "https://bugzilla.suse.com/1171078"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171688",
        "url": "https://bugzilla.suse.com/1171688"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172145",
        "url": "https://bugzilla.suse.com/1172145"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172733",
        "url": "https://bugzilla.suse.com/1172733"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174486",
        "url": "https://bugzilla.suse.com/1174486"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175079",
        "url": "https://bugzilla.suse.com/1175079"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175389",
        "url": "https://bugzilla.suse.com/1175389"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175480",
        "url": "https://bugzilla.suse.com/1175480"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175995",
        "url": "https://bugzilla.suse.com/1175995"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176396",
        "url": "https://bugzilla.suse.com/1176396"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176846",
        "url": "https://bugzilla.suse.com/1176846"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176942",
        "url": "https://bugzilla.suse.com/1176942"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176956",
        "url": "https://bugzilla.suse.com/1176956"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177326",
        "url": "https://bugzilla.suse.com/1177326"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177500",
        "url": "https://bugzilla.suse.com/1177500"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177666",
        "url": "https://bugzilla.suse.com/1177666"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177679",
        "url": "https://bugzilla.suse.com/1177679"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177733",
        "url": "https://bugzilla.suse.com/1177733"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178049",
        "url": "https://bugzilla.suse.com/1178049"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178203",
        "url": "https://bugzilla.suse.com/1178203"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178270",
        "url": "https://bugzilla.suse.com/1178270"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178372",
        "url": "https://bugzilla.suse.com/1178372"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178590",
        "url": "https://bugzilla.suse.com/1178590"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178612",
        "url": "https://bugzilla.suse.com/1178612"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178634",
        "url": "https://bugzilla.suse.com/1178634"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178660",
        "url": "https://bugzilla.suse.com/1178660"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178756",
        "url": "https://bugzilla.suse.com/1178756"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178780",
        "url": "https://bugzilla.suse.com/1178780"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179107",
        "url": "https://bugzilla.suse.com/1179107"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179204",
        "url": "https://bugzilla.suse.com/1179204"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179419",
        "url": "https://bugzilla.suse.com/1179419"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179434",
        "url": "https://bugzilla.suse.com/1179434"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179435",
        "url": "https://bugzilla.suse.com/1179435"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179519",
        "url": "https://bugzilla.suse.com/1179519"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179575",
        "url": "https://bugzilla.suse.com/1179575"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179578",
        "url": "https://bugzilla.suse.com/1179578"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179601",
        "url": "https://bugzilla.suse.com/1179601"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179604",
        "url": "https://bugzilla.suse.com/1179604"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179639",
        "url": "https://bugzilla.suse.com/1179639"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179652",
        "url": "https://bugzilla.suse.com/1179652"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179656",
        "url": "https://bugzilla.suse.com/1179656"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179670",
        "url": "https://bugzilla.suse.com/1179670"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179671",
        "url": "https://bugzilla.suse.com/1179671"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179672",
        "url": "https://bugzilla.suse.com/1179672"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179673",
        "url": "https://bugzilla.suse.com/1179673"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179675",
        "url": "https://bugzilla.suse.com/1179675"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179676",
        "url": "https://bugzilla.suse.com/1179676"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179677",
        "url": "https://bugzilla.suse.com/1179677"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179678",
        "url": "https://bugzilla.suse.com/1179678"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179679",
        "url": "https://bugzilla.suse.com/1179679"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179680",
        "url": "https://bugzilla.suse.com/1179680"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179681",
        "url": "https://bugzilla.suse.com/1179681"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179682",
        "url": "https://bugzilla.suse.com/1179682"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179683",
        "url": "https://bugzilla.suse.com/1179683"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179684",
        "url": "https://bugzilla.suse.com/1179684"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179685",
        "url": "https://bugzilla.suse.com/1179685"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179687",
        "url": "https://bugzilla.suse.com/1179687"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179688",
        "url": "https://bugzilla.suse.com/1179688"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179689",
        "url": "https://bugzilla.suse.com/1179689"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179690",
        "url": "https://bugzilla.suse.com/1179690"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179703",
        "url": "https://bugzilla.suse.com/1179703"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179704",
        "url": "https://bugzilla.suse.com/1179704"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179707",
        "url": "https://bugzilla.suse.com/1179707"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179709",
        "url": "https://bugzilla.suse.com/1179709"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179710",
        "url": "https://bugzilla.suse.com/1179710"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179711",
        "url": "https://bugzilla.suse.com/1179711"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179712",
        "url": "https://bugzilla.suse.com/1179712"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179713",
        "url": "https://bugzilla.suse.com/1179713"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179714",
        "url": "https://bugzilla.suse.com/1179714"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179715",
        "url": "https://bugzilla.suse.com/1179715"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179716",
        "url": "https://bugzilla.suse.com/1179716"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179745",
        "url": "https://bugzilla.suse.com/1179745"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179763",
        "url": "https://bugzilla.suse.com/1179763"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179878",
        "url": "https://bugzilla.suse.com/1179878"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179888",
        "url": "https://bugzilla.suse.com/1179888"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179892",
        "url": "https://bugzilla.suse.com/1179892"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179896",
        "url": "https://bugzilla.suse.com/1179896"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179960",
        "url": "https://bugzilla.suse.com/1179960"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179963",
        "url": "https://bugzilla.suse.com/1179963"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1180027",
        "url": "https://bugzilla.suse.com/1180027"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1180029",
        "url": "https://bugzilla.suse.com/1180029"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1180031",
        "url": "https://bugzilla.suse.com/1180031"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1180052",
        "url": "https://bugzilla.suse.com/1180052"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1180056",
        "url": "https://bugzilla.suse.com/1180056"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1180086",
        "url": "https://bugzilla.suse.com/1180086"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1180117",
        "url": "https://bugzilla.suse.com/1180117"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1180258",
        "url": "https://bugzilla.suse.com/1180258"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1180261",
        "url": "https://bugzilla.suse.com/1180261"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1180506",
        "url": "https://bugzilla.suse.com/1180506"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1180541",
        "url": "https://bugzilla.suse.com/1180541"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1180559",
        "url": "https://bugzilla.suse.com/1180559"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1180566",
        "url": "https://bugzilla.suse.com/1180566"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1180773",
        "url": "https://bugzilla.suse.com/1180773"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-0444 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-0444/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-0465 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-0465/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-0466 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-0466/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-11668 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-11668/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-25639 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-25639/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-27068 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-27068/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-27777 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-27777/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-27786 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-27786/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-27825 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-27825/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-27830 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-27830/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-27835 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-27835/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-28374 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-28374/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-29370 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-29370/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-29373 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-29373/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-29660 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-29660/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-29661 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-29661/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-36158 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-36158/"
      }
    ],
    "title": "Security update for the Linux Kernel",
    "tracking": {
      "current_release_date": "2021-01-14T21:44:26Z",
      "generator": {
        "date": "2021-01-14T21:44:26Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2021:0060-1",
      "initial_release_date": "2021-01-14T21:44:26Z",
      "revision_history": [
        {
          "date": "2021-01-14T21:44:26Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-5.3.18-lp152.60.1.noarch",
                "product": {
                  "name": "kernel-devel-5.3.18-lp152.60.1.noarch",
                  "product_id": "kernel-devel-5.3.18-lp152.60.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-docs-5.3.18-lp152.60.1.noarch",
                "product": {
                  "name": "kernel-docs-5.3.18-lp152.60.1.noarch",
                  "product_id": "kernel-docs-5.3.18-lp152.60.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-docs-html-5.3.18-lp152.60.1.noarch",
                "product": {
                  "name": "kernel-docs-html-5.3.18-lp152.60.1.noarch",
                  "product_id": "kernel-docs-html-5.3.18-lp152.60.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-5.3.18-lp152.60.1.noarch",
                "product": {
                  "name": "kernel-macros-5.3.18-lp152.60.1.noarch",
                  "product_id": "kernel-macros-5.3.18-lp152.60.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-5.3.18-lp152.60.1.noarch",
                "product": {
                  "name": "kernel-source-5.3.18-lp152.60.1.noarch",
                  "product_id": "kernel-source-5.3.18-lp152.60.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
                "product": {
                  "name": "kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
                  "product_id": "kernel-source-vanilla-5.3.18-lp152.60.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-debug-5.3.18-lp152.60.1.x86_64",
                "product": {
                  "name": "kernel-debug-5.3.18-lp152.60.1.x86_64",
                  "product_id": "kernel-debug-5.3.18-lp152.60.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
                "product": {
                  "name": "kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
                  "product_id": "kernel-debug-devel-5.3.18-lp152.60.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-5.3.18-lp152.60.1.x86_64",
                "product": {
                  "name": "kernel-default-5.3.18-lp152.60.1.x86_64",
                  "product_id": "kernel-default-5.3.18-lp152.60.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-devel-5.3.18-lp152.60.1.x86_64",
                "product": {
                  "name": "kernel-default-devel-5.3.18-lp152.60.1.x86_64",
                  "product_id": "kernel-default-devel-5.3.18-lp152.60.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
                  "product_id": "kernel-kvmsmall-5.3.18-lp152.60.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
                  "product_id": "kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-build-5.3.18-lp152.60.1.x86_64",
                "product": {
                  "name": "kernel-obs-build-5.3.18-lp152.60.1.x86_64",
                  "product_id": "kernel-obs-build-5.3.18-lp152.60.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
                "product": {
                  "name": "kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
                  "product_id": "kernel-obs-qa-5.3.18-lp152.60.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-preempt-5.3.18-lp152.60.1.x86_64",
                "product": {
                  "name": "kernel-preempt-5.3.18-lp152.60.1.x86_64",
                  "product_id": "kernel-preempt-5.3.18-lp152.60.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
                "product": {
                  "name": "kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
                  "product_id": "kernel-preempt-devel-5.3.18-lp152.60.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-syms-5.3.18-lp152.60.1.x86_64",
                "product": {
                  "name": "kernel-syms-5.3.18-lp152.60.1.x86_64",
                  "product_id": "kernel-syms-5.3.18-lp152.60.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.2",
                "product": {
                  "name": "openSUSE Leap 15.2",
                  "product_id": "openSUSE Leap 15.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-5.3.18-lp152.60.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64"
        },
        "product_reference": "kernel-debug-5.3.18-lp152.60.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-5.3.18-lp152.60.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64"
        },
        "product_reference": "kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-5.3.18-lp152.60.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64"
        },
        "product_reference": "kernel-default-5.3.18-lp152.60.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-devel-5.3.18-lp152.60.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64"
        },
        "product_reference": "kernel-default-devel-5.3.18-lp152.60.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-5.3.18-lp152.60.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch"
        },
        "product_reference": "kernel-devel-5.3.18-lp152.60.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-docs-5.3.18-lp152.60.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch"
        },
        "product_reference": "kernel-docs-5.3.18-lp152.60.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-docs-html-5.3.18-lp152.60.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch"
        },
        "product_reference": "kernel-docs-html-5.3.18-lp152.60.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-5.3.18-lp152.60.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-5.3.18-lp152.60.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch"
        },
        "product_reference": "kernel-macros-5.3.18-lp152.60.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-obs-build-5.3.18-lp152.60.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64"
        },
        "product_reference": "kernel-obs-build-5.3.18-lp152.60.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-obs-qa-5.3.18-lp152.60.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64"
        },
        "product_reference": "kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-preempt-5.3.18-lp152.60.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64"
        },
        "product_reference": "kernel-preempt-5.3.18-lp152.60.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-preempt-devel-5.3.18-lp152.60.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64"
        },
        "product_reference": "kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-5.3.18-lp152.60.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch"
        },
        "product_reference": "kernel-source-5.3.18-lp152.60.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-5.3.18-lp152.60.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch"
        },
        "product_reference": "kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-syms-5.3.18-lp152.60.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
        },
        "product_reference": "kernel-syms-5.3.18-lp152.60.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-0444",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-0444"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150693166References: Upstream kernel",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-0444",
          "url": "https://www.suse.com/security/cve/CVE-2020-0444"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1180027 for CVE-2020-0444",
          "url": "https://bugzilla.suse.com/1180027"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1180028 for CVE-2020-0444",
          "url": "https://bugzilla.suse.com/1180028"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-01-14T21:44:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-0444"
    },
    {
      "cve": "CVE-2020-0465",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-0465"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-162844689References: Upstream kernel",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-0465",
          "url": "https://www.suse.com/security/cve/CVE-2020-0465"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1180029 for CVE-2020-0465",
          "url": "https://bugzilla.suse.com/1180029"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1180030 for CVE-2020-0465",
          "url": "https://bugzilla.suse.com/1180030"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-01-14T21:44:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-0465"
    },
    {
      "cve": "CVE-2020-0466",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-0466"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147802478References: Upstream kernel",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-0466",
          "url": "https://www.suse.com/security/cve/CVE-2020-0466"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1180031 for CVE-2020-0466",
          "url": "https://bugzilla.suse.com/1180031"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1180032 for CVE-2020-0466",
          "url": "https://bugzilla.suse.com/1180032"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1199255 for CVE-2020-0466",
          "url": "https://bugzilla.suse.com/1199255"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200084 for CVE-2020-0466",
          "url": "https://bugzilla.suse.com/1200084"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-01-14T21:44:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-0466"
    },
    {
      "cve": "CVE-2020-11668",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-11668"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors, aka CID-a246b4d54770.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-11668",
          "url": "https://www.suse.com/security/cve/CVE-2020-11668"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1168952 for CVE-2020-11668",
          "url": "https://bugzilla.suse.com/1168952"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1173942 for CVE-2020-11668",
          "url": "https://bugzilla.suse.com/1173942"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-01-14T21:44:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-11668"
    },
    {
      "cve": "CVE-2020-25639",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-25639"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A NULL pointer dereference flaw was found in the Linux kernel\u0027s GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-25639",
          "url": "https://www.suse.com/security/cve/CVE-2020-25639"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176846 for CVE-2020-25639",
          "url": "https://bugzilla.suse.com/1176846"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-01-14T21:44:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-25639"
    },
    {
      "cve": "CVE-2020-27068",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-27068"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Product: AndroidVersions: Android kernelAndroid ID: A-127973231References: Upstream kernel",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-27068",
          "url": "https://www.suse.com/security/cve/CVE-2020-27068"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1180086 for CVE-2020-27068",
          "url": "https://bugzilla.suse.com/1180086"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-01-14T21:44:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-27068"
    },
    {
      "cve": "CVE-2020-27777",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-27777"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-27777",
          "url": "https://www.suse.com/security/cve/CVE-2020-27777"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179107 for CVE-2020-27777",
          "url": "https://bugzilla.suse.com/1179107"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179419 for CVE-2020-27777",
          "url": "https://bugzilla.suse.com/1179419"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200343 for CVE-2020-27777",
          "url": "https://bugzilla.suse.com/1200343"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1220060 for CVE-2020-27777",
          "url": "https://bugzilla.suse.com/1220060"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-01-14T21:44:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-27777"
    },
    {
      "cve": "CVE-2020-27786",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-27786"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel\u0027s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a use-after-free issue. A write to this specific memory while freed and before use causes the flow of execution to change and possibly allow for memory corruption or privilege escalation. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-27786",
          "url": "https://www.suse.com/security/cve/CVE-2020-27786"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179601 for CVE-2020-27786",
          "url": "https://bugzilla.suse.com/1179601"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179616 for CVE-2020-27786",
          "url": "https://bugzilla.suse.com/1179616"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-01-14T21:44:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-27786"
    },
    {
      "cve": "CVE-2020-27825",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-27825"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (before 5.10-rc1). There was a race problem in trace_open and resize of cpu buffer running parallely on different cpus, may cause a denial of service problem (DOS). This flaw could even allow a local attacker with special user privilege to a kernel information leak threat.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-27825",
          "url": "https://www.suse.com/security/cve/CVE-2020-27825"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179960 for CVE-2020-27825",
          "url": "https://bugzilla.suse.com/1179960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179961 for CVE-2020-27825",
          "url": "https://bugzilla.suse.com/1179961"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-01-14T21:44:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-27825"
    },
    {
      "cve": "CVE-2020-27830",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-27830"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability was found in Linux Kernel where in the spk_ttyio_receive_buf2() function, it would dereference spk_ttyio_synth without checking whether it is NULL or not, and may lead to a NULL-ptr deref crash.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-27830",
          "url": "https://www.suse.com/security/cve/CVE-2020-27830"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179656 for CVE-2020-27830",
          "url": "https://bugzilla.suse.com/1179656"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-01-14T21:44:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-27830"
    },
    {
      "cve": "CVE-2020-27835",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-27835"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-27835",
          "url": "https://www.suse.com/security/cve/CVE-2020-27835"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179878 for CVE-2020-27835",
          "url": "https://bugzilla.suse.com/1179878"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-01-14T21:44:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-27835"
    },
    {
      "cve": "CVE-2020-28374",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-28374"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an XCOPY request, aka CID-2896c93811e3. For example, an attack can occur over a network if the attacker has access to one iSCSI LUN. The attacker gains control over file access because I/O operations are proxied via an attacker-selected backstore.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-28374",
          "url": "https://www.suse.com/security/cve/CVE-2020-28374"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178372 for CVE-2020-28374",
          "url": "https://bugzilla.suse.com/1178372"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178684 for CVE-2020-28374",
          "url": "https://bugzilla.suse.com/1178684"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1180676 for CVE-2020-28374",
          "url": "https://bugzilla.suse.com/1180676"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-01-14T21:44:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-28374"
    },
    {
      "cve": "CVE-2020-29370",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-29370"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in kmem_cache_alloc_bulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the required TID increment, aka CID-fd4d9c7d0c71.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-29370",
          "url": "https://www.suse.com/security/cve/CVE-2020-29370"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179435 for CVE-2020-29370",
          "url": "https://bugzilla.suse.com/1179435"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179648 for CVE-2020-29370",
          "url": "https://bugzilla.suse.com/1179648"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-01-14T21:44:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-29370"
    },
    {
      "cve": "CVE-2020-29373",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-29373"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations, aka CID-ff002b30181d.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-29373",
          "url": "https://www.suse.com/security/cve/CVE-2020-29373"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179434 for CVE-2020-29373",
          "url": "https://bugzilla.suse.com/1179434"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179779 for CVE-2020-29373",
          "url": "https://bugzilla.suse.com/1179779"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-01-14T21:44:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-29373"
    },
    {
      "cve": "CVE-2020-29660",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-29660"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may allow a read-after-free attack against TIOCGSID, aka CID-c8bcd9c5be24.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-29660",
          "url": "https://www.suse.com/security/cve/CVE-2020-29660"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179745 for CVE-2020-29660",
          "url": "https://bugzilla.suse.com/1179745"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179877 for CVE-2020-29660",
          "url": "https://bugzilla.suse.com/1179877"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-01-14T21:44:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-29660"
    },
    {
      "cve": "CVE-2020-29661",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-29661"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-29661",
          "url": "https://www.suse.com/security/cve/CVE-2020-29661"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179745 for CVE-2020-29661",
          "url": "https://bugzilla.suse.com/1179745"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179877 for CVE-2020-29661",
          "url": "https://bugzilla.suse.com/1179877"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1214268 for CVE-2020-29661",
          "url": "https://bugzilla.suse.com/1214268"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1218966 for CVE-2020-29661",
          "url": "https://bugzilla.suse.com/1218966"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-01-14T21:44:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-29661"
    },
    {
      "cve": "CVE-2020-36158",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-36158"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-36158",
          "url": "https://www.suse.com/security/cve/CVE-2020-36158"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1180559 for CVE-2020-36158",
          "url": "https://bugzilla.suse.com/1180559"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1180562 for CVE-2020-36158",
          "url": "https://bugzilla.suse.com/1180562"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.60.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.60.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.60.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-01-14T21:44:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-36158"
    }
  ]
}