OPENSUSE-SU-2020:1062-1

Vulnerability from csaf_opensuse - Published: 2020-07-26 10:20 - Updated: 2020-07-26 10:20
Summary
Security update for the Linux Kernel
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel
Description of the patch: The openSUSE Leap 15.2 was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-15393: usbtest_disconnect in drivers/usb/misc/usbtest.c had a memory leak, aka CID-28ebeb8db770 (bnc#1173514). - CVE-2020-12771: btree_gc_coalesce in drivers/md/bcache/btree.c had a deadlock if a coalescing operation fails (bnc#1171732). The following non-security bugs were fixed: - ACPI: configfs: Disallow loading ACPI tables when locked down (git-fixes). - ACPI: sysfs: Fix pm_profile_attr type (git-fixes). - aio: fix async fsync creds (bsc#1173828). - ALSA: hda: Add NVIDIA codec IDs 9a & 9d through a0 to patch table (git-fixes). - ALSA: hda/hdmi: fix failures at PCM open on Intel ICL and later (git-fixes). - ALSA: hda/hdmi: improve debug traces for stream lookups (git-fixes). - ALSA: hda - let hs_mic be picked ahead of hp_mic (git-fixes). - ALSA: hda/realtek: Add mute LED and micmute LED support for HP systems (git-fixes). - ALSA: hda/realtek - Add quirk for MSI GE63 laptop (git-fixes). - ALSA: hda/realtek - Enable audio jacks of Acer vCopperbox with ALC269VC (git-fixes). - ALSA: hda/realtek: Enable headset mic of Acer C20-820 with ALC269VC (git-fixes). - ALSA: hda/realtek: Enable headset mic of Acer Veriton N4660G with ALC269VC (git-fixes). - ALSA: hda/realtek - Fix Lenovo Thinkpad X1 Carbon 7th quirk subdevice id (git-fixes). - ALSA: isa/wavefront: prevent out of bounds write in ioctl (git-fixes). - ALSA: opl3: fix infoleak in opl3 (git-fixes). - ALSA: usb-audio: Add implicit feedback quirk for RTX6001 (git-fixes). - ALSA: usb-audio: Add implicit feedback quirk for SSL2+ (git-fixes). - ALSA: usb-audio: add quirk for Denon DCD-1500RE (git-fixes). - ALSA: usb-audio: add quirk for MacroSilicon MS2109 (git-fixes). - ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG) (git-fixes). - ALSA: usb-audio: Fix OOB access of mixer element list (git-fixes). - ALSA: usb-audio: Fix packet size calculation (bsc#1173847). - ALSA: usb-audio: Fix potential use-after-free of streams (git-fixes). - ALSA: usb-audio: Replace s/frame/packet/ where appropriate (git-fixes). - amdgpu: a NULL ->mm does not mean a thread is a kthread (git-fixes). - ASoC: core: only convert non DPCM link to DPCM link (git-fixes). - ASoC: davinci-mcasp: Fix dma_chan refcnt leak when getting dma type (git-fixes). - ASoC: fsl_asrc_dma: Fix dma_chan leak when config DMA channel failed (git-fixes). - ASoC: fsl_ssi: Fix bclk calculation for mono channel (git-fixes). - ASoC: Intel: bytcr_rt5640: Add quirk for Toshiba Encore WT8-A tablet (git-fixes). - ASoC: max98373: reorder max98373_reset() in resume (git-fixes). - ASoc: q6afe: add support to get port direction (git-fixes). - ASoC: q6asm: handle EOS correctly (git-fixes). - ASoC: qcom: q6asm-dai: kCFI fix (git-fixes). - ASoC: rockchip: Fix a reference count leak (git-fixes). - ASoC: SOF: Do nothing when DSP PM callbacks are not set (git-fixes). - ASoC: SOF: nocodec: conditionally set dpcm_capture/dpcm_playback flags (git-fixes). - ASoC: tegra: tegra_wm8903: Support nvidia, headset property (git-fixes). - ASoC: ti: omap-mcbsp: Fix an error handling path in 'asoc_mcbsp_probe()' (git-fixes). - ata/libata: Fix usage of page address by page_address in ata_scsi_mode_select_xlat function (git-fixes). - ath10k: fix kernel null pointer dereference (git-fixes). - ath10k: Fix the race condition in firmware dump work queue (git-fixes). - b43: Fix connection problem with WPA3 (git-fixes). - b43_legacy: Fix connection problem with WPA3 (git-fixes). - backlight: lp855x: Ensure regulators are disabled on probe failure (git-fixes). - batman-adv: Revert 'disable ethtool link speed detection when auto negotiation off' (git-fixes). - bdev: fix bdev inode reference count disbalance regression (bsc#1174244) - block/bio-integrity: do not free 'buf' if bio_integrity_add_page() failed (bsc#1173817). - block: Fix use-after-free in blkdev_get() (bsc#1173834). - block: nr_sects_write(): Disable preemption on seqcount write (bsc#1173818). - Bluetooth: Add SCO fallback for invalid LMP parameters error (git-fixes). - Bluetooth: btbcm: Add 2 missing models to subver tables (git-fixes). - bnxt_en: Fix AER reset logic on 57500 chips (bsc#1171150). - bnxt_en: fix firmware message length endianness (bsc#1173894). - bnxt_en: Fix return code to 'flash_device' (bsc#1173894). - bnxt_en: Re-enable SRIOV during resume (jsc#SLE-8371 bsc#1153274). - bnxt_en: Return from timer if interface is not in open state (jsc#SLE-8371 bsc#1153274). - bnxt_en: Simplify bnxt_resume() (jsc#SLE-8371 bsc#1153274). - bpf: Document optval > PAGE_SIZE behavior for sockopt hooks (bsc#1155518). - bpf: Do not return EINVAL from {get,set}sockopt when optlen > PAGE_SIZE (bsc#1155518). - bpf: Fix an error code in check_btf_func() (bsc#1154353). - bpf: Restrict bpf_trace_printk()'s %s usage and add %pks, %pus specifier (bsc#1172344). - bpf, xdp, samples: Fix null pointer dereference in *_user code (bsc#1155518). - brcmfmac: expose RPi firmware config files through modinfo (bsc#1169094). - bus: ti-sysc: Ignore clockactivity unless specified as a quirk (git-fixes). - carl9170: remove P2P_GO support (git-fixes). - cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip (git-fixes). - clk: qcom: msm8916: Fix the address location of pll->config_reg (git-fixes). - clk: samsung: exynos5433: Add IGNORE_UNUSED flag to sclk_i2s1 (git-fixes). - clk: sifive: allocate sufficient memory for struct __prci_data (git-fixes). - clk: ti: composite: fix memory leak (git-fixes). - clk: zynqmp: fix memory leak in zynqmp_register_clocks (git-fixes). - clocksource: dw_apb_timer: Make CPU-affiliation being optional (git-fixes). - cpufreq: Fix up cpufreq_boost_set_sw() (git-fixes). - cpufreq: intel_pstate: Only mention the BIOS disabling turbo mode once (git-fixes). - cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_work_fn (git-fixes). - cpuidle: Fix three reference count leaks (git-fixes). - crypto: algif_skcipher - Cap recv SG list at ctx->used (git-fixes). - crypto - Avoid free() namespace collision (git-fixes). - Crypto/chcr: fix for ccm(aes) failed test (git-fixes). - crypto: omap-sham - add proper load balancing support for multicore (git-fixes). - debugfs: Check module state before warning in {full/open}_proxy_open() (bsc#1173746). - devlink: fix return value after hitting end in region read (networking-stable-20_05_12). - devmap: Use bpf_map_area_alloc() for allocating hash buckets (bsc#1154353). - dm writecache: reject asynchronous pmem devices (bsc#1156395). - dpaa2-eth: prevent array underflow in update_cls_rule() (networking-stable-20_05_16). - dpaa2-eth: properly handle buffer size restrictions (networking-stable-20_05_16). - dpaa_eth: fix usage as DSA master, try 3 (networking-stable-20_05_27). - drivers: base: Fix NULL pointer exception in __platform_driver_probe() if a driver developer is foolish (git-fixes). - Drivers: hv: Change flag to write log level in panic msg to false (bsc#1170617). - drm: amd/display: fix Kconfig help text (bsc#1152489) * context changes - drm/amd/display: Revalidate bandwidth before commiting DC updates (git-fixes). - drm/amd: fix potential memleak in err branch (git-fixes). - drm/amdgpu: add fw release for sdma v5_0 (git-fixes). - drm/amdgpu: drop redundant cg/pg ungate on runpm enter (git-fixes). - drm/amdgpu: fix gfx hang during suspend with video playback (v2) (git-fixes). - drm/amdgpu: fix the hw hang during perform system reboot and reset (git-fixes). - drm/amdgpu: Init data to avoid oops while reading pp_num_states (git-fixes). - drm/amdgpu: move kfd suspend after ip_suspend_phase1 (git-fixes). - drm/amdgpu: Replace invalid device ID with a valid device ID (bsc#1152472) - drm/amd/powerpay: Disable gfxoff when setting manual mode on picasso and raven (git-fixes). - drm: bridge: adv7511: Extend list of audio sample rates (git-fixes). - drm/connector: notify userspace on hotplug after register complete (bsc#1152489) * context changes - drm/i915/gt: Do not schedule normal requests immediately along (bsc#1152489) - drm/i915/gvt: Fix two CFL MMIO handling caused by regression. (bsc#1152489) - drm/i915/gvt: Fix two CFL MMIO handling caused by regression (git-fixes). - drm/i915/icl+: Fix hotplug interrupt disabling after storm detection (bsc#1152489) - drm/msm: Check for powered down HW in the devfreq callbacks (bsc#1152489) - drm/msm/dpu: fix error return code in dpu_encoder_init (bsc#1152489) - drm/msm/dpu: fix error return code in dpu_encoder_init (git-fixes). - drm/msm/mdp5: Fix mdp5_init error path for failed mdp5_kms allocation (git-fixes). - drm/nouveau/disp/gm200-: fix NV_PDISP_SOR_HDMI2_CTRL(n) selection (git-fixes). - drm/qxl: Use correct notify port address when creating cursor ring (bsc#1152472) - drm/radeon: fix fb_div check in ni_init_smc_spll_table() (bsc#1152472) - drm: rcar-du: Fix build error (bsc#1152472) - drm: sun4i: hdmi: Remove extra HPD polling (bsc#1152489) - drm: sun4i: hdmi: Remove extra HPD polling (git-fixes). - e1000: Distribute switch variables for initialization (git-fixes). - e1000e: Relax condition to trigger reset for ME workaround (git-fixes). - ext4: avoid utf8_strncasecmp() with unstable name (bsc#1173843). - ext4: fix error pointer dereference (bsc#1173837). - ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max (bsc#1173836). - ext4: fix partial cluster initialization when splitting extent (bsc#1173839). - ext4: fix race between ext4_sync_parent() and rename() (bsc#1173838). - ext4, jbd2: ensure panic by fix a race between jbd2 abort and ext4 error handlers (bsc#1173833). - ext4: stop overwrite the errcode in ext4_setup_super (bsc#1173841). - fat: do not allow to mount if the FAT length == 0 (bsc#1173831). - Fix boot crash with MD (bsc#1173860) - fix multiplication overflow in copy_fdtable() (bsc#1173825). - fork: prevent accidental access to clone3 features (bsc#1174018). - fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks (networking-stable-20_05_12). - geneve: allow changing DF behavior after creation (git-fixes). - geneve: change from tx_error to tx_dropped on missing metadata (git-fixes). - gfs2: fix glock reference problem in gfs2_trans_remove_revoke (bsc#1173823). - gfs2: Multi-block allocations in gfs2_page_mkwrite (bsc#1173822). - gpio: pca953x: fix handling of automatic address incrementing (git-fixes). - HID: Add quirks for Trust Panora Graphic Tablet (git-fixes). - hinic: fix a bug of ndo_stop (networking-stable-20_05_16). - hinic: fix wrong para of wait_for_completion_timeout (networking-stable-20_05_16). - hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes). - hwmon: (acpi_power_meter) Fix potential memory leak in acpi_power_meter_add() (git-fixes). - hwmon: (k10temp) Add AMD family 17h model 60h PCI match (git-fixes). - hwmon: (max6697) Make sure the OVERT mask is set correctly (git-fixes). - hwmon: (pmbus) fix a typo in Kconfig SENSORS_IR35221 option (git-fixes). - i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665 (git-fixes). - i2c: core: check returned size of emulated smbus block read (git-fixes). - i2c: fsi: Fix the port number field in status register (git-fixes). - i2c: mlxcpld: check correct size of maximum RECV_LEN packet (git-fixes). - i2c: piix4: Detect secondary SMBus controller on AMD AM4 chipsets (git-fixes). - i2c: pxa: clear all master action bits in i2c_pxa_stop_message() (git-fixes). - i2c: pxa: fix i2c_pxa_scream_blue_murder() debug output (git-fixes). - IB/rdmavt: Free kernel completion queue when done (bsc#1173625). - iio: bmp280: fix compensation of humidity (git-fixes). - input: i8042 - Remove special PowerPC handling (git-fixes). - ionic: add pcie_print_link_status (bsc#1167773). - ionic: export features for vlans to use (bsc#1167773). - ionic: no link check while resetting queues (bsc#1167773). - ionic: remove support for mgmt device (bsc#1167773). - ionic: tame the watchdog timer on reconfig (bsc#1167773). - ionic: wait on queue start until after IFF_UP (bsc#1167773). - io_uring: use kvfree() in io_sqe_buffer_register() (bsc#1173832). - ipmi: use vzalloc instead of kmalloc for user creation (git-fixes). - iwlwifi: mvm: fix aux station leak (git-fixes). - ixgbe: do not check firmware errors (bsc#1170284). - jbd2: avoid leaking transaction credits when unreserving handle (bsc#1173845). - jbd2: Preserve kABI when adding j_abort_mutex (bsc#1173833). - kABI fixup mtk-vpu: avoid unaligned access to DTCM buffer (git-fixes). - kabi: hv: prevent struct device_node to become defined (bsc#1172871). - kABI: protect struct fib_dump_filter (kabi). - kABI: protect struct mlx5_cmd_work_ent (kabi). - libceph: do not omit recovery_deletes in target_copy() (git-fixes). - loop: replace kill_bdev with invalidate_bdev (bsc#1173820). - media: dvbdev: Fix tuner->demod media controller link (git-fixes). - media: dvbsky: add support for eyeTV Geniatech T2 lite (bsc#1173776). - media: dvbsky: add support for Mygica T230C v2 (bsc#1173776). - media: imx: imx7-mipi-csis: Cleanup and fix subdev pad format handling (git-fixes). - media: mtk-vpu: avoid unaligned access to DTCM buffer (git-fixes). - media: ov5640: fix use of destroyed mutex (git-fixes). - media: si2157: Better check for running tuner in init (git-fixes). - media: si2168: add support for Mygica T230C v2 (bsc#1173776). - media: staging: imgu: do not hold spinlock during freeing mmu page table (git-fixes). - media: staging/intel-ipu3: Implement lock for stream on/off operations (git-fixes). - media: vicodec: Fix error codes in probe function (git-fixes). - mfd: wm8994: Fix driver operation if loaded as modules (git-fixes). - mlxsw: spectrum_acl_tcam: Position vchunk in a vregion list properly (networking-stable-20_05_12). - mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk (git-fixes). - mmc: via-sdmmc: Respect the cmd->busy_timeout from the mmc core (git-fixes). - mm: fix NUMA node file count error in replace_page_cache() (bsc#1173844). - mm/memory_hotplug: refrain from adding memory into an impossible node (bsc#1173552). - mvpp2: remove module bugfix (bsc#1154353). - namei: only return -ECHILD from follow_dotdot_rcu() (bsc#1173824). - neigh: send protocol value in neighbor create notification (networking-stable-20_05_12). - net: core: device_rename: Use rwsem instead of a seqcount (bsc#1162702). - net: do not return invalid table id error when we fall back to PF_UNSPEC (networking-stable-20_05_27). - net: dsa: Do not leave DSA master with NULL netdev_ops (networking-stable-20_05_12). - net: dsa: loop: Add module soft dependency (networking-stable-20_05_16). - net: dsa: mt7530: fix roaming from DSA user ports (networking-stable-20_05_27). - net: ethernet: ti: cpsw: fix ASSERT_RTNL() warning during suspend (networking-stable-20_05_27). - net: fix a potential recursive NETDEV_FEAT_CHANGE (networking-stable-20_05_16). - __netif_receive_skb_core: pass skb by reference (networking-stable-20_05_27). - net: inet_csk: Fix so_reuseport bind-address cache in tb->fast* (networking-stable-20_05_27). - net: ipip: fix wrong address family in init error path (networking-stable-20_05_27). - net: macb: fix an issue about leak related system resources (networking-stable-20_05_12). - net: macsec: preserve ingress frame ordering (networking-stable-20_05_12). - net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc() (networking-stable-20_05_12). - net/mlx5: Add command entry handling completion (networking-stable-20_05_27). - net/mlx5: Disable reload while removing the device (jsc#SLE-8464). - net/mlx5: DR, Fix freeing in dr_create_rc_qp() (jsc#SLE-8464). - net/mlx5e: Fix inner tirs handling (networking-stable-20_05_27). - net/mlx5e: kTLS, Destroy key object after destroying the TIS (networking-stable-20_05_27). - net/mlx5e: Update netdev txq on completions during closure (networking-stable-20_05_27). - net/mlx5: Fix command entry leak in Internal Error State (networking-stable-20_05_12). - net/mlx5: Fix error flow in case of function_setup failure (networking-stable-20_05_27). - net/mlx5: Fix forced completion access non initialized command entry (networking-stable-20_05_12). - net/mlx5: Fix memory leak in mlx5_events_init (networking-stable-20_05_27). - net: mvpp2: cls: Prevent buffer overflow in mvpp2_ethtool_cls_rule_del() (networking-stable-20_05_12). - net: mvpp2: fix RX hashing for non-10G ports (networking-stable-20_05_27). - net: mvpp2: prevent buffer overflow in mvpp22_rss_ctx() (networking-stable-20_05_12). - net: nlmsg_cancel() if put fails for nhmsg (networking-stable-20_05_27). - net: phy: fix aneg restart in phy_ethtool_set_eee (networking-stable-20_05_16). - netprio_cgroup: Fix unlimited memory leak of v2 cgroups (networking-stable-20_05_16). - net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() (networking-stable-20_05_27). - net sched: fix reporting the first-time use timestamp (networking-stable-20_05_27). - net_sched: sch_skbprio: add message validation to skbprio_change() (networking-stable-20_05_12). - net/smc: tolerate future SMCD versions (bsc#1172543 LTC#186069). - net: stmmac: fix num_por initialization (networking-stable-20_05_16). - net: stricter validation of untrusted gso packets (networking-stable-20_05_12). - net: tc35815: Fix phydev supported/advertising mask (networking-stable-20_05_12). - net: tcp: fix rx timestamp behavior for tcp_recvmsg (networking-stable-20_05_16). - net/tls: fix race condition causing kernel panic (networking-stable-20_05_27). - net/tls: Fix sk_psock refcnt leak in bpf_exec_tx_verdict() (networking-stable-20_05_12). - net/tls: Fix sk_psock refcnt leak when in tls_data_ready() (networking-stable-20_05_12). - net: usb: qmi_wwan: add support for DW5816e (networking-stable-20_05_12). - nexthop: Fix attribute checking for groups (networking-stable-20_05_27). - nfp: abm: fix a memory leak bug (networking-stable-20_05_12). - nfp: abm: fix error return code in nfp_abm_vnic_alloc() (networking-stable-20_05_16). - nfsd4: fix nfsdfs reference count loop (git-fixes). - nfsd: apply umask on fs without ACL support (git-fixes). - nfsd: fix nfsdfs inode reference count leak (git-fixes). - NFSv4 fix CLOSE not waiting for direct IO compeletion (git-fixes). - PCI: aardvark: Do not blindly enable ASPM L0s and do not write to read-only register (git-fixes). - PCI: Add ACS quirk for Intel Root Complex Integrated Endpoints (git-fixes). - PCI: Add Loongson vendor ID (git-fixes). - PCI/ASPM: Allow ASPM on links to PCIe-to-PCI/PCI-X Bridges (git-fixes). - PCI: Avoid FLR for AMD Matisse HD Audio & USB 3.0 (git-fixes). - PCI: Avoid FLR for AMD Starship USB 3.0 (git-fixes). - PCI: Do not disable decoding when mmio_always_on is set (git-fixes). - PCI: dwc: Fix inner MSI IRQ domain registration (git-fixes). - PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871). - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (bsc#1172871). - PCI: hv: Fix the PCI HyperV probe failure path to release resource properly (bsc#1172871). - PCI: hv: Introduce hv_msi_entry (bsc#1172871). - PCI: hv: Move hypercall related definitions into tlfs header (bsc#1172871). - PCI: hv: Move retarget related structures into tlfs header (bsc#1172871). - PCI: hv: Reorganize the code in preparation of hibernation (bsc#1172871). - PCI: hv: Retry PCI bus D0 entry on invalid device state (bsc#1172871). - PCI: pci-bridge-emul: Fix PCIe bit conflicts (git-fixes). - PCI: vmd: Add device id for VMD device 8086:9A0B (git-fixes). - pinctrl: rockchip: fix memleak in rockchip_dt_node_to_map (git-fixes). - pinctrl: tegra: Use noirq suspend/resume callbacks (git-fixes). - platform/x86: asus_wmi: Reserve more space for struct bias_args (git-fixes). - platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32() (git-fixes). - platform/x86: intel-hid: Add a quirk to support HP Spectre X2 (2015) (git-fixes). - pNFS/flexfiles: Fix list corruption if the mirror count changes (git-fixes). - pppoe: only process PADT targeted at local interfaces (networking-stable-20_05_16). - proc: Use new_inode not new_inode_pseudo (bsc#1173830). - pwm: img: Call pm_runtime_put() in pm_runtime_get_sync() failed case (git-fixes). - RDMA/core: Check that type_attrs is not NULL prior access (jsc#SLE-8449). - regualtor: pfuze100: correct sw1a/sw2 on pfuze3000 (git-fixes). - remoteproc: qcom_q6v5_mss: map/unmap mpss segments before/after use (git-fixes). - Revert commit e918e570415c ('tpm_tis: Remove the HID IFX0102') (git-fixes). - Revert 'i2c: tegra: Fix suspending in active runtime PM state' (git-fixes). - Revert 'ipv6: add mtu lock check in __ip6_rt_update_pmtu' (networking-stable-20_05_16). - ring-buffer: Zero out time extend if it is nested and not absolute (git-fixes). - sata_rcar: handle pm_runtime_get_sync failure cases (git-fixes). - sch_choke: avoid potential panic in choke_reset() (networking-stable-20_05_12). - sched: Fix loadavg accounting race (bnc#1155798 (CPU scheduler functional and performance backports)). - sched: Fix race against ptrace_freeze_trace() (bsc#1174345). - sch_sfq: validate silly quantum values (networking-stable-20_05_12). - scsi: lpfc: Add an internal trace log buffer (bsc#1172687 bsc#1171530). - scsi: lpfc: Add blk_io_poll support for latency improvment (bsc#1172687 bsc#1171530). - scsi: lpfc: Add support to display if adapter dumps are available (bsc#1172687 bsc#1171530). - scsi: lpfc: Allow applications to issue Common Set Features mailbox command (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix inconsistent indenting (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix interrupt assignments when multiple vectors are supported on same CPU (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix language in 0373 message to reflect non-error message (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix less-than-zero comparison of unsigned value (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix missing MDS functionality (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix NVMe rport deregister and registration during ADISC (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix oops due to overrun when reading SLI3 data (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix shost refcount mismatch when deleting vport (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix stack trace seen while setting rrq active (bsc#1172687 bsc#1171530). - scsi: lpfc: Fix unused assignment in lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530). - scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1172687 bsc#1171530). - scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (bsc#1158983). - sctp: Do not add the shutdown timer if its already been added (networking-stable-20_05_27). - sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed (networking-stable-20_05_27). - selftests/bpf: Make sure optvals > PAGE_SIZE are bypassed (bsc#1155518). - signal: Avoid corrupting si_pid and si_uid in do_notify_parent (bsc#1171529). - slimbus: ngd: get drvdata from correct device (git-fixes). - socionext: account for napi_gro_receive never returning GRO_DROP (bsc#1154353). - spi: dw: Enable interrupts in accordance with DMA xfer mode (git-fixes). - spi: dw: Fix Rx-only DMA transfers (git-fixes). - spi: dw: Return any value retrieved from the dma_transfer callback (git-fixes). - spi: pxa2xx: Apply CS clk quirk to BXT (git-fixes). - spi: sprd: switch the sequence of setting WDG_LOAD_LOW and _HIGH (git-fixes). - Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate() (git-fixes). - sunrpc: fixed rollback in rpc_gssd_dummy_populate() (git-fixes). - SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment() (git-fixes). - tcp: fix error recovery in tcp_zerocopy_receive() (networking-stable-20_05_16). - tcp: fix SO_RCVLOWAT hangs with fat skbs (networking-stable-20_05_16). - tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes (bsc#1173284). - thermal/drivers/mediatek: Fix bank number settings on mt8183 (git-fixes). - thermal/drivers/rcar_gen3: Fix undefined temperature if negative (git-fixes). - thermal/drivers/ti-soc-thermal: Avoid dereferencing ERR_PTR (git-fixes). - tipc: block BH before using dst_cache (networking-stable-20_05_27). - tipc: fix partial topology connection closure (networking-stable-20_05_12). - tpm: Fix TIS locality timeout problems (git-fixes). - tpm_tis: Remove the HID IFX0102 (git-fixes). - tracing: Fix event trigger to accept redundant spaces (git-fixes). - tunnel: Propagate ECT(1) when decapsulating as recommended by RFC6040 (networking-stable-20_05_12). - ubifs: fix wrong use of crypto_shash_descsize() (bsc#1173827). - ubifs: remove broken lazytime support (bsc#1173826). - Update patch reference tag for ACPI lockdown fix (bsc#1173573) - usb: add USB_QUIRK_DELAY_INIT for Logitech C922 (git-fixes). - usb/ehci-platform: Set PM runtime as active on resume (git-fixes). - USB: ehci: reopen solution for Synopsys HC bug (git-fixes). - usb: gadget: udc: Potential Oops in error handling code (git-fixes). - usb: host: ehci-exynos: Fix error check in exynos_ehci_probe() (git-fixes). - usb: host: ehci-platform: add a quirk to avoid stuck (git-fixes). - usb: host: xhci-mtk: avoid runtime suspend when removing hcd (git-fixes). - usblp: poison URBs upon disconnect (git-fixes). - usb/ohci-platform: Fix a warning when hibernating (git-fixes). - USB: ohci-sm501: Add missed iounmap() in remove (git-fixes). - usb: renesas_usbhs: getting residue from callback_result (git-fixes). - USB: serial: ch341: add basis for quirk detection (git-fixes). - usb: typec: tcpci_rt1711h: avoid screaming irq causing boot hangs (git-fixes). - usb/xhci-plat: Set PM runtime as active on resume (git-fixes). - video: vt8500lcdfb: fix fallthrough warning (bsc#1152489) - virtio_net: fix lockdep warning on 32 bit (networking-stable-20_05_16). - watchdog: da9062: No need to ping manually before setting timeout (git-fixes). - wil6210: account for napi_gro_receive never returning GRO_DROP (bsc#1154353). - wil6210: add wil_netif_rx() helper function (bsc#1154353). - wil6210: use after free in wil_netif_rx_any() (bsc#1154353). - x86/amd_nb: Add AMD family 17h model 60h PCI IDs (git-fixes). - xhci: Fix enumeration issue when setting max packet size for FS devices (git-fixes). - xhci: Fix incorrect EP_STATE_MASK (git-fixes). - xhci: Poll for U0 after disabling USB2 LPM (git-fixes). - xhci: Return if xHCI does not support LPM (git-fixes). - xprtrdma: Fix handling of RDMA_ERROR replies (git-fixes).
Patchnames: openSUSE-2020-1062
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
References
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://lists.opensuse.org/archives/list/security… self
https://lists.opensuse.org/archives/list/security… self
https://bugzilla.suse.com/1152472 self
https://bugzilla.suse.com/1152489 self
https://bugzilla.suse.com/1153274 self
https://bugzilla.suse.com/1154353 self
https://bugzilla.suse.com/1155518 self
https://bugzilla.suse.com/1155798 self
https://bugzilla.suse.com/1156395 self
https://bugzilla.suse.com/1158983 self
https://bugzilla.suse.com/1162702 self
https://bugzilla.suse.com/1167773 self
https://bugzilla.suse.com/1169094 self
https://bugzilla.suse.com/1170284 self
https://bugzilla.suse.com/1170617 self
https://bugzilla.suse.com/1171150 self
https://bugzilla.suse.com/1171529 self
https://bugzilla.suse.com/1171530 self
https://bugzilla.suse.com/1171732 self
https://bugzilla.suse.com/1172344 self
https://bugzilla.suse.com/1172543 self
https://bugzilla.suse.com/1172687 self
https://bugzilla.suse.com/1172871 self
https://bugzilla.suse.com/1173284 self
https://bugzilla.suse.com/1173514 self
https://bugzilla.suse.com/1173552 self
https://bugzilla.suse.com/1173573 self
https://bugzilla.suse.com/1173625 self
https://bugzilla.suse.com/1173746 self
https://bugzilla.suse.com/1173776 self
https://bugzilla.suse.com/1173817 self
https://bugzilla.suse.com/1173818 self
https://bugzilla.suse.com/1173820 self
https://bugzilla.suse.com/1173822 self
https://bugzilla.suse.com/1173823 self
https://bugzilla.suse.com/1173824 self
https://bugzilla.suse.com/1173825 self
https://bugzilla.suse.com/1173826 self
https://bugzilla.suse.com/1173827 self
https://bugzilla.suse.com/1173828 self
https://bugzilla.suse.com/1173830 self
https://bugzilla.suse.com/1173831 self
https://bugzilla.suse.com/1173832 self
https://bugzilla.suse.com/1173833 self
https://bugzilla.suse.com/1173834 self
https://bugzilla.suse.com/1173836 self
https://bugzilla.suse.com/1173837 self
https://bugzilla.suse.com/1173838 self
https://bugzilla.suse.com/1173839 self
https://bugzilla.suse.com/1173841 self
https://bugzilla.suse.com/1173843 self
https://bugzilla.suse.com/1173844 self
https://bugzilla.suse.com/1173845 self
https://bugzilla.suse.com/1173847 self
https://bugzilla.suse.com/1173860 self
https://bugzilla.suse.com/1173894 self
https://bugzilla.suse.com/1174018 self
https://bugzilla.suse.com/1174244 self
https://bugzilla.suse.com/1174345 self
https://www.suse.com/security/cve/CVE-2020-12771/ self
https://www.suse.com/security/cve/CVE-2020-15393/ self
https://www.suse.com/security/cve/CVE-2020-12771 external
https://bugzilla.suse.com/1171732 external
https://www.suse.com/security/cve/CVE-2020-15393 external
https://bugzilla.suse.com/1173514 external

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\n\nThe openSUSE Leap 15.2 was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2020-15393: usbtest_disconnect in drivers/usb/misc/usbtest.c had a memory leak, aka CID-28ebeb8db770 (bnc#1173514).\n- CVE-2020-12771: btree_gc_coalesce in drivers/md/bcache/btree.c had a deadlock if a coalescing operation fails (bnc#1171732).\n\nThe following non-security bugs were fixed:\n\n- ACPI: configfs: Disallow loading ACPI tables when locked down (git-fixes).\n- ACPI: sysfs: Fix pm_profile_attr type (git-fixes).\n- aio: fix async fsync creds (bsc#1173828).\n- ALSA: hda: Add NVIDIA codec IDs 9a \u0026 9d through a0 to patch table (git-fixes).\n- ALSA: hda/hdmi: fix failures at PCM open on Intel ICL and later (git-fixes).\n- ALSA: hda/hdmi: improve debug traces for stream lookups (git-fixes).\n- ALSA: hda - let hs_mic be picked ahead of hp_mic (git-fixes).\n- ALSA: hda/realtek: Add mute LED and micmute LED support for HP systems (git-fixes).\n- ALSA: hda/realtek - Add quirk for MSI GE63 laptop (git-fixes).\n- ALSA: hda/realtek - Enable audio jacks of Acer vCopperbox with ALC269VC (git-fixes).\n- ALSA: hda/realtek: Enable headset mic of Acer C20-820 with ALC269VC (git-fixes).\n- ALSA: hda/realtek: Enable headset mic of Acer Veriton N4660G with ALC269VC (git-fixes).\n- ALSA: hda/realtek - Fix Lenovo Thinkpad X1 Carbon 7th quirk subdevice id (git-fixes).\n- ALSA: isa/wavefront: prevent out of bounds write in ioctl (git-fixes).\n- ALSA: opl3: fix infoleak in opl3 (git-fixes).\n- ALSA: usb-audio: Add implicit feedback quirk for RTX6001 (git-fixes).\n- ALSA: usb-audio: Add implicit feedback quirk for SSL2+ (git-fixes).\n- ALSA: usb-audio: add quirk for Denon DCD-1500RE (git-fixes).\n- ALSA: usb-audio: add quirk for MacroSilicon MS2109 (git-fixes).\n- ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG) (git-fixes).\n- ALSA: usb-audio: Fix OOB access of mixer element list (git-fixes).\n- ALSA: usb-audio: Fix packet size calculation (bsc#1173847).\n- ALSA: usb-audio: Fix potential use-after-free of streams (git-fixes).\n- ALSA: usb-audio: Replace s/frame/packet/ where appropriate (git-fixes).\n- amdgpu: a NULL -\u003emm does not mean a thread is a kthread (git-fixes).\n- ASoC: core: only convert non DPCM link to DPCM link (git-fixes).\n- ASoC: davinci-mcasp: Fix dma_chan refcnt leak when getting dma type (git-fixes).\n- ASoC: fsl_asrc_dma: Fix dma_chan leak when config DMA channel failed (git-fixes).\n- ASoC: fsl_ssi: Fix bclk calculation for mono channel (git-fixes).\n- ASoC: Intel: bytcr_rt5640: Add quirk for Toshiba Encore WT8-A tablet (git-fixes).\n- ASoC: max98373: reorder max98373_reset() in resume (git-fixes).\n- ASoc: q6afe: add support to get port direction (git-fixes).\n- ASoC: q6asm: handle EOS correctly (git-fixes).\n- ASoC: qcom: q6asm-dai: kCFI fix (git-fixes).\n- ASoC: rockchip: Fix a reference count leak (git-fixes).\n- ASoC: SOF: Do nothing when DSP PM callbacks are not set (git-fixes).\n- ASoC: SOF: nocodec: conditionally set dpcm_capture/dpcm_playback flags (git-fixes).\n- ASoC: tegra: tegra_wm8903: Support nvidia, headset property (git-fixes).\n- ASoC: ti: omap-mcbsp: Fix an error handling path in \u0027asoc_mcbsp_probe()\u0027 (git-fixes).\n- ata/libata: Fix usage of page address by page_address in ata_scsi_mode_select_xlat function (git-fixes).\n- ath10k: fix kernel null pointer dereference (git-fixes).\n- ath10k: Fix the race condition in firmware dump work queue (git-fixes).\n- b43: Fix connection problem with WPA3 (git-fixes).\n- b43_legacy: Fix connection problem with WPA3 (git-fixes).\n- backlight: lp855x: Ensure regulators are disabled on probe failure (git-fixes).\n- batman-adv: Revert \u0027disable ethtool link speed detection when auto negotiation off\u0027 (git-fixes).\n- bdev: fix bdev inode reference count disbalance regression (bsc#1174244)\n- block/bio-integrity: do not free \u0027buf\u0027 if bio_integrity_add_page() failed (bsc#1173817).\n- block: Fix use-after-free in blkdev_get() (bsc#1173834).\n- block: nr_sects_write(): Disable preemption on seqcount write (bsc#1173818).\n- Bluetooth: Add SCO fallback for invalid LMP parameters error (git-fixes).\n- Bluetooth: btbcm: Add 2 missing models to subver tables (git-fixes).\n- bnxt_en: Fix AER reset logic on 57500 chips (bsc#1171150).\n- bnxt_en: fix firmware message length endianness (bsc#1173894).\n- bnxt_en: Fix return code to \u0027flash_device\u0027 (bsc#1173894).\n- bnxt_en: Re-enable SRIOV during resume (jsc#SLE-8371 bsc#1153274).\n- bnxt_en: Return from timer if interface is not in open state (jsc#SLE-8371 bsc#1153274).\n- bnxt_en: Simplify bnxt_resume() (jsc#SLE-8371 bsc#1153274).\n- bpf: Document optval \u003e PAGE_SIZE behavior for sockopt hooks (bsc#1155518).\n- bpf: Do not return EINVAL from {get,set}sockopt when optlen \u003e PAGE_SIZE (bsc#1155518).\n- bpf: Fix an error code in check_btf_func() (bsc#1154353).\n- bpf: Restrict bpf_trace_printk()\u0027s %s usage and add %pks, %pus specifier (bsc#1172344).\n- bpf, xdp, samples: Fix null pointer dereference in *_user code (bsc#1155518).\n- brcmfmac: expose RPi firmware config files through modinfo (bsc#1169094).\n- bus: ti-sysc: Ignore clockactivity unless specified as a quirk (git-fixes).\n- carl9170: remove P2P_GO support (git-fixes).\n- cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip (git-fixes).\n- clk: qcom: msm8916: Fix the address location of pll-\u003econfig_reg (git-fixes).\n- clk: samsung: exynos5433: Add IGNORE_UNUSED flag to sclk_i2s1 (git-fixes).\n- clk: sifive: allocate sufficient memory for struct __prci_data (git-fixes).\n- clk: ti: composite: fix memory leak (git-fixes).\n- clk: zynqmp: fix memory leak in zynqmp_register_clocks (git-fixes).\n- clocksource: dw_apb_timer: Make CPU-affiliation being optional (git-fixes).\n- cpufreq: Fix up cpufreq_boost_set_sw() (git-fixes).\n- cpufreq: intel_pstate: Only mention the BIOS disabling turbo mode once (git-fixes).\n- cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_work_fn (git-fixes).\n- cpuidle: Fix three reference count leaks (git-fixes).\n- crypto: algif_skcipher - Cap recv SG list at ctx-\u003eused (git-fixes).\n- crypto - Avoid free() namespace collision (git-fixes).\n- Crypto/chcr: fix for ccm(aes) failed test (git-fixes).\n- crypto: omap-sham - add proper load balancing support for multicore (git-fixes).\n- debugfs: Check module state before warning in {full/open}_proxy_open() (bsc#1173746).\n- devlink: fix return value after hitting end in region read (networking-stable-20_05_12).\n- devmap: Use bpf_map_area_alloc() for allocating hash buckets (bsc#1154353).\n- dm writecache: reject asynchronous pmem devices (bsc#1156395).\n- dpaa2-eth: prevent array underflow in update_cls_rule() (networking-stable-20_05_16).\n- dpaa2-eth: properly handle buffer size restrictions (networking-stable-20_05_16).\n- dpaa_eth: fix usage as DSA master, try 3 (networking-stable-20_05_27).\n- drivers: base: Fix NULL pointer exception in __platform_driver_probe() if a driver developer is foolish (git-fixes).\n- Drivers: hv: Change flag to write log level in panic msg to false (bsc#1170617).\n- drm: amd/display: fix Kconfig help text (bsc#1152489) \t* context changes\n- drm/amd/display: Revalidate bandwidth before commiting DC updates (git-fixes).\n- drm/amd: fix potential memleak in err branch (git-fixes).\n- drm/amdgpu: add fw release for sdma v5_0 (git-fixes).\n- drm/amdgpu: drop redundant cg/pg ungate on runpm enter (git-fixes).\n- drm/amdgpu: fix gfx hang during suspend with video playback (v2) (git-fixes).\n- drm/amdgpu: fix the hw hang during perform system reboot and reset (git-fixes).\n- drm/amdgpu: Init data to avoid oops while reading pp_num_states (git-fixes).\n- drm/amdgpu: move kfd suspend after ip_suspend_phase1 (git-fixes).\n- drm/amdgpu: Replace invalid device ID with a valid device ID (bsc#1152472)\n- drm/amd/powerpay: Disable gfxoff when setting manual mode on picasso and raven (git-fixes).\n- drm: bridge: adv7511: Extend list of audio sample rates (git-fixes).\n- drm/connector: notify userspace on hotplug after register complete (bsc#1152489) \t* context changes\n- drm/i915/gt: Do not schedule normal requests immediately along (bsc#1152489)\n- drm/i915/gvt: Fix two CFL MMIO handling caused by regression. (bsc#1152489)\n- drm/i915/gvt: Fix two CFL MMIO handling caused by regression (git-fixes).\n- drm/i915/icl+: Fix hotplug interrupt disabling after storm detection (bsc#1152489)\n- drm/msm: Check for powered down HW in the devfreq callbacks (bsc#1152489)\n- drm/msm/dpu: fix error return code in dpu_encoder_init (bsc#1152489)\n- drm/msm/dpu: fix error return code in dpu_encoder_init (git-fixes).\n- drm/msm/mdp5: Fix mdp5_init error path for failed mdp5_kms allocation (git-fixes).\n- drm/nouveau/disp/gm200-: fix NV_PDISP_SOR_HDMI2_CTRL(n) selection (git-fixes).\n- drm/qxl: Use correct notify port address when creating cursor ring (bsc#1152472)\n- drm/radeon: fix fb_div check in ni_init_smc_spll_table() (bsc#1152472)\n- drm: rcar-du: Fix build error (bsc#1152472)\n- drm: sun4i: hdmi: Remove extra HPD polling (bsc#1152489)\n- drm: sun4i: hdmi: Remove extra HPD polling (git-fixes).\n- e1000: Distribute switch variables for initialization (git-fixes).\n- e1000e: Relax condition to trigger reset for ME workaround (git-fixes).\n- ext4: avoid utf8_strncasecmp() with unstable name (bsc#1173843).\n- ext4: fix error pointer dereference (bsc#1173837).\n- ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max (bsc#1173836).\n- ext4: fix partial cluster initialization when splitting extent (bsc#1173839).\n- ext4: fix race between ext4_sync_parent() and rename() (bsc#1173838).\n- ext4, jbd2: ensure panic by fix a race between jbd2 abort and ext4 error handlers (bsc#1173833).\n- ext4: stop overwrite the errcode in ext4_setup_super (bsc#1173841).\n- fat: do not allow to mount if the FAT length == 0 (bsc#1173831).\n- Fix boot crash with MD (bsc#1173860)\n- fix multiplication overflow in copy_fdtable() (bsc#1173825).\n- fork: prevent accidental access to clone3 features (bsc#1174018).\n- fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks (networking-stable-20_05_12).\n- geneve: allow changing DF behavior after creation (git-fixes).\n- geneve: change from tx_error to tx_dropped on missing metadata (git-fixes).\n- gfs2: fix glock reference problem in gfs2_trans_remove_revoke (bsc#1173823).\n- gfs2: Multi-block allocations in gfs2_page_mkwrite (bsc#1173822).\n- gpio: pca953x: fix handling of automatic address incrementing (git-fixes).\n- HID: Add quirks for Trust Panora Graphic Tablet (git-fixes).\n- hinic: fix a bug of ndo_stop (networking-stable-20_05_16).\n- hinic: fix wrong para of wait_for_completion_timeout (networking-stable-20_05_16).\n- hv_netvsc: Fix netvsc_start_xmit\u0027s return type (git-fixes).\n- hwmon: (acpi_power_meter) Fix potential memory leak in acpi_power_meter_add() (git-fixes).\n- hwmon: (k10temp) Add AMD family 17h model 60h PCI match (git-fixes).\n- hwmon: (max6697) Make sure the OVERT mask is set correctly (git-fixes).\n- hwmon: (pmbus) fix a typo in Kconfig SENSORS_IR35221 option (git-fixes).\n- i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665 (git-fixes).\n- i2c: core: check returned size of emulated smbus block read (git-fixes).\n- i2c: fsi: Fix the port number field in status register (git-fixes).\n- i2c: mlxcpld: check correct size of maximum RECV_LEN packet (git-fixes).\n- i2c: piix4: Detect secondary SMBus controller on AMD AM4 chipsets (git-fixes).\n- i2c: pxa: clear all master action bits in i2c_pxa_stop_message() (git-fixes).\n- i2c: pxa: fix i2c_pxa_scream_blue_murder() debug output (git-fixes).\n- IB/rdmavt: Free kernel completion queue when done (bsc#1173625).\n- iio: bmp280: fix compensation of humidity (git-fixes).\n- input: i8042 - Remove special PowerPC handling (git-fixes).\n- ionic: add pcie_print_link_status (bsc#1167773).\n- ionic: export features for vlans to use (bsc#1167773).\n- ionic: no link check while resetting queues (bsc#1167773).\n- ionic: remove support for mgmt device (bsc#1167773).\n- ionic: tame the watchdog timer on reconfig (bsc#1167773).\n- ionic: wait on queue start until after IFF_UP (bsc#1167773).\n- io_uring: use kvfree() in io_sqe_buffer_register() (bsc#1173832).\n- ipmi: use vzalloc instead of kmalloc for user creation (git-fixes).\n- iwlwifi: mvm: fix aux station leak (git-fixes).\n- ixgbe: do not check firmware errors (bsc#1170284).\n- jbd2: avoid leaking transaction credits when unreserving handle (bsc#1173845).\n- jbd2: Preserve kABI when adding j_abort_mutex (bsc#1173833).\n- kABI fixup mtk-vpu: avoid unaligned access to DTCM buffer (git-fixes).\n- kabi: hv: prevent struct device_node to become defined (bsc#1172871).\n- kABI: protect struct fib_dump_filter (kabi).\n- kABI: protect struct mlx5_cmd_work_ent (kabi).\n- libceph: do not omit recovery_deletes in target_copy() (git-fixes).\n- loop: replace kill_bdev with invalidate_bdev (bsc#1173820).\n- media: dvbdev: Fix tuner-\u003edemod media controller link (git-fixes).\n- media: dvbsky: add support for eyeTV Geniatech T2 lite (bsc#1173776).\n- media: dvbsky: add support for Mygica T230C v2 (bsc#1173776).\n- media: imx: imx7-mipi-csis: Cleanup and fix subdev pad format handling (git-fixes).\n- media: mtk-vpu: avoid unaligned access to DTCM buffer (git-fixes).\n- media: ov5640: fix use of destroyed mutex (git-fixes).\n- media: si2157: Better check for running tuner in init (git-fixes).\n- media: si2168: add support for Mygica T230C v2 (bsc#1173776).\n- media: staging: imgu: do not hold spinlock during freeing mmu page table (git-fixes).\n- media: staging/intel-ipu3: Implement lock for stream on/off operations (git-fixes).\n- media: vicodec: Fix error codes in probe function (git-fixes).\n- mfd: wm8994: Fix driver operation if loaded as modules (git-fixes).\n- mlxsw: spectrum_acl_tcam: Position vchunk in a vregion list properly (networking-stable-20_05_12).\n- mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk (git-fixes).\n- mmc: via-sdmmc: Respect the cmd-\u003ebusy_timeout from the mmc core (git-fixes).\n- mm: fix NUMA node file count error in replace_page_cache() (bsc#1173844).\n- mm/memory_hotplug: refrain from adding memory into an impossible node (bsc#1173552).\n- mvpp2: remove module bugfix (bsc#1154353).\n- namei: only return -ECHILD from follow_dotdot_rcu() (bsc#1173824).\n- neigh: send protocol value in neighbor create notification (networking-stable-20_05_12).\n- net: core: device_rename: Use rwsem instead of a seqcount (bsc#1162702).\n- net: do not return invalid table id error when we fall back to PF_UNSPEC (networking-stable-20_05_27).\n- net: dsa: Do not leave DSA master with NULL netdev_ops (networking-stable-20_05_12).\n- net: dsa: loop: Add module soft dependency (networking-stable-20_05_16).\n- net: dsa: mt7530: fix roaming from DSA user ports (networking-stable-20_05_27).\n- net: ethernet: ti: cpsw: fix ASSERT_RTNL() warning during suspend (networking-stable-20_05_27).\n- net: fix a potential recursive NETDEV_FEAT_CHANGE (networking-stable-20_05_16).\n- __netif_receive_skb_core: pass skb by reference (networking-stable-20_05_27).\n- net: inet_csk: Fix so_reuseport bind-address cache in tb-\u003efast* (networking-stable-20_05_27).\n- net: ipip: fix wrong address family in init error path (networking-stable-20_05_27).\n- net: macb: fix an issue about leak related system resources (networking-stable-20_05_12).\n- net: macsec: preserve ingress frame ordering (networking-stable-20_05_12).\n- net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc() (networking-stable-20_05_12).\n- net/mlx5: Add command entry handling completion (networking-stable-20_05_27).\n- net/mlx5: Disable reload while removing the device (jsc#SLE-8464).\n- net/mlx5: DR, Fix freeing in dr_create_rc_qp() (jsc#SLE-8464).\n- net/mlx5e: Fix inner tirs handling (networking-stable-20_05_27).\n- net/mlx5e: kTLS, Destroy key object after destroying the TIS (networking-stable-20_05_27).\n- net/mlx5e: Update netdev txq on completions during closure (networking-stable-20_05_27).\n- net/mlx5: Fix command entry leak in Internal Error State (networking-stable-20_05_12).\n- net/mlx5: Fix error flow in case of function_setup failure (networking-stable-20_05_27).\n- net/mlx5: Fix forced completion access non initialized command entry (networking-stable-20_05_12).\n- net/mlx5: Fix memory leak in mlx5_events_init (networking-stable-20_05_27).\n- net: mvpp2: cls: Prevent buffer overflow in mvpp2_ethtool_cls_rule_del() (networking-stable-20_05_12).\n- net: mvpp2: fix RX hashing for non-10G ports (networking-stable-20_05_27).\n- net: mvpp2: prevent buffer overflow in mvpp22_rss_ctx() (networking-stable-20_05_12).\n- net: nlmsg_cancel() if put fails for nhmsg (networking-stable-20_05_27).\n- net: phy: fix aneg restart in phy_ethtool_set_eee (networking-stable-20_05_16).\n- netprio_cgroup: Fix unlimited memory leak of v2 cgroups (networking-stable-20_05_16).\n- net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() (networking-stable-20_05_27).\n- net sched: fix reporting the first-time use timestamp (networking-stable-20_05_27).\n- net_sched: sch_skbprio: add message validation to skbprio_change() (networking-stable-20_05_12).\n- net/smc: tolerate future SMCD versions (bsc#1172543 LTC#186069).\n- net: stmmac: fix num_por initialization (networking-stable-20_05_16).\n- net: stricter validation of untrusted gso packets (networking-stable-20_05_12).\n- net: tc35815: Fix phydev supported/advertising mask (networking-stable-20_05_12).\n- net: tcp: fix rx timestamp behavior for tcp_recvmsg (networking-stable-20_05_16).\n- net/tls: fix race condition causing kernel panic (networking-stable-20_05_27).\n- net/tls: Fix sk_psock refcnt leak in bpf_exec_tx_verdict() (networking-stable-20_05_12).\n- net/tls: Fix sk_psock refcnt leak when in tls_data_ready() (networking-stable-20_05_12).\n- net: usb: qmi_wwan: add support for DW5816e (networking-stable-20_05_12).\n- nexthop: Fix attribute checking for groups (networking-stable-20_05_27).\n- nfp: abm: fix a memory leak bug (networking-stable-20_05_12).\n- nfp: abm: fix error return code in nfp_abm_vnic_alloc() (networking-stable-20_05_16).\n- nfsd4: fix nfsdfs reference count loop (git-fixes).\n- nfsd: apply umask on fs without ACL support (git-fixes).\n- nfsd: fix nfsdfs inode reference count leak (git-fixes).\n- NFSv4 fix CLOSE not waiting for direct IO compeletion (git-fixes).\n- PCI: aardvark: Do not blindly enable ASPM L0s and do not write to read-only register (git-fixes).\n- PCI: Add ACS quirk for Intel Root Complex Integrated Endpoints (git-fixes).\n- PCI: Add Loongson vendor ID (git-fixes).\n- PCI/ASPM: Allow ASPM on links to PCIe-to-PCI/PCI-X Bridges (git-fixes).\n- PCI: Avoid FLR for AMD Matisse HD Audio \u0026 USB 3.0 (git-fixes).\n- PCI: Avoid FLR for AMD Starship USB 3.0 (git-fixes).\n- PCI: Do not disable decoding when mmio_always_on is set (git-fixes).\n- PCI: dwc: Fix inner MSI IRQ domain registration (git-fixes).\n- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871).\n- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (bsc#1172871).\n- PCI: hv: Fix the PCI HyperV probe failure path to release resource properly (bsc#1172871).\n- PCI: hv: Introduce hv_msi_entry (bsc#1172871).\n- PCI: hv: Move hypercall related definitions into tlfs header (bsc#1172871).\n- PCI: hv: Move retarget related structures into tlfs header (bsc#1172871).\n- PCI: hv: Reorganize the code in preparation of hibernation (bsc#1172871).\n- PCI: hv: Retry PCI bus D0 entry on invalid device state (bsc#1172871).\n- PCI: pci-bridge-emul: Fix PCIe bit conflicts (git-fixes).\n- PCI: vmd: Add device id for VMD device 8086:9A0B (git-fixes).\n- pinctrl: rockchip: fix memleak in rockchip_dt_node_to_map (git-fixes).\n- pinctrl: tegra: Use noirq suspend/resume callbacks (git-fixes).\n- platform/x86: asus_wmi: Reserve more space for struct bias_args (git-fixes).\n- platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32() (git-fixes).\n- platform/x86: intel-hid: Add a quirk to support HP Spectre X2 (2015) (git-fixes).\n- pNFS/flexfiles: Fix list corruption if the mirror count changes (git-fixes).\n- pppoe: only process PADT targeted at local interfaces (networking-stable-20_05_16).\n- proc: Use new_inode not new_inode_pseudo (bsc#1173830).\n- pwm: img: Call pm_runtime_put() in pm_runtime_get_sync() failed case (git-fixes).\n- RDMA/core: Check that type_attrs is not NULL prior access (jsc#SLE-8449).\n- regualtor: pfuze100: correct sw1a/sw2 on pfuze3000 (git-fixes).\n- remoteproc: qcom_q6v5_mss: map/unmap mpss segments before/after use (git-fixes).\n- Revert commit e918e570415c (\u0027tpm_tis: Remove the HID IFX0102\u0027) (git-fixes).\n- Revert \u0027i2c: tegra: Fix suspending in active runtime PM state\u0027 (git-fixes).\n- Revert \u0027ipv6: add mtu lock check in __ip6_rt_update_pmtu\u0027 (networking-stable-20_05_16).\n- ring-buffer: Zero out time extend if it is nested and not absolute (git-fixes).\n- sata_rcar: handle pm_runtime_get_sync failure cases (git-fixes).\n- sch_choke: avoid potential panic in choke_reset() (networking-stable-20_05_12).\n- sched: Fix loadavg accounting race (bnc#1155798 (CPU scheduler functional and performance backports)).\n- sched: Fix race against ptrace_freeze_trace() (bsc#1174345).\n- sch_sfq: validate silly quantum values (networking-stable-20_05_12).\n- scsi: lpfc: Add an internal trace log buffer (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Add blk_io_poll support for latency improvment (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Add support to display if adapter dumps are available (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Allow applications to issue Common Set Features mailbox command (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix inconsistent indenting (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix interrupt assignments when multiple vectors are supported on same CPU (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix language in 0373 message to reflect non-error message (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix less-than-zero comparison of unsigned value (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix missing MDS functionality (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix NVMe rport deregister and registration during ADISC (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix oops due to overrun when reading SLI3 data (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix shost refcount mismatch when deleting vport (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix stack trace seen while setting rrq active (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix unused assignment in lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1172687 bsc#1171530).\n- scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (bsc#1158983).\n- sctp: Do not add the shutdown timer if its already been added (networking-stable-20_05_27).\n- sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed (networking-stable-20_05_27).\n- selftests/bpf: Make sure optvals \u003e PAGE_SIZE are bypassed (bsc#1155518).\n- signal: Avoid corrupting si_pid and si_uid in do_notify_parent (bsc#1171529).\n- slimbus: ngd: get drvdata from correct device (git-fixes).\n- socionext: account for napi_gro_receive never returning GRO_DROP (bsc#1154353).\n- spi: dw: Enable interrupts in accordance with DMA xfer mode (git-fixes).\n- spi: dw: Fix Rx-only DMA transfers (git-fixes).\n- spi: dw: Return any value retrieved from the dma_transfer callback (git-fixes).\n- spi: pxa2xx: Apply CS clk quirk to BXT (git-fixes).\n- spi: sprd: switch the sequence of setting WDG_LOAD_LOW and _HIGH (git-fixes).\n- Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate() (git-fixes).\n- sunrpc: fixed rollback in rpc_gssd_dummy_populate() (git-fixes).\n- SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment() (git-fixes).\n- tcp: fix error recovery in tcp_zerocopy_receive() (networking-stable-20_05_16).\n- tcp: fix SO_RCVLOWAT hangs with fat skbs (networking-stable-20_05_16).\n- tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes (bsc#1173284).\n- thermal/drivers/mediatek: Fix bank number settings on mt8183 (git-fixes).\n- thermal/drivers/rcar_gen3: Fix undefined temperature if negative (git-fixes).\n- thermal/drivers/ti-soc-thermal: Avoid dereferencing ERR_PTR (git-fixes).\n- tipc: block BH before using dst_cache (networking-stable-20_05_27).\n- tipc: fix partial topology connection closure (networking-stable-20_05_12).\n- tpm: Fix TIS locality timeout problems (git-fixes).\n- tpm_tis: Remove the HID IFX0102 (git-fixes).\n- tracing: Fix event trigger to accept redundant spaces (git-fixes).\n- tunnel: Propagate ECT(1) when decapsulating as recommended by RFC6040 (networking-stable-20_05_12).\n- ubifs: fix wrong use of crypto_shash_descsize() (bsc#1173827).\n- ubifs: remove broken lazytime support (bsc#1173826).\n- Update patch reference tag for ACPI lockdown fix (bsc#1173573)\n- usb: add USB_QUIRK_DELAY_INIT for Logitech C922 (git-fixes).\n- usb/ehci-platform: Set PM runtime as active on resume (git-fixes).\n- USB: ehci: reopen solution for Synopsys HC bug (git-fixes).\n- usb: gadget: udc: Potential Oops in error handling code (git-fixes).\n- usb: host: ehci-exynos: Fix error check in exynos_ehci_probe() (git-fixes).\n- usb: host: ehci-platform: add a quirk to avoid stuck (git-fixes).\n- usb: host: xhci-mtk: avoid runtime suspend when removing hcd (git-fixes).\n- usblp: poison URBs upon disconnect (git-fixes).\n- usb/ohci-platform: Fix a warning when hibernating (git-fixes).\n- USB: ohci-sm501: Add missed iounmap() in remove (git-fixes).\n- usb: renesas_usbhs: getting residue from callback_result (git-fixes).\n- USB: serial: ch341: add basis for quirk detection (git-fixes).\n- usb: typec: tcpci_rt1711h: avoid screaming irq causing boot hangs (git-fixes).\n- usb/xhci-plat: Set PM runtime as active on resume (git-fixes).\n- video: vt8500lcdfb: fix fallthrough warning (bsc#1152489)\n- virtio_net: fix lockdep warning on 32 bit (networking-stable-20_05_16).\n- watchdog: da9062: No need to ping manually before setting timeout (git-fixes).\n- wil6210: account for napi_gro_receive never returning GRO_DROP (bsc#1154353).\n- wil6210: add wil_netif_rx() helper function (bsc#1154353).\n- wil6210: use after free in wil_netif_rx_any() (bsc#1154353).\n- x86/amd_nb: Add AMD family 17h model 60h PCI IDs (git-fixes).\n- xhci: Fix enumeration issue when setting max packet size for FS devices (git-fixes).\n- xhci: Fix incorrect EP_STATE_MASK (git-fixes).\n- xhci: Poll for U0 after disabling USB2 LPM (git-fixes).\n- xhci: Return if xHCI does not support LPM (git-fixes).\n- xprtrdma: Fix handling of RDMA_ERROR replies (git-fixes).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2020-1062",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_1062-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2020:1062-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ROJNPZLJQREMBO6RYZZN6PF57GZCBZPB/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2020:1062-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ROJNPZLJQREMBO6RYZZN6PF57GZCBZPB/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1152472",
        "url": "https://bugzilla.suse.com/1152472"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1152489",
        "url": "https://bugzilla.suse.com/1152489"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1153274",
        "url": "https://bugzilla.suse.com/1153274"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154353",
        "url": "https://bugzilla.suse.com/1154353"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155518",
        "url": "https://bugzilla.suse.com/1155518"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155798",
        "url": "https://bugzilla.suse.com/1155798"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156395",
        "url": "https://bugzilla.suse.com/1156395"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1158983",
        "url": "https://bugzilla.suse.com/1158983"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1162702",
        "url": "https://bugzilla.suse.com/1162702"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1167773",
        "url": "https://bugzilla.suse.com/1167773"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1169094",
        "url": "https://bugzilla.suse.com/1169094"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1170284",
        "url": "https://bugzilla.suse.com/1170284"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1170617",
        "url": "https://bugzilla.suse.com/1170617"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171150",
        "url": "https://bugzilla.suse.com/1171150"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171529",
        "url": "https://bugzilla.suse.com/1171529"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171530",
        "url": "https://bugzilla.suse.com/1171530"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171732",
        "url": "https://bugzilla.suse.com/1171732"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172344",
        "url": "https://bugzilla.suse.com/1172344"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172543",
        "url": "https://bugzilla.suse.com/1172543"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172687",
        "url": "https://bugzilla.suse.com/1172687"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172871",
        "url": "https://bugzilla.suse.com/1172871"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173284",
        "url": "https://bugzilla.suse.com/1173284"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173514",
        "url": "https://bugzilla.suse.com/1173514"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173552",
        "url": "https://bugzilla.suse.com/1173552"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173573",
        "url": "https://bugzilla.suse.com/1173573"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173625",
        "url": "https://bugzilla.suse.com/1173625"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173746",
        "url": "https://bugzilla.suse.com/1173746"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173776",
        "url": "https://bugzilla.suse.com/1173776"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173817",
        "url": "https://bugzilla.suse.com/1173817"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173818",
        "url": "https://bugzilla.suse.com/1173818"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173820",
        "url": "https://bugzilla.suse.com/1173820"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173822",
        "url": "https://bugzilla.suse.com/1173822"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173823",
        "url": "https://bugzilla.suse.com/1173823"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173824",
        "url": "https://bugzilla.suse.com/1173824"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173825",
        "url": "https://bugzilla.suse.com/1173825"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173826",
        "url": "https://bugzilla.suse.com/1173826"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173827",
        "url": "https://bugzilla.suse.com/1173827"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173828",
        "url": "https://bugzilla.suse.com/1173828"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173830",
        "url": "https://bugzilla.suse.com/1173830"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173831",
        "url": "https://bugzilla.suse.com/1173831"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173832",
        "url": "https://bugzilla.suse.com/1173832"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173833",
        "url": "https://bugzilla.suse.com/1173833"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173834",
        "url": "https://bugzilla.suse.com/1173834"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173836",
        "url": "https://bugzilla.suse.com/1173836"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173837",
        "url": "https://bugzilla.suse.com/1173837"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173838",
        "url": "https://bugzilla.suse.com/1173838"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173839",
        "url": "https://bugzilla.suse.com/1173839"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173841",
        "url": "https://bugzilla.suse.com/1173841"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173843",
        "url": "https://bugzilla.suse.com/1173843"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173844",
        "url": "https://bugzilla.suse.com/1173844"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173845",
        "url": "https://bugzilla.suse.com/1173845"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173847",
        "url": "https://bugzilla.suse.com/1173847"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173860",
        "url": "https://bugzilla.suse.com/1173860"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173894",
        "url": "https://bugzilla.suse.com/1173894"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174018",
        "url": "https://bugzilla.suse.com/1174018"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174244",
        "url": "https://bugzilla.suse.com/1174244"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174345",
        "url": "https://bugzilla.suse.com/1174345"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-12771 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-12771/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-15393 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-15393/"
      }
    ],
    "title": "Security update for the Linux Kernel",
    "tracking": {
      "current_release_date": "2020-07-26T10:20:12Z",
      "generator": {
        "date": "2020-07-26T10:20:12Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2020:1062-1",
      "initial_release_date": "2020-07-26T10:20:12Z",
      "revision_history": [
        {
          "date": "2020-07-26T10:20:12Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-5.3.18-lp152.33.1.noarch",
                "product": {
                  "name": "kernel-devel-5.3.18-lp152.33.1.noarch",
                  "product_id": "kernel-devel-5.3.18-lp152.33.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-docs-5.3.18-lp152.33.1.noarch",
                "product": {
                  "name": "kernel-docs-5.3.18-lp152.33.1.noarch",
                  "product_id": "kernel-docs-5.3.18-lp152.33.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-docs-html-5.3.18-lp152.33.1.noarch",
                "product": {
                  "name": "kernel-docs-html-5.3.18-lp152.33.1.noarch",
                  "product_id": "kernel-docs-html-5.3.18-lp152.33.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-5.3.18-lp152.33.1.noarch",
                "product": {
                  "name": "kernel-macros-5.3.18-lp152.33.1.noarch",
                  "product_id": "kernel-macros-5.3.18-lp152.33.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-5.3.18-lp152.33.1.noarch",
                "product": {
                  "name": "kernel-source-5.3.18-lp152.33.1.noarch",
                  "product_id": "kernel-source-5.3.18-lp152.33.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-5.3.18-lp152.33.1.noarch",
                "product": {
                  "name": "kernel-source-vanilla-5.3.18-lp152.33.1.noarch",
                  "product_id": "kernel-source-vanilla-5.3.18-lp152.33.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-debug-5.3.18-lp152.33.1.x86_64",
                "product": {
                  "name": "kernel-debug-5.3.18-lp152.33.1.x86_64",
                  "product_id": "kernel-debug-5.3.18-lp152.33.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-5.3.18-lp152.33.1.x86_64",
                "product": {
                  "name": "kernel-debug-devel-5.3.18-lp152.33.1.x86_64",
                  "product_id": "kernel-debug-devel-5.3.18-lp152.33.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-5.3.18-lp152.33.1.x86_64",
                "product": {
                  "name": "kernel-default-5.3.18-lp152.33.1.x86_64",
                  "product_id": "kernel-default-5.3.18-lp152.33.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-base-5.3.18-lp152.33.1.lp152.8.4.4.x86_64",
                "product": {
                  "name": "kernel-default-base-5.3.18-lp152.33.1.lp152.8.4.4.x86_64",
                  "product_id": "kernel-default-base-5.3.18-lp152.33.1.lp152.8.4.4.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-base-rebuild-5.3.18-lp152.33.1.lp152.8.4.4.x86_64",
                "product": {
                  "name": "kernel-default-base-rebuild-5.3.18-lp152.33.1.lp152.8.4.4.x86_64",
                  "product_id": "kernel-default-base-rebuild-5.3.18-lp152.33.1.lp152.8.4.4.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-devel-5.3.18-lp152.33.1.x86_64",
                "product": {
                  "name": "kernel-default-devel-5.3.18-lp152.33.1.x86_64",
                  "product_id": "kernel-default-devel-5.3.18-lp152.33.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-5.3.18-lp152.33.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-5.3.18-lp152.33.1.x86_64",
                  "product_id": "kernel-kvmsmall-5.3.18-lp152.33.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-devel-5.3.18-lp152.33.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-devel-5.3.18-lp152.33.1.x86_64",
                  "product_id": "kernel-kvmsmall-devel-5.3.18-lp152.33.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-build-5.3.18-lp152.33.1.x86_64",
                "product": {
                  "name": "kernel-obs-build-5.3.18-lp152.33.1.x86_64",
                  "product_id": "kernel-obs-build-5.3.18-lp152.33.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-qa-5.3.18-lp152.33.1.x86_64",
                "product": {
                  "name": "kernel-obs-qa-5.3.18-lp152.33.1.x86_64",
                  "product_id": "kernel-obs-qa-5.3.18-lp152.33.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-preempt-5.3.18-lp152.33.1.x86_64",
                "product": {
                  "name": "kernel-preempt-5.3.18-lp152.33.1.x86_64",
                  "product_id": "kernel-preempt-5.3.18-lp152.33.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-preempt-devel-5.3.18-lp152.33.1.x86_64",
                "product": {
                  "name": "kernel-preempt-devel-5.3.18-lp152.33.1.x86_64",
                  "product_id": "kernel-preempt-devel-5.3.18-lp152.33.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-syms-5.3.18-lp152.33.1.x86_64",
                "product": {
                  "name": "kernel-syms-5.3.18-lp152.33.1.x86_64",
                  "product_id": "kernel-syms-5.3.18-lp152.33.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.2",
                "product": {
                  "name": "openSUSE Leap 15.2",
                  "product_id": "openSUSE Leap 15.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-5.3.18-lp152.33.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.33.1.x86_64"
        },
        "product_reference": "kernel-debug-5.3.18-lp152.33.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-5.3.18-lp152.33.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.33.1.x86_64"
        },
        "product_reference": "kernel-debug-devel-5.3.18-lp152.33.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-5.3.18-lp152.33.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.33.1.x86_64"
        },
        "product_reference": "kernel-default-5.3.18-lp152.33.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-base-5.3.18-lp152.33.1.lp152.8.4.4.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.33.1.lp152.8.4.4.x86_64"
        },
        "product_reference": "kernel-default-base-5.3.18-lp152.33.1.lp152.8.4.4.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-base-rebuild-5.3.18-lp152.33.1.lp152.8.4.4.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.33.1.lp152.8.4.4.x86_64"
        },
        "product_reference": "kernel-default-base-rebuild-5.3.18-lp152.33.1.lp152.8.4.4.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-devel-5.3.18-lp152.33.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.33.1.x86_64"
        },
        "product_reference": "kernel-default-devel-5.3.18-lp152.33.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-5.3.18-lp152.33.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.33.1.noarch"
        },
        "product_reference": "kernel-devel-5.3.18-lp152.33.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-docs-5.3.18-lp152.33.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.33.1.noarch"
        },
        "product_reference": "kernel-docs-5.3.18-lp152.33.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-docs-html-5.3.18-lp152.33.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.33.1.noarch"
        },
        "product_reference": "kernel-docs-html-5.3.18-lp152.33.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-5.3.18-lp152.33.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.33.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-5.3.18-lp152.33.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-devel-5.3.18-lp152.33.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.33.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-devel-5.3.18-lp152.33.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-5.3.18-lp152.33.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.33.1.noarch"
        },
        "product_reference": "kernel-macros-5.3.18-lp152.33.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-obs-build-5.3.18-lp152.33.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.33.1.x86_64"
        },
        "product_reference": "kernel-obs-build-5.3.18-lp152.33.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-obs-qa-5.3.18-lp152.33.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.33.1.x86_64"
        },
        "product_reference": "kernel-obs-qa-5.3.18-lp152.33.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-preempt-5.3.18-lp152.33.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.33.1.x86_64"
        },
        "product_reference": "kernel-preempt-5.3.18-lp152.33.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-preempt-devel-5.3.18-lp152.33.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.33.1.x86_64"
        },
        "product_reference": "kernel-preempt-devel-5.3.18-lp152.33.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-5.3.18-lp152.33.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.33.1.noarch"
        },
        "product_reference": "kernel-source-5.3.18-lp152.33.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-5.3.18-lp152.33.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.33.1.noarch"
        },
        "product_reference": "kernel-source-vanilla-5.3.18-lp152.33.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-syms-5.3.18-lp152.33.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.33.1.x86_64"
        },
        "product_reference": "kernel-syms-5.3.18-lp152.33.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-12771",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-12771"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.33.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.33.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.33.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.33.1.lp152.8.4.4.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.33.1.lp152.8.4.4.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.33.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.33.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.33.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.33.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.33.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.33.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.33.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.33.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.33.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.33.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.33.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.33.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.33.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.33.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-12771",
          "url": "https://www.suse.com/security/cve/CVE-2020-12771"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1171732 for CVE-2020-12771",
          "url": "https://bugzilla.suse.com/1171732"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.33.1.lp152.8.4.4.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.33.1.lp152.8.4.4.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.33.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.33.1.lp152.8.4.4.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.33.1.lp152.8.4.4.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.33.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-26T10:20:12Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-12771"
    },
    {
      "cve": "CVE-2020-15393",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-15393"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel 4.4 through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebeb8db770.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.33.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.33.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.33.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.33.1.lp152.8.4.4.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.33.1.lp152.8.4.4.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.33.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.33.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.33.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.33.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.33.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.33.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.33.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.33.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.33.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.33.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.33.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.33.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.33.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.33.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-15393",
          "url": "https://www.suse.com/security/cve/CVE-2020-15393"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1173514 for CVE-2020-15393",
          "url": "https://bugzilla.suse.com/1173514"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.33.1.lp152.8.4.4.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.33.1.lp152.8.4.4.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.33.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.33.1.lp152.8.4.4.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.33.1.lp152.8.4.4.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.33.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.33.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.33.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-26T10:20:12Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-15393"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…