csaf_suse - suse-su-2020:3717-1

Vulnerability from csaf_suse

Published

2020-12-09 09:29

Modified

2020-12-09 09:29

Summary

Security update for the Linux Kernel

Notes

Title of the patch

Security update for the Linux Kernel

Description of the patch

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to gain privileges or cause a denial of service (bsc#1179141). - CVE-2020-15437: Fixed a null pointer dereference which could have allowed local users to cause a denial of service(bsc#1179140). - CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178123). - CVE-2020-25669: Fixed a use-after-free read in sunkbd_reinit() (bsc#1178182). - CVE-2020-25704: Fixed a leak in perf_event_parse_addr_filter() (bsc#1178393). - CVE-2020-27777: Restrict RTAS requests from userspace (bsc#1179107) - CVE-2020-28915: Fixed a buffer over-read in the fbcon code which could have been used by local attackers to read kernel memory (bsc#1178886). - CVE-2020-28974: Fixed a slab-out-of-bounds read in fbcon which could have been used by local attackers to read privileged information or potentially crash the kernel (bsc#1178589). - CVE-2020-29371: Fixed uninitialized memory leaks to userspace (bsc#1179429). - CVE-2020-25705: Fixed an issue which could have allowed to quickly scan open UDP ports. This flaw allowed an off-path remote user to effectively bypassing source port UDP randomization (bsc#1175721). The following non-security bugs were fixed: - 9P: Cast to loff_t before multiplying (git-fixes). - ACPI: GED: fix -Wformat (git-fixes). - ACPI: NFIT: Fix comparison to '-ENXIO' (git-fixes). - ALSA: ctl: fix error path at adding user-defined element set (git-fixes). - ALSA: firewire: Clean up a locking issue in copy_resp_to_buf() (git-fixes). - ALSA: hda - Fix the return value if cb func is already registered (git-fixes). - ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (git-fixes). - ALSA: mixart: Fix mutex deadlock (git-fixes). - arm64: KVM: Fix system register enumeration (bsc#1174726). - arm/arm64: KVM: Add PSCI version selection API (bsc#1174726). - ASoC: qcom: lpass-platform: Fix memory leak (git-fixes). - ath10k: Acquire tx_lock in tx error paths (git-fixes). - batman-adv: set .owner to THIS_MODULE (git-fixes). - Bluetooth: btusb: Fix and detect most of the Chinese Bluetooth controllers (git-fixes). - Bluetooth: hci_bcm: fix freeing not-requested IRQ (git-fixes). - bpf: Zero-fill re-used per-cpu map element (git-fixes). - btrfs: account ticket size at add/delete time (bsc#1178897). - btrfs: add helper to obtain number of devices with ongoing dev-replace (bsc#1178897). - btrfs: check rw_devices, not num_devices for balance (bsc#1178897). - btrfs: do not delete mismatched root refs (bsc#1178962). - btrfs: fix btrfs_calc_reclaim_metadata_size calculation (bsc#1178897). - btrfs: fix force usage in inc_block_group_ro (bsc#1178897). - btrfs: fix invalid removal of root ref (bsc#1178962). - btrfs: fix reclaim counter leak of space_info objects (bsc#1178897). - btrfs: fix reclaim_size counter leak after stealing from global reserve (bsc#1178897). - btrfs: kill min_allocable_bytes in inc_block_group_ro (bsc#1178897). - btrfs: rework arguments of btrfs_unlink_subvol (bsc#1178962). - btrfs: split dev-replace locking helpers for read and write (bsc#1178897). - can: af_can: prevent potential access of uninitialized member in canfd_rcv() (git-fixes). - can: af_can: prevent potential access of uninitialized member in can_rcv() (git-fixes). - can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() (git-fixes). - can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames (git-fixes). - can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context (git-fixes). - can: dev: can_restart(): post buffer from the right context (git-fixes). - can: gs_usb: fix endianess problem with candleLight firmware (git-fixes). - can: m_can: fix nominal bitiming tseg2 min for version >= 3.1 (git-fixes). - can: m_can: m_can_handle_state_change(): fix state change (git-fixes). - can: m_can: m_can_stop(): set device to software init mode before closing (git-fixes). - can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to can_put_echo_skb() (git-fixes). - can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on (git-fixes). - can: peak_usb: add range checking in decode operations (git-fixes). - can: peak_usb: fix potential integer overflow on shift of a int (git-fixes). - can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping (git-fixes). - can: rx-offload: do not call kfree_skb() from IRQ context (git-fixes). - ceph: add check_session_state() helper and make it global (bsc#1179259). - ceph: check session state after bumping session->s_seq (bsc#1179259). - ceph: fix race in concurrent __ceph_remove_cap invocations (bsc#1178635). - cifs: Fix incomplete memory allocation on setxattr path (bsc#1179211). - cifs: remove bogus debug code (bsc#1179427). - cifs: Return the error from crypt_message when enc/dec key not found (bsc#1179426). - Convert trailing spaces and periods in path components (bsc#1179424). - crypto: bcm - Verify GCM/CCM key length in setkey (git-fixes). - docs: ABI: stable: remove a duplicated documentation (git-fixes). - docs: ABI: sysfs-c2port: remove a duplicated entry (git-fixes). - drbd: code cleanup by using sendpage_ok() to check page for kernel_sendpage() (bsc#1172873). - Drivers: hv: vmbus: Remove the unused 'tsc_page' from struct hv_context (git-fixes). - drm/i915: Break up error capture compression loops with cond_resched() (git-fixes). - drm/i915/gvt: Set ENHANCED_FRAME_CAP bit (git-fixes). - drm/imx: tve remove extraneous type qualifier (git-fixes). - drm/sun4i: dw-hdmi: fix error return code in sun8i_dw_hdmi_bind() (git-fixes). - drm/vc4: drv: Add error handding for bind (git-fixes). - Drop sysctl files for dropped archs, add ppc64le and arm64 (bsc#1178838). - efi: cper: Fix possible out-of-bounds access (git-fixes). - efi/efivars: Add missing kobject_put() in sysfs entry creation error path (git-fixes). - efi/esrt: Fix reference count leak in esre_create_sysfs_entry (git-fixes). - efi: provide empty efi_enter_virtual_mode implementation (git-fixes). - efivarfs: fix memory leak in efivarfs_create() (git-fixes). - efivarfs: revert 'fix memory leak in efivarfs_create()' (git-fixes). - efi/x86: Do not panic or BUG() on non-critical error conditions (git-fixes). - efi/x86: Free efi_pgd with free_pages() (bsc#1112178). - efi/x86: Ignore the memory attributes table on i386 (git-fixes). - efi/x86: Map the entire EFI vendor string before copying it (git-fixes). - fs/proc/array.c: allow reporting eip/esp for all coredumping threads (bsc#1050549). - ftrace: Fix recursion check for NMI test (git-fixes). - ftrace: Handle tracing when switching between context (git-fixes). - fuse: fix page dereference after free (bsc#1179213). - futex: Do not enable IRQs unconditionally in put_pi_state() (bsc#1067665). - futex: Handle transient 'ownerless' rtmutex state correctly (bsc#1067665). - hv_balloon: disable warning when floor reached (git-fixes). - hv_netvsc: Add XDP support (bsc#1177819, bsc#1177820). - hv_netvsc: deal with bpf API differences in 4.12 (bsc#1177819, bsc#1177820). - hv_netvsc: Fix XDP refcnt for synthetic and VF NICs (bsc#1177819, bsc#1177820). - hv_netvsc: make recording RSS hash depend on feature flag (bsc#1178853, bsc#1178854). - hv_netvsc: record hardware hash in skb (bsc#1178853, bsc#1178854). - hyperv_fb: Update screen_info after removing old framebuffer (bsc#1175306). - i40iw: Fix error handling in i40iw_manage_arp_cache() (bsc#1111666) - i40iw: fix null pointer dereference on a null wqe pointer (bsc#1111666) - i40iw: Report correct firmware version (bsc#1111666) - IB/cma: Fix ports memory leak in cma_configfs (bsc#1111666) - IB/core: Set qp->real_qp before it may be accessed (bsc#1111666) - IB/hfi1: Add missing INVALIDATE opcodes for trace (bsc#1111666) - IB/hfi1: Add RcvShortLengthErrCnt to hfi1stats (bsc#1111666) - IB/hfi1: Add software counter for ctxt0 seq drop (bsc#1111666) - IB/hfi1: Avoid hardlockup with flushlist_lock (bsc#1111666) - IB/hfi1: Call kobject_put() when kobject_init_and_add() fails (bsc#1111666) - IB/hfi1: Check for error on call to alloc_rsm_map_table (bsc#1111666) - IB/hfi1: Close PSM sdma_progress sleep window (bsc#1111666) - IB/hfi1: Define variables as unsigned long to fix KASAN warning (bsc#1111666) - IB/hfi1: Ensure full Gen3 speed in a Gen4 system (bsc#1111666) - IB/hfi1: Fix memory leaks in sysfs registration and unregistration (bsc#1111666) - IB/hfi1: Fix Spectre v1 vulnerability (bsc#1111666) - IB/hfi1: Handle port down properly in pio (bsc#1111666) - IB/hfi1: Handle wakeup of orphaned QPs for pio (bsc#1111666) - IB/hfi1: Insure freeze_work work_struct is canceled on shutdown (bsc#1111666) - IB/hfi1, qib: Ensure RCU is locked when accessing list (bsc#1111666) - IB/{hfi1, qib}: Fix WC.byte_len calculation for UD_SEND_WITH_IMM (bsc#1111666) - IB/hfi1: Remove unused define (bsc#1111666) - IB/hfi1: Silence txreq allocation warnings (bsc#1111666) - IB/hfi1: Validate page aligned for a given virtual address (bsc#1111666) - IB/hfi1: Wakeup QPs orphaned on wait list after flush (bsc#1111666) - IB/ipoib: drop useless LIST_HEAD (bsc#1111666) - IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode (bsc#1111666) - IB/ipoib: Fix for use-after-free in ipoib_cm_tx_start (bsc#1111666) - IB/iser: Fix dma_nents type definition (bsc#1111666) - IB/iser: Pass the correct number of entries for dma mapped SGL (bsc#1111666) - IB/mad: Fix use-after-free in ib mad completion handling (bsc#1111666) - IB/mlx4: Add and improve logging (bsc#1111666) - IB/mlx4: Add support for MRA (bsc#1111666) - IB/mlx4: Adjust delayed work when a dup is observed (bsc#1111666) - IB/mlx4: Fix leak in id_map_find_del (bsc#1111666) - IB/mlx4: Fix memory leak in add_gid error flow (bsc#1111666) - IB/mlx4: Fix race condition between catas error reset and aliasguid flows (bsc#1111666) - IB/mlx4: Fix starvation in paravirt mux/demux (bsc#1111666) - IB/mlx4: Follow mirror sequence of device add during device removal (bsc#1111666) - IB/mlx4: Remove unneeded NULL check (bsc#1111666) - IB/mlx4: Test return value of calls to ib_get_cached_pkey (bsc#1111666) - IB/mlx5: Add missing XRC options to QP optional params mask (bsc#1111666) - IB/mlx5: Compare only index part of a memory window rkey (bsc#1111666) - IB/mlx5: Do not override existing ip_protocol (bsc#1111666) - IB/mlx5: Fix clean_mr() to work in the expected order (bsc#1111666) - IB/mlx5: Fix implicit MR release flow (bsc#1111666) - IB/mlx5: Fix outstanding_pi index for GSI qps (bsc#1111666) - IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification (bsc#1111666) - IB/mlx5: Fix unreg_umr to ignore the mkey state (bsc#1111666) - IB/mlx5: Improve ODP debugging messages (bsc#1111666) - IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache (bsc#1111666) - IB/mlx5: Prevent concurrent MR updates during invalidation (bsc#1111666) - IB/mlx5: Reset access mask when looping inside page fault handler (bsc#1111666) - IB/mlx5: Set correct write permissions for implicit ODP MR (bsc#1111666) - IB/mlx5: Use direct mkey destroy command upon UMR unreg failure (bsc#1111666) - IB/mlx5: Use fragmented QP's buffer for in-kernel users (bsc#1111666) - IB/mlx5: WQE dump jumps over first 16 bytes (bsc#1111666) - IB/mthca: fix return value of error branch in mthca_init_cq() (bsc#1111666) - IB/qib: Call kobject_put() when kobject_init_and_add() fails (bsc#1111666) - IB/qib: Fix an error code in qib_sdma_verbs_send() (bsc#1111666) - IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value (bsc#1111666) - IB/qib: Remove a set-but-not-used variable (bsc#1111666) - IB/rdmavt: Convert timers to use timer_setup() (bsc#1111666) - IB/rdmavt: Fix alloc_qpn() WARN_ON() (bsc#1111666) - IB/rdmavt: Fix sizeof mismatch (bsc#1111666) - IB/rdmavt: Reset all QPs when the device is shut down (bsc#1111666) - IB/rxe: Fix incorrect cache cleanup in error flow (bsc#1111666) - IB/rxe: Make counters thread safe (bsc#1111666) - IB/srpt: Fix memory leak in srpt_add_one (bsc#1111666) - IB/umad: Avoid additional device reference during open()/close() (bsc#1111666) - IB/umad: Avoid destroying device while it is accessed (bsc#1111666) - IB/umad: Do not check status of nonseekable_open() (bsc#1111666) - IB/umad: Fix kernel crash while unloading ib_umad (bsc#1111666) - IB/umad: Refactor code to use cdev_device_add() (bsc#1111666) - IB/umad: Simplify and avoid dynamic allocation of class (bsc#1111666) - IB/usnic: Fix out of bounds index check in query pkey (bsc#1111666) - IB/uverbs: Fix OOPs upon device disassociation (bsc#1111666) - iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet-mode (git-fixes). - iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum (git-fixes). - inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill() (git-fixes). - Input: adxl34x - clean up a data type in adxl34x_probe() (git-fixes). - ipmi: use vzalloc instead of kmalloc for user creation (bsc#1178607). - iw_cxgb4: fix ECN check on the passive accept (bsc#1111666) - iw_cxgb4: only reconnect with MPAv1 if the peer aborts (bsc#1111666) - kABI: add back flush_dcache_range (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964). - kthread_worker: prevent queuing delayed work from timer_fn when it is being canceled (git-fixes). - KVM: arm64: Add missing #include of -<linux/string.h> in guest.c (bsc#1174726). - KVM: arm64: Factor out core register ID enumeration (bsc#1174726). - KVM: arm64: Filter out invalid core register IDs in KVM_GET_REG_LIST (bsc#1174726). - KVM: arm64: Refactor kvm_arm_num_regs() for easier maintenance (bsc#1174726). - KVM: arm64: Reject ioctl access to FPSIMD V-regs on SVE vcpus (bsc#1174726). - KVM host: kabi fixes for psci_version (bsc#1174726). - libceph: use sendpage_ok() in ceph_tcp_sendpage() (bsc#1172873). - libnvdimm/nvdimm/flush: Allow architecture to override the flush barrier (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964). - locking/lockdep: Add debug_locks check in __lock_downgrade() (bsc#1050549). - locking/percpu-rwsem: Use this_cpu_{inc,dec}() for read_count (bsc#1050549). - locktorture: Print ratio of acquisitions, not failures (bsc#1050549). - mac80211: always wind down STA state (git-fixes). - mac80211: free sta in sta_info_insert_finish() on errors (git-fixes). - mac80211: minstrel: fix tx status processing corner case (git-fixes). - mac80211: minstrel: remove deferred sampling code (git-fixes). - memcg: fix NULL pointer dereference in __mem_cgroup_usage_unregister_event (bsc#1177703). - mm: always have io_remap_pfn_range() set pgprot_decrypted() (bsc#1112178). - mmc: sdhci-of-esdhc: Handle pulse width detection erratum for more SoCs (git-fixes). - mm/memcg: fix refcount error while moving and swapping (bsc#1178686). - net: add WARN_ONCE in kernel_sendpage() for improper zero-copy send (bsc#1172873). - net: ena: Capitalize all log strings and improve code readability (bsc#1177397). - net: ena: Change license into format to SPDX in all files (bsc#1177397). - net: ena: Change log message to netif/dev function (bsc#1177397). - net: ena: Change RSS related macros and variables names (bsc#1177397). - net: ena: ethtool: Add new device statistics (bsc#1177397). - net: ena: ethtool: add stats printing to XDP queues (bsc#1177397). - net: ena: ethtool: convert stat_offset to 64 bit resolution (bsc#1177397). - net: ena: Fix all static chekers' warnings (bsc#1177397). - net: ena: Remove redundant print of placement policy (bsc#1177397). - net: ena: xdp: add queue counters for xdp actions (bsc#1177397). - netfilter: nat: can't use dst_hold on noref dst (bsc#1178878). - net: introduce helper sendpage_ok() in include/linux/net.h (bsc#1172873). kABI workaround for including mm.h in include/linux/net.h (bsc#1172873). - net/mlx4_core: Fix init_hca fields offset (git-fixes). - net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition (git-fixes). - nfc: s3fwrn5: use signed integer for parsing GPIO numbers (git-fixes). - NFS: mark nfsiod as CPU_INTENSIVE (bsc#1177304). - NFS: only invalidate dentrys that are clearly invalid (bsc#1178669 bsc#1170139). - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (bsc#1170630). - nvme-tcp: check page by sendpage_ok() before calling kernel_sendpage() (bsc#1172873). - PCI: pci-hyperv: Fix build errors on non-SYSFS config (git-fixes). - pinctrl: amd: fix incorrect way to disable debounce filter (git-fixes). - pinctrl: amd: use higher precision for 512 RtcClk (git-fixes). - pinctrl: aspeed: Fix GPI only function problem (git-fixes). - pinctrl: intel: Set default bias in case no particular value given (git-fixes). - platform/x86: toshiba_acpi: Fix the wrong variable assignment (git-fixes). - powerpc/32: define helpers to get L1 cache sizes (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964). - powerpc/64: flush_inval_dcache_range() becomes flush_dcache_range() (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964). - powerpc/64: reuse PPC32 static inline flush_dcache_range() (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964). - powerpc: Chunk calls to flush_dcache_range in arch_*_memory (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964 git-fixes). - powerpc: define helpers to get L1 icache sizes (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964). - powerpc/mm: Flush cache on memory hot(un)plug (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964). - powerpc/pmem: Add flush routines using new pmem store and sync instruction (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964). - powerpc/pmem: Add new instructions for persistent storage and sync (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964). - powerpc/pmem: Avoid the barrier in flush routines (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964). - powerpc/pmem: Fix kernel crash due to wrong range value usage in flush_dcache_range (jsc#SLE-16497 bsc#1176109 ltc#187964). - powerpc/pmem: Initialize pmem device on newer hardware (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964). - powerpc/pmem: Restrict papr_scm to P8 and above (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964). - powerpc/pmem: Update ppc64 to use the new barrier instruction (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964). - powerpc/pseries/cpuidle: add polling idle for shared processor guests (bsc#1178765 ltc#188968). - powerpc/vnic: Extend 'failover pending' window (bsc#1176855 ltc#187293). - powerpc/vnic: Extend 'failover pending' window (bsc#1176855 ltc#187293). - RDMA/bnxt_re: Fix lifetimes in bnxt_re_task (bsc#1111666) - RDMA/bnxt_re: Fix Send Work Entry state check while polling completions (bsc#1111666) - RDMA/bnxt_re: Fix sizeof mismatch for allocation of pbl_tbl. (bsc#1111666) - RDMA/bnxt_re: Fix stack-out-of-bounds in bnxt_qplib_rcfw_send_message (bsc#1111666) - RDMA/cma: add missed unregister_pernet_subsys in init failure (bsc#1111666) - RDMA/cm: Add missing locking around id.state in cm_dup_req_handler (bsc#1111666) - RDMA/cma: Fix false error message (bsc#1111666) - RDMA/cma: fix null-ptr-deref Read in cma_cleanup (bsc#1111666) - RDMA/cma: Protect bind_list and listen_list while finding matching cm id (bsc#1111666) - RDMA/cm: Fix checking for allowed duplicate listens (bsc#1111666) - RDMA/cm: Remove a race freeing timewait_info (bsc#1111666) - RDMA/cm: Update num_paths in cma_resolve_iboe_route error flow (bsc#1111666) - RDMA/core: Do not depend device ODP capabilities on kconfig option (bsc#1111666) - RDMA/core: Fix invalid memory access in spec_filter_size (bsc#1111666) - RDMA/core: Fix locking in ib_uverbs_event_read (bsc#1111666) - RDMA/core: Fix protection fault in ib_mr_pool_destroy (bsc#1111666) - RDMA/core: Fix race between destroy and release FD object (bsc#1111666) - RDMA/core: Fix race when resolving IP address (bsc#1111666) - RDMA/core: Prevent mixed use of FDs between shared ufiles (bsc#1111666) - RDMA/cxgb3: Delete and properly mark unimplemented resize CQ function (bsc#1111666) - RDMA: Directly cast the sockaddr union to sockaddr (bsc#1111666) - RDMA/hns: Correct the value of HNS_ROCE_HEM_CHUNK_LEN (bsc#1111666) - RDMA/hns: Correct typo of hns_roce_create_cq() (bsc#1111666) - RDMA/hns: Remove unsupported modify_port callback (bsc#1111666) - RDMA/hns: Set the unsupported wr opcode (bsc#1111666) - RDMA/i40iw: fix a potential NULL pointer dereference (bsc#1111666) - RDMA/i40iw: Set queue pair state when being queried (bsc#1111666) - RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (bsc#1111666) - RDMA/ipoib: Remove check for ETH_SS_TEST (bsc#1111666) - RDMA/ipoib: Return void from ipoib_ib_dev_stop() (bsc#1111666) - RDMA/ipoib: Set rtnl_link_ops for ipoib interfaces (bsc#1111666) - RDMA/iwcm: Fix a lock inversion issue (bsc#1111666) - RDMA/iwcm: Fix iwcm work deallocation (bsc#1111666) - RDMA/iwcm: move iw_rem_ref() calls out of spinlock (bsc#1111666) - RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case (bsc#1111666) - RDMA/iw_cxgb4: Fix the unchecked ep dereference (bsc#1111666) - RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads() (bsc#1111666) - RDMA/mlx4: Initialize ib_spec on the stack (bsc#1111666) - RDMA/mlx4: Read pkey table length instead of hardcoded value (bsc#1111666) - RDMA/mlx5: Clear old rate limit when closing QP (bsc#1111666) - RDMA/mlx5: Delete unreachable handle_atomic code by simplifying SW completion (bsc#1111666) - RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (bsc#1111666) - RDMA/mlx5: Fix a race with mlx5_ib_update_xlt on an implicit MR (bsc#1111666) - RDMA/mlx5: Fix function name typo 'fileds' -> 'fields' (bsc#1111666) - RDMA/mlx5: Return proper error value (bsc#1111666) - RDMA/mlx5: Set GRH fields in query QP on RoCE (bsc#1111666) - RDMA/mlx5: Verify that QP is created with RQ or SQ (bsc#1111666) - RDMA/nes: Remove second wait queue initialization call (bsc#1111666) - RDMA/netlink: Do not always generate an ACK for some netlink operations (bsc#1111666) - RDMA/ocrdma: Fix out of bounds index check in query pkey (bsc#1111666) - RDMA/ocrdma: Remove unsupported modify_port callback (bsc#1111666) - RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe() (bsc#1111666) - RDMA/qedr: Endianness warnings cleanup (bsc#1111666) - RDMA/qedr: Fix doorbell setting (bsc#1111666) - RDMA/qedr: Fix memory leak in user qp and mr (bsc#1111666) - RDMA/qedr: Fix reported firmware version (bsc#1111666) - RDMA/qedr: Fix use of uninitialized field (bsc#1111666) - RDMA/qedr: Remove unsupported modify_port callback (bsc#1111666) - RDMA/qedr: SRQ's bug fixes (bsc#1111666) - RDMA/qib: Delete extra line (bsc#1111666) - RDMA/qib: Remove all occurrences of BUG_ON() (bsc#1111666) - RDMA/qib: Validate ->show()/store() callbacks before calling them (bsc#1111666) - RDMA/rxe: Drop pointless checks in rxe_init_ports (bsc#1111666) - RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM (bsc#1111666) - RDMA/rxe: Fix configuration of atomic queue pair attributes (bsc#1111666) - RDMA/rxe: Fix memleak in rxe_mem_init_user (bsc#1111666) - RDMA/rxe: Fix slab-out-bounds access which lead to kernel crash later (bsc#1111666) - RDMA/rxe: Fix soft lockup problem due to using tasklets in softirq (bsc#1111666) - RDMA/rxe: Fix the parent sysfs read when the interface has 15 chars (bsc#1111666) - RDMA/rxe: Prevent access to wr->next ptr afrer wr is posted to send queue (bsc#1111666) - RDMA/rxe: Remove unused rxe_mem_map_pages (bsc#1111666) - RDMA/rxe: Remove useless rxe_init_device_param assignments (bsc#1111666) - RDMA/rxe: Return void from rxe_init_port_param() (bsc#1111666) - RDMA/rxe: Return void from rxe_mem_init_dma() (bsc#1111666) - RDMA/rxe: Set default vendor ID (bsc#1111666) - RDMA/rxe: Set sys_image_guid to be aligned with HW IB devices (bsc#1111666) - RDMA/rxe: Skip dgid check in loopback mode (bsc#1111666) - RDMA/rxe: Use for_each_sg_page iterator on umem SGL (bsc#1111666) - RDMA/srp: Rework SCSI device reset handling (bsc#1111666) - RDMA/srpt: Fix typo in srpt_unregister_mad_agent docstring (bsc#1111666) - RDMA/srpt: Report the SCSI residual to the initiator (bsc#1111666) - RDMA/ucma: Add missing locking around rdma_leave_multicast() (bsc#1111666) - RDMA/ucma: Put a lock around every call to the rdma_cm layer (bsc#1111666) - RDMA/uverbs: Make the event_queue fds return POLLERR when disassociated (bsc#1111666) - RDMA/vmw_pvrdma: Fix memory leak on pvrdma_pci_remove (bsc#1111666) - RDMA/vmw_pvrdma: Use atomic memory allocation in create AH (bsc#1111666) - regulator: avoid resolve_supply() infinite recursion (git-fixes). - regulator: defer probe when trying to get voltage from unresolved supply (git-fixes). - regulator: fix memory leak with repeated set_machine_constraints() (git-fixes). - regulator: resolve supply after creating regulator (git-fixes). - regulator: ti-abb: Fix array out of bound read access on the first transition (git-fixes). - regulator: workaround self-referent regulators (git-fixes). - Revert 'cdc-acm: hardening against malicious devices' (git-fixes). - ring-buffer: Fix recursion protection transitions between interrupt context (git-fixes). - RMDA/cm: Fix missing ib_cm_destroy_id() in ib_cm_insert_listen() (bsc#1111666) - rxe: correctly calculate iCRC for unaligned payloads (bsc#1111666) - rxe: fix error completion wr_id and qp_num (bsc#1111666) - s390/cio: add cond_resched() in the slow_eval_known_fn() loop (bsc#1177805 LTC#188737). - s390/cpum_cf,perf: change DFLT_CCERROR counter name (bsc#1175916 LTC#187937). - s390/dasd: fix inability to use DASD with DIAG driver (bsc#1177809 LTC#188738). - s390/dasd: Fix zero write for FBA devices (bsc#1177808 LTC#188739). - s390: kernel/uv: handle length extension properly (bsc#1178940 LTC#189323). - sched/core: Fix PI boosting between RT and DEADLINE tasks (bsc#1112178). - sched/x86: SaveFLAGS on context switch (bsc#1112178). - scripts/git_sort/git_sort.py: add ceph maintainers git tree - scsi: libiscsi: use sendpage_ok() in iscsi_tcp_segment_map() (bsc#1172873). - scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported (git-fixes). - scsi: RDMA/srpt: Fix a credit leak for aborted commands (bsc#1111666) - Staging: rtl8188eu: rtw_mlme: Fix uninitialized variable authmode (git-fixes). - staging: rtl8723bs: Add 024c:0627 to the list of SDIO device-ids (git-fixes). - thunderbolt: Add the missed ida_simple_remove() in ring_request_msix() (git-fixes). - time: Prevent undefined behaviour in timespec64_to_ns() (git-fixes). - tty: serial: imx: keep console clocks always on (git-fixes). - Update patches.suse/vfs-add-super_operations-get_inode_dev (bsc#927455 bsc#1176983). - Update references in patches.suse/net-smc-tolerate-future-smcd-versions (bsc#1172542 LTC#186070 git-fixes). - USB: Add NO_LPM quirk for Kingston flash drive (git-fixes). - USB: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode (git-fixes). - USB: cdc-acm: fix cooldown mechanism (git-fixes). - USB: core: driver: fix stray tabs in error messages (git-fixes). - USB: core: Fix regression in Hercules audio card (git-fixes). - USB: gadget: Fix memleak in gadgetfs_fill_super (git-fixes). - USB: gadget: f_midi: Fix memleak in f_midi_alloc (git-fixes). - USB: host: ehci-tegra: Fix error handling in tegra_ehci_probe() (git-fixes). - USB: host: xhci: fix ep context print mismatch in debugfs (git-fixes). - USB: host: xhci-mtk: avoid runtime suspend when removing hcd (git-fixes). - USB: mtu3: fix panic in mtu3_gadget_stop() (git-fixes). - USB: serial: cyberjack: fix write-URB completion race (git-fixes). - USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters (git-fixes). - USB: serial: option: add Cellient MPL200 card (git-fixes). - USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231 (git-fixes). - USB: serial: option: add Quectel EC200T module support (git-fixes). - USB: serial: option: add Telit FN980 composition 0x1055 (git-fixes). - USB: serial: option: Add Telit FT980-KS composition (git-fixes). - USB: serial: pl2303: add device-id for HP GC device (git-fixes). - USB: typec: tcpm: reset hard_reset_count for any disconnect (git-fixes). - USB: xhci: force all memory allocations to node (git-fixes). - video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes). - video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (bsc#1175306). - video: hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (bsc#1175306). - video: hyperv: hyperv_fb: Use physical memory for fb on HyperV Gen 1 VMs (bsc#1175306). - vt: Disable KD_FONT_OP_COPY (bsc#1178589). - x86/hyperv: Clarify comment on x2apic mode (git-fixes). - x86/hyperv: Make vapic support x2apic mode (git-fixes). - x86/kexec: Use up-to-dated screen_info copy to fill boot params (bsc#1175306). - x86/microcode/intel: Check patch signature before saving microcode for early loading (bsc#1112178). - x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect (git-fixes). - x86/PCI: Fix intel_mid_pci.c build error when ACPI is not enabled (git-fixes). - x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (git-fixes). - x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always-on STIBP (bsc#1112178). - x86/sysfb_efi: Add quirks for some devices with swapped width and height (git-fixes). - xfrm: Fix memleak on xfrm state destroy (bsc#1158775). - xfs: fix a missing unlock on error in xfs_fs_map_blocks (git-fixes). - xfs: fix flags argument to rmap lookup when converting shared file rmaps (git-fixes). - xfs: fix rmap key and record comparison functions (git-fixes). - xfs: flush new eof page on truncate to avoid post-eof corruption (git-fixes). - xfs: revert 'xfs: fix rmap key and record comparison functions' (git-fixes). - xhci: do not create endpoint debugfs entry before ring buffer is set (git-fixes). - xhci: Fix sizeof() mismatch (git-fixes).

Patchnames

SUSE-2020-3717,SUSE-SLE-HA-12-SP5-2020-3717,SUSE-SLE-Live-Patching-12-SP5-2020-3717,SUSE-SLE-SDK-12-SP5-2020-3717,SUSE-SLE-SERVER-12-SP5-2020-3717,SUSE-SLE-WE-12-SP5-2020-3717

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for the Linux Kernel",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to gain privileges or cause a denial of service (bsc#1179141).\n- CVE-2020-15437: Fixed a null pointer dereference which could have allowed local users to cause a denial of service(bsc#1179140).\n- CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178123).\n- CVE-2020-25669: Fixed a use-after-free read in sunkbd_reinit() (bsc#1178182).\n- CVE-2020-25704: Fixed a leak in perf_event_parse_addr_filter() (bsc#1178393).\n- CVE-2020-27777: Restrict RTAS requests from userspace  (bsc#1179107)\n- CVE-2020-28915: Fixed a buffer over-read in the fbcon code which could have been used by local attackers to read kernel memory (bsc#1178886).\n- CVE-2020-28974: Fixed a slab-out-of-bounds read in fbcon which could have been used by local attackers to read privileged information or potentially crash the kernel (bsc#1178589).\n- CVE-2020-29371: Fixed uninitialized memory leaks to userspace (bsc#1179429).\n- CVE-2020-25705: Fixed an issue which could have allowed to quickly scan open UDP ports. This flaw allowed an off-path remote user to effectively bypassing source port UDP randomization (bsc#1175721).\n\nThe following non-security bugs were fixed:\n\n- 9P: Cast to loff_t before multiplying (git-fixes).\n- ACPI: GED: fix -Wformat (git-fixes).\n- ACPI: NFIT: Fix comparison to '-ENXIO' (git-fixes).\n- ALSA: ctl: fix error path at adding user-defined element set (git-fixes).\n- ALSA: firewire: Clean up a locking issue in copy_resp_to_buf() (git-fixes).\n- ALSA: hda - Fix the return value if cb func is already registered (git-fixes).\n- ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (git-fixes).\n- ALSA: mixart: Fix mutex deadlock (git-fixes).\n- arm64: KVM: Fix system register enumeration (bsc#1174726).\n- arm/arm64: KVM: Add PSCI version selection API (bsc#1174726).\n- ASoC: qcom: lpass-platform: Fix memory leak (git-fixes).\n- ath10k: Acquire tx_lock in tx error paths (git-fixes).\n- batman-adv: set .owner to THIS_MODULE (git-fixes).\n- Bluetooth: btusb: Fix and detect most of the Chinese Bluetooth controllers (git-fixes).\n- Bluetooth: hci_bcm: fix freeing not-requested IRQ (git-fixes).\n- bpf: Zero-fill re-used per-cpu map element (git-fixes).\n- btrfs: account ticket size at add/delete time (bsc#1178897).\n- btrfs: add helper to obtain number of devices with ongoing dev-replace (bsc#1178897).\n- btrfs: check rw_devices, not num_devices for balance (bsc#1178897).\n- btrfs: do not delete mismatched root refs (bsc#1178962).\n- btrfs: fix btrfs_calc_reclaim_metadata_size calculation (bsc#1178897).\n- btrfs: fix force usage in inc_block_group_ro (bsc#1178897).\n- btrfs: fix invalid removal of root ref (bsc#1178962).\n- btrfs: fix reclaim counter leak of space_info objects (bsc#1178897).\n- btrfs: fix reclaim_size counter leak after stealing from global reserve (bsc#1178897).\n- btrfs: kill min_allocable_bytes in inc_block_group_ro (bsc#1178897).\n- btrfs: rework arguments of btrfs_unlink_subvol (bsc#1178962).\n- btrfs: split dev-replace locking helpers for read and write (bsc#1178897). \n- can: af_can: prevent potential access of uninitialized member in canfd_rcv() (git-fixes).\n- can: af_can: prevent potential access of uninitialized member in can_rcv() (git-fixes).\n- can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() (git-fixes).\n- can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames (git-fixes).\n- can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context (git-fixes).\n- can: dev: can_restart(): post buffer from the right context (git-fixes).\n- can: gs_usb: fix endianess problem with candleLight firmware (git-fixes).\n- can: m_can: fix nominal bitiming tseg2 min for version >= 3.1 (git-fixes).\n- can: m_can: m_can_handle_state_change(): fix state change (git-fixes).\n- can: m_can: m_can_stop(): set device to software init mode before closing (git-fixes).\n- can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to can_put_echo_skb() (git-fixes).\n- can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on (git-fixes).\n- can: peak_usb: add range checking in decode operations (git-fixes).\n- can: peak_usb: fix potential integer overflow on shift of a int (git-fixes).\n- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping (git-fixes).\n- can: rx-offload: do not call kfree_skb() from IRQ context (git-fixes).\n- ceph: add check_session_state() helper and make it global (bsc#1179259).\n- ceph: check session state after bumping session->s_seq (bsc#1179259).\n- ceph: fix race in concurrent __ceph_remove_cap invocations (bsc#1178635).\n- cifs: Fix incomplete memory allocation on setxattr path (bsc#1179211).\n- cifs: remove bogus debug code (bsc#1179427).\n- cifs: Return the error from crypt_message when enc/dec key not found (bsc#1179426).\n- Convert trailing spaces and periods in path components (bsc#1179424).\n- crypto: bcm - Verify GCM/CCM key length in setkey (git-fixes).\n- docs: ABI: stable: remove a duplicated documentation (git-fixes).\n- docs: ABI: sysfs-c2port: remove a duplicated entry (git-fixes).\n- drbd: code cleanup by using sendpage_ok() to check page for kernel_sendpage() (bsc#1172873).\n- Drivers: hv: vmbus: Remove the unused 'tsc_page' from struct hv_context (git-fixes).\n- drm/i915: Break up error capture compression loops with cond_resched() (git-fixes).\n- drm/i915/gvt: Set ENHANCED_FRAME_CAP bit (git-fixes).\n- drm/imx: tve remove extraneous type qualifier (git-fixes).\n- drm/sun4i: dw-hdmi: fix error return code in sun8i_dw_hdmi_bind() (git-fixes).\n- drm/vc4: drv: Add error handding for bind (git-fixes).\n- Drop sysctl files for dropped archs, add ppc64le and arm64 (bsc#1178838).\n- efi: cper: Fix possible out-of-bounds access (git-fixes).\n- efi/efivars: Add missing kobject_put() in sysfs entry creation error path (git-fixes).\n- efi/esrt: Fix reference count leak in esre_create_sysfs_entry (git-fixes).\n- efi: provide empty efi_enter_virtual_mode implementation (git-fixes).\n- efivarfs: fix memory leak in efivarfs_create() (git-fixes).\n- efivarfs: revert 'fix memory leak in efivarfs_create()' (git-fixes).\n- efi/x86: Do not panic or BUG() on non-critical error conditions (git-fixes).\n- efi/x86: Free efi_pgd with free_pages() (bsc#1112178).\n- efi/x86: Ignore the memory attributes table on i386 (git-fixes).\n- efi/x86: Map the entire EFI vendor string before copying it (git-fixes).\n- fs/proc/array.c: allow reporting eip/esp for all coredumping threads (bsc#1050549).\n- ftrace: Fix recursion check for NMI test (git-fixes).\n- ftrace: Handle tracing when switching between context (git-fixes).\n- fuse: fix page dereference after free (bsc#1179213).\n- futex: Do not enable IRQs unconditionally in put_pi_state() (bsc#1067665).\n- futex: Handle transient 'ownerless' rtmutex state correctly (bsc#1067665).\n- hv_balloon: disable warning when floor reached (git-fixes).\n- hv_netvsc: Add XDP support (bsc#1177819, bsc#1177820).\n- hv_netvsc: deal with bpf API differences in 4.12 (bsc#1177819, bsc#1177820).\n- hv_netvsc: Fix XDP refcnt for synthetic and VF NICs (bsc#1177819, bsc#1177820).\n- hv_netvsc: make recording RSS hash depend on feature flag (bsc#1178853, bsc#1178854).\n- hv_netvsc: record hardware hash in skb (bsc#1178853, bsc#1178854).\n- hyperv_fb: Update screen_info after removing old framebuffer (bsc#1175306).\n- i40iw: Fix error handling in i40iw_manage_arp_cache() (bsc#1111666)\n- i40iw: fix null pointer dereference on a null wqe pointer (bsc#1111666)\n- i40iw: Report correct firmware version (bsc#1111666)\n- IB/cma: Fix ports memory leak in cma_configfs (bsc#1111666)\n- IB/core: Set qp->real_qp before it may be accessed (bsc#1111666)\n- IB/hfi1: Add missing INVALIDATE opcodes for trace (bsc#1111666)\n- IB/hfi1: Add RcvShortLengthErrCnt to hfi1stats (bsc#1111666)\n- IB/hfi1: Add software counter for ctxt0 seq drop (bsc#1111666)\n- IB/hfi1: Avoid hardlockup with flushlist_lock (bsc#1111666)\n- IB/hfi1: Call kobject_put() when kobject_init_and_add() fails (bsc#1111666)\n- IB/hfi1: Check for error on call to alloc_rsm_map_table (bsc#1111666)\n- IB/hfi1: Close PSM sdma_progress sleep window (bsc#1111666)\n- IB/hfi1: Define variables as unsigned long to fix KASAN warning (bsc#1111666)\n- IB/hfi1: Ensure full Gen3 speed in a Gen4 system (bsc#1111666)\n- IB/hfi1: Fix memory leaks in sysfs registration and unregistration (bsc#1111666)\n- IB/hfi1: Fix Spectre v1 vulnerability (bsc#1111666)\n- IB/hfi1: Handle port down properly in pio (bsc#1111666)\n- IB/hfi1: Handle wakeup of orphaned QPs for pio (bsc#1111666)\n- IB/hfi1: Insure freeze_work work_struct is canceled on shutdown (bsc#1111666)\n- IB/hfi1, qib: Ensure RCU is locked when accessing list (bsc#1111666)\n- IB/{hfi1, qib}: Fix WC.byte_len calculation for UD_SEND_WITH_IMM (bsc#1111666)\n- IB/hfi1: Remove unused define (bsc#1111666)\n- IB/hfi1: Silence txreq allocation warnings (bsc#1111666)\n- IB/hfi1: Validate page aligned for a given virtual address (bsc#1111666)\n- IB/hfi1: Wakeup QPs orphaned on wait list after flush (bsc#1111666)\n- IB/ipoib: drop useless LIST_HEAD (bsc#1111666)\n- IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode (bsc#1111666)\n- IB/ipoib: Fix for use-after-free in ipoib_cm_tx_start (bsc#1111666)\n- IB/iser: Fix dma_nents type definition (bsc#1111666)\n- IB/iser: Pass the correct number of entries for dma mapped SGL (bsc#1111666)\n- IB/mad: Fix use-after-free in ib mad completion handling (bsc#1111666)\n- IB/mlx4: Add and improve logging (bsc#1111666)\n- IB/mlx4: Add support for MRA (bsc#1111666)\n- IB/mlx4: Adjust delayed work when a dup is observed (bsc#1111666)\n- IB/mlx4: Fix leak in id_map_find_del (bsc#1111666)\n- IB/mlx4: Fix memory leak in add_gid error flow (bsc#1111666)\n- IB/mlx4: Fix race condition between catas error reset and aliasguid flows (bsc#1111666)\n- IB/mlx4: Fix starvation in paravirt mux/demux (bsc#1111666)\n- IB/mlx4: Follow mirror sequence of device add during device removal (bsc#1111666)\n- IB/mlx4: Remove unneeded NULL check (bsc#1111666)\n- IB/mlx4: Test return value of calls to ib_get_cached_pkey (bsc#1111666)\n- IB/mlx5: Add missing XRC options to QP optional params mask (bsc#1111666)\n- IB/mlx5: Compare only index part of a memory window rkey (bsc#1111666)\n- IB/mlx5: Do not override existing ip_protocol (bsc#1111666)\n- IB/mlx5: Fix clean_mr() to work in the expected order (bsc#1111666)\n- IB/mlx5: Fix implicit MR release flow (bsc#1111666)\n- IB/mlx5: Fix outstanding_pi index for GSI qps (bsc#1111666)\n- IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification (bsc#1111666)\n- IB/mlx5: Fix unreg_umr to ignore the mkey state (bsc#1111666)\n- IB/mlx5: Improve ODP debugging messages (bsc#1111666)\n- IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache (bsc#1111666)\n- IB/mlx5: Prevent concurrent MR updates during invalidation (bsc#1111666)\n- IB/mlx5: Reset access mask when looping inside page fault handler (bsc#1111666)\n- IB/mlx5: Set correct write permissions for implicit ODP MR (bsc#1111666)\n- IB/mlx5: Use direct mkey destroy command upon UMR unreg failure (bsc#1111666)\n- IB/mlx5: Use fragmented QP's buffer for in-kernel users (bsc#1111666)\n- IB/mlx5: WQE dump jumps over first 16 bytes (bsc#1111666)\n- IB/mthca: fix return value of error branch in mthca_init_cq() (bsc#1111666)\n- IB/qib: Call kobject_put() when kobject_init_and_add() fails (bsc#1111666)\n- IB/qib: Fix an error code in qib_sdma_verbs_send() (bsc#1111666)\n- IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value (bsc#1111666)\n- IB/qib: Remove a set-but-not-used variable (bsc#1111666)\n- IB/rdmavt: Convert timers to use timer_setup() (bsc#1111666)\n- IB/rdmavt: Fix alloc_qpn() WARN_ON() (bsc#1111666)\n- IB/rdmavt: Fix sizeof mismatch (bsc#1111666)\n- IB/rdmavt: Reset all QPs when the device is shut down (bsc#1111666)\n- IB/rxe: Fix incorrect cache cleanup in error flow (bsc#1111666)\n- IB/rxe: Make counters thread safe (bsc#1111666)\n- IB/srpt: Fix memory leak in srpt_add_one (bsc#1111666)\n- IB/umad: Avoid additional device reference during open()/close() (bsc#1111666)\n- IB/umad: Avoid destroying device while it is accessed (bsc#1111666)\n- IB/umad: Do not check status of nonseekable_open() (bsc#1111666)\n- IB/umad: Fix kernel crash while unloading ib_umad (bsc#1111666)\n- IB/umad: Refactor code to use cdev_device_add() (bsc#1111666)\n- IB/umad: Simplify and avoid dynamic allocation of class (bsc#1111666)\n- IB/usnic: Fix out of bounds index check in query pkey (bsc#1111666)\n- IB/uverbs: Fix OOPs upon device disassociation (bsc#1111666)\n- iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet-mode (git-fixes).\n- iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum (git-fixes).\n- inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill() (git-fixes).\n- Input: adxl34x - clean up a data type in adxl34x_probe() (git-fixes).\n- ipmi: use vzalloc instead of kmalloc for user creation (bsc#1178607).\n- iw_cxgb4: fix ECN check on the passive accept (bsc#1111666)\n- iw_cxgb4: only reconnect with MPAv1 if the peer aborts (bsc#1111666)\n- kABI: add back flush_dcache_range (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).\n- kthread_worker: prevent queuing delayed work from timer_fn when it is being canceled (git-fixes).\n- KVM: arm64: Add missing #include of -<linux/string.h> in guest.c (bsc#1174726).\n- KVM: arm64: Factor out core register ID enumeration (bsc#1174726).\n- KVM: arm64: Filter out invalid core register IDs in KVM_GET_REG_LIST (bsc#1174726).\n- KVM: arm64: Refactor kvm_arm_num_regs() for easier maintenance (bsc#1174726).\n- KVM: arm64: Reject ioctl access to FPSIMD V-regs on SVE vcpus (bsc#1174726).\n- KVM host: kabi fixes for psci_version (bsc#1174726).\n- libceph: use sendpage_ok() in ceph_tcp_sendpage() (bsc#1172873).\n- libnvdimm/nvdimm/flush: Allow architecture to override the flush barrier (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).\n- locking/lockdep: Add debug_locks check in __lock_downgrade() (bsc#1050549).\n- locking/percpu-rwsem: Use this_cpu_{inc,dec}() for read_count (bsc#1050549).\n- locktorture: Print ratio of acquisitions, not failures (bsc#1050549).\n- mac80211: always wind down STA state (git-fixes).\n- mac80211: free sta in sta_info_insert_finish() on errors (git-fixes).\n- mac80211: minstrel: fix tx status processing corner case (git-fixes).\n- mac80211: minstrel: remove deferred sampling code (git-fixes).\n- memcg: fix NULL pointer dereference in __mem_cgroup_usage_unregister_event (bsc#1177703).\n- mm: always have io_remap_pfn_range() set pgprot_decrypted() (bsc#1112178).\n- mmc: sdhci-of-esdhc: Handle pulse width detection erratum for more SoCs (git-fixes).\n- mm/memcg: fix refcount error while moving and swapping (bsc#1178686).\n- net: add WARN_ONCE in kernel_sendpage() for improper zero-copy send (bsc#1172873).\n- net: ena: Capitalize all log strings and improve code readability (bsc#1177397).\n- net: ena: Change license into format to SPDX in all files (bsc#1177397).\n- net: ena: Change log message to netif/dev function (bsc#1177397).\n- net: ena: Change RSS related macros and variables names (bsc#1177397).\n- net: ena: ethtool: Add new device statistics (bsc#1177397).\n- net: ena: ethtool: add stats printing to XDP queues (bsc#1177397).\n- net: ena: ethtool: convert stat_offset to 64 bit resolution (bsc#1177397).\n- net: ena: Fix all static chekers' warnings (bsc#1177397).\n- net: ena: Remove redundant print of placement policy (bsc#1177397).\n- net: ena: xdp: add queue counters for xdp actions (bsc#1177397).\n- netfilter: nat: can't use dst_hold on noref dst (bsc#1178878).\n- net: introduce helper sendpage_ok() in include/linux/net.h (bsc#1172873). kABI workaround for including mm.h in include/linux/net.h (bsc#1172873).\n- net/mlx4_core: Fix init_hca fields offset (git-fixes).\n- net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition (git-fixes).\n- nfc: s3fwrn5: use signed integer for parsing GPIO numbers (git-fixes).\n- NFS: mark nfsiod as CPU_INTENSIVE (bsc#1177304).\n- NFS: only invalidate dentrys that are clearly invalid (bsc#1178669 bsc#1170139).\n- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (bsc#1170630).\n- nvme-tcp: check page by sendpage_ok() before calling kernel_sendpage() (bsc#1172873).\n- PCI: pci-hyperv: Fix build errors on non-SYSFS config (git-fixes).\n- pinctrl: amd: fix incorrect way to disable debounce filter (git-fixes).\n- pinctrl: amd: use higher precision for 512 RtcClk (git-fixes).\n- pinctrl: aspeed: Fix GPI only function problem (git-fixes).\n- pinctrl: intel: Set default bias in case no particular value given (git-fixes).\n- platform/x86: toshiba_acpi: Fix the wrong variable assignment (git-fixes).\n- powerpc/32: define helpers to get L1 cache sizes (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).\n- powerpc/64: flush_inval_dcache_range() becomes flush_dcache_range() (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).\n- powerpc/64: reuse PPC32 static inline flush_dcache_range() (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).\n- powerpc: Chunk calls to flush_dcache_range in arch_*_memory (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964 git-fixes).\n- powerpc: define helpers to get L1 icache sizes (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).\n- powerpc/mm: Flush cache on memory hot(un)plug (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).\n- powerpc/pmem: Add flush routines using new pmem store and sync instruction (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).\n- powerpc/pmem: Add new instructions for persistent storage and sync (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).\n- powerpc/pmem: Avoid the barrier in flush routines (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).\n- powerpc/pmem: Fix kernel crash due to wrong range value usage in flush_dcache_range (jsc#SLE-16497 bsc#1176109 ltc#187964).\n- powerpc/pmem: Initialize pmem device on newer hardware (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).\n- powerpc/pmem: Restrict papr_scm to P8 and above (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).\n- powerpc/pmem: Update ppc64 to use the new barrier instruction (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).\n- powerpc/pseries/cpuidle: add polling idle for shared processor guests (bsc#1178765 ltc#188968).\n- powerpc/vnic: Extend 'failover pending' window (bsc#1176855 ltc#187293).\n- powerpc/vnic: Extend 'failover pending' window (bsc#1176855 ltc#187293).\n- RDMA/bnxt_re: Fix lifetimes in bnxt_re_task (bsc#1111666)\n- RDMA/bnxt_re: Fix Send Work Entry state check while polling completions (bsc#1111666)\n- RDMA/bnxt_re: Fix sizeof mismatch for allocation of pbl_tbl. (bsc#1111666)\n- RDMA/bnxt_re: Fix stack-out-of-bounds in bnxt_qplib_rcfw_send_message (bsc#1111666)\n- RDMA/cma: add missed unregister_pernet_subsys in init failure (bsc#1111666)\n- RDMA/cm: Add missing locking around id.state in cm_dup_req_handler (bsc#1111666)\n- RDMA/cma: Fix false error message (bsc#1111666)\n- RDMA/cma: fix null-ptr-deref Read in cma_cleanup (bsc#1111666)\n- RDMA/cma: Protect bind_list and listen_list while finding matching cm id (bsc#1111666)\n- RDMA/cm: Fix checking for allowed duplicate listens (bsc#1111666)\n- RDMA/cm: Remove a race freeing timewait_info (bsc#1111666)\n- RDMA/cm: Update num_paths in cma_resolve_iboe_route error flow (bsc#1111666)\n- RDMA/core: Do not depend device ODP capabilities on kconfig option (bsc#1111666)\n- RDMA/core: Fix invalid memory access in spec_filter_size (bsc#1111666)\n- RDMA/core: Fix locking in ib_uverbs_event_read (bsc#1111666)\n- RDMA/core: Fix protection fault in ib_mr_pool_destroy (bsc#1111666)\n- RDMA/core: Fix race between destroy and release FD object (bsc#1111666)\n- RDMA/core: Fix race when resolving IP address (bsc#1111666)\n- RDMA/core: Prevent mixed use of FDs between shared ufiles (bsc#1111666)\n- RDMA/cxgb3: Delete and properly mark unimplemented resize CQ function (bsc#1111666)\n- RDMA: Directly cast the sockaddr union to sockaddr (bsc#1111666)\n- RDMA/hns: Correct the value of HNS_ROCE_HEM_CHUNK_LEN (bsc#1111666)\n- RDMA/hns: Correct typo of hns_roce_create_cq() (bsc#1111666)\n- RDMA/hns: Remove unsupported modify_port callback (bsc#1111666)\n- RDMA/hns: Set the unsupported wr opcode (bsc#1111666)\n- RDMA/i40iw: fix a potential NULL pointer dereference (bsc#1111666)\n- RDMA/i40iw: Set queue pair state when being queried (bsc#1111666)\n- RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (bsc#1111666)\n- RDMA/ipoib: Remove check for ETH_SS_TEST (bsc#1111666)\n- RDMA/ipoib: Return void from ipoib_ib_dev_stop() (bsc#1111666)\n- RDMA/ipoib: Set rtnl_link_ops for ipoib interfaces (bsc#1111666)\n- RDMA/iwcm: Fix a lock inversion issue (bsc#1111666)\n- RDMA/iwcm: Fix iwcm work deallocation (bsc#1111666)\n- RDMA/iwcm: move iw_rem_ref() calls out of spinlock (bsc#1111666)\n- RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case (bsc#1111666)\n- RDMA/iw_cxgb4: Fix the unchecked ep dereference (bsc#1111666)\n- RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads() (bsc#1111666)\n- RDMA/mlx4: Initialize ib_spec on the stack (bsc#1111666)\n- RDMA/mlx4: Read pkey table length instead of hardcoded value (bsc#1111666)\n- RDMA/mlx5: Clear old rate limit when closing QP (bsc#1111666)\n- RDMA/mlx5: Delete unreachable handle_atomic code by simplifying SW completion (bsc#1111666)\n- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (bsc#1111666)\n- RDMA/mlx5: Fix a race with mlx5_ib_update_xlt on an implicit MR (bsc#1111666)\n- RDMA/mlx5: Fix function name typo 'fileds' -> 'fields' (bsc#1111666)\n- RDMA/mlx5: Return proper error value (bsc#1111666)\n- RDMA/mlx5: Set GRH fields in query QP on RoCE (bsc#1111666)\n- RDMA/mlx5: Verify that QP is created with RQ or SQ (bsc#1111666)\n- RDMA/nes: Remove second wait queue initialization call (bsc#1111666)\n- RDMA/netlink: Do not always generate an ACK for some netlink operations (bsc#1111666)\n- RDMA/ocrdma: Fix out of bounds index check in query pkey (bsc#1111666)\n- RDMA/ocrdma: Remove unsupported modify_port callback (bsc#1111666)\n- RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe() (bsc#1111666)\n- RDMA/qedr: Endianness warnings cleanup (bsc#1111666)\n- RDMA/qedr: Fix doorbell setting (bsc#1111666)\n- RDMA/qedr: Fix memory leak in user qp and mr (bsc#1111666)\n- RDMA/qedr: Fix reported firmware version (bsc#1111666)\n- RDMA/qedr: Fix use of uninitialized field (bsc#1111666)\n- RDMA/qedr: Remove unsupported modify_port callback (bsc#1111666)\n- RDMA/qedr: SRQ's bug fixes (bsc#1111666)\n- RDMA/qib: Delete extra line (bsc#1111666)\n- RDMA/qib: Remove all occurrences of BUG_ON() (bsc#1111666)\n- RDMA/qib: Validate ->show()/store() callbacks before calling them (bsc#1111666)\n- RDMA/rxe: Drop pointless checks in rxe_init_ports (bsc#1111666)\n- RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM (bsc#1111666)\n- RDMA/rxe: Fix configuration of atomic queue pair attributes (bsc#1111666)\n- RDMA/rxe: Fix memleak in rxe_mem_init_user (bsc#1111666)\n- RDMA/rxe: Fix slab-out-bounds access which lead to kernel crash later (bsc#1111666)\n- RDMA/rxe: Fix soft lockup problem due to using tasklets in softirq (bsc#1111666)\n- RDMA/rxe: Fix the parent sysfs read when the interface has 15 chars (bsc#1111666)\n- RDMA/rxe: Prevent access to wr->next ptr afrer wr is posted to send queue (bsc#1111666)\n- RDMA/rxe: Remove unused rxe_mem_map_pages (bsc#1111666)\n- RDMA/rxe: Remove useless rxe_init_device_param assignments (bsc#1111666)\n- RDMA/rxe: Return void from rxe_init_port_param() (bsc#1111666)\n- RDMA/rxe: Return void from rxe_mem_init_dma() (bsc#1111666)\n- RDMA/rxe: Set default vendor ID (bsc#1111666)\n- RDMA/rxe: Set sys_image_guid to be aligned with HW IB devices (bsc#1111666)\n- RDMA/rxe: Skip dgid check in loopback mode (bsc#1111666)\n- RDMA/rxe: Use for_each_sg_page iterator on umem SGL (bsc#1111666)\n- RDMA/srp: Rework SCSI device reset handling (bsc#1111666)\n- RDMA/srpt: Fix typo in srpt_unregister_mad_agent docstring (bsc#1111666)\n- RDMA/srpt: Report the SCSI residual to the initiator (bsc#1111666)\n- RDMA/ucma: Add missing locking around rdma_leave_multicast() (bsc#1111666)\n- RDMA/ucma: Put a lock around every call to the rdma_cm layer (bsc#1111666)\n- RDMA/uverbs: Make the event_queue fds return POLLERR when disassociated (bsc#1111666)\n- RDMA/vmw_pvrdma: Fix memory leak on pvrdma_pci_remove (bsc#1111666)\n- RDMA/vmw_pvrdma: Use atomic memory allocation in create AH (bsc#1111666)\n- regulator: avoid resolve_supply() infinite recursion (git-fixes).\n- regulator: defer probe when trying to get voltage from unresolved supply (git-fixes).\n- regulator: fix memory leak with repeated set_machine_constraints() (git-fixes).\n- regulator: resolve supply after creating regulator (git-fixes).\n- regulator: ti-abb: Fix array out of bound read access on the first transition (git-fixes).\n- regulator: workaround self-referent regulators (git-fixes).\n- Revert 'cdc-acm: hardening against malicious devices' (git-fixes).\n- ring-buffer: Fix recursion protection transitions between interrupt context (git-fixes).\n- RMDA/cm: Fix missing ib_cm_destroy_id() in ib_cm_insert_listen() (bsc#1111666)\n- rxe: correctly calculate iCRC for unaligned payloads (bsc#1111666)\n- rxe: fix error completion wr_id and qp_num (bsc#1111666)\n- s390/cio: add cond_resched() in the slow_eval_known_fn() loop (bsc#1177805 LTC#188737).\n- s390/cpum_cf,perf: change DFLT_CCERROR counter name (bsc#1175916 LTC#187937).\n- s390/dasd: fix inability to use DASD with DIAG driver (bsc#1177809 LTC#188738).\n- s390/dasd: Fix zero write for FBA devices (bsc#1177808 LTC#188739).\n- s390: kernel/uv: handle length extension properly (bsc#1178940 LTC#189323).\n- sched/core: Fix PI boosting between RT and DEADLINE tasks (bsc#1112178).\n- sched/x86: SaveFLAGS on context switch (bsc#1112178).\n- scripts/git_sort/git_sort.py: add ceph maintainers git tree\n- scsi: libiscsi: use sendpage_ok() in iscsi_tcp_segment_map() (bsc#1172873).\n- scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported (git-fixes).\n- scsi: RDMA/srpt: Fix a credit leak for aborted commands (bsc#1111666)\n- Staging: rtl8188eu: rtw_mlme: Fix uninitialized variable authmode (git-fixes).\n- staging: rtl8723bs: Add 024c:0627 to the list of SDIO device-ids (git-fixes).\n- thunderbolt: Add the missed ida_simple_remove() in ring_request_msix() (git-fixes).\n- time: Prevent undefined behaviour in timespec64_to_ns() (git-fixes).\n- tty: serial: imx: keep console clocks always on (git-fixes).\n- Update patches.suse/vfs-add-super_operations-get_inode_dev (bsc#927455 bsc#1176983). \n- Update references in patches.suse/net-smc-tolerate-future-smcd-versions (bsc#1172542 LTC#186070 git-fixes).\n- USB: Add NO_LPM quirk for Kingston flash drive (git-fixes).\n- USB: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode (git-fixes).\n- USB: cdc-acm: fix cooldown mechanism (git-fixes).\n- USB: core: driver: fix stray tabs in error messages (git-fixes).\n- USB: core: Fix regression in Hercules audio card (git-fixes).\n- USB: gadget: Fix memleak in gadgetfs_fill_super (git-fixes).\n- USB: gadget: f_midi: Fix memleak in f_midi_alloc (git-fixes).\n- USB: host: ehci-tegra: Fix error handling in tegra_ehci_probe() (git-fixes).\n- USB: host: xhci: fix ep context print mismatch in debugfs (git-fixes).\n- USB: host: xhci-mtk: avoid runtime suspend when removing hcd (git-fixes).\n- USB: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).\n- USB: serial: cyberjack: fix write-URB completion race (git-fixes).\n- USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters (git-fixes).\n- USB: serial: option: add Cellient MPL200 card (git-fixes).\n- USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231 (git-fixes).\n- USB: serial: option: add Quectel EC200T module support (git-fixes).\n- USB: serial: option: add Telit FN980 composition 0x1055 (git-fixes).\n- USB: serial: option: Add Telit FT980-KS composition (git-fixes).\n- USB: serial: pl2303: add device-id for HP GC device (git-fixes).\n- USB: typec: tcpm: reset hard_reset_count for any disconnect (git-fixes).\n- USB: xhci: force all memory allocations to node (git-fixes).\n- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).\n- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (bsc#1175306).\n- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (bsc#1175306).\n- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV Gen 1 VMs (bsc#1175306).\n- vt: Disable KD_FONT_OP_COPY (bsc#1178589).\n- x86/hyperv: Clarify comment on x2apic mode (git-fixes).\n- x86/hyperv: Make vapic support x2apic mode (git-fixes).\n- x86/kexec: Use up-to-dated screen_info copy to fill boot params (bsc#1175306).\n- x86/microcode/intel: Check patch signature before saving microcode for early loading (bsc#1112178).\n- x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect (git-fixes).\n- x86/PCI: Fix intel_mid_pci.c build error when ACPI is not enabled (git-fixes).\n- x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (git-fixes).\n- x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always-on STIBP (bsc#1112178).\n- x86/sysfb_efi: Add quirks for some devices with swapped width and height (git-fixes).\n- xfrm: Fix memleak on xfrm state destroy (bsc#1158775).\n- xfs: fix a missing unlock on error in xfs_fs_map_blocks (git-fixes).\n- xfs: fix flags argument to rmap lookup when converting shared file rmaps (git-fixes).\n- xfs: fix rmap key and record comparison functions (git-fixes).\n- xfs: flush new eof page on truncate to avoid post-eof corruption (git-fixes).\n- xfs: revert 'xfs: fix rmap key and record comparison functions' (git-fixes).\n- xhci: do not create endpoint debugfs entry before ring buffer is set (git-fixes).\n- xhci: Fix sizeof() mismatch (git-fixes).\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2020-3717,SUSE-SLE-HA-12-SP5-2020-3717,SUSE-SLE-Live-Patching-12-SP5-2020-3717,SUSE-SLE-SDK-12-SP5-2020-3717,SUSE-SLE-SERVER-12-SP5-2020-3717,SUSE-SLE-WE-12-SP5-2020-3717",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_3717-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2020:3717-1",
            url: "https://www.suse.com/support/update/announcement/2020/suse-su-20203717-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2020:3717-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2020-December/007940.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1050549",
            url: "https://bugzilla.suse.com/1050549",
         },
         {
            category: "self",
            summary: "SUSE Bug 1067665",
            url: "https://bugzilla.suse.com/1067665",
         },
         {
            category: "self",
            summary: "SUSE Bug 1111666",
            url: "https://bugzilla.suse.com/1111666",
         },
         {
            category: "self",
            summary: "SUSE Bug 1112178",
            url: "https://bugzilla.suse.com/1112178",
         },
         {
            category: "self",
            summary: "SUSE Bug 1158775",
            url: "https://bugzilla.suse.com/1158775",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170139",
            url: "https://bugzilla.suse.com/1170139",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170630",
            url: "https://bugzilla.suse.com/1170630",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172542",
            url: "https://bugzilla.suse.com/1172542",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172873",
            url: "https://bugzilla.suse.com/1172873",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174726",
            url: "https://bugzilla.suse.com/1174726",
         },
         {
            category: "self",
            summary: "SUSE Bug 1175306",
            url: "https://bugzilla.suse.com/1175306",
         },
         {
            category: "self",
            summary: "SUSE Bug 1175721",
            url: "https://bugzilla.suse.com/1175721",
         },
         {
            category: "self",
            summary: "SUSE Bug 1175916",
            url: "https://bugzilla.suse.com/1175916",
         },
         {
            category: "self",
            summary: "SUSE Bug 1176109",
            url: "https://bugzilla.suse.com/1176109",
         },
         {
            category: "self",
            summary: "SUSE Bug 1176855",
            url: "https://bugzilla.suse.com/1176855",
         },
         {
            category: "self",
            summary: "SUSE Bug 1176983",
            url: "https://bugzilla.suse.com/1176983",
         },
         {
            category: "self",
            summary: "SUSE Bug 1177304",
            url: "https://bugzilla.suse.com/1177304",
         },
         {
            category: "self",
            summary: "SUSE Bug 1177397",
            url: "https://bugzilla.suse.com/1177397",
         },
         {
            category: "self",
            summary: "SUSE Bug 1177703",
            url: "https://bugzilla.suse.com/1177703",
         },
         {
            category: "self",
            summary: "SUSE Bug 1177805",
            url: "https://bugzilla.suse.com/1177805",
         },
         {
            category: "self",
            summary: "SUSE Bug 1177808",
            url: "https://bugzilla.suse.com/1177808",
         },
         {
            category: "self",
            summary: "SUSE Bug 1177809",
            url: "https://bugzilla.suse.com/1177809",
         },
         {
            category: "self",
            summary: "SUSE Bug 1177819",
            url: "https://bugzilla.suse.com/1177819",
         },
         {
            category: "self",
            summary: "SUSE Bug 1177820",
            url: "https://bugzilla.suse.com/1177820",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178123",
            url: "https://bugzilla.suse.com/1178123",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178182",
            url: "https://bugzilla.suse.com/1178182",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178393",
            url: "https://bugzilla.suse.com/1178393",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178589",
            url: "https://bugzilla.suse.com/1178589",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178607",
            url: "https://bugzilla.suse.com/1178607",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178635",
            url: "https://bugzilla.suse.com/1178635",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178669",
            url: "https://bugzilla.suse.com/1178669",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178686",
            url: "https://bugzilla.suse.com/1178686",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178765",
            url: "https://bugzilla.suse.com/1178765",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178782",
            url: "https://bugzilla.suse.com/1178782",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178838",
            url: "https://bugzilla.suse.com/1178838",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178853",
            url: "https://bugzilla.suse.com/1178853",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178854",
            url: "https://bugzilla.suse.com/1178854",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178878",
            url: "https://bugzilla.suse.com/1178878",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178886",
            url: "https://bugzilla.suse.com/1178886",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178897",
            url: "https://bugzilla.suse.com/1178897",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178940",
            url: "https://bugzilla.suse.com/1178940",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178962",
            url: "https://bugzilla.suse.com/1178962",
         },
         {
            category: "self",
            summary: "SUSE Bug 1179107",
            url: "https://bugzilla.suse.com/1179107",
         },
         {
            category: "self",
            summary: "SUSE Bug 1179140",
            url: "https://bugzilla.suse.com/1179140",
         },
         {
            category: "self",
            summary: "SUSE Bug 1179141",
            url: "https://bugzilla.suse.com/1179141",
         },
         {
            category: "self",
            summary: "SUSE Bug 1179211",
            url: "https://bugzilla.suse.com/1179211",
         },
         {
            category: "self",
            summary: "SUSE Bug 1179213",
            url: "https://bugzilla.suse.com/1179213",
         },
         {
            category: "self",
            summary: "SUSE Bug 1179259",
            url: "https://bugzilla.suse.com/1179259",
         },
         {
            category: "self",
            summary: "SUSE Bug 1179424",
            url: "https://bugzilla.suse.com/1179424",
         },
         {
            category: "self",
            summary: "SUSE Bug 1179426",
            url: "https://bugzilla.suse.com/1179426",
         },
         {
            category: "self",
            summary: "SUSE Bug 1179427",
            url: "https://bugzilla.suse.com/1179427",
         },
         {
            category: "self",
            summary: "SUSE Bug 1179429",
            url: "https://bugzilla.suse.com/1179429",
         },
         {
            category: "self",
            summary: "SUSE Bug 927455",
            url: "https://bugzilla.suse.com/927455",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-15436 page",
            url: "https://www.suse.com/security/cve/CVE-2020-15436/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-15437 page",
            url: "https://www.suse.com/security/cve/CVE-2020-15437/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-25668 page",
            url: "https://www.suse.com/security/cve/CVE-2020-25668/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-25669 page",
            url: "https://www.suse.com/security/cve/CVE-2020-25669/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-25704 page",
            url: "https://www.suse.com/security/cve/CVE-2020-25704/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-25705 page",
            url: "https://www.suse.com/security/cve/CVE-2020-25705/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-27777 page",
            url: "https://www.suse.com/security/cve/CVE-2020-27777/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-28915 page",
            url: "https://www.suse.com/security/cve/CVE-2020-28915/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-28974 page",
            url: "https://www.suse.com/security/cve/CVE-2020-28974/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-29371 page",
            url: "https://www.suse.com/security/cve/CVE-2020-29371/",
         },
      ],
      title: "Security update for the Linux Kernel",
      tracking: {
         current_release_date: "2020-12-09T09:29:42Z",
         generator: {
            date: "2020-12-09T09:29:42Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2020:3717-1",
         initial_release_date: "2020-12-09T09:29:42Z",
         revision_history: [
            {
               date: "2020-12-09T09:29:42Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "cluster-md-kmp-default-4.12.14-122.54.1.aarch64",
                        product: {
                           name: "cluster-md-kmp-default-4.12.14-122.54.1.aarch64",
                           product_id: "cluster-md-kmp-default-4.12.14-122.54.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dlm-kmp-default-4.12.14-122.54.1.aarch64",
                        product: {
                           name: "dlm-kmp-default-4.12.14-122.54.1.aarch64",
                           product_id: "dlm-kmp-default-4.12.14-122.54.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gfs2-kmp-default-4.12.14-122.54.1.aarch64",
                        product: {
                           name: "gfs2-kmp-default-4.12.14-122.54.1.aarch64",
                           product_id: "gfs2-kmp-default-4.12.14-122.54.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-4.12.14-122.54.1.aarch64",
                        product: {
                           name: "kernel-default-4.12.14-122.54.1.aarch64",
                           product_id: "kernel-default-4.12.14-122.54.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-base-4.12.14-122.54.1.aarch64",
                        product: {
                           name: "kernel-default-base-4.12.14-122.54.1.aarch64",
                           product_id: "kernel-default-base-4.12.14-122.54.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-devel-4.12.14-122.54.1.aarch64",
                        product: {
                           name: "kernel-default-devel-4.12.14-122.54.1.aarch64",
                           product_id: "kernel-default-devel-4.12.14-122.54.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-extra-4.12.14-122.54.1.aarch64",
                        product: {
                           name: "kernel-default-extra-4.12.14-122.54.1.aarch64",
                           product_id: "kernel-default-extra-4.12.14-122.54.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-kgraft-4.12.14-122.54.1.aarch64",
                        product: {
                           name: "kernel-default-kgraft-4.12.14-122.54.1.aarch64",
                           product_id: "kernel-default-kgraft-4.12.14-122.54.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-kgraft-devel-4.12.14-122.54.1.aarch64",
                        product: {
                           name: "kernel-default-kgraft-devel-4.12.14-122.54.1.aarch64",
                           product_id: "kernel-default-kgraft-devel-4.12.14-122.54.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-obs-build-4.12.14-122.54.1.aarch64",
                        product: {
                           name: "kernel-obs-build-4.12.14-122.54.1.aarch64",
                           product_id: "kernel-obs-build-4.12.14-122.54.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-obs-qa-4.12.14-122.54.1.aarch64",
                        product: {
                           name: "kernel-obs-qa-4.12.14-122.54.1.aarch64",
                           product_id: "kernel-obs-qa-4.12.14-122.54.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-syms-4.12.14-122.54.1.aarch64",
                        product: {
                           name: "kernel-syms-4.12.14-122.54.1.aarch64",
                           product_id: "kernel-syms-4.12.14-122.54.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-4.12.14-122.54.1.aarch64",
                        product: {
                           name: "kernel-vanilla-4.12.14-122.54.1.aarch64",
                           product_id: "kernel-vanilla-4.12.14-122.54.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-base-4.12.14-122.54.1.aarch64",
                        product: {
                           name: "kernel-vanilla-base-4.12.14-122.54.1.aarch64",
                           product_id: "kernel-vanilla-base-4.12.14-122.54.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-devel-4.12.14-122.54.1.aarch64",
                        product: {
                           name: "kernel-vanilla-devel-4.12.14-122.54.1.aarch64",
                           product_id: "kernel-vanilla-devel-4.12.14-122.54.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-kgraft-devel-4.12.14-122.54.1.aarch64",
                        product: {
                           name: "kernel-vanilla-kgraft-devel-4.12.14-122.54.1.aarch64",
                           product_id: "kernel-vanilla-kgraft-devel-4.12.14-122.54.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kselftests-kmp-default-4.12.14-122.54.1.aarch64",
                        product: {
                           name: "kselftests-kmp-default-4.12.14-122.54.1.aarch64",
                           product_id: "kselftests-kmp-default-4.12.14-122.54.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ocfs2-kmp-default-4.12.14-122.54.1.aarch64",
                        product: {
                           name: "ocfs2-kmp-default-4.12.14-122.54.1.aarch64",
                           product_id: "ocfs2-kmp-default-4.12.14-122.54.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "kernel-devel-4.12.14-122.54.1.noarch",
                        product: {
                           name: "kernel-devel-4.12.14-122.54.1.noarch",
                           product_id: "kernel-devel-4.12.14-122.54.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-docs-4.12.14-122.54.1.noarch",
                        product: {
                           name: "kernel-docs-4.12.14-122.54.1.noarch",
                           product_id: "kernel-docs-4.12.14-122.54.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-docs-html-4.12.14-122.54.1.noarch",
                        product: {
                           name: "kernel-docs-html-4.12.14-122.54.1.noarch",
                           product_id: "kernel-docs-html-4.12.14-122.54.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-macros-4.12.14-122.54.1.noarch",
                        product: {
                           name: "kernel-macros-4.12.14-122.54.1.noarch",
                           product_id: "kernel-macros-4.12.14-122.54.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-source-4.12.14-122.54.1.noarch",
                        product: {
                           name: "kernel-source-4.12.14-122.54.1.noarch",
                           product_id: "kernel-source-4.12.14-122.54.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-source-vanilla-4.12.14-122.54.1.noarch",
                        product: {
                           name: "kernel-source-vanilla-4.12.14-122.54.1.noarch",
                           product_id: "kernel-source-vanilla-4.12.14-122.54.1.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                           product_id: "cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                           product_id: "dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                           product_id: "gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-debug-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "kernel-debug-4.12.14-122.54.1.ppc64le",
                           product_id: "kernel-debug-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-debug-base-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "kernel-debug-base-4.12.14-122.54.1.ppc64le",
                           product_id: "kernel-debug-base-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-debug-devel-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "kernel-debug-devel-4.12.14-122.54.1.ppc64le",
                           product_id: "kernel-debug-devel-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-debug-kgraft-devel-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "kernel-debug-kgraft-devel-4.12.14-122.54.1.ppc64le",
                           product_id: "kernel-debug-kgraft-devel-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "kernel-default-4.12.14-122.54.1.ppc64le",
                           product_id: "kernel-default-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-base-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "kernel-default-base-4.12.14-122.54.1.ppc64le",
                           product_id: "kernel-default-base-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-devel-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "kernel-default-devel-4.12.14-122.54.1.ppc64le",
                           product_id: "kernel-default-devel-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-extra-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "kernel-default-extra-4.12.14-122.54.1.ppc64le",
                           product_id: "kernel-default-extra-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                           product_id: "kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                           product_id: "kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-obs-build-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "kernel-obs-build-4.12.14-122.54.1.ppc64le",
                           product_id: "kernel-obs-build-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-obs-qa-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "kernel-obs-qa-4.12.14-122.54.1.ppc64le",
                           product_id: "kernel-obs-qa-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-syms-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "kernel-syms-4.12.14-122.54.1.ppc64le",
                           product_id: "kernel-syms-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "kernel-vanilla-4.12.14-122.54.1.ppc64le",
                           product_id: "kernel-vanilla-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-base-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "kernel-vanilla-base-4.12.14-122.54.1.ppc64le",
                           product_id: "kernel-vanilla-base-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-devel-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "kernel-vanilla-devel-4.12.14-122.54.1.ppc64le",
                           product_id: "kernel-vanilla-devel-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-kgraft-devel-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "kernel-vanilla-kgraft-devel-4.12.14-122.54.1.ppc64le",
                           product_id: "kernel-vanilla-kgraft-devel-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                        product: {
                           name: "kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                           product_id: "kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kselftests-kmp-default-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "kselftests-kmp-default-4.12.14-122.54.1.ppc64le",
                           product_id: "kselftests-kmp-default-4.12.14-122.54.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                        product: {
                           name: "ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                           product_id: "ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                        product: {
                           name: "cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                           product_id: "cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dlm-kmp-default-4.12.14-122.54.1.s390x",
                        product: {
                           name: "dlm-kmp-default-4.12.14-122.54.1.s390x",
                           product_id: "dlm-kmp-default-4.12.14-122.54.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gfs2-kmp-default-4.12.14-122.54.1.s390x",
                        product: {
                           name: "gfs2-kmp-default-4.12.14-122.54.1.s390x",
                           product_id: "gfs2-kmp-default-4.12.14-122.54.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-4.12.14-122.54.1.s390x",
                        product: {
                           name: "kernel-default-4.12.14-122.54.1.s390x",
                           product_id: "kernel-default-4.12.14-122.54.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-base-4.12.14-122.54.1.s390x",
                        product: {
                           name: "kernel-default-base-4.12.14-122.54.1.s390x",
                           product_id: "kernel-default-base-4.12.14-122.54.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-devel-4.12.14-122.54.1.s390x",
                        product: {
                           name: "kernel-default-devel-4.12.14-122.54.1.s390x",
                           product_id: "kernel-default-devel-4.12.14-122.54.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-extra-4.12.14-122.54.1.s390x",
                        product: {
                           name: "kernel-default-extra-4.12.14-122.54.1.s390x",
                           product_id: "kernel-default-extra-4.12.14-122.54.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-kgraft-4.12.14-122.54.1.s390x",
                        product: {
                           name: "kernel-default-kgraft-4.12.14-122.54.1.s390x",
                           product_id: "kernel-default-kgraft-4.12.14-122.54.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                        product: {
                           name: "kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                           product_id: "kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-man-4.12.14-122.54.1.s390x",
                        product: {
                           name: "kernel-default-man-4.12.14-122.54.1.s390x",
                           product_id: "kernel-default-man-4.12.14-122.54.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-obs-build-4.12.14-122.54.1.s390x",
                        product: {
                           name: "kernel-obs-build-4.12.14-122.54.1.s390x",
                           product_id: "kernel-obs-build-4.12.14-122.54.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-obs-qa-4.12.14-122.54.1.s390x",
                        product: {
                           name: "kernel-obs-qa-4.12.14-122.54.1.s390x",
                           product_id: "kernel-obs-qa-4.12.14-122.54.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-syms-4.12.14-122.54.1.s390x",
                        product: {
                           name: "kernel-syms-4.12.14-122.54.1.s390x",
                           product_id: "kernel-syms-4.12.14-122.54.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-4.12.14-122.54.1.s390x",
                        product: {
                           name: "kernel-vanilla-4.12.14-122.54.1.s390x",
                           product_id: "kernel-vanilla-4.12.14-122.54.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-base-4.12.14-122.54.1.s390x",
                        product: {
                           name: "kernel-vanilla-base-4.12.14-122.54.1.s390x",
                           product_id: "kernel-vanilla-base-4.12.14-122.54.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-devel-4.12.14-122.54.1.s390x",
                        product: {
                           name: "kernel-vanilla-devel-4.12.14-122.54.1.s390x",
                           product_id: "kernel-vanilla-devel-4.12.14-122.54.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-kgraft-devel-4.12.14-122.54.1.s390x",
                        product: {
                           name: "kernel-vanilla-kgraft-devel-4.12.14-122.54.1.s390x",
                           product_id: "kernel-vanilla-kgraft-devel-4.12.14-122.54.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-zfcpdump-4.12.14-122.54.1.s390x",
                        product: {
                           name: "kernel-zfcpdump-4.12.14-122.54.1.s390x",
                           product_id: "kernel-zfcpdump-4.12.14-122.54.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-zfcpdump-man-4.12.14-122.54.1.s390x",
                        product: {
                           name: "kernel-zfcpdump-man-4.12.14-122.54.1.s390x",
                           product_id: "kernel-zfcpdump-man-4.12.14-122.54.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                        product: {
                           name: "kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                           product_id: "kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kselftests-kmp-default-4.12.14-122.54.1.s390x",
                        product: {
                           name: "kselftests-kmp-default-4.12.14-122.54.1.s390x",
                           product_id: "kselftests-kmp-default-4.12.14-122.54.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                        product: {
                           name: "ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                           product_id: "ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                           product_id: "cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dlm-kmp-default-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "dlm-kmp-default-4.12.14-122.54.1.x86_64",
                           product_id: "dlm-kmp-default-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                           product_id: "gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-debug-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-debug-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-debug-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-debug-base-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-debug-base-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-debug-base-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-debug-devel-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-debug-devel-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-debug-devel-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-debug-kgraft-devel-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-debug-kgraft-devel-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-debug-kgraft-devel-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-default-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-default-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-base-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-default-base-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-default-base-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-devel-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-default-devel-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-default-devel-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-extra-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-default-extra-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-default-extra-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-kvmsmall-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-kvmsmall-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-kvmsmall-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-kvmsmall-base-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-kvmsmall-base-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-kvmsmall-base-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-kvmsmall-devel-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-kvmsmall-devel-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-kvmsmall-devel-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-kvmsmall-kgraft-devel-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-kvmsmall-kgraft-devel-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-kvmsmall-kgraft-devel-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-obs-build-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-obs-build-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-obs-build-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-obs-qa-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-obs-qa-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-obs-qa-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-syms-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-syms-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-syms-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-vanilla-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-vanilla-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-base-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-vanilla-base-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-vanilla-base-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-devel-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-vanilla-devel-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-vanilla-devel-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-vanilla-kgraft-devel-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kernel-vanilla-kgraft-devel-4.12.14-122.54.1.x86_64",
                           product_id: "kernel-vanilla-kgraft-devel-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                        product: {
                           name: "kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                           product_id: "kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kselftests-kmp-default-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "kselftests-kmp-default-4.12.14-122.54.1.x86_64",
                           product_id: "kselftests-kmp-default-4.12.14-122.54.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                        product: {
                           name: "ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                           product_id: "ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise High Availability Extension 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise High Availability Extension 12 SP5",
                           product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-ha:12:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Live Patching 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Live Patching 12 SP5",
                           product_id: "SUSE Linux Enterprise Live Patching 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-live-patching:12:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Software Development Kit 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Software Development Kit 12 SP5",
                           product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-sdk:12:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP5",
                           product_id: "SUSE Linux Enterprise Server 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Workstation Extension 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Workstation Extension 12 SP5",
                           product_id: "SUSE Linux Enterprise Workstation Extension 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-we:12:sp5",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "cluster-md-kmp-default-4.12.14-122.54.1.ppc64le as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
            },
            product_reference: "cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "cluster-md-kmp-default-4.12.14-122.54.1.s390x as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
            },
            product_reference: "cluster-md-kmp-default-4.12.14-122.54.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "cluster-md-kmp-default-4.12.14-122.54.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
            },
            product_reference: "cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dlm-kmp-default-4.12.14-122.54.1.ppc64le as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
            },
            product_reference: "dlm-kmp-default-4.12.14-122.54.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dlm-kmp-default-4.12.14-122.54.1.s390x as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
            },
            product_reference: "dlm-kmp-default-4.12.14-122.54.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dlm-kmp-default-4.12.14-122.54.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
            },
            product_reference: "dlm-kmp-default-4.12.14-122.54.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gfs2-kmp-default-4.12.14-122.54.1.ppc64le as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
            },
            product_reference: "gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gfs2-kmp-default-4.12.14-122.54.1.s390x as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
            },
            product_reference: "gfs2-kmp-default-4.12.14-122.54.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gfs2-kmp-default-4.12.14-122.54.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
            },
            product_reference: "gfs2-kmp-default-4.12.14-122.54.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ocfs2-kmp-default-4.12.14-122.54.1.ppc64le as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
            },
            product_reference: "ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ocfs2-kmp-default-4.12.14-122.54.1.s390x as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
            },
            product_reference: "ocfs2-kmp-default-4.12.14-122.54.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ocfs2-kmp-default-4.12.14-122.54.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 12 SP5",
               product_id: "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
            },
            product_reference: "ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Availability Extension 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-kgraft-4.12.14-122.54.1.ppc64le as component of SUSE Linux Enterprise Live Patching 12 SP5",
               product_id: "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
            },
            product_reference: "kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Live Patching 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-kgraft-4.12.14-122.54.1.s390x as component of SUSE Linux Enterprise Live Patching 12 SP5",
               product_id: "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
            },
            product_reference: "kernel-default-kgraft-4.12.14-122.54.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Live Patching 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-kgraft-4.12.14-122.54.1.x86_64 as component of SUSE Linux Enterprise Live Patching 12 SP5",
               product_id: "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
            },
            product_reference: "kernel-default-kgraft-4.12.14-122.54.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Live Patching 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le as component of SUSE Linux Enterprise Live Patching 12 SP5",
               product_id: "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
            },
            product_reference: "kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Live Patching 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-kgraft-devel-4.12.14-122.54.1.s390x as component of SUSE Linux Enterprise Live Patching 12 SP5",
               product_id: "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
            },
            product_reference: "kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Live Patching 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64 as component of SUSE Linux Enterprise Live Patching 12 SP5",
               product_id: "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
            },
            product_reference: "kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Live Patching 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le as component of SUSE Linux Enterprise Live Patching 12 SP5",
               product_id: "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
            },
            product_reference: "kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Live Patching 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x as component of SUSE Linux Enterprise Live Patching 12 SP5",
               product_id: "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
            },
            product_reference: "kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Live Patching 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64 as component of SUSE Linux Enterprise Live Patching 12 SP5",
               product_id: "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
            },
            product_reference: "kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Live Patching 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-docs-4.12.14-122.54.1.noarch as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
            },
            product_reference: "kernel-docs-4.12.14-122.54.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-obs-build-4.12.14-122.54.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
            },
            product_reference: "kernel-obs-build-4.12.14-122.54.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-obs-build-4.12.14-122.54.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
            },
            product_reference: "kernel-obs-build-4.12.14-122.54.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-obs-build-4.12.14-122.54.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
            },
            product_reference: "kernel-obs-build-4.12.14-122.54.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-obs-build-4.12.14-122.54.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
            },
            product_reference: "kernel-obs-build-4.12.14-122.54.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-4.12.14-122.54.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
            },
            product_reference: "kernel-default-4.12.14-122.54.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-4.12.14-122.54.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
            },
            product_reference: "kernel-default-4.12.14-122.54.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-4.12.14-122.54.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
            },
            product_reference: "kernel-default-4.12.14-122.54.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-4.12.14-122.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
            },
            product_reference: "kernel-default-4.12.14-122.54.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-base-4.12.14-122.54.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
            },
            product_reference: "kernel-default-base-4.12.14-122.54.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-base-4.12.14-122.54.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
            },
            product_reference: "kernel-default-base-4.12.14-122.54.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-base-4.12.14-122.54.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
            },
            product_reference: "kernel-default-base-4.12.14-122.54.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-base-4.12.14-122.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
            },
            product_reference: "kernel-default-base-4.12.14-122.54.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-devel-4.12.14-122.54.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
            },
            product_reference: "kernel-default-devel-4.12.14-122.54.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-devel-4.12.14-122.54.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
            },
            product_reference: "kernel-default-devel-4.12.14-122.54.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-devel-4.12.14-122.54.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
            },
            product_reference: "kernel-default-devel-4.12.14-122.54.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-devel-4.12.14-122.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
            },
            product_reference: "kernel-default-devel-4.12.14-122.54.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-man-4.12.14-122.54.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
            },
            product_reference: "kernel-default-man-4.12.14-122.54.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-devel-4.12.14-122.54.1.noarch as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
            },
            product_reference: "kernel-devel-4.12.14-122.54.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-macros-4.12.14-122.54.1.noarch as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
            },
            product_reference: "kernel-macros-4.12.14-122.54.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-source-4.12.14-122.54.1.noarch as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
            },
            product_reference: "kernel-source-4.12.14-122.54.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-4.12.14-122.54.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
            },
            product_reference: "kernel-syms-4.12.14-122.54.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-4.12.14-122.54.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
            },
            product_reference: "kernel-syms-4.12.14-122.54.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-4.12.14-122.54.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
            },
            product_reference: "kernel-syms-4.12.14-122.54.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-4.12.14-122.54.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
            },
            product_reference: "kernel-syms-4.12.14-122.54.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-4.12.14-122.54.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
            },
            product_reference: "kernel-default-4.12.14-122.54.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-4.12.14-122.54.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
            },
            product_reference: "kernel-default-4.12.14-122.54.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-4.12.14-122.54.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
            },
            product_reference: "kernel-default-4.12.14-122.54.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-4.12.14-122.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
            },
            product_reference: "kernel-default-4.12.14-122.54.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-base-4.12.14-122.54.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
            },
            product_reference: "kernel-default-base-4.12.14-122.54.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-base-4.12.14-122.54.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
            },
            product_reference: "kernel-default-base-4.12.14-122.54.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-base-4.12.14-122.54.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
            },
            product_reference: "kernel-default-base-4.12.14-122.54.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-base-4.12.14-122.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
            },
            product_reference: "kernel-default-base-4.12.14-122.54.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-devel-4.12.14-122.54.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
            },
            product_reference: "kernel-default-devel-4.12.14-122.54.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-devel-4.12.14-122.54.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
            },
            product_reference: "kernel-default-devel-4.12.14-122.54.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-devel-4.12.14-122.54.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
            },
            product_reference: "kernel-default-devel-4.12.14-122.54.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-devel-4.12.14-122.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
            },
            product_reference: "kernel-default-devel-4.12.14-122.54.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-man-4.12.14-122.54.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
            },
            product_reference: "kernel-default-man-4.12.14-122.54.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-devel-4.12.14-122.54.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
            },
            product_reference: "kernel-devel-4.12.14-122.54.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-macros-4.12.14-122.54.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
            },
            product_reference: "kernel-macros-4.12.14-122.54.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-source-4.12.14-122.54.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
            },
            product_reference: "kernel-source-4.12.14-122.54.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-4.12.14-122.54.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
            },
            product_reference: "kernel-syms-4.12.14-122.54.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-4.12.14-122.54.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
            },
            product_reference: "kernel-syms-4.12.14-122.54.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-4.12.14-122.54.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
            },
            product_reference: "kernel-syms-4.12.14-122.54.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-4.12.14-122.54.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
            },
            product_reference: "kernel-syms-4.12.14-122.54.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-default-extra-4.12.14-122.54.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP5",
               product_id: "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
            },
            product_reference: "kernel-default-extra-4.12.14-122.54.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Workstation Extension 12 SP5",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2020-15436",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-15436",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-15436",
               url: "https://www.suse.com/security/cve/CVE-2020-15436",
            },
            {
               category: "external",
               summary: "SUSE Bug 1179141 for CVE-2020-15436",
               url: "https://bugzilla.suse.com/1179141",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-12-09T09:29:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-15436",
      },
      {
         cve: "CVE-2020-15437",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-15437",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:serial8250_isa_init_ports() that allows local users to cause a denial of service by using the p->serial_in pointer which uninitialized.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-15437",
               url: "https://www.suse.com/security/cve/CVE-2020-15437",
            },
            {
               category: "external",
               summary: "SUSE Bug 1179140 for CVE-2020-15437",
               url: "https://bugzilla.suse.com/1179140",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-12-09T09:29:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-15437",
      },
      {
         cve: "CVE-2020-25668",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-25668",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-25668",
               url: "https://www.suse.com/security/cve/CVE-2020-25668",
            },
            {
               category: "external",
               summary: "SUSE Bug 1178123 for CVE-2020-25668",
               url: "https://bugzilla.suse.com/1178123",
            },
            {
               category: "external",
               summary: "SUSE Bug 1178622 for CVE-2020-25668",
               url: "https://bugzilla.suse.com/1178622",
            },
            {
               category: "external",
               summary: "SUSE Bug 1196914 for CVE-2020-25668",
               url: "https://bugzilla.suse.com/1196914",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-12-09T09:29:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-25668",
      },
      {
         cve: "CVE-2020-25669",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-25669",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed. Though the dangling pointer is set to NULL in sunkbd_disconnect, there is still an alias in sunkbd_reinit causing Use After Free.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-25669",
               url: "https://www.suse.com/security/cve/CVE-2020-25669",
            },
            {
               category: "external",
               summary: "SUSE Bug 1178182 for CVE-2020-25669",
               url: "https://bugzilla.suse.com/1178182",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-12-09T09:29:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-25669",
      },
      {
         cve: "CVE-2020-25704",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-25704",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local user could use this flaw to starve the resources causing denial of service.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-25704",
               url: "https://www.suse.com/security/cve/CVE-2020-25704",
            },
            {
               category: "external",
               summary: "SUSE Bug 1178393 for CVE-2020-25704",
               url: "https://bugzilla.suse.com/1178393",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.2,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-12-09T09:29:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-25704",
      },
      {
         cve: "CVE-2020-25705",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-25705",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well on the Linux Based Products (RUGGEDCOM RM1224: All versions between v5.0 and v6.4, SCALANCE M-800: All versions between v5.0 and v6.4, SCALANCE S615: All versions between v5.0 and v6.4, SCALANCE SC-600: All versions prior to v2.1.3, SCALANCE W1750D: v8.3.0.1, v8.6.0, and v8.7.0, SIMATIC Cloud Connect 7: All versions, SIMATIC MV500 Family: All versions, SIMATIC NET CP 1243-1 (incl. SIPLUS variants): Versions 3.1.39 and later, SIMATIC NET CP 1243-7 LTE EU: Version",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-25705",
               url: "https://www.suse.com/security/cve/CVE-2020-25705",
            },
            {
               category: "external",
               summary: "SUSE Bug 1175721 for CVE-2020-25705",
               url: "https://bugzilla.suse.com/1175721",
            },
            {
               category: "external",
               summary: "SUSE Bug 1178782 for CVE-2020-25705",
               url: "https://bugzilla.suse.com/1178782",
            },
            {
               category: "external",
               summary: "SUSE Bug 1178783 for CVE-2020-25705",
               url: "https://bugzilla.suse.com/1178783",
            },
            {
               category: "external",
               summary: "SUSE Bug 1191790 for CVE-2020-25705",
               url: "https://bugzilla.suse.com/1191790",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.4,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-12-09T09:29:42Z",
               details: "important",
            },
         ],
         title: "CVE-2020-25705",
      },
      {
         cve: "CVE-2020-27777",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-27777",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-27777",
               url: "https://www.suse.com/security/cve/CVE-2020-27777",
            },
            {
               category: "external",
               summary: "SUSE Bug 1179107 for CVE-2020-27777",
               url: "https://bugzilla.suse.com/1179107",
            },
            {
               category: "external",
               summary: "SUSE Bug 1179419 for CVE-2020-27777",
               url: "https://bugzilla.suse.com/1179419",
            },
            {
               category: "external",
               summary: "SUSE Bug 1200343 for CVE-2020-27777",
               url: "https://bugzilla.suse.com/1200343",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220060 for CVE-2020-27777",
               url: "https://bugzilla.suse.com/1220060",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-12-09T09:29:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-27777",
      },
      {
         cve: "CVE-2020-28915",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-28915",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka CID-6735b4632def.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-28915",
               url: "https://www.suse.com/security/cve/CVE-2020-28915",
            },
            {
               category: "external",
               summary: "SUSE Bug 1178886 for CVE-2020-28915",
               url: "https://bugzilla.suse.com/1178886",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-12-09T09:29:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-28915",
      },
      {
         cve: "CVE-2020-28974",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-28974",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-28974",
               url: "https://www.suse.com/security/cve/CVE-2020-28974",
            },
            {
               category: "external",
               summary: "SUSE Bug 1178589 for CVE-2020-28974",
               url: "https://bugzilla.suse.com/1178589",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-12-09T09:29:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-28974",
      },
      {
         cve: "CVE-2020-29371",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-29371",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in romfs_dev_read in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory leaks to userspace, aka CID-bcf85fcedfdd.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
               "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
               "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-29371",
               url: "https://www.suse.com/security/cve/CVE-2020-29371",
            },
            {
               category: "external",
               summary: "SUSE Bug 1179429 for CVE-2020-29371",
               url: "https://bugzilla.suse.com/1179429",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.ppc64le",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.s390x",
                  "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_54-default-1-8.3.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.54.1.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.54.1.x86_64",
                  "SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.54.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-12-09T09:29:42Z",
               details: "low",
            },
         ],
         title: "CVE-2020-29371",
      },
   ],
}

CVE-2020-27777 (GCVE-0-2020-27777)

Vulnerability from cvelistv5

Published

2020-12-15 16:57

Modified

2024-08-04 16:25

Severity ?

Summary

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1900844	x_refsource_MISC
	https://www.openwall.com/lists/oss-security/2020/10/09/1	x_refsource_MISC
	https://www.openwall.com/lists/oss-security/2020/11/23/2	x_refsource_MISC
	https://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux.git/commit/?h=next&id=bd59380c5ba4147dcbaad3e582b55ccfd120b764	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	kernel	Version: kernel 5.10-rc1

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T16:25:42.438Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1900844",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.openwall.com/lists/oss-security/2020/10/09/1",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.openwall.com/lists/oss-security/2020/11/23/2",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux.git/commit/?h=next&id=bd59380c5ba4147dcbaad3e582b55ccfd120b764",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "kernel",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "kernel 5.10-rc1",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-862",
                     description: "CWE-862",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-12-15T16:57:45",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1900844",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.openwall.com/lists/oss-security/2020/10/09/1",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.openwall.com/lists/oss-security/2020/11/23/2",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux.git/commit/?h=next&id=bd59380c5ba4147dcbaad3e582b55ccfd120b764",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2020-27777",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "kernel",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "kernel 5.10-rc1",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-862",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1900844",
                     refsource: "MISC",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1900844",
                  },
                  {
                     name: "https://www.openwall.com/lists/oss-security/2020/10/09/1",
                     refsource: "MISC",
                     url: "https://www.openwall.com/lists/oss-security/2020/10/09/1",
                  },
                  {
                     name: "https://www.openwall.com/lists/oss-security/2020/11/23/2",
                     refsource: "MISC",
                     url: "https://www.openwall.com/lists/oss-security/2020/11/23/2",
                  },
                  {
                     name: "https://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux.git/commit/?h=next&id=bd59380c5ba4147dcbaad3e582b55ccfd120b764",
                     refsource: "MISC",
                     url: "https://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux.git/commit/?h=next&id=bd59380c5ba4147dcbaad3e582b55ccfd120b764",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2020-27777",
      datePublished: "2020-12-15T16:57:45",
      dateReserved: "2020-10-27T00:00:00",
      dateUpdated: "2024-08-04T16:25:42.438Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2020-25669 (GCVE-0-2020-25669)

Vulnerability from cvelistv5

Published

2021-05-26 11:25

Modified

2024-08-04 15:40

Severity ?

Summary

A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed. Though the dangling pointer is set to NULL in sunkbd_disconnect, there is still an alias in sunkbd_reinit causing Use After Free.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2020/11/05/2	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2020/11/20/5	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html	mailing-list, x_refsource_MLIST
	https://www.openwall.com/lists/oss-security/2020/11/05/2%2C	x_refsource_MISC
	https://www.openwall.com/lists/oss-security/2020/11/20/5%2C	x_refsource_MISC
	https://github.com/torvalds/linux/commit/77e70d351db7de07a46ac49b87a6c3c7a60fca7e	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20210702-0006/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	Linux Kernel	Version: 5.9.4

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T15:40:36.924Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20201105 CVE-2020-25669: Linux Kernel use-after-free in sunkbd_reinit",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2020/11/05/2",
               },
               {
                  name: "[oss-security] 20201120 Re: CVE-2020-25669: Linux Kernel use-after-free in sunkbd_reinit",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2020/11/20/5",
               },
               {
                  name: "[debian-lts-announce] 20201210 [SECURITY] [DLA 2483-1] linux-4.19 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html",
               },
               {
                  name: "[debian-lts-announce] 20201218 [SECURITY] [DLA 2494-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.openwall.com/lists/oss-security/2020/11/05/2%2C",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.openwall.com/lists/oss-security/2020/11/20/5%2C",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/torvalds/linux/commit/77e70d351db7de07a46ac49b87a6c3c7a60fca7e",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20210702-0006/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Linux Kernel",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "5.9.4",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed. Though the dangling pointer is set to NULL in sunkbd_disconnect, there is still an alias in sunkbd_reinit causing Use After Free.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-416",
                     description: "CWE-416",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-07-02T11:06:56",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "[oss-security] 20201105 CVE-2020-25669: Linux Kernel use-after-free in sunkbd_reinit",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2020/11/05/2",
            },
            {
               name: "[oss-security] 20201120 Re: CVE-2020-25669: Linux Kernel use-after-free in sunkbd_reinit",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2020/11/20/5",
            },
            {
               name: "[debian-lts-announce] 20201210 [SECURITY] [DLA 2483-1] linux-4.19 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html",
            },
            {
               name: "[debian-lts-announce] 20201218 [SECURITY] [DLA 2494-1] linux security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.openwall.com/lists/oss-security/2020/11/05/2%2C",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.openwall.com/lists/oss-security/2020/11/20/5%2C",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/torvalds/linux/commit/77e70d351db7de07a46ac49b87a6c3c7a60fca7e",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20210702-0006/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2020-25669",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Linux Kernel",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "5.9.4",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed. Though the dangling pointer is set to NULL in sunkbd_disconnect, there is still an alias in sunkbd_reinit causing Use After Free.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-416",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "[oss-security] 20201105 CVE-2020-25669: Linux Kernel use-after-free in sunkbd_reinit",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2020/11/05/2",
                  },
                  {
                     name: "[oss-security] 20201120 Re: CVE-2020-25669: Linux Kernel use-after-free in sunkbd_reinit",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2020/11/20/5",
                  },
                  {
                     name: "[debian-lts-announce] 20201210 [SECURITY] [DLA 2483-1] linux-4.19 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html",
                  },
                  {
                     name: "[debian-lts-announce] 20201218 [SECURITY] [DLA 2494-1] linux security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html",
                  },
                  {
                     name: "https://www.openwall.com/lists/oss-security/2020/11/05/2,",
                     refsource: "MISC",
                     url: "https://www.openwall.com/lists/oss-security/2020/11/05/2,",
                  },
                  {
                     name: "https://www.openwall.com/lists/oss-security/2020/11/20/5,",
                     refsource: "MISC",
                     url: "https://www.openwall.com/lists/oss-security/2020/11/20/5,",
                  },
                  {
                     name: "https://github.com/torvalds/linux/commit/77e70d351db7de07a46ac49b87a6c3c7a60fca7e",
                     refsource: "MISC",
                     url: "https://github.com/torvalds/linux/commit/77e70d351db7de07a46ac49b87a6c3c7a60fca7e",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20210702-0006/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20210702-0006/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2020-25669",
      datePublished: "2021-05-26T11:25:08",
      dateReserved: "2020-09-16T00:00:00",
      dateUpdated: "2024-08-04T15:40:36.924Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2020-25705 (GCVE-0-2020-25705)

Vulnerability from cvelistv5

Published

2020-11-17 01:16

Modified

2024-08-04 15:40

Severity ?

Summary

A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well on the Linux Based Products (RUGGEDCOM RM1224: All versions between v5.0 and v6.4, SCALANCE M-800: All versions between v5.0 and v6.4, SCALANCE S615: All versions between v5.0 and v6.4, SCALANCE SC-600: All versions prior to v2.1.3, SCALANCE W1750D: v8.3.0.1, v8.6.0, and v8.7.0, SIMATIC Cloud Connect 7: All versions, SIMATIC MV500 Family: All versions, SIMATIC NET CP 1243-1 (incl. SIPLUS variants): Versions 3.1.39 and later, SIMATIC NET CP 1243-7 LTE EU: Version

References

▼	URL	Tags
	https://us-cert.cisa.gov/ics/advisories/icsa-21-131-03	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	Siemens Lunux Based Products	Version: RUGGEDCOM RM1224: All versions between v5.0 and v6.4, SCALANCE M-800: All versions between v5.0 and v6.4, SCALANCE S615: All versions between v5.0 and v6.4, SCALANCE SC-600: All versions prior to v2.1.3, SCALANCE W1750D: v8.3.0.1, v8.6.0, and v8.7.0, SIMATIC Cloud Connect 7: All versions, SIMATIC MV500 Family: All versions, SIMATIC NET CP 1243-1 (incl. SIPLUS variants): Versions 3.1.39 and later, SIMATIC NET CP 1243-7 LTE EU: Versions 3.1.39 and later, SIMATIC NET CP 1243-7 LTE US: Versions 3.1.39 and later, SIMATIC NET CP 1243-7: Versions 3.1.39 and later, SIMATIC NET CP 1243-8 IRC: Versions 3.1.39 and later, SIMATIC NET CP 1542SP-1 IRC (incl. SIPLUS variants): Versions 2.0 and later, SIMATIC NET CP 1542SP-1: Versions 2.0 and later, SIMATIC NET CP 1543-1 (incl. SIPLUS variants): Versions 2.2 and later, SIMATIC NET CP 1543SP-1 (incl SIPLUS variants): Versions 2.0 and later, SIMATIC NET CP 1545-1: All versions, SINEMA Remote Connect Server: All versions prior to v3.0 SP1, TIM 1531 IRC (incl. SI ...[truncated*]

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T15:40:36.596Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-131-03",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Siemens Lunux Based Products",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "RUGGEDCOM RM1224: All versions between v5.0 and v6.4, SCALANCE M-800: All versions between v5.0 and v6.4, SCALANCE S615: All versions between v5.0 and v6.4, SCALANCE SC-600: All versions prior to v2.1.3, SCALANCE W1750D: v8.3.0.1, v8.6.0, and v8.7.0, SIMATIC Cloud Connect 7: All versions, SIMATIC MV500 Family: All versions, SIMATIC NET CP 1243-1 (incl. SIPLUS variants): Versions 3.1.39 and later, SIMATIC NET CP 1243-7 LTE EU: Versions 3.1.39 and later, SIMATIC NET CP 1243-7 LTE US: Versions 3.1.39 and later, SIMATIC NET CP 1243-7: Versions 3.1.39 and later, SIMATIC NET CP 1243-8 IRC: Versions 3.1.39 and later, SIMATIC NET CP 1542SP-1 IRC (incl. SIPLUS variants): Versions 2.0 and later, SIMATIC NET CP 1542SP-1: Versions 2.0 and later, SIMATIC NET CP 1543-1 (incl. SIPLUS variants): Versions 2.2 and later, SIMATIC NET CP 1543SP-1 (incl SIPLUS variants): Versions 2.0 and later, SIMATIC NET CP 1545-1: All versions, SINEMA Remote Connect Server: All versions prior to v3.0 SP1, TIM 1531 IRC (incl. SI ...[truncated*]",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well on the Linux Based Products (RUGGEDCOM RM1224: All versions between v5.0 and v6.4, SCALANCE M-800: All versions between v5.0 and v6.4, SCALANCE S615: All versions between v5.0 and v6.4, SCALANCE SC-600: All versions prior to v2.1.3, SCALANCE W1750D: v8.3.0.1, v8.6.0, and v8.7.0, SIMATIC Cloud Connect 7: All versions, SIMATIC MV500 Family: All versions, SIMATIC NET CP 1243-1 (incl. SIPLUS variants): Versions 3.1.39 and later, SIMATIC NET CP 1243-7 LTE EU: Version",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-330",
                     description: "USE OF INSUFFICIENTLY RANDOM VALUES CWE-330",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-05-18T10:48:35",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-131-03",
            },
         ],
         x_ConverterErrors: {
            version_name: {
               error: "version_name too long. Use array of versions to record more than one version.",
               message: "Truncated!",
            },
         },
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2020-25705",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Siemens Lunux Based Products",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "RUGGEDCOM RM1224: All versions between v5.0 and v6.4, SCALANCE M-800: All versions between v5.0 and v6.4, SCALANCE S615: All versions between v5.0 and v6.4, SCALANCE SC-600: All versions prior to v2.1.3, SCALANCE W1750D: v8.3.0.1, v8.6.0, and v8.7.0, SIMATIC Cloud Connect 7: All versions, SIMATIC MV500 Family: All versions, SIMATIC NET CP 1243-1 (incl. SIPLUS variants): Versions 3.1.39 and later, SIMATIC NET CP 1243-7 LTE EU: Versions 3.1.39 and later, SIMATIC NET CP 1243-7 LTE US: Versions 3.1.39 and later, SIMATIC NET CP 1243-7: Versions 3.1.39 and later, SIMATIC NET CP 1243-8 IRC: Versions 3.1.39 and later, SIMATIC NET CP 1542SP-1 IRC (incl. SIPLUS variants): Versions 2.0 and later, SIMATIC NET CP 1542SP-1: Versions 2.0 and later, SIMATIC NET CP 1543-1 (incl. SIPLUS variants): Versions 2.2 and later, SIMATIC NET CP 1543SP-1 (incl SIPLUS variants): Versions 2.0 and later, SIMATIC NET CP 1545-1: All versions, SINEMA Remote Connect Server: All versions prior to v3.0 SP1, TIM 1531 IRC (incl. SIPLUS NET variants): All versions",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well on the Linux Based Products (RUGGEDCOM RM1224: All versions between v5.0 and v6.4, SCALANCE M-800: All versions between v5.0 and v6.4, SCALANCE S615: All versions between v5.0 and v6.4, SCALANCE SC-600: All versions prior to v2.1.3, SCALANCE W1750D: v8.3.0.1, v8.6.0, and v8.7.0, SIMATIC Cloud Connect 7: All versions, SIMATIC MV500 Family: All versions, SIMATIC NET CP 1243-1 (incl. SIPLUS variants): Versions 3.1.39 and later, SIMATIC NET CP 1243-7 LTE EU: Version",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "USE OF INSUFFICIENTLY RANDOM VALUES CWE-330",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://us-cert.cisa.gov/ics/advisories/icsa-21-131-03",
                     refsource: "MISC",
                     url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-131-03",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2020-25705",
      datePublished: "2020-11-17T01:16:17",
      dateReserved: "2020-09-16T00:00:00",
      dateUpdated: "2024-08-04T15:40:36.596Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2020-29371 (GCVE-0-2020-29371)

Vulnerability from cvelistv5

Published

2020-11-28 06:19

Modified

2024-08-04 16:48

Severity ?

Summary

An issue was discovered in romfs_dev_read in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory leaks to userspace, aka CID-bcf85fcedfdd.

References

▼	URL	Tags
	https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.4	x_refsource_MISC
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2935e0a3cec1ffa558eea90db6279cff83aa3592	x_refsource_MISC
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bcf85fcedfdd17911982a3e3564fcfec7b01eebd	x_refsource_MISC
	https://bugs.chromium.org/p/project-zero/issues/detail?id=2077	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T16:48:01.800Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.4",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2935e0a3cec1ffa558eea90db6279cff83aa3592",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bcf85fcedfdd17911982a3e3564fcfec7b01eebd",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugs.chromium.org/p/project-zero/issues/detail?id=2077",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "An issue was discovered in romfs_dev_read in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory leaks to userspace, aka CID-bcf85fcedfdd.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-11-28T06:19:50",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.4",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2935e0a3cec1ffa558eea90db6279cff83aa3592",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bcf85fcedfdd17911982a3e3564fcfec7b01eebd",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugs.chromium.org/p/project-zero/issues/detail?id=2077",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-29371",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An issue was discovered in romfs_dev_read in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory leaks to userspace, aka CID-bcf85fcedfdd.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.4",
                     refsource: "MISC",
                     url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.4",
                  },
                  {
                     name: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2935e0a3cec1ffa558eea90db6279cff83aa3592",
                     refsource: "MISC",
                     url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2935e0a3cec1ffa558eea90db6279cff83aa3592",
                  },
                  {
                     name: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bcf85fcedfdd17911982a3e3564fcfec7b01eebd",
                     refsource: "MISC",
                     url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bcf85fcedfdd17911982a3e3564fcfec7b01eebd",
                  },
                  {
                     name: "https://bugs.chromium.org/p/project-zero/issues/detail?id=2077",
                     refsource: "MISC",
                     url: "https://bugs.chromium.org/p/project-zero/issues/detail?id=2077",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-29371",
      datePublished: "2020-11-28T06:19:50",
      dateReserved: "2020-11-28T00:00:00",
      dateUpdated: "2024-08-04T16:48:01.800Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2020-25704 (GCVE-0-2020-25704)

Vulnerability from cvelistv5

Published

2020-12-02 00:00

Modified

2024-08-04 15:40

Severity ?

Summary

A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local user could use this flaw to starve the resources causing denial of service.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1895961
	https://www.openwall.com/lists/oss-security/2020/11/09/1
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7bdb157cdebbf95a1cd94ed2e01b338714075d00
	https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html	mailing-list
	https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html	mailing-list
	https://www.starwindsoftware.com/security/sw-20220802-0003/

Impacted products

	Vendor	Product	Version
	n/a	kernel	Version: kernel 5.10-rc3

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T15:40:36.653Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1895961",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.openwall.com/lists/oss-security/2020/11/09/1",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7bdb157cdebbf95a1cd94ed2e01b338714075d00",
               },
               {
                  name: "[debian-lts-announce] 20201210 [SECURITY] [DLA 2483-1] linux-4.19 security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html",
               },
               {
                  name: "[debian-lts-announce] 20201218 [SECURITY] [DLA 2494-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.starwindsoftware.com/security/sw-20220802-0003/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "kernel",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "kernel 5.10-rc3",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local user could use this flaw to starve the resources causing denial of service.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-401",
                     description: "CWE-401",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-10-11T00:00:00",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1895961",
            },
            {
               url: "https://www.openwall.com/lists/oss-security/2020/11/09/1",
            },
            {
               url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7bdb157cdebbf95a1cd94ed2e01b338714075d00",
            },
            {
               name: "[debian-lts-announce] 20201210 [SECURITY] [DLA 2483-1] linux-4.19 security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html",
            },
            {
               name: "[debian-lts-announce] 20201218 [SECURITY] [DLA 2494-1] linux security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html",
            },
            {
               url: "https://www.starwindsoftware.com/security/sw-20220802-0003/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2020-25704",
      datePublished: "2020-12-02T00:00:00",
      dateReserved: "2020-09-16T00:00:00",
      dateUpdated: "2024-08-04T15:40:36.653Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2020-15436 (GCVE-0-2020-15436)

Vulnerability from cvelistv5

Published

2020-11-23 20:08

Modified

2024-08-04 13:15

Severity ?

Summary

Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.

References

▼	URL	Tags
	https://lkml.org/lkml/2020/6/7/379	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20201218-0002/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	linux kernel	Version: 5.7 (verified), possibly others 4.18

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T13:15:20.795Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lkml.org/lkml/2020/6/7/379",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20201218-0002/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "linux kernel",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "5.7 (verified), possibly others 4.18",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Use After Free",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-12-18T10:06:18",
            orgId: "7e1ac599-2767-43fa-b3ea-f10178cc98f2",
            shortName: "openEuler",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lkml.org/lkml/2020/6/7/379",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20201218-0002/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "securities@openeuler.org",
               ID: "CVE-2020-15436",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "linux kernel",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "5.7 (verified), possibly others 4.18",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Use After Free",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://lkml.org/lkml/2020/6/7/379",
                     refsource: "MISC",
                     url: "https://lkml.org/lkml/2020/6/7/379",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20201218-0002/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20201218-0002/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "7e1ac599-2767-43fa-b3ea-f10178cc98f2",
      assignerShortName: "openEuler",
      cveId: "CVE-2020-15436",
      datePublished: "2020-11-23T20:08:17",
      dateReserved: "2020-06-30T00:00:00",
      dateUpdated: "2024-08-04T13:15:20.795Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2020-28974 (GCVE-0-2020-28974)

Vulnerability from cvelistv5

Published

2020-11-20 17:49

Modified

2024-08-04 16:48

Severity ?

Summary

A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.

References

▼	URL	Tags
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c4e0dff2095c579b142d5a0693257f1c58b4804	x_refsource_MISC
	https://seclists.org/oss-sec/2020/q4/104	x_refsource_MISC
	https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.7	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2020/11/25/1	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html	mailing-list, x_refsource_MLIST
	https://security.netapp.com/advisory/ntap-20210108-0003/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T16:48:01.280Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c4e0dff2095c579b142d5a0693257f1c58b4804",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://seclists.org/oss-sec/2020/q4/104",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.7",
               },
               {
                  name: "[oss-security] 20201124 Re: Linux kernel slab-out-of-bounds Read in fbcon",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2020/11/25/1",
               },
               {
                  name: "[debian-lts-announce] 20201210 [SECURITY] [DLA 2483-1] linux-4.19 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html",
               },
               {
                  name: "[debian-lts-announce] 20201218 [SECURITY] [DLA 2494-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20210108-0003/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-01-08T11:06:12",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c4e0dff2095c579b142d5a0693257f1c58b4804",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://seclists.org/oss-sec/2020/q4/104",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.7",
            },
            {
               name: "[oss-security] 20201124 Re: Linux kernel slab-out-of-bounds Read in fbcon",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2020/11/25/1",
            },
            {
               name: "[debian-lts-announce] 20201210 [SECURITY] [DLA 2483-1] linux-4.19 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html",
            },
            {
               name: "[debian-lts-announce] 20201218 [SECURITY] [DLA 2494-1] linux security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20210108-0003/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-28974",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c4e0dff2095c579b142d5a0693257f1c58b4804",
                     refsource: "MISC",
                     url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c4e0dff2095c579b142d5a0693257f1c58b4804",
                  },
                  {
                     name: "https://seclists.org/oss-sec/2020/q4/104",
                     refsource: "MISC",
                     url: "https://seclists.org/oss-sec/2020/q4/104",
                  },
                  {
                     name: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.7",
                     refsource: "MISC",
                     url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.7",
                  },
                  {
                     name: "[oss-security] 20201124 Re: Linux kernel slab-out-of-bounds Read in fbcon",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2020/11/25/1",
                  },
                  {
                     name: "[debian-lts-announce] 20201210 [SECURITY] [DLA 2483-1] linux-4.19 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html",
                  },
                  {
                     name: "[debian-lts-announce] 20201218 [SECURITY] [DLA 2494-1] linux security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20210108-0003/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20210108-0003/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-28974",
      datePublished: "2020-11-20T17:49:57",
      dateReserved: "2020-11-20T00:00:00",
      dateUpdated: "2024-08-04T16:48:01.280Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2020-15437 (GCVE-0-2020-15437)

Vulnerability from cvelistv5

Published

2020-11-23 20:10

Modified

2024-08-04 13:15

Severity ?

Summary

The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:serial8250_isa_init_ports() that allows local users to cause a denial of service by using the p->serial_in pointer which uninitialized.

References

▼	URL	Tags
	https://lkml.org/lkml/2020/7/21/80	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	linux kernel	Version: 5.7 (verified), possibly others 4.18

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T13:15:20.694Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lkml.org/lkml/2020/7/21/80",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "linux kernel",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "5.7 (verified), possibly others 4.18",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:serial8250_isa_init_ports() that allows local users to cause a denial of service by using the p->serial_in pointer which uninitialized.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "NULL Pointer Dereference",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-11-23T20:10:28",
            orgId: "7e1ac599-2767-43fa-b3ea-f10178cc98f2",
            shortName: "openEuler",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lkml.org/lkml/2020/7/21/80",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "securities@openeuler.org",
               ID: "CVE-2020-15437",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "linux kernel",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "5.7 (verified), possibly others 4.18",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:serial8250_isa_init_ports() that allows local users to cause a denial of service by using the p->serial_in pointer which uninitialized.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "NULL Pointer Dereference",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://lkml.org/lkml/2020/7/21/80",
                     refsource: "MISC",
                     url: "https://lkml.org/lkml/2020/7/21/80",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "7e1ac599-2767-43fa-b3ea-f10178cc98f2",
      assignerShortName: "openEuler",
      cveId: "CVE-2020-15437",
      datePublished: "2020-11-23T20:10:28",
      dateReserved: "2020-06-30T00:00:00",
      dateUpdated: "2024-08-04T13:15:20.694Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2020-28915 (GCVE-0-2020-28915)

Vulnerability from cvelistv5

Published

2020-11-18 07:59

Modified

2024-08-04 16:40

Severity ?

Summary

A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka CID-6735b4632def.

References

▼	URL	Tags
	https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.15	x_refsource_MISC
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6735b4632def0640dbdf4eb9f99816aca18c4f16	x_refsource_MISC
	https://syzkaller.appspot.com/bug?id=08b8be45afea11888776f897895aef9ad1c3ecfd	x_refsource_MISC
	https://bugzilla.suse.com/show_bug.cgi?id=1178886	x_refsource_MISC
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5af08640795b2b9a940c9266c0260455377ae262	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T16:40:59.982Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.15",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6735b4632def0640dbdf4eb9f99816aca18c4f16",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://syzkaller.appspot.com/bug?id=08b8be45afea11888776f897895aef9ad1c3ecfd",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.suse.com/show_bug.cgi?id=1178886",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5af08640795b2b9a940c9266c0260455377ae262",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka CID-6735b4632def.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-11-18T14:12:06",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.15",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6735b4632def0640dbdf4eb9f99816aca18c4f16",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://syzkaller.appspot.com/bug?id=08b8be45afea11888776f897895aef9ad1c3ecfd",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.suse.com/show_bug.cgi?id=1178886",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5af08640795b2b9a940c9266c0260455377ae262",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-28915",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka CID-6735b4632def.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.15",
                     refsource: "MISC",
                     url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.15",
                  },
                  {
                     name: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6735b4632def0640dbdf4eb9f99816aca18c4f16",
                     refsource: "MISC",
                     url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6735b4632def0640dbdf4eb9f99816aca18c4f16",
                  },
                  {
                     name: "https://syzkaller.appspot.com/bug?id=08b8be45afea11888776f897895aef9ad1c3ecfd",
                     refsource: "MISC",
                     url: "https://syzkaller.appspot.com/bug?id=08b8be45afea11888776f897895aef9ad1c3ecfd",
                  },
                  {
                     name: "https://bugzilla.suse.com/show_bug.cgi?id=1178886",
                     refsource: "MISC",
                     url: "https://bugzilla.suse.com/show_bug.cgi?id=1178886",
                  },
                  {
                     name: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5af08640795b2b9a940c9266c0260455377ae262",
                     refsource: "MISC",
                     url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5af08640795b2b9a940c9266c0260455377ae262",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-28915",
      datePublished: "2020-11-18T07:59:42",
      dateReserved: "2020-11-18T00:00:00",
      dateUpdated: "2024-08-04T16:40:59.982Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2020-25668 (GCVE-0-2020-25668)

Vulnerability from cvelistv5

Published

2021-05-26 11:11

Modified

2024-08-04 15:40

Severity ?

Summary

A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2020/10/30/1	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2020/11/04/3	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html	mailing-list, x_refsource_MLIST
	https://www.openwall.com/lists/oss-security/2020/11/04/3%2C	x_refsource_MISC
	https://www.openwall.com/lists/oss-security/2020/10/30/1%2C	x_refsource_MISC
	https://bugzilla.redhat.com/show_bug.cgi?id=1893287%2C	x_refsource_MISC
	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=90bfdeef83f1d6c696039b6a917190dcbbad3220	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20210702-0005/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	Linux Kernel	Version: 5.9.2

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T15:40:36.882Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20201030 CVE-2020-25668: Linux kernel concurrency use-after-free in vt",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2020/10/30/1",
               },
               {
                  name: "[oss-security] 20201104 Re: CVE-2020-25668: Linux kernel concurrency use-after-free in vt",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2020/11/04/3",
               },
               {
                  name: "[debian-lts-announce] 20201210 [SECURITY] [DLA 2483-1] linux-4.19 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html",
               },
               {
                  name: "[debian-lts-announce] 20201218 [SECURITY] [DLA 2494-1] linux security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.openwall.com/lists/oss-security/2020/11/04/3%2C",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.openwall.com/lists/oss-security/2020/10/30/1%2C",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1893287%2C",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=90bfdeef83f1d6c696039b6a917190dcbbad3220",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20210702-0005/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Linux Kernel",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "5.9.2",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-362",
                     description: "CWE-362 -> CWE-416",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-07-02T11:06:20",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "[oss-security] 20201030 CVE-2020-25668: Linux kernel concurrency use-after-free in vt",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2020/10/30/1",
            },
            {
               name: "[oss-security] 20201104 Re: CVE-2020-25668: Linux kernel concurrency use-after-free in vt",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2020/11/04/3",
            },
            {
               name: "[debian-lts-announce] 20201210 [SECURITY] [DLA 2483-1] linux-4.19 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html",
            },
            {
               name: "[debian-lts-announce] 20201218 [SECURITY] [DLA 2494-1] linux security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.openwall.com/lists/oss-security/2020/11/04/3%2C",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.openwall.com/lists/oss-security/2020/10/30/1%2C",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1893287%2C",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=90bfdeef83f1d6c696039b6a917190dcbbad3220",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20210702-0005/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2020-25668",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Linux Kernel",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "5.9.2",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-362 -> CWE-416",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "[oss-security] 20201030 CVE-2020-25668: Linux kernel concurrency use-after-free in vt",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2020/10/30/1",
                  },
                  {
                     name: "[oss-security] 20201104 Re: CVE-2020-25668: Linux kernel concurrency use-after-free in vt",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2020/11/04/3",
                  },
                  {
                     name: "[debian-lts-announce] 20201210 [SECURITY] [DLA 2483-1] linux-4.19 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html",
                  },
                  {
                     name: "[debian-lts-announce] 20201218 [SECURITY] [DLA 2494-1] linux security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html",
                  },
                  {
                     name: "https://www.openwall.com/lists/oss-security/2020/11/04/3,",
                     refsource: "MISC",
                     url: "https://www.openwall.com/lists/oss-security/2020/11/04/3,",
                  },
                  {
                     name: "https://www.openwall.com/lists/oss-security/2020/10/30/1,",
                     refsource: "MISC",
                     url: "https://www.openwall.com/lists/oss-security/2020/10/30/1,",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1893287,",
                     refsource: "MISC",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1893287,",
                  },
                  {
                     name: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=90bfdeef83f1d6c696039b6a917190dcbbad3220",
                     refsource: "MISC",
                     url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=90bfdeef83f1d6c696039b6a917190dcbbad3220",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20210702-0005/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20210702-0005/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2020-25668",
      datePublished: "2021-05-26T11:11:04",
      dateReserved: "2020-09-16T00:00:00",
      dateUpdated: "2024-08-04T15:40:36.882Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

CVE-2020-27777 (GCVE-0-2020-27777)

Vulnerability from cvelistv5

CVE-2020-25669 (GCVE-0-2020-25669)

Vulnerability from cvelistv5

CVE-2020-25705 (GCVE-0-2020-25705)

Vulnerability from cvelistv5

CVE-2020-29371 (GCVE-0-2020-29371)

Vulnerability from cvelistv5

CVE-2020-25704 (GCVE-0-2020-25704)

Vulnerability from cvelistv5

CVE-2020-15436 (GCVE-0-2020-15436)

Vulnerability from cvelistv5

CVE-2020-28974 (GCVE-0-2020-28974)

Vulnerability from cvelistv5

CVE-2020-15437 (GCVE-0-2020-15437)

Vulnerability from cvelistv5

CVE-2020-28915 (GCVE-0-2020-28915)

Vulnerability from cvelistv5

CVE-2020-25668 (GCVE-0-2020-25668)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature