Описание
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes.
The following security bug was fixed:
- CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption (bsc#1176069).
Список пакетов
SUSE Linux Enterprise High Availability Extension 15 SP2
cluster-md-kmp-default-5.3.18-24.15.1
dlm-kmp-default-5.3.18-24.15.1
gfs2-kmp-default-5.3.18-24.15.1
ocfs2-kmp-default-5.3.18-24.15.1
SUSE Linux Enterprise Live Patching 15 SP2
kernel-default-livepatch-5.3.18-24.15.1
kernel-default-livepatch-devel-5.3.18-24.15.1
kernel-livepatch-5_3_18-24_15-default-1-5.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP2
kernel-default-5.3.18-24.15.1
kernel-default-devel-5.3.18-24.15.1
kernel-devel-5.3.18-24.15.1
kernel-macros-5.3.18-24.15.1
kernel-preempt-5.3.18-24.15.1
SUSE Linux Enterprise Module for Development Tools 15 SP2
kernel-docs-5.3.18-24.15.2
kernel-obs-build-5.3.18-24.15.1
kernel-preempt-devel-5.3.18-24.15.1
kernel-source-5.3.18-24.15.1
kernel-syms-5.3.18-24.15.1
SUSE Linux Enterprise Module for Legacy 15 SP2
reiserfs-kmp-default-5.3.18-24.15.1
SUSE Linux Enterprise Workstation Extension 15 SP2
kernel-default-extra-5.3.18-24.15.1
Ссылки
- Link for SUSE-SU-2020:2577-1
- E-Mail link for SUSE-SU-2020:2577-1
- SUSE Security Ratings
- SUSE Bug 1176069
- SUSE CVE CVE-2020-14386 page
Описание
A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity.
Затронутые продукты
SUSE Linux Enterprise High Availability Extension 15 SP2:cluster-md-kmp-default-5.3.18-24.15.1
SUSE Linux Enterprise High Availability Extension 15 SP2:dlm-kmp-default-5.3.18-24.15.1
SUSE Linux Enterprise High Availability Extension 15 SP2:gfs2-kmp-default-5.3.18-24.15.1
SUSE Linux Enterprise High Availability Extension 15 SP2:ocfs2-kmp-default-5.3.18-24.15.1
Ссылки
- CVE-2020-14386
- SUSE Bug 1176069
- SUSE Bug 1176072