Описание
Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-24_37 fixes one issue.
The following security issue was fixed:
- CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178622).
Список пакетов
SUSE Linux Enterprise Live Patching 12 SP5
kgraft-patch-4_12_14-122_51-default-2-2.1
SUSE Linux Enterprise Live Patching 15 SP2
kernel-livepatch-5_3_18-24_37-default-2-2.1
Ссылки
- Link for SUSE-SU-2020:3698-1
- E-Mail link for SUSE-SU-2020:3698-1
- SUSE Security Ratings
- SUSE Bug 1178622
- SUSE CVE CVE-2020-25668 page
Описание
A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.
Затронутые продукты
SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_51-default-2-2.1
SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-24_37-default-2-2.1
Ссылки
- CVE-2020-25668
- SUSE Bug 1178123
- SUSE Bug 1178622
- SUSE Bug 1196914