Описание
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues:
- CVE-2019-15126: Updated Broadcom firmware to fix Kr00k bug (bsc#1167162).
This update was imported from the SUSE:SLE-15-SP1:Update update project.
Список пакетов
openSUSE Leap 15.2
kernel-firmware-20200107-lp152.2.9.1
ucode-amd-20200107-lp152.2.9.1
Ссылки
- E-Mail link for openSUSE-SU-2021:1648-1
- SUSE Security Ratings
- SUSE Bug 1167162
- SUSE CVE CVE-2019-15126 page
Описание
An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic, a different vulnerability than CVE-2019-9500, CVE-2019-9501, CVE-2019-9502, and CVE-2019-9503.
Затронутые продукты
openSUSE Leap 15.2:kernel-firmware-20200107-lp152.2.9.1
openSUSE Leap 15.2:ucode-amd-20200107-lp152.2.9.1
Ссылки
- CVE-2019-15126
- SUSE Bug 1167162