{"schema_version":"1.7.3","id":"SUSE-SU-2020:14442-1","published":"2020-08-03T14:46:47Z","modified":"2026-02-04T03:41:29.142791Z","related":["CVE-2019-5108","CVE-2020-0305","CVE-2020-10732","CVE-2020-10769","CVE-2020-10773","CVE-2020-12652","CVE-2020-12656","CVE-2020-13974","CVE-2020-14416"],"upstream":["CVE-2019-5108","CVE-2020-0305","CVE-2020-10732","CVE-2020-10769","CVE-2020-10773","CVE-2020-12652","CVE-2020-12656","CVE-2020-13974","CVE-2020-14416"],"summary":"Security update for the Linux Kernel","details":"The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2020-10773: Fixed a memory leak on s390/s390x, in the cmm_timeout_hander in file arch/s390/mm/cmm.c (bnc#1172999).\n- CVE-2020-14416: Fixed a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c (bnc#1162002).\n- CVE-2020-13974: Fixed a integer overflow in drivers/tty/vt/keyboard.c, if k_ascii is called several times in a row (bnc#1172775).\n- CVE-2020-10732: A flaw was found in the implementation of Userspace core dumps. This flaw allowed an attacker with a local account to crash a trivial program and exfiltrate private kernel data (bnc#1171220).\n- CVE-2020-12656: Fixed a memory leak in gss_mech_free in the rpcsec_gss_krb5 implementation, caused by a lack of certain domain_release calls (bnc#1171219).\n- CVE-2020-0305: Fixed a possible use-after-free due to a race condition incdev_get of char_dev.c. This could lead to local escalation of privilege. User interaction is not needed for exploitation (bnc#1174462).\n- CVE-2020-10769: A buffer over-read flaw was found in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. This flaw allowed a local attacker with user privileges to cause a denial of service (bnc#1173265).\n- CVE-2020-12652: The __mptctl_ioctl function in drivers/message/fusion/mptctl.c allowed local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a 'double fetch' vulnerability (bnc#1171218).\n- CVE-2019-5108: Fixed a denial-of-service vulnerability in the wifi stack. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed (bnc#1159912).\n\nThe following non-security bugs were fixed:\n\n- Fix gcc-discovered error in zeroing a struct (bnc#680814)\n","affected":[{"package":{"name":"kernel-bigmem","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","purl":"pkg:rpm/suse/kernel-bigmem&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.117.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-bigmem":"3.0.101-108.117.1","kernel-bigmem-base":"3.0.101-108.117.1","kernel-bigmem-devel":"3.0.101-108.117.1","kernel-default":"3.0.101-108.117.1","kernel-default-base":"3.0.101-108.117.1","kernel-default-devel":"3.0.101-108.117.1","kernel-default-man":"3.0.101-108.117.1","kernel-ec2":"3.0.101-108.117.1","kernel-ec2-base":"3.0.101-108.117.1","kernel-ec2-devel":"3.0.101-108.117.1","kernel-pae":"3.0.101-108.117.1","kernel-pae-base":"3.0.101-108.117.1","kernel-pae-devel":"3.0.101-108.117.1","kernel-ppc64":"3.0.101-108.117.1","kernel-ppc64-base":"3.0.101-108.117.1","kernel-ppc64-devel":"3.0.101-108.117.1","kernel-source":"3.0.101-108.117.1","kernel-syms":"3.0.101-108.117.1","kernel-trace":"3.0.101-108.117.1","kernel-trace-base":"3.0.101-108.117.1","kernel-trace-devel":"3.0.101-108.117.1","kernel-xen":"3.0.101-108.117.1","kernel-xen-base":"3.0.101-108.117.1","kernel-xen-devel":"3.0.101-108.117.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14442-1.json"}},{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.117.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-bigmem":"3.0.101-108.117.1","kernel-bigmem-base":"3.0.101-108.117.1","kernel-bigmem-devel":"3.0.101-108.117.1","kernel-default":"3.0.101-108.117.1","kernel-default-base":"3.0.101-108.117.1","kernel-default-devel":"3.0.101-108.117.1","kernel-default-man":"3.0.101-108.117.1","kernel-ec2":"3.0.101-108.117.1","kernel-ec2-base":"3.0.101-108.117.1","kernel-ec2-devel":"3.0.101-108.117.1","kernel-pae":"3.0.101-108.117.1","kernel-pae-base":"3.0.101-108.117.1","kernel-pae-devel":"3.0.101-108.117.1","kernel-ppc64":"3.0.101-108.117.1","kernel-ppc64-base":"3.0.101-108.117.1","kernel-ppc64-devel":"3.0.101-108.117.1","kernel-source":"3.0.101-108.117.1","kernel-syms":"3.0.101-108.117.1","kernel-trace":"3.0.101-108.117.1","kernel-trace-base":"3.0.101-108.117.1","kernel-trace-devel":"3.0.101-108.117.1","kernel-xen":"3.0.101-108.117.1","kernel-xen-base":"3.0.101-108.117.1","kernel-xen-devel":"3.0.101-108.117.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14442-1.json"}},{"package":{"name":"kernel-ec2","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","purl":"pkg:rpm/suse/kernel-ec2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.117.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-bigmem":"3.0.101-108.117.1","kernel-bigmem-base":"3.0.101-108.117.1","kernel-bigmem-devel":"3.0.101-108.117.1","kernel-default":"3.0.101-108.117.1","kernel-default-base":"3.0.101-108.117.1","kernel-default-devel":"3.0.101-108.117.1","kernel-default-man":"3.0.101-108.117.1","kernel-ec2":"3.0.101-108.117.1","kernel-ec2-base":"3.0.101-108.117.1","kernel-ec2-devel":"3.0.101-108.117.1","kernel-pae":"3.0.101-108.117.1","kernel-pae-base":"3.0.101-108.117.1","kernel-pae-devel":"3.0.101-108.117.1","kernel-ppc64":"3.0.101-108.117.1","kernel-ppc64-base":"3.0.101-108.117.1","kernel-ppc64-devel":"3.0.101-108.117.1","kernel-source":"3.0.101-108.117.1","kernel-syms":"3.0.101-108.117.1","kernel-trace":"3.0.101-108.117.1","kernel-trace-base":"3.0.101-108.117.1","kernel-trace-devel":"3.0.101-108.117.1","kernel-xen":"3.0.101-108.117.1","kernel-xen-base":"3.0.101-108.117.1","kernel-xen-devel":"3.0.101-108.117.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14442-1.json"}},{"package":{"name":"kernel-pae","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","purl":"pkg:rpm/suse/kernel-pae&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.117.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-bigmem":"3.0.101-108.117.1","kernel-bigmem-base":"3.0.101-108.117.1","kernel-bigmem-devel":"3.0.101-108.117.1","kernel-default":"3.0.101-108.117.1","kernel-default-base":"3.0.101-108.117.1","kernel-default-devel":"3.0.101-108.117.1","kernel-default-man":"3.0.101-108.117.1","kernel-ec2":"3.0.101-108.117.1","kernel-ec2-base":"3.0.101-108.117.1","kernel-ec2-devel":"3.0.101-108.117.1","kernel-pae":"3.0.101-108.117.1","kernel-pae-base":"3.0.101-108.117.1","kernel-pae-devel":"3.0.101-108.117.1","kernel-ppc64":"3.0.101-108.117.1","kernel-ppc64-base":"3.0.101-108.117.1","kernel-ppc64-devel":"3.0.101-108.117.1","kernel-source":"3.0.101-108.117.1","kernel-syms":"3.0.101-108.117.1","kernel-trace":"3.0.101-108.117.1","kernel-trace-base":"3.0.101-108.117.1","kernel-trace-devel":"3.0.101-108.117.1","kernel-xen":"3.0.101-108.117.1","kernel-xen-base":"3.0.101-108.117.1","kernel-xen-devel":"3.0.101-108.117.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14442-1.json"}},{"package":{"name":"kernel-ppc64","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","purl":"pkg:rpm/suse/kernel-ppc64&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.117.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-bigmem":"3.0.101-108.117.1","kernel-bigmem-base":"3.0.101-108.117.1","kernel-bigmem-devel":"3.0.101-108.117.1","kernel-default":"3.0.101-108.117.1","kernel-default-base":"3.0.101-108.117.1","kernel-default-devel":"3.0.101-108.117.1","kernel-default-man":"3.0.101-108.117.1","kernel-ec2":"3.0.101-108.117.1","kernel-ec2-base":"3.0.101-108.117.1","kernel-ec2-devel":"3.0.101-108.117.1","kernel-pae":"3.0.101-108.117.1","kernel-pae-base":"3.0.101-108.117.1","kernel-pae-devel":"3.0.101-108.117.1","kernel-ppc64":"3.0.101-108.117.1","kernel-ppc64-base":"3.0.101-108.117.1","kernel-ppc64-devel":"3.0.101-108.117.1","kernel-source":"3.0.101-108.117.1","kernel-syms":"3.0.101-108.117.1","kernel-trace":"3.0.101-108.117.1","kernel-trace-base":"3.0.101-108.117.1","kernel-trace-devel":"3.0.101-108.117.1","kernel-xen":"3.0.101-108.117.1","kernel-xen-base":"3.0.101-108.117.1","kernel-xen-devel":"3.0.101-108.117.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14442-1.json"}},{"package":{"name":"kernel-source","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.117.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-bigmem":"3.0.101-108.117.1","kernel-bigmem-base":"3.0.101-108.117.1","kernel-bigmem-devel":"3.0.101-108.117.1","kernel-default":"3.0.101-108.117.1","kernel-default-base":"3.0.101-108.117.1","kernel-default-devel":"3.0.101-108.117.1","kernel-default-man":"3.0.101-108.117.1","kernel-ec2":"3.0.101-108.117.1","kernel-ec2-base":"3.0.101-108.117.1","kernel-ec2-devel":"3.0.101-108.117.1","kernel-pae":"3.0.101-108.117.1","kernel-pae-base":"3.0.101-108.117.1","kernel-pae-devel":"3.0.101-108.117.1","kernel-ppc64":"3.0.101-108.117.1","kernel-ppc64-base":"3.0.101-108.117.1","kernel-ppc64-devel":"3.0.101-108.117.1","kernel-source":"3.0.101-108.117.1","kernel-syms":"3.0.101-108.117.1","kernel-trace":"3.0.101-108.117.1","kernel-trace-base":"3.0.101-108.117.1","kernel-trace-devel":"3.0.101-108.117.1","kernel-xen":"3.0.101-108.117.1","kernel-xen-base":"3.0.101-108.117.1","kernel-xen-devel":"3.0.101-108.117.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14442-1.json"}},{"package":{"name":"kernel-syms","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.117.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-bigmem":"3.0.101-108.117.1","kernel-bigmem-base":"3.0.101-108.117.1","kernel-bigmem-devel":"3.0.101-108.117.1","kernel-default":"3.0.101-108.117.1","kernel-default-base":"3.0.101-108.117.1","kernel-default-devel":"3.0.101-108.117.1","kernel-default-man":"3.0.101-108.117.1","kernel-ec2":"3.0.101-108.117.1","kernel-ec2-base":"3.0.101-108.117.1","kernel-ec2-devel":"3.0.101-108.117.1","kernel-pae":"3.0.101-108.117.1","kernel-pae-base":"3.0.101-108.117.1","kernel-pae-devel":"3.0.101-108.117.1","kernel-ppc64":"3.0.101-108.117.1","kernel-ppc64-base":"3.0.101-108.117.1","kernel-ppc64-devel":"3.0.101-108.117.1","kernel-source":"3.0.101-108.117.1","kernel-syms":"3.0.101-108.117.1","kernel-trace":"3.0.101-108.117.1","kernel-trace-base":"3.0.101-108.117.1","kernel-trace-devel":"3.0.101-108.117.1","kernel-xen":"3.0.101-108.117.1","kernel-xen-base":"3.0.101-108.117.1","kernel-xen-devel":"3.0.101-108.117.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14442-1.json"}},{"package":{"name":"kernel-trace","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","purl":"pkg:rpm/suse/kernel-trace&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.117.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-bigmem":"3.0.101-108.117.1","kernel-bigmem-base":"3.0.101-108.117.1","kernel-bigmem-devel":"3.0.101-108.117.1","kernel-default":"3.0.101-108.117.1","kernel-default-base":"3.0.101-108.117.1","kernel-default-devel":"3.0.101-108.117.1","kernel-default-man":"3.0.101-108.117.1","kernel-ec2":"3.0.101-108.117.1","kernel-ec2-base":"3.0.101-108.117.1","kernel-ec2-devel":"3.0.101-108.117.1","kernel-pae":"3.0.101-108.117.1","kernel-pae-base":"3.0.101-108.117.1","kernel-pae-devel":"3.0.101-108.117.1","kernel-ppc64":"3.0.101-108.117.1","kernel-ppc64-base":"3.0.101-108.117.1","kernel-ppc64-devel":"3.0.101-108.117.1","kernel-source":"3.0.101-108.117.1","kernel-syms":"3.0.101-108.117.1","kernel-trace":"3.0.101-108.117.1","kernel-trace-base":"3.0.101-108.117.1","kernel-trace-devel":"3.0.101-108.117.1","kernel-xen":"3.0.101-108.117.1","kernel-xen-base":"3.0.101-108.117.1","kernel-xen-devel":"3.0.101-108.117.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14442-1.json"}},{"package":{"name":"kernel-xen","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","purl":"pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.117.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-bigmem":"3.0.101-108.117.1","kernel-bigmem-base":"3.0.101-108.117.1","kernel-bigmem-devel":"3.0.101-108.117.1","kernel-default":"3.0.101-108.117.1","kernel-default-base":"3.0.101-108.117.1","kernel-default-devel":"3.0.101-108.117.1","kernel-default-man":"3.0.101-108.117.1","kernel-ec2":"3.0.101-108.117.1","kernel-ec2-base":"3.0.101-108.117.1","kernel-ec2-devel":"3.0.101-108.117.1","kernel-pae":"3.0.101-108.117.1","kernel-pae-base":"3.0.101-108.117.1","kernel-pae-devel":"3.0.101-108.117.1","kernel-ppc64":"3.0.101-108.117.1","kernel-ppc64-base":"3.0.101-108.117.1","kernel-ppc64-devel":"3.0.101-108.117.1","kernel-source":"3.0.101-108.117.1","kernel-syms":"3.0.101-108.117.1","kernel-trace":"3.0.101-108.117.1","kernel-trace-base":"3.0.101-108.117.1","kernel-trace-devel":"3.0.101-108.117.1","kernel-xen":"3.0.101-108.117.1","kernel-xen-base":"3.0.101-108.117.1","kernel-xen-devel":"3.0.101-108.117.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14442-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1159912"},{"type":"REPORT","url":"https://bugzilla.suse.com/1159913"},{"type":"REPORT","url":"https://bugzilla.suse.com/1162002"},{"type":"REPORT","url":"https://bugzilla.suse.com/1171218"},{"type":"REPORT","url":"https://bugzilla.suse.com/1171219"},{"type":"REPORT","url":"https://bugzilla.suse.com/1171220"},{"type":"REPORT","url":"https://bugzilla.suse.com/1172775"},{"type":"REPORT","url":"https://bugzilla.suse.com/1172999"},{"type":"REPORT","url":"https://bugzilla.suse.com/1173265"},{"type":"REPORT","url":"https://bugzilla.suse.com/1174462"},{"type":"REPORT","url":"https://bugzilla.suse.com/1174543"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-5108"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-0305"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-10732"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-10769"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-10773"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-12652"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-12656"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-13974"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14416"}]}