{"schema_version":"1.7.3","id":"SUSE-SU-2020:2576-1","published":"2020-09-09T05:17:13Z","modified":"2026-02-04T02:45:32.180392Z","related":["CVE-2019-16746","CVE-2020-14314","CVE-2020-14331","CVE-2020-14386","CVE-2020-16166"],"upstream":["CVE-2019-16746","CVE-2020-14314","CVE-2020-14331","CVE-2020-14386","CVE-2020-16166"],"summary":"Security update for the Linux Kernel","details":"The SUSE Linux Enterprise 12 SP2 kernel was updated to to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n\n- CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798).\n- CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205).\n- CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG (bsc#1174757).\n- CVE-2019-16746: Fixed an improper check of the length of variable elements in a beacon head, leading to a buffer overflow (bsc#1152107).\n- CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption (bsc#1176069).\n\nThe following non-security bug was fixed:\n\n- mm, vmstat: reduce zone->lock holding time by /proc/pagetypeinfo (bsc#1175691).\n","affected":[{"package":{"name":"kernel-default","ecosystem":"SUSE:OpenStack Cloud 7","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.141.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.141.1","kernel-default-base":"4.4.121-92.141.1","kernel-default-devel":"4.4.121-92.141.1","kernel-default-man":"4.4.121-92.141.1","kernel-devel":"4.4.121-92.141.1","kernel-macros":"4.4.121-92.141.1","kernel-source":"4.4.121-92.141.1","kernel-syms":"4.4.121-92.141.1","kgraft-patch-4_4_121-92_141-default":"1-3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2576-1.json"}},{"package":{"name":"kernel-source","ecosystem":"SUSE:OpenStack Cloud 7","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.141.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.141.1","kernel-default-base":"4.4.121-92.141.1","kernel-default-devel":"4.4.121-92.141.1","kernel-default-man":"4.4.121-92.141.1","kernel-devel":"4.4.121-92.141.1","kernel-macros":"4.4.121-92.141.1","kernel-source":"4.4.121-92.141.1","kernel-syms":"4.4.121-92.141.1","kgraft-patch-4_4_121-92_141-default":"1-3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2576-1.json"}},{"package":{"name":"kernel-syms","ecosystem":"SUSE:OpenStack Cloud 7","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.141.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.141.1","kernel-default-base":"4.4.121-92.141.1","kernel-default-devel":"4.4.121-92.141.1","kernel-default-man":"4.4.121-92.141.1","kernel-devel":"4.4.121-92.141.1","kernel-macros":"4.4.121-92.141.1","kernel-source":"4.4.121-92.141.1","kernel-syms":"4.4.121-92.141.1","kgraft-patch-4_4_121-92_141-default":"1-3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2576-1.json"}},{"package":{"name":"kgraft-patch-SLE12-SP2_Update_37","ecosystem":"SUSE:OpenStack Cloud 7","purl":"pkg:rpm/suse/kgraft-patch-SLE12-SP2_Update_37&distro=SUSE%20OpenStack%20Cloud%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-3.3.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.141.1","kernel-default-base":"4.4.121-92.141.1","kernel-default-devel":"4.4.121-92.141.1","kernel-default-man":"4.4.121-92.141.1","kernel-devel":"4.4.121-92.141.1","kernel-macros":"4.4.121-92.141.1","kernel-source":"4.4.121-92.141.1","kernel-syms":"4.4.121-92.141.1","kgraft-patch-4_4_121-92_141-default":"1-3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2576-1.json"}},{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP2","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.141.1"}]}],"ecosystem_specific":{"binaries":[{"cluster-md-kmp-default":"4.4.121-92.141.1","cluster-network-kmp-default":"4.4.121-92.141.1","dlm-kmp-default":"4.4.121-92.141.1","gfs2-kmp-default":"4.4.121-92.141.1","ocfs2-kmp-default":"4.4.121-92.141.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2576-1.json"}},{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.141.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.141.1","kernel-default-base":"4.4.121-92.141.1","kernel-default-devel":"4.4.121-92.141.1","kernel-devel":"4.4.121-92.141.1","kernel-macros":"4.4.121-92.141.1","kernel-source":"4.4.121-92.141.1","kernel-syms":"4.4.121-92.141.1","kgraft-patch-4_4_121-92_141-default":"1-3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2576-1.json"}},{"package":{"name":"kernel-source","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.141.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.141.1","kernel-default-base":"4.4.121-92.141.1","kernel-default-devel":"4.4.121-92.141.1","kernel-devel":"4.4.121-92.141.1","kernel-macros":"4.4.121-92.141.1","kernel-source":"4.4.121-92.141.1","kernel-syms":"4.4.121-92.141.1","kgraft-patch-4_4_121-92_141-default":"1-3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2576-1.json"}},{"package":{"name":"kernel-syms","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.141.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.141.1","kernel-default-base":"4.4.121-92.141.1","kernel-default-devel":"4.4.121-92.141.1","kernel-devel":"4.4.121-92.141.1","kernel-macros":"4.4.121-92.141.1","kernel-source":"4.4.121-92.141.1","kernel-syms":"4.4.121-92.141.1","kgraft-patch-4_4_121-92_141-default":"1-3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2576-1.json"}},{"package":{"name":"kgraft-patch-SLE12-SP2_Update_37","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","purl":"pkg:rpm/suse/kgraft-patch-SLE12-SP2_Update_37&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-3.3.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.141.1","kernel-default-base":"4.4.121-92.141.1","kernel-default-devel":"4.4.121-92.141.1","kernel-devel":"4.4.121-92.141.1","kernel-macros":"4.4.121-92.141.1","kernel-source":"4.4.121-92.141.1","kernel-syms":"4.4.121-92.141.1","kgraft-patch-4_4_121-92_141-default":"1-3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2576-1.json"}},{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.141.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.141.1","kernel-default-base":"4.4.121-92.141.1","kernel-default-devel":"4.4.121-92.141.1","kernel-default-man":"4.4.121-92.141.1","kernel-devel":"4.4.121-92.141.1","kernel-macros":"4.4.121-92.141.1","kernel-source":"4.4.121-92.141.1","kernel-syms":"4.4.121-92.141.1","kgraft-patch-4_4_121-92_141-default":"1-3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2576-1.json"}},{"package":{"name":"kernel-source","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.141.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.141.1","kernel-default-base":"4.4.121-92.141.1","kernel-default-devel":"4.4.121-92.141.1","kernel-default-man":"4.4.121-92.141.1","kernel-devel":"4.4.121-92.141.1","kernel-macros":"4.4.121-92.141.1","kernel-source":"4.4.121-92.141.1","kernel-syms":"4.4.121-92.141.1","kgraft-patch-4_4_121-92_141-default":"1-3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2576-1.json"}},{"package":{"name":"kernel-syms","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.141.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.141.1","kernel-default-base":"4.4.121-92.141.1","kernel-default-devel":"4.4.121-92.141.1","kernel-default-man":"4.4.121-92.141.1","kernel-devel":"4.4.121-92.141.1","kernel-macros":"4.4.121-92.141.1","kernel-source":"4.4.121-92.141.1","kernel-syms":"4.4.121-92.141.1","kgraft-patch-4_4_121-92_141-default":"1-3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2576-1.json"}},{"package":{"name":"kgraft-patch-SLE12-SP2_Update_37","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","purl":"pkg:rpm/suse/kgraft-patch-SLE12-SP2_Update_37&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-3.3.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.141.1","kernel-default-base":"4.4.121-92.141.1","kernel-default-devel":"4.4.121-92.141.1","kernel-default-man":"4.4.121-92.141.1","kernel-devel":"4.4.121-92.141.1","kernel-macros":"4.4.121-92.141.1","kernel-source":"4.4.121-92.141.1","kernel-syms":"4.4.121-92.141.1","kgraft-patch-4_4_121-92_141-default":"1-3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2576-1.json"}},{"package":{"name":"kernel-default","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.141.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.141.1","kernel-default-base":"4.4.121-92.141.1","kernel-default-devel":"4.4.121-92.141.1","kernel-devel":"4.4.121-92.141.1","kernel-macros":"4.4.121-92.141.1","kernel-source":"4.4.121-92.141.1","kernel-syms":"4.4.121-92.141.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2576-1.json"}},{"package":{"name":"kernel-source","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.141.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.141.1","kernel-default-base":"4.4.121-92.141.1","kernel-default-devel":"4.4.121-92.141.1","kernel-devel":"4.4.121-92.141.1","kernel-macros":"4.4.121-92.141.1","kernel-source":"4.4.121-92.141.1","kernel-syms":"4.4.121-92.141.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2576-1.json"}},{"package":{"name":"kernel-syms","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.121-92.141.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.141.1","kernel-default-base":"4.4.121-92.141.1","kernel-default-devel":"4.4.121-92.141.1","kernel-devel":"4.4.121-92.141.1","kernel-macros":"4.4.121-92.141.1","kernel-source":"4.4.121-92.141.1","kernel-syms":"4.4.121-92.141.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2576-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202576-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1152107"},{"type":"REPORT","url":"https://bugzilla.suse.com/1173798"},{"type":"REPORT","url":"https://bugzilla.suse.com/1174205"},{"type":"REPORT","url":"https://bugzilla.suse.com/1174757"},{"type":"REPORT","url":"https://bugzilla.suse.com/1175691"},{"type":"REPORT","url":"https://bugzilla.suse.com/1176069"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-16746"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14314"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14331"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14386"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-16166"}]}