The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it.
This attack is known as Special Register Buffer Data Sampling (SRBDS) or 'CrossTalk' (bsc#1154824).
CVE-2020-13143: Fixed an out-of-bounds read in gadgetdevdescUDCstore in drivers/usb/gadget/configfs.c (bsc#1171982).
CVE-2020-12769: Fixed an issue which could have allowed attackers to cause a panic via concurrent calls to dwspiirq and dwspitransfer_one (bsc#1171983).
CVE-2020-12768: Fixed a memory leak in svmcpuuninit in arch/x86/kvm/svm.c (bsc#1171736).
CVE-2020-12659: Fixed an out-of-bounds write (by a user with the CAPNETADMIN capability) due to improper headroom validation (bsc#1171214).
CVE-2020-12657: An a use-after-free in block/bfq-iosched.c (bsc#1171205).
CVE-2020-12656: Fixed an improper handling of certain domain_release calls leadingch could have led to a memory leak (bsc#1171219).
CVE-2020-12655: Fixed an issue which could have allowed attackers to trigger a sync of excessive duration via an XFS v5 image with crafted metadata (bsc#1171217).
CVE-2020-12654: Fixed an issue in he wifi driver which could have allowed a remote AP to trigger a heap-based buffer overflow (bsc#1171202).
CVE-2020-12653: Fixed an issue in the wifi driver which could have allowed local users to gain privileges or cause a denial of service (bsc#1171195).
CVE-2020-12652: Fixed an issue which could have allowed local users to hold an incorrect lock during the ioctl operation and trigger a race condition (bsc#1171218).
CVE-2020-12464: Fixed a use-after-free due to a transfer without a reference (bsc#1170901).
CVE-2020-12114: Fixed a pivot_root race condition which could have allowed local users to cause a denial of service (panic) by corrupting a mountpoint reference counter (bsc#1171098).
CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172317).
CVE-2020-10751: Fixed an improper implementation in SELinux LSM hook where it was assumed that an skb would only contain a single netlink message (bsc#1171189).
CVE-2020-10732: Fixed kernel data leak in userspace coredumps due to uninitialized data (bsc#1171220).
CVE-2020-10720: Fixed a use-after-free read in napigrofrags() (bsc#1170778).
CVE-2020-10711: Fixed a null pointer dereference in SELinux subsystem which could have allowed a remote network user to crash the kernel resulting in a denial of service (bsc#1171191).
CVE-2020-10690: Fixed the race between the release of ptp_clock and cdev (bsc#1170056).
CVE-2019-9455: Fixed a pointer leak due to a WARN_ON statement in a video driver. This could lead to local information disclosure with System execution privileges needed (bsc#1170345).
CVE-2019-20812: Fixed an issue in prbcalcretireblktmo() which could have resulted in a denial of service (bsc#1172453).
CVE-2019-20806: Fixed a null pointer dereference which may had lead to denial of service (bsc#1172199).
CVE-2019-19462: Fixed an issue which could have allowed local user to cause denial of service (bsc#1158265).
CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1089895)
The following non-security bugs were fixed:
ACPI: CPPC: Fix reference count leak in acpicppcprocessor_probe() (bsc#1051510).
ACPI: sysfs: Fix reference count leak in acpisysfsaddhotplugprofile() (bsc#1051510).
acpi/x86: ignore unspecified bit positions in the ACPI global lock field (bsc#1051510).
Add br_netfilter to kernel-default-base (bsc#1169020)
Add commit for git-fix that's not a fix This commit cleans up debug code but does not fix anything, and it relies on a new kernel function that isn't yet in this version of SLE.
agp/intel: Reinforce the barrier after GTT updates (bsc#1051510).
ALSA: ctxfi: Remove unnecessary cast in kfree (bsc#1051510).
ALSA: doc: Document PC Beep Hidden Register on Realtek ALC256 (bsc#1051510).
ALSA: dummy: Fix PCM format loop in proc output (bsc#1111666).
ALSA: hda: Add driver blacklist (bsc#1051510).
ALSA: hda: Always use jackpoll helper for jack update after resume (bsc#1051510).
ALSA: hda: call runtime_allow() for all hda controllers (bsc#1051510).
ALSA: hda: Do not release card at firmware loading error (bsc#1051510).
ALSA: hda: Explicitly permit using autosuspend if runtime PM is supported (bsc#1051510).
ALSA: hda/hdmi: fix race in monitor detection during probe (bsc#1051510).
ALSA: hda/hdmi: fix without unlocked before return (bsc#1051510).
ALSA: hda: Honor PM disablement in PM freeze and thaw_noirq ops (bsc#1051510).
ALSA: hda: Keep the controller initialization even if no codecs found (bsc#1051510).
ALSA: hda: Match both PCI ID and SSID for driver blacklist (bsc#1111666).
ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround (bsc#1172017).
ALSA: hda/realtek - Add COEF workaround for ASUS ZenBook UX431DA (git-fixes).
ALSA: hda/realtek - Add HP new mute led supported for ALC236 (git-fixes).
ALSA: hda/realtek - Add more fixup entries for Clevo machines (git-fixes).
ALSA: hda/realtek - Add new codec supported for ALC245 (bsc#1051510).
ALSA: hda/realtek - Add new codec supported for ALC287 (git-fixes).
ALSA: hda/realtek: Add quirk for Samsung Notebook (git-fixes).
ALSA: hda/realtek - Add supported new mute Led for HP (git-fixes).
ALSA: hda/realtek - Enable headset mic of ASUS GL503VM with ALC295 (git-fixes).
ALSA: hda/realtek - Enable headset mic of ASUS UX550GE with ALC295 (git-fixes).
ALSA: hda/realtek: Enable headset mic of ASUS UX581LV with ALC295 (git-fixes).
ALSA: hda/realtek - Enable the headset mic on Asus FX505DT (bsc#1051510).
ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse (git-fixes).