The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
CVE-2020-15437: Fixed a null pointer dereference which could have allowed local users to cause a denial of service(bsc#1179140).
CVE-2020-27777: Restrict RTAS requests from userspace (bsc#1179107).
CVE-2020-28974: Fixed a slab-out-of-bounds read in fbcon which could have been used by local attackers to read privileged information or potentially crash the kernel (bsc#1178589).
CVE-2020-28915: Fixed a buffer over-read in the fbcon code which could have been used by local attackers to read kernel memory (bsc#1178886).
CVE-2020-8694: Insufficient access control for some Intel(R) Processors may have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1170415).
CVE-2020-25668: Fixed a use-after-free in confontop() (bsc#1178123).
CVE-2020-25704: Fixed a memory leak in perfeventparseaddrfilter() (bsc#1178393).
CVE-2020-25669: Fixed a use-after-free read in sunkbd_reinit() (bsc#1178182).
The following non-security bugs were fixed:
9P: Cast to loff_t before multiplying (git-fixes).
acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (git-fixes).
ACPI: debug: do not allow debugging when ACPI is disabled (git-fixes).
ACPI / extlog: Check for RDMSR failure (git-fixes).
ACPI: GED: fix -Wformat (git-fixes).
ACPI: NFIT: Fix comparison to '-ENXIO' (git-fixes).
ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
ALSA: ctl: fix error path at adding user-defined element set (git-fixes).
ALSA: firewire: Clean up a locking issue in copyrespto_buf() (git-fixes).
ALSA: hda - Fix the return value if cb func is already registered (git-fixes).
ALSA: hda - Fix the return value if cb func is already registered (git-fixes).
ALSA: hda: prevent undefined shift in sndhdacextbusget_link() (git-fixes).
ALSA: mixart: Fix mutex deadlock (git-fixes).
ALSA: usb-audio: Fix potential use-after-free of streams (gix-fixes).
arm64: KVM: Fix system register enumeration (bsc#1174726).
arm64: Run ARCHWORKAROUND1 enabling code on all CPUs (git-fixes).
arm/arm64: KVM: Add PSCI version selection API (bsc#1174726).