gpp_maybe Security update for the linux kernel (live patch 14 for sle 15)

SUSE-SLE-Module-Live-Patching-15-2020-2520

This update for the Linux Kernel 4.12.14-150_35 fixes several issues. The following security issues were fixed: - CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247). - CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186). - CVE-2019-0155: Fixed a privilege escalation in the i915 graphics driver (bsc#1173663). - CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bsc#1173659). - CVE-2019-9458: Fixed a use-after-free in media/v4l (bsc#1173963). - CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942). - CVE-2019-19447: Fixed a use-after-free in ext4_put_super (bsc#1173869). - CVE-2019-14901: Fixed a heap overflow in the Marvell WiFi driver (bsc#1173661). - CVE-2019-14895: Fixed a heap-based buffer overflow in the Marvell WiFi driver (bsc#1173100).

• Release Date
  Sep 4 2020
• References
  Bugzilla: 1173100, 1173659, 1173661, 1173663, 1173869, 1173942, 1173963, 1174186, 1174247
  CVEs: CVE-2019-0155, CVE-2019-14895, CVE-2019-14901, CVE-2019-16746, CVE-2019-19447, CVE-2019-9458, CVE-2020-11668, CVE-2020-14331, CVE-2020-15780
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Live Patching 15 ppc64le

• Packages
  kernel-livepatch-4_12_14-150_35-default
  Kernel live patch module

  8-2.2 lock rpm

  kernel-livepatch-SLE15_Update_14
  Kernel live patch module

  8-2.2 lock src

SUSE Linux Enterprise Live Patching 15 x86_64

• Packages
  kernel-livepatch-4_12_14-150_35-default
  Kernel live patch module

  8-2.2 lock rpm

  kernel-livepatch-SLE15_Update_14
  Kernel live patch module

  8-2.2 lock src