PT-2020-22824 · Suse+1 · Kernel-Livepatch-4 12 14-195-Default+5

Published 2020-06-18 · Updated 2020-06-18 · CVE-2020-13233

OSV

This update for the Linux Kernel 4.12.14-195 fixes several issues.

The following security issues were fixed:

• CVE-2019-13233: Fixed a race condition between modify ldt() and a #BR exception for an MPX bounds violation (bsc#1144502).
• CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437).
• CVE-2019-15666: Fixed an out of bounds read xfrm policy unlink, which could have led to denial of service (bsc#1172140).
• CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1171746).

Related Identifiers

CVE-2020-13233

SUSE-SU-2020:1656-1

SUSE-SU-2020_1656-1

Affected Products

Kernel-Livepatch-4 12 14-195-Default

Kernel-Livepatch-4 12 14-197 4-Default

Kernel-Livepatch-4 12 14-197 7-Default

Kernel-Livepatch-Sle15-Sp1 Update 0

Kernel-Livepatch-Sle15-Sp1 Update 1

Kernel-Livepatch-Sle15-Sp1 Update 2

References · 23

• https://bdu.fstec.ru/vul/2020-03227 · Security Note
• https://bdu.fstec.ru/vul/2019-02751 · Security Note
• https://bdu.fstec.ru/vul/2019-04720 · Security Note
• https://bdu.fstec.ru/vul/2021-06410 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2020:1656-1 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/654456 · Security Note
• https://suse.com/security/cve/CVE-2018-1000199.html · Note
• https://suse.com/security/cve/CVE-2019-15666 · Note
• https://openwall.com/lists/oss-security/2020/06/04/4 · Note
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1879 · Note
• https://bugzilla.suse.com/1144502 · Note
• https://suse.com/security/cve/CVE-2020-10757 · Note
• https://suse.com/security/cve/CVE-2019-15666.html · Note
• https://bugzilla.suse.com/1172437 · Note
• https://suse.com/security/cve/CVE-2020-10757.html · Note