Security update for the Linux Kernel

Announcement ID:	SUSE-SU-2020:2623-1
Rating:	important
References:	bsc#1058115 bsc#1071995 bsc#1144333 bsc#1154366 bsc#1165629 bsc#1171988 bsc#1172428 bsc#1172963 bsc#1173798 bsc#1173954 bsc#1174205 bsc#1174689 bsc#1174699 bsc#1174757 bsc#1174784 bsc#1174978 bsc#1175112 bsc#1175127 bsc#1175213 bsc#1175228 bsc#1175515 bsc#1175518 bsc#1175691 bsc#1175749 bsc#1176069
Cross-References:	CVE-2020-10135 CVE-2020-14314 CVE-2020-14331 CVE-2020-14356 CVE-2020-14386 CVE-2020-16166 CVE-2020-1749 CVE-2020-24394
CVSS scores:	CVE-2020-10135 ( SUSE ): 5.0 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2020-10135 ( NVD ): 5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2020-14314 ( SUSE ): 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L CVE-2020-14314 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-14331 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-14331 ( NVD ): 6.6 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-14356 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-14356 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-14386 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2020-14386 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-14386 ( NVD ): 6.7 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2020-16166 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2020-16166 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2020-1749 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2020-1749 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2020-24394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-24394 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Affected Products:	SUSE Linux Enterprise High Availability Extension 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise Live Patching 12-SP4 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9

An update that solves eight vulnerabilities and has 17 security fixes can now be installed.

Description:

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2020-1749: Use ip6_dst_lookup_flow instead of ip6_dst_lookup (bsc#1165629).
• CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798).
• CVE-2020-14356: Fixed a null pointer dereference in cgroupv2 subsystem which could have led to privilege escalation (bsc#1175213).
• CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205).
• CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG (bsc#1174757).
• CVE-2020-24394: Fixed an issue which could set incorrect permissions on new filesystem objects when the filesystem lacks ACL support (bsc#1175518).
• CVE-2020-10135: Legacy pairing and secure-connections pairing authentication Bluetooth might have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access (bsc#1171988).
• CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption (bsc#1176069).

The following non-security bugs were fixed:

• btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1174784).
• cifs: document and cleanup dfs mount (bsc#1144333 bsc#1172428).
• cifs: Fix an error pointer dereference in cifs_mount() (bsc#1144333 bsc#1172428).
• cifs: fix double free error on share and prefix (bsc#1144333 bsc#1172428).
• cifs: handle empty list of targets in cifs_reconnect() (bsc#1144333 bsc#1172428).
• cifs: handle RESP_GET_DFS_REFERRAL.PathConsumed in reconnect (bsc#1144333 bsc#1172428).
• cifs: merge __{cifs,smb2}_reconnect_tcon into cifs_tree_connect() (bsc#1144333 bsc#1172428).
• cifs: only update prefix path of DFS links in cifs_tree_connect() (bsc#1144333 bsc#1172428).
• cifs: reduce number of referral requests in DFS link lookups (bsc#1144333 bsc#1172428).
• cifs: rename reconn_inval_dfs_target() (bsc#1144333 bsc#1172428).
• Drivers: hv: vmbus: Only notify Hyper-V for die events that are oops (bsc#1175127).
• ibmvnic: Fix IRQ mapping disposal in error path (bsc#1175112 ltc#187459).
• ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL (bsc#1175515).
• ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL (bsc#1175515).
• ipvs: fix the connection sync failed in some cases (bsc#1174699).
• kabi: hide new parameter of ip6_dst_lookup_flow() (bsc#1165629).
• kabi: mask changes to struct ipv6_stub (bsc#1165629).
• mm: Avoid calling build_all_zonelists_init under hotplug context (bsc#1154366).
• mm, vmstat: reduce zone->lock holding time by /proc/pagetypeinfo (bsc#1175691).
• ocfs2: add trimfs dlm lock resource (bsc#1175228).
• ocfs2: add trimfs lock to avoid duplicated trims in cluster (bsc#1175228).
• ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963).
• ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963).
• ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).
• ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).
• ocfs2: fix remounting needed after setfacl command (bsc#1173954).
• ocfs2: fix the application IO timeout when fstrim is running (bsc#1175228).
• ocfs2: load global_inode_alloc (bsc#1172963).
• ocfs2: load global_inode_alloc (bsc#1172963).
• powerpc/eeh: Fix pseries_eeh_configure_bridge() (bsc#1174689).
• powerpc/pseries: PCIE PHB reset (bsc#1174689).
• Revert "ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963)." This reverts commit 2638f62c6bc33d4c10ce0dddbf240aa80d366d7b.
• Revert "ocfs2: load global_inode_alloc (bsc#1172963)." This reverts commit f04f670651f505cb354f26601ec5f5e4428f2f47.
• scsi: scsi_dh_alua: skip RTPG for devices only supporting active/optimized (bsc#1174978).
• selftests/livepatch: fix mem leaks in test-klp-shadow-vars (bsc#1071995).
• selftests/livepatch: more verification in test-klp-shadow-vars (bsc#1071995).
• selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
• selftests/livepatch: simplify test-klp-callbacks busy target tests (bsc#1071995).
• Update patch reference for a tipc fix patch (bsc#1175515)
• x86/unwind/orc: Fix ORC for newly forked tasks (bsc#1058115).
• xen: do not reschedule in preemption off sections (bsc#1175749).

Special Instructions and Notes:

• Please reboot the system after installing this update.

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE OpenStack Cloud 9
  zypper in -t patch SUSE-OpenStack-Cloud-9-2020-2623=1
• SUSE OpenStack Cloud Crowbar 9
  zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2020-2623=1
• SUSE Linux Enterprise Server for SAP Applications 12 SP4
  zypper in -t patch SUSE-SLE-HA-12-SP4-2020-2623=1 SUSE-SLE-SAP-12-SP4-2020-2623=1
• SUSE Linux Enterprise High Availability Extension 12 SP4
  zypper in -t patch SUSE-SLE-HA-12-SP4-2020-2623=1
• SUSE Linux Enterprise Live Patching 12-SP4
  zypper in -t patch SUSE-SLE-Live-Patching-12-SP4-2020-2623=1
• SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4
  zypper in -t patch SUSE-SLE-SERVER-12-SP4-ESPOS-2020-2623=1
• SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4
  zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2020-2623=1

Package List:

• SUSE OpenStack Cloud 9 (nosrc x86_64)
  • kernel-default-4.12.14-95.60.1
• SUSE OpenStack Cloud 9 (x86_64)
  • kernel-syms-4.12.14-95.60.1
  • kernel-default-devel-debuginfo-4.12.14-95.60.1
  • kernel-default-debugsource-4.12.14-95.60.1
  • kernel-default-base-4.12.14-95.60.1
  • kernel-default-devel-4.12.14-95.60.1
  • kernel-default-base-debuginfo-4.12.14-95.60.1
  • kernel-default-debuginfo-4.12.14-95.60.1
• SUSE OpenStack Cloud 9 (noarch)
  • kernel-devel-4.12.14-95.60.1
  • kernel-macros-4.12.14-95.60.1
  • kernel-source-4.12.14-95.60.1
• SUSE OpenStack Cloud Crowbar 9 (nosrc x86_64)
  • kernel-default-4.12.14-95.60.1
• SUSE OpenStack Cloud Crowbar 9 (x86_64)
  • kernel-syms-4.12.14-95.60.1
  • kernel-default-devel-debuginfo-4.12.14-95.60.1
  • kernel-default-debugsource-4.12.14-95.60.1
  • kernel-default-base-4.12.14-95.60.1
  • kernel-default-devel-4.12.14-95.60.1
  • kernel-default-base-debuginfo-4.12.14-95.60.1
  • kernel-default-debuginfo-4.12.14-95.60.1
• SUSE OpenStack Cloud Crowbar 9 (noarch)
  • kernel-devel-4.12.14-95.60.1
  • kernel-macros-4.12.14-95.60.1
  • kernel-source-4.12.14-95.60.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP4 (ppc64le x86_64)
  • gfs2-kmp-default-4.12.14-95.60.1
  • cluster-md-kmp-default-4.12.14-95.60.1
  • kernel-syms-4.12.14-95.60.1
  • kernel-default-debugsource-4.12.14-95.60.1
  • cluster-md-kmp-default-debuginfo-4.12.14-95.60.1
  • kernel-default-base-4.12.14-95.60.1
  • ocfs2-kmp-default-debuginfo-4.12.14-95.60.1
  • ocfs2-kmp-default-4.12.14-95.60.1
  • kernel-default-base-debuginfo-4.12.14-95.60.1
  • dlm-kmp-default-4.12.14-95.60.1
  • kernel-default-devel-4.12.14-95.60.1
  • kernel-default-debuginfo-4.12.14-95.60.1
  • gfs2-kmp-default-debuginfo-4.12.14-95.60.1
  • dlm-kmp-default-debuginfo-4.12.14-95.60.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP4 (nosrc ppc64le x86_64)
  • kernel-default-4.12.14-95.60.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP4 (noarch)
  • kernel-devel-4.12.14-95.60.1
  • kernel-macros-4.12.14-95.60.1
  • kernel-source-4.12.14-95.60.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP4 (x86_64)
  • kernel-default-devel-debuginfo-4.12.14-95.60.1
• SUSE Linux Enterprise High Availability Extension 12 SP4 (ppc64le s390x x86_64)
  • gfs2-kmp-default-4.12.14-95.60.1
  • cluster-md-kmp-default-4.12.14-95.60.1
  • kernel-default-debugsource-4.12.14-95.60.1
  • cluster-md-kmp-default-debuginfo-4.12.14-95.60.1
  • ocfs2-kmp-default-debuginfo-4.12.14-95.60.1
  • ocfs2-kmp-default-4.12.14-95.60.1
  • dlm-kmp-default-4.12.14-95.60.1
  • kernel-default-debuginfo-4.12.14-95.60.1
  • gfs2-kmp-default-debuginfo-4.12.14-95.60.1
  • dlm-kmp-default-debuginfo-4.12.14-95.60.1
• SUSE Linux Enterprise High Availability Extension 12 SP4 (nosrc)
  • kernel-default-4.12.14-95.60.1
• SUSE Linux Enterprise Live Patching 12-SP4 (nosrc)
  • kernel-default-4.12.14-95.60.1
• SUSE Linux Enterprise Live Patching 12-SP4 (ppc64le s390x x86_64)
  • kernel-default-kgraft-4.12.14-95.60.1
  • kernel-default-kgraft-devel-4.12.14-95.60.1
  • kgraft-patch-4_12_14-95_60-default-1-6.3.1
• SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 (aarch64 nosrc x86_64)
  • kernel-default-4.12.14-95.60.1
• SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 (aarch64 x86_64)
  • kernel-syms-4.12.14-95.60.1
  • kernel-default-debugsource-4.12.14-95.60.1
  • kernel-default-base-4.12.14-95.60.1
  • kernel-default-devel-4.12.14-95.60.1
  • kernel-default-base-debuginfo-4.12.14-95.60.1
  • kernel-default-debuginfo-4.12.14-95.60.1
• SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 (noarch)
  • kernel-devel-4.12.14-95.60.1
  • kernel-macros-4.12.14-95.60.1
  • kernel-source-4.12.14-95.60.1
• SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 (x86_64)
  • kernel-default-devel-debuginfo-4.12.14-95.60.1
• SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 (aarch64 ppc64le s390x x86_64 nosrc)
  • kernel-default-4.12.14-95.60.1
• SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 (aarch64 ppc64le s390x x86_64)
  • kernel-syms-4.12.14-95.60.1
  • kernel-default-debugsource-4.12.14-95.60.1
  • kernel-default-base-4.12.14-95.60.1
  • kernel-default-devel-4.12.14-95.60.1
  • kernel-default-base-debuginfo-4.12.14-95.60.1
  • kernel-default-debuginfo-4.12.14-95.60.1
• SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 (noarch)
  • kernel-devel-4.12.14-95.60.1
  • kernel-macros-4.12.14-95.60.1
  • kernel-source-4.12.14-95.60.1
• SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 (s390x)
  • kernel-default-man-4.12.14-95.60.1
• SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 (x86_64)
  • kernel-default-devel-debuginfo-4.12.14-95.60.1

References:

• https://www.suse.com/security/cve/CVE-2020-10135.html
• https://www.suse.com/security/cve/CVE-2020-14314.html
• https://www.suse.com/security/cve/CVE-2020-14331.html
• https://www.suse.com/security/cve/CVE-2020-14356.html
• https://www.suse.com/security/cve/CVE-2020-14386.html
• https://www.suse.com/security/cve/CVE-2020-16166.html
• https://www.suse.com/security/cve/CVE-2020-1749.html
• https://www.suse.com/security/cve/CVE-2020-24394.html
• https://bugzilla.suse.com/show_bug.cgi?id=1058115
• https://bugzilla.suse.com/show_bug.cgi?id=1071995
• https://bugzilla.suse.com/show_bug.cgi?id=1144333
• https://bugzilla.suse.com/show_bug.cgi?id=1154366
• https://bugzilla.suse.com/show_bug.cgi?id=1165629
• https://bugzilla.suse.com/show_bug.cgi?id=1171988
• https://bugzilla.suse.com/show_bug.cgi?id=1172428
• https://bugzilla.suse.com/show_bug.cgi?id=1172963
• https://bugzilla.suse.com/show_bug.cgi?id=1173798
• https://bugzilla.suse.com/show_bug.cgi?id=1173954
• https://bugzilla.suse.com/show_bug.cgi?id=1174205
• https://bugzilla.suse.com/show_bug.cgi?id=1174689
• https://bugzilla.suse.com/show_bug.cgi?id=1174699
• https://bugzilla.suse.com/show_bug.cgi?id=1174757
• https://bugzilla.suse.com/show_bug.cgi?id=1174784
• https://bugzilla.suse.com/show_bug.cgi?id=1174978
• https://bugzilla.suse.com/show_bug.cgi?id=1175112
• https://bugzilla.suse.com/show_bug.cgi?id=1175127
• https://bugzilla.suse.com/show_bug.cgi?id=1175213
• https://bugzilla.suse.com/show_bug.cgi?id=1175228
• https://bugzilla.suse.com/show_bug.cgi?id=1175515
• https://bugzilla.suse.com/show_bug.cgi?id=1175518
• https://bugzilla.suse.com/show_bug.cgi?id=1175691
• https://bugzilla.suse.com/show_bug.cgi?id=1175749
• https://bugzilla.suse.com/show_bug.cgi?id=1176069