CVE-2020-12373
Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute...
Expired pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
6.7
Expired pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access.
- Record
CVE-2020-12373- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Expired pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access.
- Record
CVE-2020-12373- Updated
- 2026-11-02
EUVDEUVD-2020-4685 No score
Expired pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access.
- Record
EUVD-2020-4685- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9j42-wwm8-235w No score
Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute...
Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow a privileged user to potentially enable escalation of privilege via local access.
- Record
GHSA-9j42-wwm8-235w- Weakness
- CWE-120
- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0393-1 No score
Security update for the Linux Kernel
The openSUSE Linux Leap 15.2 kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1181843).
- CVE-2021-26931: Fixed an issue where Linux kernel was treating grant mapping errors as bugs (XSA-362 bsc#1181753).
- CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping (XSA-361 bsc#1181747). by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#178372).
- CVE-2020-12362: Fixed an integer overflow in the firmware which may have allowed a privileged user to potentially enable an escalation of privilege via local access (bsc#1181720).
- CVE-2020-12363: Fixed an improper input validation which may have allowed a privileged user to potentially enable a denial of service via local access (bsc#1181735).
- CVE-2020-12364: Fixed a null pointer reference which may have allowed a privileged user to potentially enable a denial of service via local access (bsc#1181736 ).
- CVE-2020-12373: Fixed an expired pointer dereference which may have allowed a privileged user to potentially enable a denial of service via local access (bsc#1181738).
- CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179660, bsc#1179428).
The following non-security bugs were fixed:
- ACPICA: Fix exception code class checks (git-fixes).
- ACPI: configfs: add missing check after configfs_register_default_group() (git-fixes).
- ACPI: property: Fix fwnode string properties matching (git-fixes).
- ACPI: property: Satisfy kernel doc validator (part 1) (git-fixes).
- ACPI: property: Satisfy kernel doc validator (part 2) (git-fixes).
- ALSA: hda: Add another CometLake-H PCI ID (git-fixes).
- ALSA: hda/hdmi: Drop bogus check at closing a stream (git-fixes).
- ALSA: hda/realtek: modify EAPD in the ALC886 (git-fixes).
- ALSA: pcm: Assure sync with the pending stop operation at suspend (git-fixes).
- ALSA: pcm: Call sync_stop at disconnection (git-fixes).
- ALSA: pcm: Do not call sync_stop if it hasn't been stopped (git-fixes).
- ALSA: usb-audio: Add implicit fb quirk for BOSS GP-10 (git-fixes).
- ALSA: usb-audio: Correct document for snd_usb_endpoint_free_all() (git-fixes).
- ALSA: usb-audio: Do not avoid stopping the stream at disconnection (git-fixes).
- ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode (git-fixes).
- ALSA: usb-audio: Handle invalid running state at releasing EP (git-fixes).
- ALSA: usb-audio: More strict state change in EP (git-fixes).
- amba: Fix resource leak for drivers without .remove (git-fixes).
- arm64: Update config file. Set CONFIG_WATCHDOG_SYSFS to true (bsc#1182560)
- armv7hl: lpae: Update config files. Disable KVM support (bsc#1182697)
- ASoC: cpcap: fix microphone timeslot mask (git-fixes).
- ASoC: cs42l56: fix up error handling in probe (git-fixes).
- ASoC: simple-card-utils: Fix device module clock (git-fixes).
- ASoC: SOF: debug: Fix a potential issue on string buffer termination (git-fixes).
- ata: ahci_brcm: Add back regulators management (git-fixes).
- ata: sata_nv: Fix retrieving of active qcs (git-fixes).
- ath10k: Fix error handling in case of CE pipe init failure (git-fixes).
- ath9k: fix data bus crash when setting nf_override via debugfs (git-fixes).
- bcache: fix overflow in offset_to_stripe() (git-fixes).
- blk-mq: call commit_rqs while list empty but error happen (bsc#1182442).
- blk-mq: insert request not through ->queue_rq into sw/scheduler queue (bsc#1182443).
- blk-mq: move cancel of hctx->run_work to the front of blk_exit_queue (bsc#1182444).
- block: fix inflight statistics of part0 (bsc#1182445).
- block: respect queue limit of max discard segment (bsc#1182441).
- block: virtio_blk: fix handling single range discard request (bsc#1182439).
- Bluetooth: btqcomsmd: Fix…
- Record
openSUSE-SU-2021:0393-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0407-1 No score
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues:
- CVE-2020-12373: Fixed an expired pointer dereference may lead to DOS (bsc#1181738).
- CVE-2020-12364: Fixed a null pointer reference may lead to DOS (bsc#1181736).
- CVE-2020-12362: Fixed an integer overflow which could have led to privilege escalation (bsc#1181720).
- CVE-2020-12363: Fixed an improper input validation which may have led to DOS (bsc#1181735).
This update was imported from the SUSE:SLE-15-SP1:Update update project.
- Record
openSUSE-SU-2021:0407-1- Updated
- 2026-11-02
Show 4 moreShow less
OSVSUSE-SU-2021:0694-1 No score
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues:
- CVE-2020-12373: Fixed an expired pointer dereference may lead to DOS (bsc#1181738).
- CVE-2020-12364: Fixed a null pointer reference may lead to DOS (bsc#1181736).
- CVE-2020-12362: Fixed an integer overflow which could have led to privilege escalation (bsc#1181720).
- CVE-2020-12363: Fixed an improper input validation which may have led to DOS (bsc#1181735).
- Record
SUSE-SU-2021:0694-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:0735-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel RT was updated to receive various security and bugfixes.
The following security bugs were fixed:
- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1181843).
- CVE-2021-26931: Fixed an issue where Linux kernel was treating grant mapping errors as bugs (XSA-362 bsc#1181753).
- CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping (XSA-361 bsc#1181747). by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#178372).
- CVE-2020-12362: Fixed an integer overflow in the firmware which may have allowed a privileged user to potentially enable an escalation of privilege via local access (bsc#1181720).
- CVE-2020-12363: Fixed an improper input validation which may have allowed a privileged user to potentially enable a denial of service via local access (bsc#1181735).
- CVE-2020-12364: Fixed a null pointer reference which may have allowed a privileged user to potentially enable a denial of service via local access (bsc#1181736 ).
- CVE-2020-12373: Fixed an expired pointer dereference which may have allowed a privileged user to potentially enable a denial of service via local access (bsc#1181738).
- CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179660, bsc#1179428).
The following non-security bugs were fixed:
- ACPICA: Fix exception code class checks (git-fixes).
- ACPI: configfs: add missing check after configfs_register_default_group() (git-fixes).
- ACPI: property: Fix fwnode string properties matching (git-fixes).
- ACPI: property: Satisfy kernel doc validator (part 1) (git-fixes).
- ACPI: property: Satisfy kernel doc validator (part 2) (git-fixes).
- ALSA: hda: Add another CometLake-H PCI ID (git-fixes).
- ALSA: hda/hdmi: Drop bogus check at closing a stream (git-fixes).
- ALSA: hda/realtek: modify EAPD in the ALC886 (git-fixes).
- ALSA: pcm: Assure sync with the pending stop operation at suspend (git-fixes).
- ALSA: pcm: Call sync_stop at disconnection (git-fixes).
- ALSA: pcm: Do not call sync_stop if it hasn't been stopped (git-fixes).
- ALSA: usb-audio: Add implicit fb quirk for BOSS GP-10 (git-fixes).
- ALSA: usb-audio: Correct document for snd_usb_endpoint_free_all() (git-fixes).
- ALSA: usb-audio: Do not avoid stopping the stream at disconnection (git-fixes).
- ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode (git-fixes).
- ALSA: usb-audio: Handle invalid running state at releasing EP (git-fixes).
- ALSA: usb-audio: More strict state change in EP (git-fixes).
- amba: Fix resource leak for drivers without .remove (git-fixes).
- arm64: Update config file. Set CONFIG_WATCHDOG_SYSFS to true (bsc#1182560)
- ASoC: cpcap: fix microphone timeslot mask (git-fixes).
- ASoC: cs42l56: fix up error handling in probe (git-fixes).
- ASoC: simple-card-utils: Fix device module clock (git-fixes).
- ASoC: SOF: debug: Fix a potential issue on string buffer termination (git-fixes).
- ata: ahci_brcm: Add back regulators management (git-fixes).
- ata: sata_nv: Fix retrieving of active qcs (git-fixes).
- ath10k: Fix error handling in case of CE pipe init failure (git-fixes).
- ath9k: fix data bus crash when setting nf_override via debugfs (git-fixes).
- bcache: fix overflow in offset_to_stripe() (git-fixes).
- blk-mq: call commit_rqs while list empty but error happen (bsc#1182442).
- blk-mq: insert request not through ->queue_rq into sw/scheduler queue (bsc#1182443).
- blk-mq: move cancel of hctx->run_work to the front of blk_exit_queue (bsc#1182444).
- block: fix inflight statistics of part0 (bsc#1182445).
- block: respect queue limit of max discard segment (bsc#1182441).
- block: virtio_blk: fix handling single range discard request (bsc#1182439).
- Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function…
- Record
SUSE-SU-2021:0735-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:0738-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel Azure was updated to receive various security and bugfixes.
The following security bugs were fixed:
- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1181843).
- CVE-2021-26931: Fixed an issue where Linux kernel was treating grant mapping errors as bugs (XSA-362 bsc#1181753).
- CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping (XSA-361 bsc#1181747). by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#178372).
- CVE-2020-12362: Fixed an integer overflow in the firmware which may have allowed a privileged user to potentially enable an escalation of privilege via local access (bsc#1181720).
- CVE-2020-12363: Fixed an improper input validation which may have allowed a privileged user to potentially enable a denial of service via local access (bsc#1181735).
- CVE-2020-12364: Fixed a null pointer reference which may have allowed a privileged user to potentially enable a denial of service via local access (bsc#1181736 ).
- CVE-2020-12373: Fixed an expired pointer dereference which may have allowed a privileged user to potentially enable a denial of service via local access (bsc#1181738).
- CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179660, bsc#1179428).
The following non-security bugs were fixed:
- ACPICA: Fix exception code class checks (git-fixes).
- ACPI: configfs: add missing check after configfs_register_default_group() (git-fixes).
- ACPI: property: Fix fwnode string properties matching (git-fixes).
- ACPI: property: Satisfy kernel doc validator (part 1) (git-fixes).
- ACPI: property: Satisfy kernel doc validator (part 2) (git-fixes).
- ALSA: hda: Add another CometLake-H PCI ID (git-fixes).
- ALSA: hda/hdmi: Drop bogus check at closing a stream (git-fixes).
- ALSA: hda/realtek: modify EAPD in the ALC886 (git-fixes).
- ALSA: pcm: Assure sync with the pending stop operation at suspend (git-fixes).
- ALSA: pcm: Call sync_stop at disconnection (git-fixes).
- ALSA: pcm: Do not call sync_stop if it hasn't been stopped (git-fixes).
- ALSA: usb-audio: Add implicit fb quirk for BOSS GP-10 (git-fixes).
- ALSA: usb-audio: Correct document for snd_usb_endpoint_free_all() (git-fixes).
- ALSA: usb-audio: Do not avoid stopping the stream at disconnection (git-fixes).
- ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode (git-fixes).
- ALSA: usb-audio: Handle invalid running state at releasing EP (git-fixes).
- ALSA: usb-audio: More strict state change in EP (git-fixes).
- amba: Fix resource leak for drivers without .remove (git-fixes).
- arm64: Update config file. Set CONFIG_WATCHDOG_SYSFS to true (bsc#1182560)
- ASoC: cpcap: fix microphone timeslot mask (git-fixes).
- ASoC: cs42l56: fix up error handling in probe (git-fixes).
- ASoC: simple-card-utils: Fix device module clock (git-fixes).
- ASoC: SOF: debug: Fix a potential issue on string buffer termination (git-fixes).
- ata: ahci_brcm: Add back regulators management (git-fixes).
- ata: sata_nv: Fix retrieving of active qcs (git-fixes).
- ath10k: Fix error handling in case of CE pipe init failure (git-fixes).
- ath9k: fix data bus crash when setting nf_override via debugfs (git-fixes).
- bcache: fix overflow in offset_to_stripe() (git-fixes).
- blk-mq: call commit_rqs while list empty but error happen (bsc#1182442).
- blk-mq: insert request not through ->queue_rq into sw/scheduler queue (bsc#1182443).
- blk-mq: move cancel of hctx->run_work to the front of blk_exit_queue (bsc#1182444).
- block: fix inflight statistics of part0 (bsc#1182445).
- block: respect queue limit of max discard segment (bsc#1182441).
- block: virtio_blk: fix handling single range discard request (bsc#1182439).
- Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function…
- Record
SUSE-SU-2021:0738-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:0741-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1181843).
- CVE-2021-26931: Fixed an issue where Linux kernel was treating grant mapping errors as bugs (XSA-362 bsc#1181753).
- CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping (XSA-361 bsc#1181747). by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#178372).
- CVE-2020-12362: Fixed an integer overflow in the firmware which may have allowed a privileged user to potentially enable an escalation of privilege via local access (bsc#1181720).
- CVE-2020-12363: Fixed an improper input validation which may have allowed a privileged user to potentially enable a denial of service via local access (bsc#1181735).
- CVE-2020-12364: Fixed a null pointer reference which may have allowed a privileged user to potentially enable a denial of service via local access (bsc#1181736 ).
- CVE-2020-12373: Fixed an expired pointer dereference which may have allowed a privileged user to potentially enable a denial of service via local access (bsc#1181738).
- CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179660, bsc#1179428).
The following non-security bugs were fixed:
- ACPI: configfs: add missing check after configfs_register_default_group() (git-fixes).
- ACPI: property: Fix fwnode string properties matching (git-fixes).
- ACPI: property: Satisfy kernel doc validator (part 1) (git-fixes).
- ACPI: property: Satisfy kernel doc validator (part 2) (git-fixes).
- ALSA: hda: Add another CometLake-H PCI ID (git-fixes).
- ALSA: hda/hdmi: Drop bogus check at closing a stream (git-fixes).
- ALSA: hda/realtek: modify EAPD in the ALC886 (git-fixes).
- ALSA: pcm: Assure sync with the pending stop operation at suspend (git-fixes).
- ALSA: pcm: Call sync_stop at disconnection (git-fixes).
- ALSA: pcm: Do not call sync_stop if it hasn't been stopped (git-fixes).
- ALSA: usb-audio: Add implicit fb quirk for BOSS GP-10 (git-fixes).
- ALSA: usb-audio: Correct document for snd_usb_endpoint_free_all() (git-fixes).
- ALSA: usb-audio: Do not avoid stopping the stream at disconnection (git-fixes).
- ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode (git-fixes).
- ALSA: usb-audio: Handle invalid running state at releasing EP (git-fixes).
- ALSA: usb-audio: More strict state change in EP (git-fixes).
- amba: Fix resource leak for drivers without .remove (git-fixes).
- arm64: Update config file. Set CONFIG_WATCHDOG_SYSFS to true (bsc#1182560)
- ASoC: cpcap: fix microphone timeslot mask (git-fixes).
- ASoC: cs42l56: fix up error handling in probe (git-fixes).
- ASoC: simple-card-utils: Fix device module clock (git-fixes).
- ASoC: SOF: debug: Fix a potential issue on string buffer termination (git-fixes).
- ata: ahci_brcm: Add back regulators management (git-fixes).
- ata: sata_nv: Fix retrieving of active qcs (git-fixes).
- ath10k: Fix error handling in case of CE pipe init failure (git-fixes).
- ath9k: fix data bus crash when setting nf_override via debugfs (git-fixes).
- bcache: fix overflow in offset_to_stripe() (git-fixes).
- blk-mq: call commit_rqs while list empty but error happen (bsc#1182442).
- blk-mq: insert request not through ->queue_rq into sw/scheduler queue (bsc#1182443).
- blk-mq: move cancel of hctx->run_work to the front of blk_exit_queue (bsc#1182444).
- block: fix inflight statistics of part0 (bsc#1182445).
- block: respect queue limit of max discard segment (bsc#1182441).
- block: virtio_blk: fix handling single range discard request (bsc#1182439).
- Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function (git-fixes).
- Bluetooth: btusb: Fix memory leak in…
- Record
SUSE-SU-2021:0741-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-firmwareSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 4 CVEs |
before 20200107-3.18.1 | 20200107-3.18.1 |
kernel-firmwareSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 4 CVEs |
before 20200107-3.18.1 | 20200107-3.18.1 |
kernel-firmwareSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 4 CVEs |
before 20200107-3.18.1 | 20200107-3.18.1 |
kernel-firmwareSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 4 CVEs |
before 20200107-3.18.1 | 20200107-3.18.1 |
kernel-firmwareSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 4 CVEs |
before 20200107-3.18.1 | 20200107-3.18.1 |
kernel-firmwareSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 4 CVEs |
before 20200107-3.18.1 | 20200107-3.18.1 |
kernel-firmwareSUSE:Manager Proxy 4.0 From an advisory covering 4 CVEs |
before 20200107-3.18.1 | 20200107-3.18.1 |
kernel-firmwareSUSE:Manager Retail Branch Server 4.0 From an advisory covering 4 CVEs |
before 20200107-3.18.1 | 20200107-3.18.1 |
kernel-firmwareSUSE:Manager Server 4.0 From an advisory covering 4 CVEs |
before 20200107-3.18.1 | 20200107-3.18.1 |
kernel-firmwareSUSE:Enterprise Storage 6 From an advisory covering 4 CVEs |
before 20200107-3.18.1 | 20200107-3.18.1 |
Show 35 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-rtSUSE:Real Time Module 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-28.1 | 5.3.18-28.1 |
kernel-rt_debugSUSE:Real Time Module 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-28.1 | 5.3.18-28.1 |
kernel-source-rtSUSE:Real Time Module 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-28.1 | 5.3.18-28.1 |
kernel-syms-rtSUSE:Real Time Module 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-28.1 | 5.3.18-28.1 |
kernel-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-18.38.1 | 5.3.18-18.38.1 |
kernel-source-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-18.38.1 | 5.3.18-18.38.1 |
kernel-syms-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-18.38.1 | 5.3.18-18.38.1 |
kernel-defaultSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-24.52.1 | 5.3.18-24.52.1 |
kernel-default-baseSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-24.52.1.9.24.1 | 5.3.18-24.52.1.9.24.1 |
kernel-preemptSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-24.52.1 | 5.3.18-24.52.1 |
kernel-sourceSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-24.52.1 | 5.3.18-24.52.1 |
kernel-docsSUSE:Linux Enterprise Module for Development Tools 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-24.52.1 | 5.3.18-24.52.1 |
kernel-obs-buildSUSE:Linux Enterprise Module for Development Tools 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-24.52.1 | 5.3.18-24.52.1 |
kernel-preemptSUSE:Linux Enterprise Module for Development Tools 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-24.52.1 | 5.3.18-24.52.1 |
kernel-sourceSUSE:Linux Enterprise Module for Development Tools 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-24.52.1 | 5.3.18-24.52.1 |
kernel-symsSUSE:Linux Enterprise Module for Development Tools 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-24.52.1 | 5.3.18-24.52.1 |
kernel-defaultSUSE:Linux Enterprise Module for Legacy 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-24.52.1 | 5.3.18-24.52.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-24.52.1 | 5.3.18-24.52.1 |
kernel-livepatch-SLE15-SP2_Update_11SUSE:Linux Enterprise Live Patching 15 SP2 From an advisory covering 9 CVEs |
before 1-5.3.1 | 1-5.3.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-24.52.1 | 5.3.18-24.52.1 |
kernel-defaultSUSE:Linux Enterprise Workstation Extension 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-24.52.1 | 5.3.18-24.52.1 |
kernel-preemptSUSE:Linux Enterprise Workstation Extension 15 SP2 From an advisory covering 9 CVEs |
before 5.3.18-24.52.1 | 5.3.18-24.52.1 |
kernel-defaultSUSE:Linux Enterprise Micro 5.0 From an advisory covering 9 CVEs |
before 5.3.18-24.52.1 | 5.3.18-24.52.1 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.0 From an advisory covering 9 CVEs |
before 5.3.18-24.52.1.9.24.1 | 5.3.18-24.52.1.9.24.1 |
kernel-debugopenSUSE:Leap 15.2 From an advisory covering 9 CVEs |
before 5.3.18-lp152.66.2 | 5.3.18-lp152.66.2 |
kernel-defaultopenSUSE:Leap 15.2 From an advisory covering 9 CVEs |
before 5.3.18-lp152.66.2 | 5.3.18-lp152.66.2 |
kernel-default-baseopenSUSE:Leap 15.2 From an advisory covering 9 CVEs |
before 5.3.18-lp152.66.2.lp152.8.23.2 | 5.3.18-lp152.66.2.lp152.8.23.2 |
kernel-docsopenSUSE:Leap 15.2 From an advisory covering 9 CVEs |
before 5.3.18-lp152.66.2 | 5.3.18-lp152.66.2 |
kernel-kvmsmallopenSUSE:Leap 15.2 From an advisory covering 9 CVEs |
before 5.3.18-lp152.66.2 | 5.3.18-lp152.66.2 |
kernel-obs-buildopenSUSE:Leap 15.2 From an advisory covering 9 CVEs |
before 5.3.18-lp152.66.2 | 5.3.18-lp152.66.2 |
kernel-obs-qaopenSUSE:Leap 15.2 From an advisory covering 9 CVEs |
before 5.3.18-lp152.66.2 | 5.3.18-lp152.66.2 |
kernel-preemptopenSUSE:Leap 15.2 From an advisory covering 9 CVEs |
before 5.3.18-lp152.66.2 | 5.3.18-lp152.66.2 |
kernel-sourceopenSUSE:Leap 15.2 From an advisory covering 9 CVEs |
before 5.3.18-lp152.66.2 | 5.3.18-lp152.66.2 |
kernel-symsopenSUSE:Leap 15.2 From an advisory covering 9 CVEs |
before 5.3.18-lp152.66.2 | 5.3.18-lp152.66.2 |
kernel-firmwareopenSUSE:Leap 15.2 From an advisory covering 4 CVEs |
before 20200107-lp152.2.6.1 | 20200107-lp152.2.6.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-12373 is a medium vulnerability (CVSS 6.7) in Intel Bmc Firmware, published February 17, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.27%, the 19th percentile. No source names a fixed version.
References
intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html
nvd.nist.gov/vuln/detail/CVE-2020-12373
intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html
github.com/advisories/GHSA-9j42-wwm8-235w
suse.com/support/update/announcement/2021/suse-su-20210694-1
bugzilla.suse.com/1181720
Show 141 moreShow less
bugzilla.suse.com/1181735
bugzilla.suse.com/1181736
bugzilla.suse.com/1181738
suse.com/security/cve/CVE-2020-12362
suse.com/security/cve/CVE-2020-12363
suse.com/security/cve/CVE-2020-12364
suse.com/security/cve/CVE-2020-12373
suse.com/support/update/announcement/2021/suse-su-20210735-1
bugzilla.suse.com/1065600
bugzilla.suse.com/1065729
bugzilla.suse.com/1078720
bugzilla.suse.com/1081134
bugzilla.suse.com/1084610
bugzilla.suse.com/1132477
bugzilla.suse.com/1151927
bugzilla.suse.com/1152472
bugzilla.suse.com/1152489
bugzilla.suse.com/1154353
bugzilla.suse.com/1155518
bugzilla.suse.com/1156395
bugzilla.suse.com/1163776
bugzilla.suse.com/1169514
bugzilla.suse.com/1170442
bugzilla.suse.com/1176248
bugzilla.suse.com/1176855
bugzilla.suse.com/1177109
bugzilla.suse.com/1177326
bugzilla.suse.com/1177440
bugzilla.suse.com/1177529
bugzilla.suse.com/1178142
bugzilla.suse.com/1179082
bugzilla.suse.com/1179137
bugzilla.suse.com/1179243
bugzilla.suse.com/1179428
bugzilla.suse.com/1179660
bugzilla.suse.com/1179929
bugzilla.suse.com/1180058
bugzilla.suse.com/1180846
bugzilla.suse.com/1180989
bugzilla.suse.com/1181133
bugzilla.suse.com/1181259
bugzilla.suse.com/1181574
bugzilla.suse.com/1181637
bugzilla.suse.com/1181655
bugzilla.suse.com/1181671
bugzilla.suse.com/1181674
bugzilla.suse.com/1181710
bugzilla.suse.com/1181747
bugzilla.suse.com/1181753
bugzilla.suse.com/1181818
bugzilla.suse.com/1181843
bugzilla.suse.com/1181854
bugzilla.suse.com/1181896
bugzilla.suse.com/1181958
bugzilla.suse.com/1181960
bugzilla.suse.com/1181985
bugzilla.suse.com/1182047
bugzilla.suse.com/1182118
bugzilla.suse.com/1182128
bugzilla.suse.com/1182140
bugzilla.suse.com/1182171
bugzilla.suse.com/1182175
bugzilla.suse.com/1182259
bugzilla.suse.com/1182265
bugzilla.suse.com/1182266
bugzilla.suse.com/1182267
bugzilla.suse.com/1182268
bugzilla.suse.com/1182271
bugzilla.suse.com/1182272
bugzilla.suse.com/1182273
bugzilla.suse.com/1182275
bugzilla.suse.com/1182276
bugzilla.suse.com/1182278
bugzilla.suse.com/1182283
bugzilla.suse.com/1182374
bugzilla.suse.com/1182380
bugzilla.suse.com/1182381
bugzilla.suse.com/1182406
bugzilla.suse.com/1182430
bugzilla.suse.com/1182439
bugzilla.suse.com/1182441
bugzilla.suse.com/1182442
bugzilla.suse.com/1182443
bugzilla.suse.com/1182444
bugzilla.suse.com/1182445
bugzilla.suse.com/1182446
bugzilla.suse.com/1182447
bugzilla.suse.com/1182449
bugzilla.suse.com/1182454
bugzilla.suse.com/1182455
bugzilla.suse.com/1182456
bugzilla.suse.com/1182457
bugzilla.suse.com/1182458
bugzilla.suse.com/1182459
bugzilla.suse.com/1182460
bugzilla.suse.com/1182461
bugzilla.suse.com/1182462
bugzilla.suse.com/1182463
bugzilla.suse.com/1182464
bugzilla.suse.com/1182465
bugzilla.suse.com/1182466
bugzilla.suse.com/1182485
bugzilla.suse.com/1182489
bugzilla.suse.com/1182490
bugzilla.suse.com/1182547
bugzilla.suse.com/1182558
bugzilla.suse.com/1182560
bugzilla.suse.com/1182561
bugzilla.suse.com/1182571
bugzilla.suse.com/1182599
bugzilla.suse.com/1182602
bugzilla.suse.com/1182626
bugzilla.suse.com/1182650
bugzilla.suse.com/1182672
bugzilla.suse.com/1182676
bugzilla.suse.com/1182683
bugzilla.suse.com/1182684
bugzilla.suse.com/1182686
bugzilla.suse.com/1182770
bugzilla.suse.com/1182798
bugzilla.suse.com/1182800
bugzilla.suse.com/1182801
bugzilla.suse.com/1182854
bugzilla.suse.com/1182856
bugzilla.suse.com/1183022
suse.com/security/cve/CVE-2020-29368
suse.com/security/cve/CVE-2020-29374
suse.com/security/cve/CVE-2021-26930
suse.com/security/cve/CVE-2021-26931
suse.com/security/cve/CVE-2021-26932
suse.com/support/update/announcement/2021/suse-su-20210738-1
bugzilla.suse.com/1178995
bugzilla.suse.com/1180964
bugzilla.suse.com/1181544
suse.com/support/update/announcement/2021/suse-su-20210741-1
bugzilla.suse.com/1182110
bugzilla.suse.com/1182341
bugzilla.suse.com/1182507
lists.opensuse.org/archives/list/[email protected]/thread/R5J7TLH5AZYERG7B3PW3ALPYSBMFCGV5
bugzilla.suse.com/1182697
lists.opensuse.org/archives/list/[email protected]/thread/KH2XS5MRKRSCX3I5AS4LGZH576PO6KUD
Left out here: the rest of 4 source descriptions. The JSON record has them.