CVE-2020-13233
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1)
No score
This update for the Linux Kernel 4.12.14-195 fixes several issues.
The following security issues were fixed:
- CVE-2019-13233: Fixed a race condition between modify_ldt() and a #BR exception for an MPX bounds violation (bsc#1144502).
- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437).
- CVE-2019-15666: Fixed an out of bounds read __xfrm_policy_unlink, which could have led to denial of service (bsc#1172140).
- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1171746).
What each source reports
OSVSUSE-SU-2020:1656-1 No score
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-195 fixes several issues.
The following security issues were fixed:
- CVE-2019-13233: Fixed a race condition between modify_ldt() and a #BR exception for an MPX bounds violation (bsc#1144502).
- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437).
- CVE-2019-15666: Fixed an out of bounds read __xfrm_policy_unlink, which could have led to denial of service (bsc#1172140).
- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1171746).
- Record
SUSE-SU-2020:1656-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-livepatch-SLE15-SP1_Update_2SUSE:Linux Enterprise Live Patching 15 SP1 From an advisory covering 4 CVEs |
before 10-2.1 | 10-2.1 |
kernel-livepatch-SLE15-SP1_Update_1SUSE:Linux Enterprise Live Patching 15 SP1 From an advisory covering 4 CVEs |
before 11-2.1 | 11-2.1 |
kernel-livepatch-SLE15-SP1_Update_0SUSE:Linux Enterprise Live Patching 15 SP1 From an advisory covering 4 CVEs |
before 12-34.1 | 12-34.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-13233 is a vulnerability with no CVSS score yet in kernel-livepatch-SLE15-SP1_Update_2, published June 18, 2020. No source lists public exploit code. No source names a fixed version.
References
suse.com/support/update/announcement/2020/suse-su-20201656-1
bugzilla.suse.com/1144502