CVE-2020-14331

A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VT_RESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA console to crash the system, potentially escalating their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

• ELS-138: netfilter: x_tables: add missing tables zeroing
• ELS-138: CVE-2021-33909: seq_file: disallow extremely large seq buffer allocation
• ELS-138: CVE-2021-22555: netfilter: x_tables: fix compat match/target pad out-of-bound write
• ELS-138: CVE-2020-29661: tty: Fix ->pgrp locking in tiocspgrp()
• ELS-138: CVE-2020-25656: vt: keyboard, extend func_buf_lock to readers
• ELS-138: CVE-2020-25656: tty/vt: fix write/write race in ioctl(KDSKBSENT) handler
• ELS-138: CVE-2020-25656: vt: keyboard, simplify vt_kdgkbsent
• ELS-138: CVE-2020-25211: netfilter: ctnetlink: add a range check for l3/l4 protonum
• ELS-138: CKSIX-276: CVE-2019-19532: HID: Fix assumption that devices have inputs
• ELS-138: CVE-2021-27365: scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE
• ELS-138: CVE-2021-27365: scsi: iscsi: Verify lengths on passthrough PDUs
• ELS-138: CVE-2021-27363: CVE-2021-27364: scsi: iscsi: Restrict sessions and handles to admin capabilities
• ELS-138: sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output
• ELS-138: USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data
• ELS-138: CVE-2019-14615: drm/i915/gen9: Clear residual context state on context switch
• ELS-138: CVE-2020-8647, CVE-2020-8649: vgacon: Fix a UAF in vgacon_invert_region
• ELS-138: CVE-2020-14331: vgacon: Fix for missing check in scrollback handling
• ELS-138: CVE-2021-3347: futex: Handle faults correctly for PI futexes
• ELS-138: CVE-2021-3347: futex: Provide and use pi_state_update_owner()
• ELS-138: KEYS: allow reaching the keys quotas exactly
• ELS-138: KEYS: reaching the keys quotas correctly
• ELS-138: fix -ENOMEM result with invalid user space pointer in sendto() syscall
• ELS-138: CVE-2017-18344: posix-timer: Properly check sigevent->sigev_notify
• ELS-138: CVE-2018-6927: futex: Prevent overflow by strengthen input validation
• ELS-138: CVE-2017-6951: KEYS: Change the name of the dead type to ".dead" to prevent user access
• ELS-138: CVE-2017-15299: KEYS: don't let add_key() update an uninstantiated key
• ELS-138: fix CVE-2016-9604
• ELS-138: KEYS: add missing permission check for request_key() destination
• ELS-138: CVE-2017-10661: timerfd: Protect the might cancel mechanism proper
• ELS-138: fix CVE-2017-7472
• ELS-138: fix CVE-2017-15274

• CKSIX-267: USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data
• CKSIX-267: CVE-2019-14615: drm/i915/gen9: Clear residual context state on context switch
• CKSIX-267: CVE-2020-8647, CVE-2020-8649: vgacon: Fix a UAF in vgacon_invert_region
• CKSIX-267: CVE-2020-14331: vgacon: Fix for missing check in scrollback handling
• CKSIX-268: CVE-2021-3347: futex: Handle faults correctly for PI futexes
• CKSIX-268: CVE-2021-3347: futex: Provide and use pi_state_update_owner()
• CKSIX-263: KEYS: allow reaching the keys quotas exactly
• CKSIX-263: KEYS: reaching the keys quotas correctly
• CKSIX-263: fix -ENOMEM result with invalid user space pointer in sendto() syscall
• CKSIX-263: CVE-2017-18344: posix-timer: Properly check sigevent->sigev_notify
• CKSIX-263: CVE-2018-6927: futex: Prevent overflow by strengthen input validation
• CKSIX-258: CVE-2017-6951: KEYS: Change the name of the dead type to ".dead" to prevent user access
• CKSIX-258: CVE-2017-15299: KEYS: don't let add_key() update an uninstantiated key
• CKSIX-258: fix CVE-2016-9604
• CKSIX-258: KEYS: add missing permission check for request_key() destination
• CKSIX-258: CVE-2017-10661: timerfd: Protect the might cancel mechanism proper
• CKSIX-258: fix CVE-2017-7472
• CKSIX-258: fix CVE-2017-15274

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c where it did not check the length of variable elements in a beacon head, leading to a buffer overflow (bnc#1152107 1173659).
• CVE-2019-20810: go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c did not call snd_card_free for a failure path, which causes a memory leak, aka CID-9453264ef586 (bnc#1172458).
• CVE-2019-20908: An issue was discovered in drivers/firmware/efi/efi.c where Incorrect access permissions for the efivar_ssdt ACPI variable could be used by attackers to bypass lockdown or secure boot restrictions, aka CID-1957a85b0032 (bnc#1173567).
• CVE-2020-0305: In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1174462).
• CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetooth� BR/EDR Core Specification v5.2 and earlier may have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent attacker could impersonate a Bluetooth BR/EDR master or slave to pair with a previously paired remote device to successfully complete the authentication procedure without knowing the link key (bnc#1171988).
• CVE-2020-10766: Fixed rogue cross-process SSBD shutdown. Linux scheduler logical bug allowed an attacker to turn off the SSBD protection. (bnc#1172781).
• CVE-2020-10767: Fixed indirect Branch Prediction Barrier is force-disabled when STIBP is unavailable or enhanced IBRS is available. (bnc#1172782).
• CVE-2020-10768: Fixed indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command. (bnc#1172783).
• CVE-2020-10769: A buffer over-read flaw was found in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. When a payload longer than 4 bytes, and is not following 4-byte alignment boundary guidelines, it causes a buffer over-read threat, leading to a system crash. This flaw allowed a local attacker with user privileges to cause a denial of service (bnc#1173265).
• CVE-2020-10773: Fixed a kernel stack information leak on s390/s390x. (bnc#1172999).
• CVE-2020-10781: A zram sysfs resource consumption was fixed. (bnc#1173074).
• CVE-2020-12771: btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails (bnc#1171732).
• CVE-2020-12888: The VFIO PCI driver mishandled attempts to access disabled memory space (bnc#1171868).
• CVE-2020-13974: drivers/tty/vt/keyboard.c had an integer overflow if k_ascii was called several times in a row, aka CID-b86dab054059. (bnc#1172775).
• CVE-2020-14331: Fixed a buffer over write in vgacon_scroll (bnc#1174205).
• CVE-2020-14331: Fixed an out of bounds write to the vgacon scrollback buffer (bsc#1174205).
• CVE-2020-14416: A race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c (bnc#1162002).
• CVE-2020-15393: usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebeb8db770 (bnc#1173514).
• CVE-2020-15780: An issue was discovered in drivers/acpi/acpi_configfs.c where injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30 (bnc#1173573).
• CVE-2020-16166: The Linux kernel allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c (bnc#1174757).

The following non-security bugs…

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes.

This update is signed with the new UEFI signing key for openSUSE. It contains rebuilds of all available KMP packages also rebuilt with the new UEFi signing key. (boo#1174543)

The following security bugs were fixed:

• CVE-2020-14356: A use after free vulnerability in cgroup BPF component was fixed (bsc#1175213).
• CVE-2020-14331: A buffer over write in vgacon_scroll was fixed (bnc#1174205).
• CVE-2020-16166: The Linux kernel allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c (bnc#1174757).
• CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetooth� BR/EDR Core Specification v5.2 and earlier may have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent attacker could impersonate a Bluetooth BR/EDR master or slave to pair with a previously paired remote device to successfully complete the authentication procedure without knowing the link key (bnc#1171988).
• CVE-2020-0305: In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1174462).
• CVE-2020-15780: An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel Injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30 (bnc#1173573).
• CVE-2020-10781: zram sysfs resource consumption was fixed (bnc#1173074).

The following non-security bugs were fixed:

• 9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work (git-fixes).
• ACPICA: Dispatcher: add status checks (git-fixes).
• ACPI/IORT: Fix PMCG node single ID mapping handling (git-fixes).
• ACPI: video: Use native backlight on Acer Aspire 5783z (git-fixes).
• ACPI: video: Use native backlight on Acer TravelMate 5735Z (git-fixes).
• af_key: pfkey_dump needs parameter validation (git-fixes).
• agp/intel: Fix a memory leak on module initialisation failure (git-fixes).
• ALSA: asihpi: delete duplicated word (git-fixes).
• ALSA: atmel: Remove invalid 'fall through' comments (git-fixes).
• ALSA: core: pcm_iec958: fix kernel-doc (git-fixes).
• ALSA: echoaduio: Drop superfluous volatile modifier (git-fixes).
• ALSA: echoaudio: Address bugs in the interrupt handling (git-fixes).
• ALSA: echoaudio: Fix potential Oops in snd_echo_resume() (git-fixes).
• ALSA: echoaudio: Prevent races in calls to set_audio_format() (git-fixes).
• ALSA: echoaudio: Prevent some noise on unloading the module (git-fixes).
• ALSA: echoaudio: Race conditions around 'opencount' (git-fixes).
• ALSA: echoaudio: re-enable IRQs on failure path (git-fixes).
• ALSA: echoaudio: Remove redundant check (git-fixes).
• ALSA: firewire: fix kernel-doc (git-fixes).
• ALSA: hda: Add support for Loongson 7A1000 controller (git-fixes).
• ALSA: hda/ca0132 - Add new quirk ID for Recon3D (git-fixes).
• ALSA: hda/ca0132 - Fix AE-5 microphone selection commands (git-fixes).
• ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value (git-fixes).
• ALSA: hda: Enable sync-write operation as default for all controllers (git-fixes).
• ALSA: hda: fix NULL pointer dereference during suspend (git-fixes).
• ALSA: hda: fix snd_hda_codec_cleanup() documentation (git-fixes).
• ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO (git-fixes).
• ALSA: hda/hdmi: Add quirk to force connectivity (git-fixes).
• ALSA: hda/hdmi: Fix keep_power assignment for non-component devices (git-fixes).
• ALSA: hda/hdmi: Use force connectivity quirk on another HP desktop (git-fixes).
• ALSA: hda: Intel: add missing PCI IDs for ICL-H,…

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2018-3639: Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may have allowed unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4 (bnc#1085308 bnc#1087082 bnc#1172782 bnc#1172783). Mitigations for Arm had not been included yet.
• CVE-2020-14314: Fixed potential negative array index in do_split() (bsc#1173798).
• CVE-2020-14331: Fixed a buffer over write in vgacon_scroll (bnc#1174205).
• CVE-2020-14356: A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions was found in the way when reboot the system. A local user could use this flaw to crash the system or escalate their privileges on the system (bnc#1175213).
• CVE-2020-1749: Some ipv6 protocols were not encrypted over ipsec tunnels (bsc#1165629).
• CVE-2020-24394: fs/nfsd/vfs.c (in the NFS server) could set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs because the current umask is not considered (bnc#1175518).

The following non-security bugs were fixed:

• ACPI: kABI fixes for subsys exports (bsc#1174968).
• ACPI / LPSS: Resume BYT/CHT I2C controllers from resume_noirq (bsc#1174968).
• ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for hibernate (bsc#1174968).
• ACPI: PM: Introduce 'poweroff' callbacks for ACPI PM domain and LPSS (bsc#1174968).
• ACPI: PM: Simplify and fix PM domain hibernation callbacks (bsc#1174968).
• af_key: pfkey_dump needs parameter validation (git-fixes).
• agp/intel: Fix a memory leak on module initialisation failure (git-fixes).
• ALSA: core: pcm_iec958: fix kernel-doc (bsc#1111666).
• ALSA: echoaduio: Drop superfluous volatile modifier (bsc#1111666).
• ALSA: echoaudio: Fix potential Oops in snd_echo_resume() (bsc#1111666).
• ALSA: hda: Add support for Loongson 7A1000 controller (bsc#1111666).
• ALSA: hda/ca0132 - Add new quirk ID for Recon3D (bsc#1111666).
• ALSA: hda/ca0132 - Fix AE-5 microphone selection commands (bsc#1111666).
• ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value (bsc#1111666).
• ALSA: hda: fix snd_hda_codec_cleanup() documentation (bsc#1111666).
• ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO (bsc#1111666).
• ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops (bsc#1111666).
• ALSA: hda/realtek: Add model alc298-samsung-headphone (git-fixes).
• ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion (git-fixes).
• ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book (git-fixes).
• ALSA: hda/realtek: Fix pin default on Intel NUC 8 Rugged (bsc#1111666).
• ALSA: hda/realtek - Fix unused variable warning (bsc#1111666).
• ALSA: hda - reverse the setting value in the micmute_led_set (bsc#1111666).
• ALSA: pci: delete repeated words in comments (bsc#1111666).
• ALSA: seq: oss: Serialize ioctls (bsc#1111666).
• ALSA: usb-audio: Add capture support for Saffire 6 (USB 1.1) (git-fixes).
• ALSA: usb-audio: add quirk for Pioneer DDJ-RB (bsc#1111666).
• ALSA: usb-audio: add startech usb audio dock name (bsc#1111666).
• ALSA: usb-audio: Add support for Lenovo ThinkStation P620 (bsc#1111666).
• ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support (bsc#1111666).
• ALSA: usb-audio: Disable Lenovo P620 Rear line-in volume control (bsc#1111666).
• ALSA: usb-audio: endpoint : remove needless check before usb_free_coherent() (bsc#1111666).
• ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109 (bsc#1174625).
• ALSA: usb-audio: fix spelling mistake 'buss' -> 'bus' (bsc#1111666).
• ALSA: usb-audio: ignore broken processing/extension unit (git-fixes).
• ALSA: usb-audio: Update documentation comment for MS2109 quirk…

This update syncs the RT kernel from the SUSE Linux Enterprise 15-SP2 codestream.

This update was imported from the SUSE:SLE-15-SP2:Update update project.

These are all security issues fixed in the kernel-devel-5.14.6-1.4 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-devel-longterm-6.6.17-1.1 package on the GA media of openSUSE Tumbleweed.

The SUSE Linux Enterprise 15 SP2 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2020-10781: Fixed a denial of service issue in the ZRAM implementation (bnc#1173074).
• CVE-2020-0305: In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1174462).
• CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in bluetooth may have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent attacker could impersonate a Bluetooth BR/EDR master or slave to pair with a previously paired remote device to successfully complete the authentication procedure without knowing the link key (bnc#1171988).
• CVE-2020-14331: Fixed a buffer over write in vgacon_scrollback_update() (bnc#1174205).

The following non-security bugs were fixed:

• ACPICA: Dispatcher: add status checks (git-fixes).
• ACPI/IORT: Fix PMCG node single ID mapping handling (git-fixes).
• ACPI: video: Use native backlight on Acer Aspire 5783z (git-fixes).
• ACPI: video: Use native backlight on Acer TravelMate 5735Z (git-fixes).
• ALSA: hda: Intel: add missing PCI IDs for ICL-H, TGL-H and EKL (jsc#SLE-13261).
• ALSA: hda/realtek - change to suitable link model for ASUS platform (git-fixes).
• ALSA: hda/realtek: Enable headset mic of Acer TravelMate B311R-31 with ALC256 (git-fixes).
• ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G14(G401) series with ALC289 (git-fixes).
• ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534 (git-fixes).
• ALSA: hda/realtek - Enable Speaker for ASUS UX563 (git-fixes).
• ALSA: hda/realtek: Fixed ALC298 sound bug by adding quirk for Samsung Notebook Pen S (git-fixes).
• ALSA: hda/realtek - fixup for yet another Intel reference board (git-fixes).
• ALSA: info: Drop WARN_ON() from buffer NULL sanity check (git-fixes).
• ALSA: line6: Perform sanity check for each URB creation (git-fixes).
• ALSA: line6: Sync the pending work cancel at disconnection (git-fixes).
• ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Flight S (git-fixes).
• ALSA: usb-audio: Fix race against the error recovery URB submission (git-fixes).
• apparmor: ensure that dfa state tables have entries (git-fixes).
• apparmor: fix introspection of of task mode for unconfined tasks (git-fixes).
• apparmor: Fix memory leak of profile proxy (git-fixes).
• apparmor: Fix use-after-free in aa_audit_rule_init (git-fixes).
• apparmor: remove useless aafs_create_symlink (git-fixes).
• arm64: dts: ls1043a-rdb: correct RGMII delay mode to rgmii-id (bsc#1174398).
• arm64: dts: ls1046ardb: set RGMII interfaces to RGMII_ID mode (bsc#1174398).
• ASoC: codecs: max98373: Removed superfluous volume control from chip default (git-fixes).
• ASoc: codecs: max98373: remove Idle_bias_on to let codec suspend (git-fixes).
• ASoC: Intel: bytcht_es8316: Add missed put_device() (git-fixes).
• ASoC: rockchip: add format and rate constraints on rk3399 (git-fixes).
• ASoC: rt286: fix unexpected interrupt happens (git-fixes).
• ASoC: rt5670: Add new gpio1_is_ext_spk_en quirk and enable it on the Lenovo Miix 2 10 (git-fixes).
• ASoC: rt5670: Correct RT5670_LDO_SEL_MASK (git-fixes).
• ASoC: rt5670: Fix dac- and adc- vol-tlv values being off by a factor of 10 (git-fixes).
• ASoC: rt5682: Report the button event in the headset type only (git-fixes).
• ASoC: topology: fix kernel oops on route addition error (git-fixes).
• ASoC: topology: fix tlvs in error handling for widget_dmixer (git-fixes).
• ASoC: wm8974: fix Boost Mixer Aux Switch (git-fixes).
• ASoC: wm8974: remove unsupported clock mode (git-fixes).
• ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb (git-fixes).
• ath9k: Fix regression with Atheros 9271 (git-fixes).
• ax88172a:…

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2020-15780: A lockdown bypass for loading unsigned modules using ACPI table injection was fixed. (bsc#1173573)
• CVE-2020-15393: Fixed a memory leak in usbtest_disconnect (bnc#1173514).
• CVE-2020-12771: An issue was discovered in btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails (bnc#1171732).
• CVE-2020-12888: The VFIO PCI driver mishandled attempts to access disabled memory space (bnc#1171868).
• CVE-2020-10773: Fixed a memory leak on s390/s390x, in the cmm_timeout_hander in file arch/s390/mm/cmm.c (bnc#1172999).
• CVE-2020-14416: Fixed a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c (bnc#1162002).
• CVE-2020-0305: Fixed a possible use-after-free due to a race condition incdev_get of char_dev.c. This could lead to local escalation of privilege. User interaction is not needed for exploitation (bnc#1174462).
• CVE-2020-10769: A buffer over-read flaw was found in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. This flaw allowed a local attacker with user privileges to cause a denial of service (bnc#1173265).
• CVE-2020-10781: Fixed a denial of service issue in the ZRAM implementation (bnc#1173074).
• CVE-2019-20908: Fixed incorrect access permissions for the efivar_ssdt ACPI variable, which could be used by attackers to bypass lockdown or secure boot restrictions (bnc#1173567).
• CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c, related to invalid length checks for variable elements in a beacon head (bnc#1152107).
• CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetooth may have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent attacker could impersonate a Bluetooth BR/EDR master or slave to pair with a previously paired remote device to successfully complete the authentication procedure without knowing the link key (bnc#1171988).
• CVE-2020-14331: Fixed a buffer over write in vgacon_scrollback_update() (bnc#1174205).

The following non-security bugs were fixed:

• ACPI: GED: add support for _Exx / _Lxx handler methods (bsc#1111666).
• ACPI: GED: use correct trigger type field in _Exx / _Lxx handling (bsc#1111666).
• ACPI: NFIT: Fix unlock on error in scrub_show() (bsc#1171753).
• ACPI: sysfs: Fix pm_profile_attr type (bsc#1111666).
• ACPI: video: Use native backlight on Acer Aspire 5783z (bsc#1111666).
• ACPI: video: Use native backlight on Acer TravelMate 5735Z (bsc#1111666).
• ALSA: hda - let hs_mic be picked ahead of hp_mic (bsc#1111666).
• ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534 (bsc#1111666).
• ALSA: lx6464es - add support for LX6464ESe pci express variant (bsc#1111666).
• ALSA: opl3: fix infoleak in opl3 (bsc#1111666).
• ALSA: usb-audio: add quirk for MacroSilicon MS2109 (bsc#1111666).
• ALSA: usb-audio: Fix packet size calculation (bsc#1111666).
• ALSA: usb-audio: Improve frames size computation (bsc#1111666).
• amdgpu: a NULL ->mm does not mean a thread is a kthread (git-fixes).
• ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb (bsc#1111666).
• ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx (bsc#1111666).
• ath9k: Fix use-after-free Write in ath9k_htc_rx_msg (bsc#1111666).
• ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb (bsc#1111666).
• ax25: fix setsockopt(SO_BINDTODEVICE) (networking-stable-20_05_27).
• b43: Fix connection problem with WPA3 (bsc#1111666).
• b43_legacy: Fix connection problem with WPA3 (bsc#1111666).
• be2net: fix link failure after ethtool offline test (git-fixes).
• block, bfq: add requeue-request hook (bsc#1104967 bsc#1171673).
• block, bfq:…

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2020-14331: A buffer over write in vgacon_scroll was fixed (bnc#1174205).
• CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent attacker could impersonate a Bluetooth BR/EDR master or slave to pair with a previously paired remote device to successfully complete the authentication procedure without knowing the link key (bnc#1171988).
• CVE-2020-0305: In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1174462).
• CVE-2019-20908: An issue was discovered in drivers/firmware/efi/efi.c where incorrect access permissions for the efivar_ssdt ACPI variable could be used by attackers to bypass lockdown or secure boot restrictions, aka CID-1957a85b0032 (bnc#1173567).
• CVE-2020-10781: zram sysfs resource consumption was fixed (bnc#1173074).
• CVE-2020-15780: An issue was discovered in drivers/acpi/acpi_configfs.c where injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30 (bnc#1173573).
• CVE-2020-15393: usbtest_disconnect in drivers/usb/misc/usbtest.c had a memory leak, aka CID-28ebeb8db770 (bnc#1173514).
• CVE-2020-12771: btree_gc_coalesce in drivers/md/bcache/btree.c had a deadlock if a coalescing operation fails (bnc#1171732).
• CVE-2019-16746: net/wireless/nl80211.c did not check the length of variable elements in a beacon head, leading to a buffer overflow (bnc#1152107).
• CVE-2020-12888: The VFIO PCI driver mishandled attempts to access disabled memory space (bnc#1171868).
• CVE-2020-10769: A buffer over-read flaw was found in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. When a payload longer than 4 bytes, and is not following 4-byte alignment boundary guidelines, it causes a buffer over-read threat, leading to a system crash. This flaw allowed a local attacker with user privileges to cause a denial of service (bnc#1173265).
• CVE-2020-10773: A kernel stack information leak on s390/s390x was fixed (bnc#1172999).
• CVE-2020-14416: A race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c (bnc#1162002).

The following non-security bugs were fixed:

• ACPI: GED: add support for _Exx / _Lxx handler methods (bsc#1111666).
• ACPI: GED: use correct trigger type field in _Exx / _Lxx handling (bsc#1111666).
• ACPI: NFIT: Fix unlock on error in scrub_show() (bsc#1171753).
• ACPI: sysfs: Fix pm_profile_attr type (bsc#1111666).
• ACPI: video: Use native backlight on Acer Aspire 5783z (bsc#1111666).
• ACPI: video: Use native backlight on Acer TravelMate 5735Z (bsc#1111666).
• ALSA: hda - let hs_mic be picked ahead of hp_mic (bsc#1111666).
• ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534 (bsc#1111666).
• ALSA: lx6464es - add support for LX6464ESe pci express variant (bsc#1111666).
• ALSA: opl3: fix infoleak in opl3 (bsc#1111666).
• ALSA: usb-audio: add quirk for MacroSilicon MS2109 (bsc#1111666).
• ALSA: usb-audio: Fix packet size calculation (bsc#1111666).
• ALSA: usb-audio: Improve frames size computation (bsc#1111666).
• amdgpu: a NULL ->mm does not mean a thread is a kthread (git-fixes).
• ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb (bsc#1111666).
• ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx (bsc#1111666).
• ath9k: Fix use-after-free Write in ath9k_htc_rx_msg (bsc#1111666). -…

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2020-14314: Fixed a potential negative array index in ext4 (bsc#1173798).
• CVE-2020-14331: Fixed a missing check in scrollback handling (bsc#1174205 bsc#1174247).
• CVE-2020-14356: Fixed a NULL pointer dereference in the cgroupv2 subsystem (bsc#1175213).
• CVE-2020-16166: Fixed an information leak in the network RNG (bsc#1174757).

The following non-security bugs were fixed:

• 9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work (git-fixes).
• ACPICA: Do not increment operation_region reference counts for field units (git-fixes).
• af_key: pfkey_dump needs parameter validation (git-fixes).
• agp/intel: Fix a memory leak on module initialisation failure (git-fixes).
• ALSA: atmel: Remove invalid 'fall through' comments (git-fixes).
• ALSA: core: pcm_iec958: fix kernel-doc (git-fixes).
• ALSA: echoaduio: Drop superfluous volatile modifier (git-fixes).
• ALSA: echoaudio: Address bugs in the interrupt handling (git-fixes).
• ALSA: echoaudio: Fix potential Oops in snd_echo_resume() (git-fixes).
• ALSA: echoaudio: Prevent races in calls to set_audio_format() (git-fixes).
• ALSA: echoaudio: Prevent some noise on unloading the module (git-fixes).
• ALSA: echoaudio: Race conditions around 'opencount' (git-fixes).
• ALSA: echoaudio: re-enable IRQs on failure path (git-fixes).
• ALSA: echoaudio: Remove redundant check (git-fixes).
• ALSA: firewire: fix kernel-doc (git-fixes).
• ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO (git-fixes).
• ALSA: hda - reverse the setting value in the micmute_led_set (git-fixes).
• ALSA: hda/ca0132 - Add new quirk ID for Recon3D (git-fixes).
• ALSA: hda/ca0132 - Fix AE-5 microphone selection commands (git-fixes).
• ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value (git-fixes).
• ALSA: hda/hdmi: Add quirk to force connectivity (git-fixes).
• ALSA: hda/hdmi: Fix keep_power assignment for non-component devices (git-fixes).
• ALSA: hda/hdmi: Use force connectivity quirk on another HP desktop (git-fixes).
• ALSA: hda/realtek - Fix unused variable warning (git-fixes).
• ALSA: hda/realtek - Fixed HP right speaker no sound (git-fixes).
• ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops (git-fixes).
• ALSA: hda/realtek: Add model alc298-samsung-headphone (git-fixes).
• ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion (git-fixes).
• ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book (git-fixes).
• ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G15(GA502) series with ALC289 (git-fixes).
• ALSA: hda/realtek: Fix add a 'ultra_low_power' function for intel reference board (alc256) (git-fixes).
• ALSA: hda/realtek: Fix pin default on Intel NUC 8 Rugged (git-fixes).
• ALSA: hda/realtek: typo_fix: enable headset mic of ASUS ROG Zephyrus G14(GA401) series with ALC289 (git-fixes).
• ALSA: hda/tegra: Disable sync-write operation (git-fixes).
• ALSA: hda: Add support for Loongson 7A1000 controller (git-fixes).
• ALSA: hda: avoid reset of sdo_limit (git-fixes).
• ALSA: hda: Enable sync-write operation as default for all controllers (git-fixes).
• ALSA: hda: fix NULL pointer dereference during suspend (git-fixes).
• ALSA: hda: fix snd_hda_codec_cleanup() documentation (git-fixes).
• ALSA: hda: Workaround for spurious wakeups on some Intel platforms (git-fixes).
• ALSA: isa/gus: remove 'set but not used' warning (git-fixes).
• ALSA: isa/gus: remove -Wmissing-prototypes warnings (git-fixes).
• ALSA: isa: fix spelling mistakes in the comments (git-fixes).
• ALSA: line6: add hw monitor volume control for POD HD500 (git-fixes).
• ALSA: line6: Use kmemdup in podhd_set_monitor_level() (git-fixes).
• ALSA: pci/asihpi: fix kernel-doc (git-fixes).
• ALSA: pci/asihpi: remove 'set but not used' warning (git-fixes).
• ALSA: pci/asihpi: remove 'set but not used' warnings (git-fixes).
• ALSA:…

This update for the Linux Kernel 4.4.180-94_103 fixes several issues.

The following security issues were fixed:

• CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
• CVE-2019-0155: Fixed a privilege escalation in the i915 graphics driver (bsc#1173663).
• CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bsc#1173659).
• CVE-2019-9458: Fixed a use-after-free in media/v4l (bsc#1173963).
• CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).
• CVE-2019-19447: Fixed a use-after-free in ext4_put_super (bsc#1173869).
• CVE-2019-18680: Fixed a NULL pointer dereference in rds_tcp_kill_sock() in net/rds/tcp.c (bsc#1173867).
• CVE-2019-14816: Fixed a heap-based buffer overflow in the Marvell WiFi driver (bsc#1173666).
• CVE-2019-14814: Fixed a heap-based buffer overflow in the Marvell WiFi driver (bsc#1173664).
• CVE-2019-14815: Fixed a heap-based buffer overflow in the Marvell WiFi driver (bsc#1173665).
• CVE-2019-14901: Fixed a heap overflow in the Marvell WiFi driver (bsc#1173661).
• CVE-2019-14895: Fixed a heap-based buffer overflow in the Marvell WiFi driver (bsc#1173100).

This update for the Linux Kernel 4.4.121-92_125 fixes several issues.

The following security issues were fixed:

• CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
• CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bsc#1173659).
• CVE-2019-9458: Fixed a use-after-free in media/v4l (bsc#1173963).
• CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).
• CVE-2019-19447: Fixed a use-after-free in ext4_put_super (bsc#1173869).
• CVE-2019-14901: Fixed a heap overflow in the Marvell WiFi driver (bsc#1173661).
• CVE-2019-14895: Fixed a heap-based buffer overflow in the Marvell WiFi driver (bsc#1173100).

This update for the Linux Kernel 4.4.180-94_107 fixes several issues.

The following security issues were fixed:

• CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
• CVE-2019-0155: Fixed a privilege escalation in the i915 graphics driver (bsc#1173663).
• CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bsc#1173659).
• CVE-2019-9458: Fixed a use-after-free in media/v4l (bsc#1173963).
• CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).
• CVE-2019-19447: Fixed a use-after-free in ext4_put_super (bsc#1173869).
• CVE-2019-18680: Fixed a NULL pointer dereference in rds_tcp_kill_sock() in net/rds/tcp.c (bsc#1173867).
• CVE-2019-14901: Fixed a heap overflow in the Marvell WiFi driver (bsc#1173661).
• CVE-2019-14895: Fixed a heap-based buffer overflow in the Marvell WiFi driver (bsc#1173100).

This update for the Linux Kernel 4.4.180-94_113 fixes several issues.

The following security issues were fixed:

• CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
• CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bsc#1173659).
• CVE-2019-9458: Fixed a use-after-free in media/v4l (bsc#1173963).
• CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).
• CVE-2019-19447: Fixed a use-after-free in ext4_put_super (bsc#1173869).
• CVE-2019-14895: Fixed a heap-based buffer overflow in the Marvell WiFi driver (bsc#1173100).

This update for the Linux Kernel 4.4.180-94_116 fixes several issues.

The following security issues were fixed:

• CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
• CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bsc#1173659).
• CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).

This update for the Linux Kernel 4.4.180-94_127 fixes several issues.

The following security issues were fixed:

• CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
• CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bsc#1173659).
• CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).
• CVE-2020-1749: Fixed a flaw in IPsec where some IPv6 protocols were not encrypted (bsc#1165631).

This update for the Linux Kernel 4.12.14-197_26 fixes several issues.

The following security issues were fixed:

• CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
• CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186).
• CVE-2019-0155: Fixed a privilege escalation in the i915 graphics driver (bsc#1173663).
• CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bsc#1173659).
• CVE-2019-9458: Fixed a use-after-free in media/v4l (bsc#1173963).
• CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).
• CVE-2019-19447: Fixed a use-after-free in ext4_put_super (bsc#1173869).
• CVE-2019-14901: Fixed a heap overflow in the Marvell WiFi driver (bsc#1173661).
• CVE-2019-14895: Fixed a heap-based buffer overflow in the Marvell WiFi driver (bsc#1173100).

This update for the Linux Kernel 4.12.14-122_7 fixes several issues.

The following security issues were fixed:

• CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
• CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186).
• CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bsc#1173659).
• CVE-2019-9458: Fixed a use-after-free in media/v4l (bsc#1173963).
• CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).
• CVE-2019-19447: Fixed a use-after-free in ext4_put_super (bsc#1173869).
• CVE-2019-14901: Fixed a heap overflow in the Marvell WiFi driver (bsc#1173661).
• CVE-2019-14895: Fixed a heap-based buffer overflow in the Marvell WiFi driver (bsc#1173100).

This update for the Linux Kernel 4.12.14-95_48 fixes several issues.

The following security issues were fixed:

• CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
• CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186).
• CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bsc#1173659).
• CVE-2019-9458: Fixed a use-after-free in media/v4l (bsc#1173963).
• CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).

This update for the Linux Kernel 4.12.14-95_51 fixes several issues.

The following security issues were fixed:

• CVE-2020-10757: Fixed a privilege escalation in the mremap handling of DAX Huge Pages (bsc#1172437).
• CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
• CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186).
• CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bsc#1173659).

This update for the Linux Kernel 4.12.14-95_54 fixes several issues.

The following security issues were fixed:

• CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
• CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186).
• CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bsc#1173659).
• CVE-2020-1749: Fixed a flaw in IPsec where some IPv6 protocols were not encrypted (bsc#1165631).

This update for the Linux Kernel 4.12.14-197_29 fixes several issues.

The following security issues were fixed:

• CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
• CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186).
• CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bsc#1173659).
• CVE-2019-9458: Fixed a use-after-free in media/v4l (bsc#1173963).
• CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).
• CVE-2019-19447: Fixed a use-after-free in ext4_put_super (bsc#1173869).
• CVE-2019-14895: Fixed a heap-based buffer overflow in the Marvell WiFi driver (bsc#1173100).

This update for the Linux Kernel 5.3.18-22 fixes several issues.

The following security issues were fixed:

• CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
• CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186).

This update for the Linux Kernel 4.12.14-197_45 fixes several issues.

The following security issues were fixed:

• CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
• CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186).
• CVE-2020-1749: Fixed a flaw in IPsec where some IPv6 protocols were not encrypted (bsc#1165631).

This update for the Linux Kernel 4.12.14-150_52 fixes several issues.

The following security issues were fixed:

• CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
• CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186).
• CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bsc#1173659).
• CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).
• CVE-2020-1749: Fixed a flaw in IPsec where some IPv6 protocols were not encrypted (bsc#1165631).

This update for the Linux Kernel 4.12.14-150_55 fixes several issues.

The following security issues were fixed:

• CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
• CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).
• CVE-2020-1749: Fixed a flaw in IPsec where some IPv6 protocols were not encrypted (bsc#1165631).

This update for the Linux Kernel 4.12.14-197_18 fixes several issues.

The following security issues were fixed:

• CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
• CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186).
• CVE-2019-0155: Fixed a privilege escalation in the i915 graphics driver (bsc#1173663).
• CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bsc#1173659).
• CVE-2019-9458: Fixed a use-after-free in media/v4l (bsc#1173963).
• CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).
• CVE-2019-15117: Fixed an OOB memory access in the USB sound mixer (bsc#1173934).
• CVE-2019-19447: Fixed a use-after-free in ext4_put_super (bsc#1173869).
• CVE-2019-14901: Fixed a heap overflow in the Marvell WiFi driver (bsc#1173661).
• CVE-2019-14895: Fixed a heap-based buffer overflow in the Marvell WiFi driver (bsc#1173100).

This update for the Linux Kernel 4.12.14-197_37 fixes several issues.

The following security issues were fixed:

• CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
• CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186).
• CVE-2019-9458: Fixed a use-after-free in media/v4l (bsc#1173963).
• CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).

This update for the Linux Kernel 4.12.14-197_51 fixes several issues.

The following security issues were fixed:

• CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
• CVE-2020-1749: Fixed a flaw in IPsec where some IPv6 protocols were not encrypted (bsc#1165631).

This update for the Linux Kernel 5.3.18-24_9 fixes one issue.

The following security issue was fixed:

• CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2020-1749: Use ip6_dst_lookup_flow instead of ip6_dst_lookup (bsc#1165629).
• CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798).
• CVE-2020-14356: Fixed a null pointer dereference in cgroupv2 subsystem which could have led to privilege escalation (bsc#1175213).
• CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205).
• CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG (bsc#1174757).
• CVE-2020-24394: Fixed an issue which could set incorrect permissions on new filesystem objects when the filesystem lacks ACL support (bsc#1175518).

The following non-security bugs were fixed:

• ACPI: kABI fixes for subsys exports (bsc#1174968).
• ACPI / LPSS: Resume BYT/CHT I2C controllers from resume_noirq (bsc#1174968).
• ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for hibernate (bsc#1174968).
• ACPI: PM: Introduce 'poweroff' callbacks for ACPI PM domain and LPSS (bsc#1174968).
• ACPI: PM: Simplify and fix PM domain hibernation callbacks (bsc#1174968).
• af_key: pfkey_dump needs parameter validation (git-fixes).
• agp/intel: Fix a memory leak on module initialisation failure (git-fixes).
• ALSA: core: pcm_iec958: fix kernel-doc (bsc#1111666).
• ALSA: echoaduio: Drop superfluous volatile modifier (bsc#1111666).
• ALSA: echoaudio: Fix potential Oops in snd_echo_resume() (bsc#1111666).
• ALSA: hda: Add support for Loongson 7A1000 controller (bsc#1111666).
• ALSA: hda/ca0132 - Add new quirk ID for Recon3D (bsc#1111666).
• ALSA: hda/ca0132 - Fix AE-5 microphone selection commands (bsc#1111666).
• ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value (bsc#1111666).
• ALSA: hda: fix NULL pointer dereference during suspend (git-fixes).
• ALSA: hda: fix snd_hda_codec_cleanup() documentation (bsc#1111666).
• ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO (bsc#1111666).
• ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops (bsc#1111666).
• ALSA: hda/realtek: Add model alc298-samsung-headphone (git-fixes).
• ALSA: hda/realtek: Add mute LED and micmute LED support for HP systems (bsc#1111666).
• ALSA: hda/realtek - Add quirk for Lenovo Carbon X1 8th gen (bsc#1111666).
• ALSA: hda/realtek - Add quirk for MSI GE63 laptop (bsc#1111666).
• ALSA: hda/realtek - Add quirk for MSI GL63 (bsc#1111666).
• ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion (git-fixes).
• ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book (git-fixes).
• ALSA: hda/realtek - change to suitable link model for ASUS platform (bsc#1111666).
• ALSA: hda/realtek - Check headset type by unplug and resume (bsc#1111666).
• ALSA: hda/realtek - Enable audio jacks of Acer vCopperbox with ALC269VC (bsc#1111666).
• ALSA: hda/realtek: Enable headset mic of Acer C20-820 with ALC269VC (bsc#1111666).
• ALSA: hda/realtek: Enable headset mic of Acer TravelMate B311R-31 with ALC256 (bsc#1111666).
• ALSA: hda/realtek: Enable headset mic of Acer Veriton N4660G with ALC269VC (bsc#1111666).
• ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G14(G401) series with ALC289 (bsc#1111666).
• ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G15(GA502) series with ALC289 (bsc#1111666).
• ALSA: hda/realtek - Enable Speaker for ASUS UX563 (bsc#1111666).
• ALSA: hda/realtek: Fix add a 'ultra_low_power' function for intel reference board (alc256) (bsc#1111666).
• ALSA: hda/realtek: Fixed ALC298 sound bug by adding quirk for Samsung Notebook Pen S (bsc#1111666).
• ALSA: hda/realtek - Fixed HP right speaker no sound (bsc#1111666).
• ALSA: hda/realtek - Fix Lenovo Thinkpad X1 Carbon 7th quirk subdevice id (bsc#1111666).
• ALSA: hda/realtek: Fix pin default on Intel NUC 8 Rugged…

The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2020-1749: Use ip6_dst_lookup_flow instead of ip6_dst_lookup (bsc#1165629).
• CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798).
• CVE-2020-14356: Fixed a null pointer dereference in cgroupv2 subsystem which could have led to privilege escalation (bsc#1175213).
• CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205).
• CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG (bsc#1174757).
• CVE-2020-24394: Fixed an issue which could set incorrect permissions on new filesystem objects when the filesystem lacks ACL support (bsc#1175518).
• CVE-2020-10135: Legacy pairing and secure-connections pairing authentication Bluetooth might have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access (bsc#1171988).

The following non-security bugs were fixed:

• ACPI: kABI fixes for subsys exports (bsc#1174968).
• ACPI / LPSS: Resume BYT/CHT I2C controllers from resume_noirq (bsc#1174968).
• ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for hibernate (bsc#1174968).
• ACPI: PM: Introduce 'poweroff' callbacks for ACPI PM domain and LPSS (bsc#1174968).
• ACPI: PM: Simplify and fix PM domain hibernation callbacks (bsc#1174968).
• af_key: pfkey_dump needs parameter validation (git-fixes).
• agp/intel: Fix a memory leak on module initialisation failure (git-fixes).
• ALSA: core: pcm_iec958: fix kernel-doc (bsc#1111666).
• ALSA: echoaduio: Drop superfluous volatile modifier (bsc#1111666).
• ALSA: echoaudio: Fix potential Oops in snd_echo_resume() (bsc#1111666).
• ALSA: hda: Add support for Loongson 7A1000 controller (bsc#1111666).
• ALSA: hda/ca0132 - Add new quirk ID for Recon3D (bsc#1111666).
• ALSA: hda/ca0132 - Fix AE-5 microphone selection commands (bsc#1111666).
• ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value (bsc#1111666).
• ALSA: hda: fix NULL pointer dereference during suspend (git-fixes).
• ALSA: hda: fix snd_hda_codec_cleanup() documentation (bsc#1111666).
• ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO (bsc#1111666).
• ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops (bsc#1111666).
• ALSA: hda/realtek: Add model alc298-samsung-headphone (git-fixes).
• ALSA: hda/realtek: Add mute LED and micmute LED support for HP systems (bsc#1111666).
• ALSA: hda/realtek - Add quirk for Lenovo Carbon X1 8th gen (bsc#1111666).
• ALSA: hda/realtek - Add quirk for MSI GE63 laptop (bsc#1111666).
• ALSA: hda/realtek - Add quirk for MSI GL63 (bsc#1111666).
• ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion (git-fixes).
• ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book (git-fixes).
• ALSA: hda/realtek - change to suitable link model for ASUS platform (bsc#1111666).
• ALSA: hda/realtek - Check headset type by unplug and resume (bsc#1111666).
• ALSA: hda/realtek - Enable audio jacks of Acer vCopperbox with ALC269VC (bsc#1111666).
• ALSA: hda/realtek: Enable headset mic of Acer C20-820 with ALC269VC (bsc#1111666).
• ALSA: hda/realtek: Enable headset mic of Acer TravelMate B311R-31 with ALC256 (bsc#1111666).
• ALSA: hda/realtek: Enable headset mic of Acer Veriton N4660G with ALC269VC (bsc#1111666).
• ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G14(G401) series with ALC289 (bsc#1111666).
• ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G15(GA502) series with ALC289 (bsc#1111666).
• ALSA: hda/realtek - Enable Speaker for ASUS UX563 (bsc#1111666).
• ALSA: hda/realtek: Fix add a 'ultra_low_power' function for intel reference board (alc256) (bsc#1111666).
• ALSA: hda/realtek: Fixed ALC298 sound bug by adding quirk for Samsung Notebook Pen S (bsc#1111666). -…

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2020-1749: Use ip6_dst_lookup_flow instead of ip6_dst_lookup (bsc#1165629).
• CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798).
• CVE-2020-14356: Fixed a null pointer dereference in cgroupv2 subsystem which could have led to privilege escalation (bsc#1175213).
• CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205).
• CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG (bsc#1174757).
• CVE-2020-24394: Fixed an issue which could set incorrect permissions on new filesystem objects when the filesystem lacks ACL support (bsc#1175518).
• CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption (bsc#1176069).

The following non-security bugs were fixed:

• ACPI: kABI fixes for subsys exports (bsc#1174968).
• ACPI / LPSS: Resume BYT/CHT I2C controllers from resume_noirq (bsc#1174968).
• ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for hibernate (bsc#1174968).
• ACPI: PM: Introduce 'poweroff' callbacks for ACPI PM domain and LPSS (bsc#1174968).
• ACPI: PM: Simplify and fix PM domain hibernation callbacks (bsc#1174968).
• ALSA: core: pcm_iec958: fix kernel-doc (bsc#1111666).
• ALSA: echoaduio: Drop superfluous volatile modifier (bsc#1111666).
• ALSA: echoaudio: Fix potential Oops in snd_echo_resume() (bsc#1111666).
• ALSA: hda: Add support for Loongson 7A1000 controller (bsc#1111666).
• ALSA: hda/ca0132 - Add new quirk ID for Recon3D (bsc#1111666).
• ALSA: hda/ca0132 - Fix AE-5 microphone selection commands (bsc#1111666).
• ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value (bsc#1111666).
• ALSA: hda: fix NULL pointer dereference during suspend (git-fixes).
• ALSA: hda: fix snd_hda_codec_cleanup() documentation (bsc#1111666).
• ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO (bsc#1111666).
• ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops (bsc#1111666).
• ALSA: hda/realtek: Add model alc298-samsung-headphone (git-fixes).
• ALSA: hda/realtek: Add mute LED and micmute LED support for HP systems (bsc#1111666).
• ALSA: hda/realtek - Add quirk for Lenovo Carbon X1 8th gen (bsc#1111666).
• ALSA: hda/realtek - Add quirk for MSI GE63 laptop (bsc#1111666).
• ALSA: hda/realtek - Add quirk for MSI GL63 (bsc#1111666).
• ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion (git-fixes).
• ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book (git-fixes).
• ALSA: hda/realtek - change to suitable link model for ASUS platform (bsc#1111666).
• ALSA: hda/realtek - Check headset type by unplug and resume (bsc#1111666).
• ALSA: hda/realtek - Enable audio jacks of Acer vCopperbox with ALC269VC (bsc#1111666).
• ALSA: hda/realtek: Enable headset mic of Acer C20-820 with ALC269VC (bsc#1111666).
• ALSA: hda/realtek: Enable headset mic of Acer TravelMate B311R-31 with ALC256 (bsc#1111666).
• ALSA: hda/realtek: Enable headset mic of Acer Veriton N4660G with ALC269VC (bsc#1111666).
• ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G14(G401) series with ALC289 (bsc#1111666).
• ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G15(GA502) series with ALC289 (bsc#1111666).
• ALSA: hda/realtek - Enable Speaker for ASUS UX563 (bsc#1111666).
• ALSA: hda/realtek: Fix add a 'ultra_low_power' function for intel reference board (alc256) (bsc#1111666).
• ALSA: hda/realtek: Fixed ALC298 sound bug by adding quirk for Samsung Notebook Pen S (bsc#1111666).
• ALSA: hda/realtek - Fixed HP right speaker no sound (bsc#1111666).
• ALSA: hda/realtek - Fix Lenovo Thinkpad X1 Carbon 7th quirk subdevice id (bsc#1111666).
• ALSA: hda/realtek: Fix pin default on Intel NUC 8 Rugged (bsc#1111666).
• ALSA: hda/realtek - Fix unused…

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2020-1749: Use ip6_dst_lookup_flow instead of ip6_dst_lookup (bsc#1165629).
• CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798).
• CVE-2020-14356: Fixed a null pointer dereference in cgroupv2 subsystem which could have led to privilege escalation (bsc#1175213).
• CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205).
• CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG (bsc#1174757).
• CVE-2020-24394: Fixed an issue which could set incorrect permissions on new filesystem objects when the filesystem lacks ACL support (bsc#1175518).
• CVE-2020-10135: Legacy pairing and secure-connections pairing authentication Bluetooth might have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access (bsc#1171988).
• CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption (bsc#1176069).

The following non-security bugs were fixed:

• ACPI: kABI fixes for subsys exports (bsc#1174968).
• ACPI / LPSS: Resume BYT/CHT I2C controllers from resume_noirq (bsc#1174968).
• ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for hibernate (bsc#1174968).
• ACPI: PM: Introduce 'poweroff' callbacks for ACPI PM domain and LPSS (bsc#1174968).
• ACPI: PM: Simplify and fix PM domain hibernation callbacks (bsc#1174968).
• af_key: pfkey_dump needs parameter validation (git-fixes).
• agp/intel: Fix a memory leak on module initialisation failure (git-fixes).
• ALSA: core: pcm_iec958: fix kernel-doc (bsc#1111666).
• ALSA: echoaduio: Drop superfluous volatile modifier (bsc#1111666).
• ALSA: echoaudio: Fix potential Oops in snd_echo_resume() (bsc#1111666).
• ALSA: hda: Add support for Loongson 7A1000 controller (bsc#1111666).
• ALSA: hda/ca0132 - Add new quirk ID for Recon3D (bsc#1111666).
• ALSA: hda/ca0132 - Fix AE-5 microphone selection commands (bsc#1111666).
• ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value (bsc#1111666).
• ALSA: hda: fix NULL pointer dereference during suspend (git-fixes).
• ALSA: hda: fix snd_hda_codec_cleanup() documentation (bsc#1111666).
• ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO (bsc#1111666).
• ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops (bsc#1111666).
• ALSA: hda/realtek: Add model alc298-samsung-headphone (git-fixes).
• ALSA: hda/realtek: Add mute LED and micmute LED support for HP systems (bsc#1111666).
• ALSA: hda/realtek - Add quirk for Lenovo Carbon X1 8th gen (bsc#1111666).
• ALSA: hda/realtek - Add quirk for MSI GE63 laptop (bsc#1111666).
• ALSA: hda/realtek - Add quirk for MSI GL63 (bsc#1111666).
• ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion (git-fixes).
• ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book (git-fixes).
• ALSA: hda/realtek - change to suitable link model for ASUS platform (bsc#1111666).
• ALSA: hda/realtek - Check headset type by unplug and resume (bsc#1111666).
• ALSA: hda/realtek - Enable audio jacks of Acer vCopperbox with ALC269VC (bsc#1111666).
• ALSA: hda/realtek: Enable headset mic of Acer C20-820 with ALC269VC (bsc#1111666).
• ALSA: hda/realtek: Enable headset mic of Acer TravelMate B311R-31 with ALC256 (bsc#1111666).
• ALSA: hda/realtek: Enable headset mic of Acer Veriton N4660G with ALC269VC (bsc#1111666).
• ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G14(G401) series with ALC289 (bsc#1111666).
• ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G15(GA502) series with ALC289 (bsc#1111666).
• ALSA: hda/realtek - Enable Speaker for ASUS UX563 (bsc#1111666).
• ALSA: hda/realtek: Fix add a 'ultra_low_power' function for intel reference board (alc256) (bsc#1111666).
• ALSA:…

The SUSE Linux Enterprise 12 SP2 kernel was updated to to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798).
• CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205).
• CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG (bsc#1174757).
• CVE-2019-16746: Fixed an improper check of the length of variable elements in a beacon head, leading to a buffer overflow (bsc#1152107).
• CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption (bsc#1176069).

The following non-security bug was fixed:

• mm, vmstat: reduce zone->lock holding time by /proc/pagetypeinfo (bsc#1175691).

The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798).
• CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205).
• CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG (bsc#1174757).
• CVE-2019-16746: Fixed an improper check of the length of variable elements in a beacon head, leading to a buffer overflow (bsc#1152107).
• CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption (bsc#1176069).

The following non-security bugs were fixed:

• bonding: fix active-backup failover for current ARP slave (bsc#1174771).
• Drivers: hv: vmbus: Only notify Hyper-V for die events that are oops (bsc#1175127).
• ibmvnic: Fix IRQ mapping disposal in error path (bsc#1175112 ltc#187459).
• mm, vmstat: reduce zone->lock holding time by /proc/pagetypeinfo (bsc#1175691).
• ocfs2: add trimfs dlm lock resource (bsc#1175228).
• ocfs2: add trimfs lock to avoid duplicated trims in cluster (bsc#1175228).
• ocfs2: fix the application IO timeout when fstrim is running (bsc#1175228).

The SUSE Linux Enterprise 12 SP5 realtime kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798).
• CVE-2020-14356: Fixed a null pointer dereference in cgroupv2 subsystem which could have led to privilege escalation (bsc#1175213).
• CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205).
• CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG (bsc#1174757).
• CVE-2020-24394: Fixed an issue which could set incorrect permissions on new filesystem objects when the filesystem lacks ACL support (bsc#1175518).
• CVE-2020-10135: Legacy pairing and secure-connections pairing authentication Bluetooth might have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access (bsc#1171988).
• CVE-2020-0305: Fixed a a possible use-after-free due to a race condition cdev_get(). This could lead to local escalation of privilege with System execution privileges needed (bnc#1174462).

The following non-security bugs were fixed:

• af_key: pfkey_dump needs parameter validation (git-fixes).
• agp/intel: Fix a memory leak on module initialisation failure (git-fixes).
• ACPI: kABI fixes for subsys exports (bsc#1174968).
• ACPI / LPSS: Resume BYT/CHT I2C controllers from resume_noirq (bsc#1174968).
• ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for hibernate (bsc#1174968).
• ACPI: PM: Introduce 'poweroff' callbacks for ACPI PM domain and LPSS (bsc#1174968).
• ACPI: PM: Simplify and fix PM domain hibernation callbacks (bsc#1174968).
• ACPI: video: Use native backlight on Acer Aspire 5783z (bsc#1111666).
• ACPI: video: Use native backlight on Acer TravelMate 5735Z (bsc#1111666).
• ALSA: core: pcm_iec958: fix kernel-doc (bsc#1111666).
• ALSA: echoaduio: Drop superfluous volatile modifier (bsc#1111666).
• ALSA: echoaudio: Fix potential Oops in snd_echo_resume() (bsc#1111666).
• ALSA: hda: Add support for Loongson 7A1000 controller (bsc#1111666).
• ALSA: hda/ca0132 - Add new quirk ID for Recon3D (bsc#1111666).
• ALSA: hda/ca0132 - Fix AE-5 microphone selection commands (bsc#1111666).
• ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value (bsc#1111666).
• ALSA: hda: fix NULL pointer dereference during suspend (git-fixes).
• ALSA: hda: fix snd_hda_codec_cleanup() documentation (bsc#1111666).
• ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO (bsc#1111666).
• ALSA: hda - let hs_mic be picked ahead of hp_mic (bsc#1111666).
• ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops (bsc#1111666).
• ALSA: hda/realtek: Add model alc298-samsung-headphone (git-fixes).
• ALSA: hda/realtek: Add mute LED and micmute LED support for HP systems (bsc#1111666).
• ALSA: hda/realtek - Add quirk for Lenovo Carbon X1 8th gen (bsc#1111666).
• ALSA: hda/realtek - Add quirk for MSI GE63 laptop (bsc#1111666).
• ALSA: hda/realtek - Add quirk for MSI GL63 (bsc#1111666).
• ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion (git-fixes).
• ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book (git-fixes).
• ALSA: hda/realtek - change to suitable link model for ASUS platform (bsc#1111666).
• ALSA: hda/realtek - Check headset type by unplug and resume (bsc#1111666).
• ALSA: hda/realtek - Enable audio jacks of Acer vCopperbox with ALC269VC (bsc#1111666).
• ALSA: hda/realtek: Enable headset mic of Acer C20-820 with ALC269VC (bsc#1111666).
• ALSA: hda/realtek: Enable headset mic of Acer TravelMate B311R-31 with ALC256 (bsc#1111666).
• ALSA: hda/realtek: Enable headset mic of Acer Veriton N4660G with ALC269VC (bsc#1111666).
• ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G14(G401) series with ALC289 (bsc#1111666).
• ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus…

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2020-1749: Use ip6_dst_lookup_flow instead of ip6_dst_lookup (bsc#1165629).
• CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798).
• CVE-2020-14356: Fixed a null pointer dereference in cgroupv2 subsystem which could have led to privilege escalation (bsc#1175213).
• CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205).
• CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG (bsc#1174757).
• CVE-2020-24394: Fixed an issue which could set incorrect permissions on new filesystem objects when the filesystem lacks ACL support (bsc#1175518).
• CVE-2020-10135: Legacy pairing and secure-connections pairing authentication Bluetooth might have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access (bsc#1171988).
• CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption (bsc#1176069).

The following non-security bugs were fixed:

• cifs: add support for fallocate mode 0 for non-sparse files (bsc#1175122).
• cifs: allow unlock flock and OFD lock across fork (bsc#1175122).
• cifs_atomic_open(): fix double-put on late allocation failure (bsc#1175122).
• cifs: Avoid doing network I/O while holding cache lock (bsc#1175122).
• cifs: call wake_up(&server->response_q) inside of cifs_reconnect() (bsc#1175122).
• cifs: Clean up DFS referral cache (bsc#1175122).
• cifs: document and cleanup dfs mount (bsc#1172428 bsc#1175122).
• cifs: do not ignore the SYNC flags in getattr (bsc#1175122).
• cifs: do not leak -EAGAIN for stat() during reconnect (bsc#1175122).
• cifs: do not share tcons with DFS (bsc#1175122).
• cifs: ensure correct super block for DFS reconnect (bsc#1175122).
• cifs: fail i/o on soft mounts if sessionsetup errors out (bsc#1175122).
• cifs: fiemap: do not return EINVAL if get nothing (bsc#1175122).
• cifs: Fix an error pointer dereference in cifs_mount() (bsc#1172428 bsc#1175122).
• cifs: fix double free error on share and prefix (bsc#1172428 bsc#1175122).
• cifs: fix leaked reference on requeued write (bsc#1175122).
• cifs: fix NULL dereference in match_prepath (bsc#1175122).
• cifs: Fix null pointer check in cifs_read (bsc#1175122).
• cifs: Fix potential deadlock when updating vol in cifs_reconnect() (bsc#1175122).
• cifs: fix potential mismatch of UNC paths (bsc#1175122).
• cifs: fix rename() by ensuring source handle opened with DELETE bit (bsc#1175122).
• cifs: Fix return value in __update_cache_entry (bsc#1175122).
• cifs: fix soft mounts hanging in the reconnect code (bsc#1175122).
• cifs: Fix task struct use-after-free on reconnect (bsc#1175122).
• cifs: fix uninitialised lease_key in open_shroot() (bsc#1175122).
• cifs: fix unitialized variable poential problem with network I/O cache lock patch (bsc#1175122).
• cifs: Get rid of kstrdup_const()'d paths (bsc#1175122).
• cifs: get rid of unused parameter in reconn_setup_dfs_targets() (bsc#1175122).
• cifs: handle empty list of targets in cifs_reconnect() (bsc#1172428 bsc#1175122).
• cifs: handle hostnames that resolve to same ip in failover (bsc#1175122).
• cifs: handle prefix paths in reconnect (bsc#1175122).
• cifs: handle RESP_GET_DFS_REFERRAL.PathConsumed in reconnect (bsc#1172428 bsc#1175122).
• cifs: improve read performance for page size 64KB & cache=strict & vers=2.1+ (bsc#1175122).
• cifs: Introduce helpers for finding TCP connection (bsc#1175122).
• cifs: make sure we do not overflow the max EA buffer size (bsc#1175122).
• cifs: make use of cap_unix(ses) in cifs_reconnect_tcon() (bsc#1175122).
• cifs: merge __{cifs,smb2}_reconnect_tcon into cifs_tree_connect() (bsc#1172428 bsc#1175122).
• cifs: Merge is_path_valid() into get_normalized_path() (bsc#1175122). -…

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2020-1749: Use ip6_dst_lookup_flow instead of ip6_dst_lookup (bsc#1165629).
• CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798).
• CVE-2020-14356: Fixed a null pointer dereference in cgroupv2 subsystem which could have led to privilege escalation (bsc#1175213).
• CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205).
• CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG (bsc#1174757).
• CVE-2020-24394: Fixed an issue which could set incorrect permissions on new filesystem objects when the filesystem lacks ACL support (bsc#1175518).
• CVE-2020-10135: Legacy pairing and secure-connections pairing authentication Bluetooth might have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access (bsc#1171988).
• CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption (bsc#1176069).

The following non-security bugs were fixed:

• btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1174784).
• cifs: document and cleanup dfs mount (bsc#1144333 bsc#1172428).
• cifs: Fix an error pointer dereference in cifs_mount() (bsc#1144333 bsc#1172428).
• cifs: fix double free error on share and prefix (bsc#1144333 bsc#1172428).
• cifs: handle empty list of targets in cifs_reconnect() (bsc#1144333 bsc#1172428).
• cifs: handle RESP_GET_DFS_REFERRAL.PathConsumed in reconnect (bsc#1144333 bsc#1172428).
• cifs: merge __{cifs,smb2}_reconnect_tcon into cifs_tree_connect() (bsc#1144333 bsc#1172428).
• cifs: only update prefix path of DFS links in cifs_tree_connect() (bsc#1144333 bsc#1172428).
• cifs: reduce number of referral requests in DFS link lookups (bsc#1144333 bsc#1172428).
• cifs: rename reconn_inval_dfs_target() (bsc#1144333 bsc#1172428).
• Drivers: hv: vmbus: Only notify Hyper-V for die events that are oops (bsc#1175127).
• ibmvnic: Fix IRQ mapping disposal in error path (bsc#1175112 ltc#187459).
• ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL (bsc#1175515).
• ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL (bsc#1175515).
• ipvs: fix the connection sync failed in some cases (bsc#1174699).
• kabi: hide new parameter of ip6_dst_lookup_flow() (bsc#1165629).
• kabi: mask changes to struct ipv6_stub (bsc#1165629).
• mm: Avoid calling build_all_zonelists_init under hotplug context (bsc#1154366).
• mm, vmstat: reduce zone->lock holding time by /proc/pagetypeinfo (bsc#1175691).
• ocfs2: add trimfs dlm lock resource (bsc#1175228).
• ocfs2: add trimfs lock to avoid duplicated trims in cluster (bsc#1175228).
• ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963).
• ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963).
• ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).
• ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).
• ocfs2: fix remounting needed after setfacl command (bsc#1173954).
• ocfs2: fix the application IO timeout when fstrim is running (bsc#1175228).
• ocfs2: load global_inode_alloc (bsc#1172963).
• ocfs2: load global_inode_alloc (bsc#1172963).
• powerpc/eeh: Fix pseries_eeh_configure_bridge() (bsc#1174689).
• powerpc/pseries: PCIE PHB reset (bsc#1174689).
• Revert 'ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).' This reverts commit 2638f62c6bc33d4c10ce0dddbf240aa80d366d7b.
• Revert 'ocfs2: load global_inode_alloc (bsc#1172963).' This reverts commit f04f670651f505cb354f26601ec5f5e4428f2f47.
• scsi: scsi_dh_alua: skip RTPG for devices only supporting active/optimized (bsc#1174978).
• selftests/livepatch: fix mem leaks in test-klp-shadow-vars (bsc#1071995).
• selftests/livepatch: more verification in test-klp-shadow-vars…