File _patchinfo of Package patchinfo.15253

<patchinfo incident="15253">
  <issue id="1154824" tracker="bnc">VUL-0: EMBARGOED: CVE-2020-0543: ucode-intel: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk"</issue>
  <issue id="1164871" tracker="bnc">[PATCH] random: always use batched entropy for get_random_u{32,64}</issue>
  <issue id="1171098" tracker="bnc">VUL-0: CVE-2020-12114: kernel-source:  race condition  may corrupting the mountpoint reference counter leading to DOS</issue>
  <issue id="1171195" tracker="bnc">VUL-0: CVE-2020-12653: kernel-source: buffer overflow in mwifiex_cmd_append_vsie_tlv() functionmay lead to  local  privileges escalation or DOS</issue>
  <issue id="1171202" tracker="bnc">VUL-0: CVE-2020-12654: kernel-source: a remote AP may trigger a heap-based buffer overflow in mwifiex_ret_wmm_get_status()</issue>
  <issue id="1171218" tracker="bnc">VUL-0: CVE-2020-12652: kernel-source: race condition in __mptctl_ioctl may allow local users to hold an incorrect lock during the ioctl operation</issue>
  <issue id="1171219" tracker="bnc">VUL-1: CVE-2020-12656: kernel-source: memory leak in gss_mech_free in the rpcsec_gss_krb5 implementation due to lack of certain domain_release calls</issue>
  <issue id="1172317" tracker="bnc">VUL-0: CVE-2020-10757: kernel-source: remap hugepage DAX to anon mmap can cause user PTE access</issue>
  <issue id="1171689" tracker="bnc">Missing fixes for add_key()</issue>
  <issue id="1171698" tracker="bnc">SLE-12SP3: Kernel NULL pointer dreference on pty with SLIP/SLCAN discipline</issue>
  <issue id="1172221" tracker="bnc">kernel PTF request for Oops at exit_sem().</issue>
  <issue id="2020-12652" tracker="cve" />
  <issue id="2020-0543" tracker="cve" />
  <issue id="2020-12653" tracker="cve" />
  <issue id="2020-12654" tracker="cve" />
  <issue id="2020-12114" tracker="cve" />
  <issue id="2020-12656" tracker="cve" />
  <issue id="2020-10757" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>osalvador</packager>
  <reboot_needed/>
  <description>The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it.
  This attack is known as Special Register Buffer Data Sampling (SRBDS) or "CrossTalk" (bsc#1154824).
- CVE-2020-12656: Fixed an improper handling of certain domain_release calls leadingch could have led to a memory leak (bsc#1171219).
- CVE-2020-12654: Fixed an issue in he wifi driver which could have allowed a remote AP to trigger a heap-based buffer overflow (bsc#1171202).
- CVE-2020-12653: Fixed an issue in the wifi driver which could have allowed local users to gain privileges or cause a denial of service (bsc#1171195).
- CVE-2020-12652: Fixed an issue which could have allowed local users to hold an incorrect lock during the ioctl operation and trigger a race condition (bsc#1171218).
- CVE-2020-12114: Fixed A pivot_root race condition which could have allowed local users to cause a denial of service (panic) by corrupting a mountpoint reference counter (bsc#1171098).
- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172317).

The following non-security bugs were fixed:

- can, slip: Protect tty->disc_data in write_wakeup and close with RCU (bsc#1171698).
- KEYS: allow reaching the keys quotas exactly (bsc#1171689).
- KEYS: reaching the keys quotas correctly (bsc#1171689).
- Revert "ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()" (bsc#1172221).
- random: always use batched entropy for get_random_u{32,64} (bsc#1164871).
</description>
<summary>Security update for the Linux Kernel</summary>
</patchinfo>