FlawAtlas
Search the atlas
SUSE-SU-2020:2576-1 Not scored

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP2 kernel was updated to to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798). - CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205). - CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG (bsc#1174757). - CVE-2019-16746: Fixed an improper check of the length of variable elements in a beacon head, leading to a buffer overflow (bsc#1152107). - CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption (bsc#1176069). The following non-security bug was fixed: - mm, vmstat: reduce zone->lock holding time by /proc/pagetypeinfo (bsc#1175691).

Exploit probability Not scored
Published September 9, 2020
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise High Availability Extension 12 SP2 kernel-default
SUSE:Linux Enterprise Server 12 SP2-BCL kernel-default
SUSE:Linux Enterprise Server 12 SP2-BCL kernel-source
SUSE:Linux Enterprise Server 12 SP2-BCL kernel-syms
SUSE:Linux Enterprise Server 12 SP2-LTSS kernel-default
SUSE:Linux Enterprise Server 12 SP2-LTSS kernel-source
SUSE:Linux Enterprise Server 12 SP2-LTSS kernel-syms
SUSE:Linux Enterprise Server 12 SP2-LTSS kgraft-patch-SLE12-SP2_Update_37
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 kernel-default
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 kernel-source
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 kgraft-patch-SLE12-SP2_Update_37
SUSE:OpenStack Cloud 7 kernel-default
SUSE:OpenStack Cloud 7 kernel-source
SUSE:OpenStack Cloud 7 kernel-syms
SUSE:OpenStack Cloud 7 kgraft-patch-SLE12-SP2_Update_37

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2020:2576-1

The SUSE Linux Enterprise 12 SP2 kernel was updated to to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798). - CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205). - CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG (bsc#1174757). - CVE-2019-16746: Fixed an improper check of the length of variable elements in a beacon head, leading to a buffer overflow (bsc#1152107). - CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption (bsc#1176069). The following non-security bug was fixed: - mm, vmstat: reduce zone->lock holding time by /proc/pagetypeinfo (bsc#1175691).

View original source

05 / REFERENCES

Further evidence