← Search the atlas
SUSE-SU-2020:3670-1
Not scored
Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-197_64 fixes several issues.
The following security issues were fixed:
- CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178622).
- CVE-2020-8694: Fixed an insufficient access control in the Linux kernel driver for some Intel(R) Processors which might have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1178700).
- CVE-2020-25705: Fixed a flaw which could have allowed an off-path remote user to effectively bypass source port UDP randomization (bsc#1178783).
- Fixed an issue where system was hanging due to a massive amount of soft lockups in btrfs_drop_and_free_fs_root() (bsc#1178046).
Exploit probability
Not scored
Published
December 7, 2020
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
SUSE:Linux Enterprise Live Patching 12 SP4
kgraft-patch-SLE12-SP4_Update_11
SUSE:Linux Enterprise Live Patching 12 SP4
kgraft-patch-SLE12-SP4_Update_12
SUSE:Linux Enterprise Live Patching 12 SP4
kgraft-patch-SLE12-SP4_Update_13
SUSE:Linux Enterprise Live Patching 12 SP4
kgraft-patch-SLE12-SP4_Update_14
SUSE:Linux Enterprise Live Patching 12 SP4
kgraft-patch-SLE12-SP4_Update_15
SUSE:Linux Enterprise Live Patching 12 SP4
kgraft-patch-SLE12-SP4_Update_16
SUSE:Linux Enterprise Live Patching 12 SP5
kgraft-patch-SLE12-SP5_Update_0
SUSE:Linux Enterprise Live Patching 12 SP5
kgraft-patch-SLE12-SP5_Update_1
SUSE:Linux Enterprise Live Patching 12 SP5
kgraft-patch-SLE12-SP5_Update_10
SUSE:Linux Enterprise Live Patching 12 SP5
kgraft-patch-SLE12-SP5_Update_11
SUSE:Linux Enterprise Live Patching 12 SP5
kgraft-patch-SLE12-SP5_Update_2
SUSE:Linux Enterprise Live Patching 12 SP5
kgraft-patch-SLE12-SP5_Update_3
SUSE:Linux Enterprise Live Patching 12 SP5
kgraft-patch-SLE12-SP5_Update_4
SUSE:Linux Enterprise Live Patching 12 SP5
kgraft-patch-SLE12-SP5_Update_5
SUSE:Linux Enterprise Live Patching 12 SP5
kgraft-patch-SLE12-SP5_Update_6
SUSE:Linux Enterprise Live Patching 12 SP5
kgraft-patch-SLE12-SP5_Update_7
SUSE:Linux Enterprise Live Patching 12 SP5
kgraft-patch-SLE12-SP5_Update_8
SUSE:Linux Enterprise Live Patching 12 SP5
kgraft-patch-SLE12-SP5_Update_9
SUSE:Linux Enterprise Live Patching 15 SP1
kernel-livepatch-SLE15-SP1_Update_10
SUSE:Linux Enterprise Live Patching 15 SP1
kernel-livepatch-SLE15-SP1_Update_11
SUSE:Linux Enterprise Live Patching 15 SP1
kernel-livepatch-SLE15-SP1_Update_12
SUSE:Linux Enterprise Live Patching 15 SP1
kernel-livepatch-SLE15-SP1_Update_13
SUSE:Linux Enterprise Live Patching 15 SP1
kernel-livepatch-SLE15-SP1_Update_14
SUSE:Linux Enterprise Live Patching 15 SP1
kernel-livepatch-SLE15-SP1_Update_15
SUSE:Linux Enterprise Live Patching 15 SP1
kernel-livepatch-SLE15-SP1_Update_16
SUSE:Linux Enterprise Live Patching 15 SP1
kernel-livepatch-SLE15-SP1_Update_17
SUSE:Linux Enterprise Live Patching 15 SP1
kernel-livepatch-SLE15-SP1_Update_8
SUSE:Linux Enterprise Live Patching 15 SP1
kernel-livepatch-SLE15-SP1_Update_9
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2020:3670-1
This update for the Linux Kernel 4.12.14-197_64 fixes several issues.
The following security issues were fixed:
- CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178622).
- CVE-2020-8694: Fixed an insufficient access control in the Linux kernel driver for some Intel(R) Processors which might have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1178700).
- CVE-2020-25705: Fixed a flaw which could have allowed an off-path remote user to effectively bypass source port UDP randomization (bsc#1178783).
- Fixed an issue where system was hanging due to a massive amount of soft lockups in btrfs_drop_and_free_fs_root() (bsc#1178046).
View original source ↗
05 / REFERENCES
Further evidence