FlawAtlas
Search the atlas
SUSE-SU-2021:0694-1 Not scored

Security update for kernel-firmware

This update for kernel-firmware fixes the following issues: - CVE-2020-12373: Fixed an expired pointer dereference may lead to DOS (bsc#1181738). - CVE-2020-12364: Fixed a null pointer reference may lead to DOS (bsc#1181736). - CVE-2020-12362: Fixed an integer overflow which could have led to privilege escalation (bsc#1181720). - CVE-2020-12363: Fixed an improper input validation which may have led to DOS (bsc#1181735).

Exploit probability Not scored
Published March 3, 2021
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Enterprise Storage 6 kernel-firmware
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS kernel-firmware
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-firmware
SUSE:Linux Enterprise Module for Basesystem 15 SP2 kernel-firmware
SUSE:Linux Enterprise Server 15 SP1-BCL kernel-firmware
SUSE:Linux Enterprise Server 15 SP1-LTSS kernel-firmware
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 kernel-firmware
SUSE:Manager Proxy 4.0 kernel-firmware
SUSE:Manager Retail Branch Server 4.0 kernel-firmware
SUSE:Manager Server 4.0 kernel-firmware

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2021:0694-1

This update for kernel-firmware fixes the following issues: - CVE-2020-12373: Fixed an expired pointer dereference may lead to DOS (bsc#1181738). - CVE-2020-12364: Fixed a null pointer reference may lead to DOS (bsc#1181736). - CVE-2020-12362: Fixed an integer overflow which could have led to privilege escalation (bsc#1181720). - CVE-2020-12363: Fixed an improper input validation which may have led to DOS (bsc#1181735).

View original source

05 / REFERENCES

Further evidence