{
  "GSD": {
    "alias": "CVE-2020-25643",
    "description": "A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
    "id": "GSD-2020-25643",
    "references": [
      "https://www.suse.com/security/cve/CVE-2020-25643.html",
      "https://www.debian.org/security/2020/dsa-4774",
      "https://access.redhat.com/errata/RHSA-2021:1739",
      "https://access.redhat.com/errata/RHSA-2021:1578",
      "https://access.redhat.com/errata/RHSA-2020:5441",
      "https://access.redhat.com/errata/RHSA-2020:5437",
      "https://ubuntu.com/security/CVE-2020-25643",
      "https://advisories.mageia.org/CVE-2020-25643.html",
      "https://alas.aws.amazon.com/cve/html/CVE-2020-25643.html",
      "https://linux.oracle.com/cve/CVE-2020-25643.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2020-25643"
      ],
      "details": "A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
      "id": "GSD-2020-25643",
      "modified": "2023-12-13T01:21:57.102906Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2020-25643",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "kernel",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "Linux kernel versions before 5.9-rc7"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "CWE-20"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1879981",
            "refsource": "MISC",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1879981"
          },
          {
            "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=66d42ed8b25b64eb63111a2b8582c5afc8bf1105",
            "refsource": "MISC",
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=66d42ed8b25b64eb63111a2b8582c5afc8bf1105"
          },
          {
            "name": "openSUSE-SU-2020:1655",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html"
          },
          {
            "name": "openSUSE-SU-2020:1698",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.html"
          },
          {
            "name": "DSA-4774",
            "refsource": "DEBIAN",
            "url": "https://www.debian.org/security/2020/dsa-4774"
          },
          {
            "name": "[debian-lts-announce] 20201028 [SECURITY] [DLA 2417-1] linux-4.19 security update",
            "refsource": "MLIST",
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00028.html"
          },
          {
            "name": "[debian-lts-announce] 20201030 [SECURITY] [DLA 2420-1] linux security update",
            "refsource": "MLIST",
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html"
          },
          {
            "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2420-2] linux regression update",
            "refsource": "MLIST",
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20201103-0002/",
            "refsource": "CONFIRM",
            "url": "https://security.netapp.com/advisory/ntap-20201103-0002/"
          },
          {
            "name": "https://www.starwindsoftware.com/security/sw-20210325-0002/",
            "refsource": "MISC",
            "url": "https://www.starwindsoftware.com/security/sw-20210325-0002/"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:5.9.0:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:5.9.0:rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:5.9.0:rc3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:5.9.0:rc4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:5.9.0:rc5:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:5.9.0:rc6:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.4.238",
                "versionStartIncluding": "2.6.29",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.9.238",
                "versionStartIncluding": "4.5",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.14.200",
                "versionStartIncluding": "4.10",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.19.148",
                "versionStartIncluding": "4.15",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "5.4.68",
                "versionStartIncluding": "4.20",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "5.8.12",
                "versionStartIncluding": "5.5",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8:build12533:*:*:*:vsphere:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8:build12658:*:*:*:vsphere:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8:build12859:*:*:*:vsphere:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8:build13170:*:*:*:vsphere:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8:build13586:*:*:*:vsphere:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8:build13861:*:*:*:vsphere:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2020-25643"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-20"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=66d42ed8b25b64eb63111a2b8582c5afc8bf1105",
              "refsource": "MISC",
              "tags": [
                "Mailing List",
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=66d42ed8b25b64eb63111a2b8582c5afc8bf1105"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1879981",
              "refsource": "MISC",
              "tags": [
                "Issue Tracking",
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1879981"
            },
            {
              "name": "openSUSE-SU-2020:1655",
              "refsource": "SUSE",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html"
            },
            {
              "name": "openSUSE-SU-2020:1698",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.html"
            },
            {
              "name": "DSA-4774",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.debian.org/security/2020/dsa-4774"
            },
            {
              "name": "[debian-lts-announce] 20201028 [SECURITY] [DLA 2417-1] linux-4.19 security update",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00028.html"
            },
            {
              "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2420-2] linux regression update",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html"
            },
            {
              "name": "[debian-lts-announce] 20201030 [SECURITY] [DLA 2420-1] linux security update",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20201103-0002/",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.netapp.com/advisory/ntap-20201103-0002/"
            },
            {
              "name": "https://www.starwindsoftware.com/security/sw-20210325-0002/",
              "refsource": "MISC",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.starwindsoftware.com/security/sw-20210325-0002/"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 6.8,
          "impactScore": 8.5,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.2,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2023-05-16T10:48Z",
      "publishedDate": "2020-10-06T14:15Z"
    }
  }
}

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2020-25643 A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2020/msrc_cve-2020-25643.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
    "tracking": {
      "current_release_date": "2020-10-17T00:00:00.000Z",
      "generator": {
        "date": "2025-12-27T21:02:58.498Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2020-25643",
      "initial_release_date": "2020-10-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2020-10-17T00:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "1.0",
                "product": {
                  "name": "CBL Mariner 1.0",
                  "product_id": "16820"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccm1 kernel 5.4.91-3",
                "product": {
                  "name": "\u003ccm1 kernel 5.4.91-3",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "cm1 kernel 5.4.91-3",
                "product": {
                  "name": "cm1 kernel 5.4.91-3",
                  "product_id": "17036"
                }
              }
            ],
            "category": "product_name",
            "name": "kernel"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccm1 kernel 5.4.91-3 as a component of CBL Mariner 1.0",
          "product_id": "16820-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cm1 kernel 5.4.91-3 as a component of CBL Mariner 1.0",
          "product_id": "17036-16820"
        },
        "product_reference": "17036",
        "relates_to_product_reference": "16820"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-25643",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "general",
          "text": "redhat",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "17036-16820"
        ],
        "known_affected": [
          "16820-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2020-25643 A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2020/msrc_cve-2020-25643.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-17T00:00:00.000Z",
          "details": "5.4.91-3:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "16820-1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalsScore": 0.0,
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 7.2,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "16820-1"
          ]
        }
      ],
      "title": "A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\n\nThe openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2020-25212: Fixed nfs getxattr kernel panic and memory overflow that could lead to crashes or privilege escalations (bsc#1176381).\n- CVE-2020-14381: Fixed inode life-time issue in futex handling (bsc#1176011).\n- CVE-2020-25643: Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability (bnc#1177206).\n- CVE-2020-25641: A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loop, causing a denial of service. This flaw allowed a local attacker with basic privileges to issue requests to a block device, resulting in a denial of service. The highest threat from this vulnerability is to system availability (bnc#1177121).\n- CVE-2020-26088: A missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c could be used by local attackers to create raw sockets, bypassing security mechanisms, aka CID-26896f01467a (bnc#1176990).\n- CVE-2020-14390: When changing screen size, an out-of-bounds memory write can occur leading to memory corruption or a denial of service. Due to the nature of the flaw, privilege escalation cannot be fully ruled out (bnc#1176235 bnc#1176278).\n- CVE-2020-0432: In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (bnc#1176721).\n- CVE-2020-0427: In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation (bnc#1176725).\n- CVE-2020-0431: In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (bnc#1176722).\n- CVE-2020-0404: In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation (bnc#1176423).\n- CVE-2020-25284: The rbd block device driver in drivers/block/rbd.c used incomplete permission checking for access to rbd devices, which could be leveraged by local attackers to map or unmap rbd block devices, aka CID-f44d04e696fe (bnc#1176482).\n- CVE-2020-14386: Memory corruption in af_apcket can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity (bnc#1176069).\n\nThe following non-security bugs were fixed:\n\n- 9p: Fix memory leak in v9fs_mount (git-fixes).\n- ACPI: EC: Reference count query handlers under lock (git-fixes).\n- Add de2b41be8fcc x86, vmlinux.lds: Page-align end of ..page_aligned sections\n- Add f29dfa53cc8a x86/bugs/multihit: Fix mitigation reporting when VMX is not in use\n- airo: Add missing CAP_NET_ADMIN check in AIROOLDIOCTL/SIOCDEVPRIVATE (git-fixes).\n- airo: Fix possible info leak in AIROOLDIOCTL/SIOCDEVPRIVATE (git-fixes).\n- airo: Fix read overflows sending packets (git-fixes).\n- ALSA: asihpi: fix iounmap in error handler (git-fixes).\n- ALSA: firewire-digi00x: exclude Avid Adrenaline from detection (git-fixes).\n- ALSA; firewire-tascam: exclude Tascam FE-8 from detection (git-fixes).\n- ALSA: hda: Fix 2 channel swapping for Tegra (git-fixes).\n- ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled (git-fixes).\n- ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion NT950XCJ-X716A (git-fixes).\n- ALSA: hda/realtek - Improved routing for Thinkpad X1 7th/8th Gen (git-fixes).\n- altera-stapl: altera_get_note: prevent write beyond end of \u0027key\u0027 (git-fixes).\n- amd-xgbe: Add a check for an skb in the timestamp path (git-fixes).\n- amd-xgbe: Add additional dynamic debug messages (git-fixes).\n- amd-xgbe: Add additional ethtool statistics (git-fixes).\n- amd-xgbe: Add ethtool show/set channels support (git-fixes).\n- amd-xgbe: Add ethtool show/set ring parameter support (git-fixes).\n- amd-xgbe: Add ethtool support to retrieve SFP module info (git-fixes).\n- amd-xgbe: Add hardware features debug output (git-fixes).\n- amd-xgbe: Add NUMA affinity support for IRQ hints (git-fixes).\n- amd-xgbe: Add NUMA affinity support for memory allocations (git-fixes).\n- amd-xgbe: Add per queue Tx and Rx statistics (git-fixes).\n- amd-xgbe: Advertise FEC support with the KR re-driver (git-fixes).\n- amd-xgbe: Always attempt link training in KR mode (git-fixes).\n- amd-xgbe: Be sure driver shuts down cleanly on module removal (git-fixes).\n- amd-xgbe: Convert to generic power management (git-fixes).\n- amd-xgbe: Fix debug output of max channel counts (git-fixes).\n- amd-xgbe: Fix error path in xgbe_mod_init() (git-fixes).\n- amd-xgbe: Fixes for working with PHYs that support 2.5GbE (git-fixes).\n- amd-xgbe: Fix SFP PHY supported/advertised settings (git-fixes).\n- amd-xgbe: fix spelling mistake: \u0027avialable\u0027 -\u003e \u0027available\u0027 (git-fixes).\n- amd-xgbe: Handle return code from software reset function (git-fixes).\n- amd-xgbe: Improve SFP 100Mbps auto-negotiation (git-fixes).\n- amd-xgbe: Interrupt summary bits are h/w version dependent (git-fixes).\n- amd-xgbe: Limit the I2C error messages that are output (git-fixes).\n- amd-xgbe: Mark expected switch fall-throughs (git-fixes).\n- amd-xgbe: Optimize DMA channel interrupt enablement (git-fixes).\n- amd-xgbe: Prepare for ethtool set-channel support (git-fixes).\n- amd-xgbe: Prevent looping forever if timestamp update fails (git-fixes).\n- amd-xgbe: Read and save the port property registers during probe (git-fixes).\n- amd-xgbe: Remove field that indicates SFP diagnostic support (git-fixes).\n- amd-xgbe: remove unnecessary conversion to bool (git-fixes).\n- amd-xgbe: Remove use of comm_owned field (git-fixes).\n- amd-xgbe: Set the MDIO mode for 10000Base-T configuration (git-fixes).\n- amd-xgbe: Simplify the burst length settings (git-fixes).\n- amd-xgbe: Update the BelFuse quirk to support SGMII (git-fixes).\n- amd-xgbe: Update TSO packet statistics accuracy (git-fixes).\n- amd-xgbe: use devm_platform_ioremap_resource() to simplify code (git-fixes).\n- amd-xgbe: use dma_mapping_error to check map errors (git-fixes).\n- amd-xgbe: Use __napi_schedule() in BH context (git-fixes).\n- amd-xgbe: Use the proper register during PTP initialization (git-fixes).\n- ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter (git-fixes).\n- arm64: KVM: Do not generate UNDEF when LORegion feature is present (jsc#SLE-4084).\n- arm64: KVM: regmap: Fix unexpected switch fall-through (jsc#SLE-4084).\n- asm-generic: fix -Wtype-limits compiler warnings (bsc#1112178).\n- ASoC: kirkwood: fix IRQ error handling (git-fixes).\n- ASoC: tegra: Fix reference count leaks (git-fixes).\n- ath10k: fix array out-of-bounds access (git-fixes).\n- ath10k: fix memory leak for tpc_stats_final (git-fixes).\n- ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read (git-fixes).\n- batman-adv: Add missing include for in_interrupt() (git-fixes).\n- batman-adv: Avoid uninitialized chaddr when handling DHCP (git-fixes).\n- batman-adv: bla: fix type misuse for backbone_gw hash indexing (git-fixes).\n- batman-adv: bla: use netif_rx_ni when not in interrupt context (git-fixes).\n- batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh (git-fixes).\n- batman-adv: mcast/TT: fix wrongly dropped or rerouted packets (git-fixes).\n- bcache: Convert pr_\u0026lt;level\u003e uses to a more typical style (git fixes (block drivers)).\n- bcache: fix overflow in offset_to_stripe() (git fixes (block drivers)).\n- bcm63xx_enet: correct clock usage (git-fixes).\n- bcm63xx_enet: do not write to random DMA channel on BCM6345 (git-fixes).\n- bitfield.h: do not compile-time validate _val in FIELD_FIT (git fixes (bitfield)).\n- blktrace: fix debugfs use after free (git fixes (block drivers)).\n- block: add docs for gendisk / request_queue refcount helpers (git fixes (block drivers)).\n- block: revert back to synchronous request_queue removal (git fixes (block drivers)).\n- block: Use non _rcu version of list functions for tag_set_list (git-fixes).\n- Bluetooth: Fix refcount use-after-free issue (git-fixes).\n- Bluetooth: guard against controllers sending zero\u0027d events (git-fixes).\n- Bluetooth: Handle Inquiry Cancel error after Inquiry Complete (git-fixes).\n- Bluetooth: L2CAP: handle l2cap config request during open state (git-fixes).\n- Bluetooth: prefetch channel before killing sock (git-fixes).\n- bnxt_en: Fix completion ring sizing with TPA enabled (networking-stable-20_07_29).\n- bonding: use nla_get_u64 to extract the value for IFLA_BOND_AD_ACTOR_SYSTEM (git-fixes).\n- btrfs: require only sector size alignment for parent eb bytenr (bsc#1176789).\n- btrfs: tree-checker: fix the error message for transid error (bsc#1176788).\n- ceph: do not allow setlease on cephfs (bsc#1177041).\n- ceph: fix potential mdsc use-after-free crash (bsc#1177042).\n- ceph: fix use-after-free for fsc-\u003emdsc (bsc#1177043).\n- ceph: handle zero-length feature mask in session messages (bsc#1177044).\n- cfg80211: regulatory: reject invalid hints (bsc#1176699).\n- cifs: Fix leak when handling lease break for cached root fid (bsc#1176242).\n- cifs/smb3: Fix data inconsistent when punch hole (bsc#1176544).\n- cifs/smb3: Fix data inconsistent when zero file range (bsc#1176536).\n- clk: Add (devm_)clk_get_optional() functions (git-fixes).\n- clk: rockchip: Fix initialization of mux_pll_src_4plls_p (git-fixes).\n- clk: samsung: exynos4: mark \u0027chipid\u0027 clock as CLK_IGNORE_UNUSED (git-fixes).\n- clk/ti/adpll: allocate room for terminating null (git-fixes).\n- clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init() (git-fixes).\n- cpufreq: intel_pstate: Fix EPP setting via sysfs in active mode (bsc#1176966).\n- dmaengine: at_hdmac: check return value of of_find_device_by_node() in at_dma_xlate() (git-fixes).\n- dmaengine: of-dma: Fix of_dma_router_xlate\u0027s of_dma_xlate handling (git-fixes).\n- dmaengine: pl330: Fix burst length if burst size is smaller than bus width (git-fixes).\n- dmaengine: tegra-apb: Prevent race conditions on channel\u0027s freeing (git-fixes).\n- dmaengine: zynqmp_dma: fix burst length configuration (git-fixes).\n- dm crypt: avoid truncating the logical block size (git fixes (block drivers)).\n- dm: fix redundant IO accounting for bios that need splitting (git fixes (block drivers)).\n- dm integrity: fix a deadlock due to offloading to an incorrect workqueue (git fixes (block drivers)).\n- dm integrity: fix integrity recalculation that is improperly skipped (git fixes (block drivers)).\n- dm: report suspended device during destroy (git fixes (block drivers)).\n- dm rq: do not call blk_mq_queue_stopped() in dm_stop_queue() (git fixes (block drivers)).\n- dm: use noio when sending kobject event (git fixes (block drivers)).\n- dm writecache: add cond_resched to loop in persistent_memory_claim() (git fixes (block drivers)).\n- dm writecache: correct uncommitted_block when discarding uncommitted entry (git fixes (block drivers)).\n- dm zoned: assign max_io_len correctly (git fixes (block drivers)).\n- drivers: char: tlclk.c: Avoid data race between init and interrupt handler (git-fixes).\n- Drivers: hv: Specify receive buffer size using Hyper-V page size (bsc#1176877).\n- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload (git-fixes).\n- drivers: net: add missing interrupt.h include (git-fixes).\n- drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case (git-fixes).\n- drivers/net/wan/x25_asy: Fix to make it work (networking-stable-20_07_29).\n- drm/amd/display: dal_ddc_i2c_payloads_create can fail causing panic (git-fixes).\n- drm/amd/display: fix ref count leak in amdgpu_drm_ioctl (git-fixes).\n- drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails (git-fixes).\n- drm/amdgpu: Fix buffer overflow in INFO ioctl (git-fixes).\n- drm/amdgpu: Fix bug in reporting voltage for CIK (git-fixes).\n- drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms (git-fixes).\n- drm/amdgpu: increase atombios cmd timeout (git-fixes).\n- drm/amdgpu/powerplay: fix AVFS handling with custom powerplay table (git-fixes).\n- drm/amdgpu/powerplay/smu7: fix AVFS handling with custom powerplay table (git-fixes).\n- drm/amdkfd: fix a memory leak issue (git-fixes).\n- drm/amdkfd: Fix reference count leaks (git-fixes).\n- drm/amd/pm: correct Vega10 swctf limit setting (git-fixes).\n- drm/amd/pm: correct Vega12 swctf limit setting (git-fixes).\n- drm/ast: Initialize DRAM type before posting GPU (bsc#1113956) \t* context changes\n- drm/mediatek: Add exception handing in mtk_drm_probe() if component init fail (git-fixes).\n- drm/mediatek: Add missing put_device() call in mtk_hdmi_dt_parse_pdata() (git-fixes).\n- drm/msm/a5xx: Always set an OPP supported hardware value (git-fixes).\n- drm/msm: add shutdown support for display platform_driver (git-fixes).\n- drm/msm: Disable preemption on all 5xx targets (git-fixes).\n- drm/msm: fix leaks if initialization fails (git-fixes).\n- drm/msm/gpu: make ringbuffer readonly (bsc#1112178) \t* context changes\n- drm/nouveau/debugfs: fix runtime pm imbalance on error (git-fixes).\n- drm/nouveau/dispnv50: fix runtime pm imbalance on error (git-fixes).\n- drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open (git-fixes).\n- drm/nouveau: Fix reference count leak in nouveau_connector_detect (git-fixes).\n- drm/nouveau: fix reference count leak in nv50_disp_atomic_commit (git-fixes).\n- drm/nouveau: fix runtime pm imbalance on error (git-fixes).\n- drm/omap: fix possible object reference leak (git-fixes).\n- drm/radeon: fix multiple reference count leak (git-fixes).\n- drm/radeon: Prefer lower feedback dividers (git-fixes).\n- drm/radeon: revert \u0027Prefer lower feedback dividers\u0027 (git-fixes).\n- drm/sun4i: Fix dsi dcs long write function (git-fixes).\n- drm/sun4i: sun8i-csc: Secondary CSC register correction (git-fixes).\n- drm/tve200: Stabilize enable/disable (git-fixes).\n- drm/vc4/vc4_hdmi: fill ASoC card owner (git-fixes).\n- e1000: Do not perform reset in reset_task if we are already down (git-fixes).\n- EDAC: Fix reference count leaks (bsc#1112178).\n- fbcon: prevent user font height or width change from causing (bsc#1112178)\n- Fix error in kabi fix for: NFSv4: Fix OPEN / CLOSE race (bsc#1176950).\n- ftrace: Move RCU is watching check after recursion check (git-fixes).\n- ftrace: Setup correct FTRACE_FL_REGS flags for module (git-fixes).\n- gma/gma500: fix a memory disclosure bug due to uninitialized bytes (git-fixes).\n- gpio: tc35894: fix up tc35894 interrupt configuration (git-fixes).\n- gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable() (git-fixes).\n- gtp: fix Illegal context switch in RCU read-side critical section (git-fixes).\n- gtp: fix use-after-free in gtp_newlink() (git-fixes).\n- HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage() (git-fixes).\n- hsr: use netdev_err() instead of WARN_ONCE() (bsc#1176659).\n- hv_utils: drain the timesync packets on onchannelcallback (bsc#1176877).\n- hv_utils: return error if host timesysnc update is stale (bsc#1176877).\n- hwmon: (applesmc) check status earlier (git-fixes).\n- i2c: core: Do not fail PRP0001 enumeration when no ID table exist (git-fixes).\n- i2c: cpm: Fix i2c_ram structure (git-fixes).\n- ibmvnic: add missing parenthesis in do_reset() (bsc#1176700 ltc#188140).\n- ieee802154/adf7242: check status of adf7242_read_reg (git-fixes).\n- ieee802154: fix one possible memleak in ca8210_dev_com_init (git-fixes).\n- iio:accel:bmc150-accel: Fix timestamp alignment and prevent data leak (git-fixes).\n- iio: accel: kxsd9: Fix alignment of local buffer (git-fixes).\n- iio:accel:mma7455: Fix timestamp alignment and prevent data leak (git-fixes).\n- iio:adc:ina2xx Fix timestamp alignment issue (git-fixes).\n- iio: adc: mcp3422: fix locking on error path (git-fixes).\n- iio: adc: mcp3422: fix locking scope (git-fixes).\n- iio:adc:ti-adc081c Fix alignment and data leak issues (git-fixes).\n- iio: adc: ti-ads1015: fix conversion when CONFIG_PM is not set (git-fixes).\n- iio: improve IIO_CONCENTRATION channel type description (git-fixes).\n- iio:light:ltr501 Fix timestamp alignment issue (git-fixes).\n- iio:light:max44000 Fix timestamp alignment and prevent data leak (git-fixes).\n- iio:magnetometer:ak8975 Fix alignment and data leak issues (git-fixes).\n- include: add additional sizes (bsc#1094244 ltc#168122).\n- iommu/amd: Fix IOMMU AVIC not properly update the is_run bit in IRTE (bsc#1177293).\n- iommu/amd: Fix potential @entry null deref (bsc#1177294).\n- iommu/amd: Print extended features in one line to fix divergent log levels (bsc#1176316).\n- iommu/amd: Re-factor guest virtual APIC (de-)activation code (bsc#1177291).\n- iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (bsc#1176317).\n- iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode (bsc#1177295).\n- iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (bsc#1176318).\n- iommu/exynos: add missing put_device() call in exynos_iommu_of_xlate() (bsc#1177296).\n- iommu/omap: Check for failure of a call to omap_iommu_dump_ctx (bsc#1176319).\n- iommu/vt-d: Serialize IOMMU GCMD register modifications (bsc#1176320).\n- kernel-binary.spec.in: Package the obj_install_dir as explicit filelist.\n- kernel-syms.spec.in: Also use bz compression (boo#1175882).\n- KVM: arm64: Change 32-bit handling of VM system registers (jsc#SLE-4084).\n- KVM: arm64: Cleanup __activate_traps and __deactive_traps for VHE and non-VHE (jsc#SLE-4084).\n- KVM: arm64: Configure c15, PMU, and debug register traps on cpu load/put for VHE (jsc#SLE-4084).\n- KVM: arm64: Defer saving/restoring 32-bit sysregs to vcpu load/put (jsc#SLE-4084).\n- KVM: arm64: Defer saving/restoring 64-bit sysregs to vcpu load/put on VHE (jsc#SLE-4084).\n- KVM: arm64: Directly call VHE and non-VHE FPSIMD enabled functions (jsc#SLE-4084).\n- KVM: arm64: Do not deactivate VM on VHE systems (jsc#SLE-4084).\n- KVM: arm64: Do not save the host ELR_EL2 and SPSR_EL2 on VHE systems (jsc#SLE-4084).\n- KVM: arm64: Factor out fault info population and gic workarounds (jsc#SLE-4084).\n- KVM: arm64: Fix order of vcpu_write_sys_reg() arguments (jsc#SLE-4084).\n- KVM: arm64: Forbid kprobing of the VHE world-switch code (jsc#SLE-4084).\n- KVM: arm64: Improve debug register save/restore flow (jsc#SLE-4084).\n- KVM: arm64: Introduce framework for accessing deferred sysregs (jsc#SLE-4084).\n- KVM: arm64: Introduce separate VHE/non-VHE sysreg save/restore functions (jsc#SLE-4084).\n- KVM: arm64: Introduce VHE-specific kvm_vcpu_run (jsc#SLE-4084).\n- KVM: arm64: Move common VHE/non-VHE trap config in separate functions (jsc#SLE-4084).\n- KVM: arm64: Move debug dirty flag calculation out of world switch (jsc#SLE-4084).\n- KVM: arm64: Move HCR_INT_OVERRIDE to default HCR_EL2 guest flag (jsc#SLE-4084).\n- KVM: arm64: Move userspace system registers into separate function (jsc#SLE-4084).\n- KVM: arm64: Prepare to handle deferred save/restore of 32-bit registers (jsc#SLE-4084).\n- KVM: arm64: Prepare to handle deferred save/restore of ELR_EL1 (jsc#SLE-4084).\n- KVM: arm64: Remove kern_hyp_va() use in VHE switch function (jsc#SLE-4084).\n- KVM: arm64: Remove noop calls to timer save/restore from VHE switch (jsc#SLE-4084).\n- KVM: arm64: Rework hyp_panic for VHE and non-VHE (jsc#SLE-4084).\n- KVM: arm64: Rewrite sysreg alternatives to static keys (jsc#SLE-4084).\n- KVM: arm64: Rewrite system register accessors to read/write functions (jsc#SLE-4084).\n- KVM: arm64: Slightly improve debug save/restore functions (jsc#SLE-4084).\n- KVM: arm64: Unify non-VHE host/guest sysreg save and restore functions (jsc#SLE-4084).\n- KVM: arm64: Write arch.mdcr_el2 changes since last vcpu_load on VHE (jsc#SLE-4084).\n- KVM: arm/arm64: Avoid vcpu_load for other vcpu ioctls than KVM_RUN (jsc#SLE-4084).\n- KVM: arm/arm64: Avoid VGICv3 save/restore on VHE with no IRQs (jsc#SLE-4084).\n- KVM: arm/arm64: Get rid of vcpu-\u003earch.irq_lines (jsc#SLE-4084).\n- KVM: arm/arm64: Handle VGICv3 save/restore from the main VGIC code on VHE (jsc#SLE-4084).\n- KVM: arm/arm64: Move vcpu_load call after kvm_vcpu_first_run_init (jsc#SLE-4084).\n- KVM: arm/arm64: Move VGIC APR save/restore to vgic put/load (jsc#SLE-4084).\n- KVM: arm/arm64: Prepare to handle deferred save/restore of SPSR_EL1 (jsc#SLE-4084).\n- KVM: arm/arm64: Remove leftover comment from kvm_vcpu_run_vhe (jsc#SLE-4084).\n- KVM: introduce kvm_arch_vcpu_async_ioctl (jsc#SLE-4084).\n- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_fpu (jsc#SLE-4084).\n- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_mpstate (jsc#SLE-4084).\n- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_regs (jsc#SLE-4084).\n- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl (jsc#SLE-4084).\n- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_run (jsc#SLE-4084).\n- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_fpu (jsc#SLE-4084).\n- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_guest_debug (jsc#SLE-4084).\n- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_mpstate (jsc#SLE-4084).\n- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_regs (jsc#SLE-4084).\n- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_sregs (jsc#SLE-4084).\n- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_translate (jsc#SLE-4084).\n- KVM: PPC: Fix compile error that occurs when CONFIG_ALTIVEC=n (jsc#SLE-4084).\n- KVM: Prepare for moving vcpu_load/vcpu_put into arch specific code (jsc#SLE-4084).\n- KVM: SVM: Add a dedicated INVD intercept routine (bsc#1112178).\n- KVM: SVM: Fix disable pause loop exit/pause filtering capability on SVM (bsc#1176321).\n- KVM: SVM: fix svn_pin_memory()\u0027s use of get_user_pages_fast() (bsc#1112178).\n- KVM: Take vcpu-\u003emutex outside vcpu_load (jsc#SLE-4084).\n- libceph: allow setting abort_on_full for rbd (bsc#1169972).\n- libnvdimm: cover up nvdimm_security_ops changes (bsc#1171742).\n- libnvdimm: cover up struct nvdimm changes (bsc#1171742).\n- libnvdimm/security, acpi/nfit: unify zero-key for all security commands (bsc#1171742).\n- libnvdimm/security: fix a typo (bsc#1171742 bsc#1167527).\n- libnvdimm/security: Introduce a \u0027frozen\u0027 attribute (bsc#1171742).\n- lib/raid6: use vdupq_n_u8 to avoid endianness warnings (git fixes (block drivers)).\n- livepatch: Add -fdump-ipa-clones to build (). Add support for -fdump-ipa-clones GCC option. Update config files accordingly.\n- mac802154: tx: fix use-after-free (git-fixes).\n- md: raid0/linear: fix dereference before null check on pointer mddev (git fixes (block drivers)).\n- media: davinci: vpif_capture: fix potential double free (git-fixes).\n- media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq() (git-fixes).\n- media: smiapp: Fix error handling at NVM reading (git-fixes).\n- media: ti-vpe: cal: Restrict DMA to avoid memory corruption (git-fixes).\n- mfd: intel-lpss: Add Intel Emmitsburg PCH PCI IDs (git-fixes).\n- mfd: mfd-core: Protect against NULL call-back function pointer (git-fixes).\n- mm: Avoid calling build_all_zonelists_init under hotplug context (bsc#1154366).\n- mmc: cqhci: Add cqhci_deactivate() (git-fixes).\n- mmc: sdhci-msm: Add retries when all tuning phases are found valid (git-fixes).\n- mmc: sdhci-pci: Fix SDHCI_RESET_ALL for CQHCI for Intel GLK-based controllers (git-fixes).\n- mmc: sdhci: Workaround broken command queuing on Intel GLK based IRBIS models (git-fixes).\n- mm/page_alloc.c: fix a crash in free_pages_prepare() (git fixes (mm/pgalloc)).\n- mm/vmalloc.c: move \u0027area-\u003epages\u0027 after if statement (git fixes (mm/vmalloc)).\n- mtd: cfi_cmdset_0002: do not free cfi-\u003ecfiq in error path of cfi_amdstd_setup() (git-fixes).\n- mtd: lpddr: Fix a double free in probe() (git-fixes).\n- mtd: phram: fix a double free issue in error path (git-fixes).\n- mtd: properly check all write ioctls for permissions (git-fixes).\n- net: 8390: Fix manufacturer name in Kconfig help text (git-fixes).\n- net: amd: fix return type of ndo_start_xmit function (git-fixes).\n- net/amd: Remove useless driver version (git-fixes).\n- net: amd-xgbe: fix comparison to bitshift when dealing with a mask (git-fixes).\n- net: amd-xgbe: Get rid of custom hex_dump_to_buffer() (git-fixes).\n- net: apple: Fix manufacturer name in Kconfig help text (git-fixes).\n- net: broadcom: Fix manufacturer name in Kconfig help text (git-fixes).\n- net: dsa: b53: Fix sparse warnings in b53_mmap.c (git-fixes).\n- net: dsa: b53: Use strlcpy() for ethtool::get_strings (git-fixes).\n- net: dsa: mv88e6xxx: fix 6085 frame mode masking (git-fixes).\n- net: dsa: mv88e6xxx: Fix interrupt masking on removal (git-fixes).\n- net: dsa: mv88e6xxx: Fix name of switch 88E6141 (git-fixes).\n- net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge() (git-fixes).\n- net: dsa: mv88e6xxx: Unregister MDIO bus on error path (git-fixes).\n- net: dsa: qca8k: Allow overwriting CPU port setting (git-fixes).\n- net: dsa: qca8k: Enable RXMAC when bringing up a port (git-fixes).\n- net: dsa: qca8k: Force CPU port to its highest bandwidth (git-fixes).\n- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (git-fixes).\n- net: fs_enet: do not call phy_stop() in interrupts (git-fixes).\n- net: initialize fastreuse on inet_inherit_port (networking-stable-20_08_15).\n- net: lan78xx: Bail out if lan78xx_get_endpoints fails (git-fixes).\n- net: lan78xx: replace bogus endpoint lookup (networking-stable-20_08_08).\n- net: lio_core: fix potential sign-extension overflow on large shift (git-fixes).\n- net/mlx5: Add meaningful return codes to status_to_err function (git-fixes).\n- net/mlx5: E-Switch, Use correct flags when configuring vlan (git-fixes).\n- net/mlx5e: XDP, Avoid checksum complete when XDP prog is loaded (git-fixes).\n- net: mvmdio: defer probe of orion-mdio if a clock is not ready (git-fixes).\n- net: mvneta: fix mtu change on port without link (git-fixes).\n- net-next: ax88796: Do not free IRQ in ax_remove() (already freed in ax_close()) (git-fixes).\n- net/nfc/rawsock.c: add CAP_NET_RAW check (networking-stable-20_08_15).\n- net: qca_spi: Avoid packet drop during initial sync (git-fixes).\n- net: qca_spi: Make sure the QCA7000 reset is triggered (git-fixes).\n- net: refactor bind_bucket fastreuse into helper (networking-stable-20_08_15).\n- net/smc: fix dmb buffer shortage (git-fixes).\n- net/smc: fix restoring of fallback changes (git-fixes).\n- net/smc: fix sock refcounting in case of termination (git-fixes).\n- net/smc: improve close of terminated socket (git-fixes).\n- net/smc: Prevent kernel-infoleak in __smc_diag_dump() (git-fixes).\n- net/smc: remove freed buffer from list (git-fixes).\n- net/smc: reset sndbuf_desc if freed (git-fixes).\n- net/smc: set rx_off for SMCR explicitly (git-fixes).\n- net/smc: switch smcd_dev_list spinlock to mutex (git-fixes).\n- net/smc: tolerate future SMCD versions (git-fixes).\n- net: stmmac: call correct function in stmmac_mac_config_rx_queues_routing() (git-fixes).\n- net: stmmac: Disable ACS Feature for GMAC \u003e= 4 (git-fixes).\n- net: stmmac: do not stop NAPI processing when dropping a packet (git-fixes).\n- net: stmmac: dwmac4: fix flow control issue (git-fixes).\n- net: stmmac: dwmac_lib: fix interchanged sleep/timeout values in DMA reset function (git-fixes).\n- net: stmmac: dwmac-meson8b: Add missing boundary to RGMII TX clock array (git-fixes).\n- net: stmmac: dwmac-meson8b: fix internal RGMII clock configuration (git-fixes).\n- net: stmmac: dwmac-meson8b: fix setting the RGMII TX clock on Meson8b (git-fixes).\n- net: stmmac: dwmac-meson8b: Fix the RGMII TX delay on Meson8b/8m2 SoCs (git-fixes).\n- net: stmmac: dwmac-meson8b: only configure the clocks in RGMII mode (git-fixes).\n- net: stmmac: dwmac-meson8b: propagate rate changes to the parent clock (git-fixes).\n- net: stmmac: Fix error handling path in \u0027alloc_dma_rx_desc_resources()\u0027 (git-fixes).\n- net: stmmac: Fix error handling path in \u0027alloc_dma_tx_desc_resources()\u0027 (git-fixes).\n- net: stmmac: rename dwmac4_tx_queue_routing() to match reality (git-fixes).\n- net: stmmac: set MSS for each tx DMA channel (git-fixes).\n- net: stmmac: Use correct values in TQS/RQS fields (git-fixes).\n- net-sysfs: add a newline when printing \u0027tx_timeout\u0027 by sysfs (networking-stable-20_07_29).\n- net: systemport: Fix software statistics for SYSTEMPORT Lite (git-fixes).\n- net: systemport: Fix sparse warnings in bcm_sysport_insert_tsb() (git-fixes).\n- net: tc35815: Explicitly check NET_IP_ALIGN is not zero in tc35815_rx (git-fixes).\n- net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE() (git-fixes).\n- net: ucc_geth - fix Oops when changing number of buffers in the ring (git-fixes).\n- NFSv4: do not mark all open state for recovery when handling recallable state revoked flag (bsc#1176935).\n- nvme-fc: set max_segments to lldd max value (bsc#1176038).\n- nvme-pci: override the value of the controller\u0027s numa node (bsc#1176507).\n- ocfs2: give applications more IO opportunities during fstrim (bsc#1175228).\n- omapfb: fix multiple reference count leaks due to pm_runtime_get_sync (git-fixes).\n- PCI/ASPM: Allow re-enabling Clock PM (git-fixes).\n- PCI: Fix pci_create_slot() reference count leak (git-fixes).\n- PCI: qcom: Add missing ipq806x clocks in PCIe driver (git-fixes).\n- PCI: qcom: Add missing reset for ipq806x (git-fixes).\n- PCI: qcom: Add support for tx term offset for rev 2.1.0 (git-fixes).\n- PCI: qcom: Define some PARF params needed for ipq8064 SoC (git-fixes).\n- PCI: rcar: Fix incorrect programming of OB windows (git-fixes).\n- phy: samsung: s5pv210-usb2: Add delay after reset (git-fixes).\n- pinctrl: mvebu: Fix i2c sda definition for 98DX3236 (git-fixes).\n- platform/x86: fix kconfig dependency warning for FUJITSU_LAPTOP (git-fixes).\n- platform/x86: thinkpad_acpi: initialize tp_nvram_state variable (git-fixes).\n- platform/x86: thinkpad_acpi: re-initialize ACPI buffer size when reuse (git-fixes).\n- powerpc/64s: Blacklist functions invoked on a trap (bsc#1094244 ltc#168122).\n- powerpc/64s: Fix HV NMI vs HV interrupt recoverability test (bsc#1094244 ltc#168122).\n- powerpc/64s: Fix unrelocated interrupt trampoline address test (bsc#1094244 ltc#168122).\n- powerpc/64s: Include \u0026lt;asm/nmi.h\u003e header file to fix a warning (bsc#1094244 ltc#168122).\n- powerpc/64s: machine check do not trace real-mode handler (bsc#1094244 ltc#168122).\n- powerpc/64s: sreset panic if there is no debugger or crash dump handlers (bsc#1094244 ltc#168122).\n- powerpc/64s: system reset interrupt preserve HSRRs (bsc#1094244 ltc#168122).\n- powerpc: Add cputime_to_nsecs() (bsc#1065729).\n- powerpc/book3s64/radix: Add kernel command line option to disable radix GTSE (bsc#1055186 ltc#153436).\n- powerpc/book3s64/radix: Fix boot failure with large amount of guest memory (bsc#1176022 ltc#187208).\n- powerpc: Implement ftrace_enabled() helpers (bsc#1094244 ltc#168122).\n- powerpc/init: Do not advertise radix during client-architecture-support (bsc#1055186 ltc#153436 ).\n- powerpc/kernel: Cleanup machine check function declarations (bsc#1065729).\n- powerpc/kernel: Enables memory hot-remove after reboot on pseries guests (bsc#1177030 ltc#187588).\n- powerpc/mm: Enable radix GTSE only if supported (bsc#1055186 ltc#153436).\n- powerpc/mm: Limit resize_hpt_for_hotplug() call to hash guests only (bsc#1177030 ltc#187588).\n- powerpc/mm: Move book3s64 specifics in subdirectory mm/book3s64 (bsc#1176022 ltc#187208).\n- powerpc/powernv: Remove real mode access limit for early allocations (bsc#1176022 ltc#187208).\n- powerpc/prom: Enable Radix GTSE in cpu pa-features (bsc#1055186 ltc#153436).\n- powerpc/pseries/le: Work around a firmware quirk (bsc#1094244 ltc#168122).\n- powerpc/pseries: lift RTAS limit for radix (bsc#1176022 ltc#187208).\n- powerpc/pseries: Limit machine check stack to 4GB (bsc#1094244 ltc#168122).\n- powerpc/pseries: Machine check use rtas_call_unlocked() with args on stack (bsc#1094244 ltc#168122).\n- powerpc/pseries: radix is not subject to RMA limit, remove it (bsc#1176022 ltc#187208).\n- powerpc/pseries/ras: Avoid calling rtas_token() in NMI paths (bsc#1094244 ltc#168122).\n- powerpc/pseries/ras: Fix FWNMI_VALID off by one (bsc#1094244 ltc#168122).\n- powerpc/pseries/ras: fwnmi avoid modifying r3 in error case (bsc#1094244 ltc#168122).\n- powerpc/pseries/ras: fwnmi sreset should not interlock (bsc#1094244 ltc#168122).\n- powerpc/traps: Do not trace system reset (bsc#1094244 ltc#168122).\n- powerpc/traps: fix recoverability of machine check handling on book3s/32 (bsc#1094244 ltc#168122).\n- powerpc/traps: Make unrecoverable NMIs die instead of panic (bsc#1094244 ltc#168122).\n- powerpc/xmon: Use `dcbf` inplace of `dcbi` instruction for 64bit Book3S (bsc#1065729).\n- power: supply: max17040: Correct voltage reading (git-fixes).\n- rcu: Do RCU GP kthread self-wakeup from softirq and interrupt (git fixes (rcu)).\n- regulator: push allocation in set_consumer_device_supply() out of lock (git-fixes).\n- Revert \u0027ALSA: hda: Add support for Loongson 7A1000 controller\u0027 (git-fixes).\n- Revert \u0027ALSA: usb-audio: Disable Lenovo P620 Rear line-in volume control\u0027 (git-fixes).\n- Revert \u0027i2c: cadence: Fix the hold bit setting\u0027 (git-fixes).\n- rpadlpar_io: Add MODULE_DESCRIPTION entries to kernel modules (bsc#1176869 ltc#188243).\n- rpm/constraints.in: recognize also kernel-source-azure (bsc#1176732)\n- rpm/kernel-binary.spec.in: Also sign ppc64 kernels (jsc#SLE-15857 jsc#SLE-13618).\n- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115) To avoid the unnecessary key enrollment, when enrolling the signing key of the kernel package, \u0027--ca-check\u0027 is added to mokutil so that mokutil will ignore the request if the CA of the signing key already exists in MokList or UEFI db. Since the macro, %_suse_kernel_module_subpackage, is only defined in a kernel module package (KMP), it\u0027s used to determine whether the %post script is running in a kernel package, or a kernel module package.\n- rpm/kernel-source.spec.in: Also use bz compression (boo#1175882).\n- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698) The \u0027-c\u0027 option wasn\u0027t passed down to %_kernel_module_package so the ueficert subpackage wasn\u0027t generated even if the certificate is specified in the spec file.\n- rtc: ds1374: fix possible race condition (git-fixes).\n- rtlwifi: rtl8192cu: Prevent leaking urb (git-fixes).\n- rxrpc: Fix race between recvmsg and sendmsg on immediate call failure (networking-stable-20_08_08).\n- rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA (networking-stable-20_07_29).\n- s390/mm: fix huge pte soft dirty copying (git-fixes).\n- s390/qeth: do not process empty bridge port events (git-fixes).\n- s390/qeth: integrate RX refill worker with NAPI (git-fixes).\n- s390/qeth: tolerate pre-filled RX buffer (git-fixes).\n- scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del() (bsc#1174899).\n- scsi: fnic: Do not call \u0027scsi_done()\u0027 for unhandled commands (bsc#1168468, bsc#1171675).\n- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (bsc#1176962 ltc#188304).\n- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (bsc#1176962 ltc#188304).\n- scsi: iscsi: iscsi_tcp: Avoid holding spinlock while calling getpeername() (bsc#1177258).\n- scsi: libfc: Fix for double free() (bsc#1174899).\n- scsi: libfc: free response frame from GPN_ID (bsc#1174899).\n- scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases (bsc#1174899).\n- scsi: lpfc: Add dependency on CPU_FREQ (git-fixes).\n- scsi: lpfc: Fix setting IRQ affinity with an empty CPU mask (git-fixes).\n- scsi: qla2xxx: Fix regression on sparc64 (git-fixes).\n- scsi: qla2xxx: Fix the return value (bsc#1171688).\n- scsi: qla2xxx: Fix the size used in a \u0027dma_free_coherent()\u0027 call (bsc#1171688).\n- scsi: qla2xxx: Fix wrong return value in qla_nvme_register_hba() (bsc#1171688).\n- scsi: qla2xxx: Fix wrong return value in qlt_chk_unresolv_exchg() (bsc#1171688).\n- scsi: qla2xxx: Handle incorrect entry_type entries (bsc#1171688).\n- scsi: qla2xxx: Log calling function name in qla2x00_get_sp_from_handle() (bsc#1171688).\n- scsi: qla2xxx: Remove pci-dma-compat wrapper API (bsc#1171688).\n- scsi: qla2xxx: Remove redundant variable initialization (bsc#1171688).\n- scsi: qla2xxx: Remove superfluous memset() (bsc#1171688).\n- scsi: qla2xxx: Simplify return value logic in qla2x00_get_sp_from_handle() (bsc#1171688).\n- scsi: qla2xxx: Suppress two recently introduced compiler warnings (git-fixes).\n- scsi: qla2xxx: Warn if done() or free() are called on an already freed srb (bsc#1171688).\n- sdhci: tegra: Remove SDHCI_QUIRK_DATA_TIMEOUT_USES_SDCLK for Tegra186 (git-fixes).\n- sdhci: tegra: Remove SDHCI_QUIRK_DATA_TIMEOUT_USES_SDCLK for Tegra210 (git-fixes).\n- serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout (git-fixes).\n- serial: 8250_omap: Fix sleeping function called from invalid context during probe (git-fixes).\n- serial: 8250_port: Do not service RX FIFO if throttled (git-fixes).\n- Set CONFIG_HAVE_KVM_VCPU_ASYNC_IOCTL=y (jsc#SLE-4084).\n- smb3: Honor persistent/resilient handle flags for multiuser mounts (bsc#1176546).\n- smb3: Honor \u0027seal\u0027 flag for multiuser mounts (bsc#1176545).\n- smb3: warn on confusing error scenario with sec=krb5 (bsc#1176548).\n- staging:r8188eu: avoid skb_clone for amsdu to msdu conversion (git-fixes).\n- stmmac: Do not access tx_q-\u003edirty_tx before netif_tx_lock (git-fixes).\n- tcp: apply a floor of 1 for RTT samples from TCP timestamps (networking-stable-20_08_08).\n- thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430 (git-fixes).\n- tools/power/cpupower: Fix initializer override in hsw_ext_cstates (bsc#1112178).\n- usb: core: fix slab-out-of-bounds Read in read_descriptors (git-fixes).\n- usb: dwc3: Increase timeout for CmdAct cleared by device controller (git-fixes).\n- usb: EHCI: ehci-mv: fix error handling in mv_ehci_probe() (git-fixes).\n- usb: EHCI: ehci-mv: fix less than zero comparison of an unsigned int (git-fixes).\n- usb: Fix out of sync data toggle if a configured device is reconfigured (git-fixes).\n- usb: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() (git-fixes).\n- usb: gadget: f_ncm: Fix NDP16 datagram validation (git-fixes).\n- usb: gadget: u_f: add overflow checks to VLA macros (git-fixes).\n- usb: gadget: u_f: Unbreak offset calculation in VLAs (git-fixes).\n- usb: hso: check for return value in hso_serial_common_create() (networking-stable-20_08_08).\n- usblp: fix race between disconnect() and read() (git-fixes).\n- usb: lvtest: return proper error code in probe (git-fixes).\n- usbnet: ipheth: fix potential null pointer dereference in ipheth_carrier_set (git-fixes).\n- usb: qmi_wwan: add D-Link DWM-222 A2 device ID (git-fixes).\n- usb: quirks: Add no-lpm quirk for another Raydium touchscreen (git-fixes).\n- usb: quirks: Add USB_QUIRK_IGNORE_REMOTE_WAKEUP quirk for BYD zhaoxin notebook (git-fixes).\n- usb: quirks: Ignore duplicate endpoint on Sound Devices MixPre-D (git-fixes).\n- usb: serial: ftdi_sio: add IDs for Xsens Mti USB converter (git-fixes).\n- usb: serial: option: add support for SIM7070/SIM7080/SIM7090 modules (git-fixes).\n- usb: serial: option: support dynamic Quectel USB compositions (git-fixes).\n- usb: sisusbvga: Fix a potential UB casued by left shifting a negative value (git-fixes).\n- usb: storage: Add unusual_uas entry for Sony PSZ drives (git-fixes).\n- usb: typec: ucsi: acpi: Check the _DEP dependencies (git-fixes).\n- usb: uas: Add quirk for PNY Pro Elite (git-fixes).\n- usb: UAS: fix disconnect by unplugging a hub (git-fixes).\n- usb: yurex: Fix bad gfp argument (git-fixes).\n- vgacon: remove software scrollback support (bsc#1176278).\n- video: fbdev: fix OOB read in vga_8planes_imageblit() (git-fixes).\n- virtio-blk: free vblk-vqs in error path of virtblk_probe() (git fixes (block drivers)).\n- vmxnet3: fix cksum offload issues for non-udp tunnels (git-fixes).\n- vrf: prevent adding upper devices (git-fixes).\n- vxge: fix return of a free\u0027d memblock on a failed dma mapping (git-fixes).\n- x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task (bsc#1112178).\n- xen: do not reschedule in preemption off sections (bsc#1175749).\n- xen/events: do not use chip_data for legacy IRQs (bsc#1065600).\n- XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information (bsc#1065600).\n- xgbe: no need to check return value of debugfs_create functions (git-fixes).\n- xgbe: switch to more generic VxLAN detection (git-fixes).\n- xhci: Do warm-reset when both CAS and XDEV_RESUME are set (git-fixes).\n- yam: fix possible memory leak in yam_init_driver (git-fixes).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2020-1655",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_1655-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2020:1655-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TH734NYI5EZD4XQ2VE5Y7HNPWOK3EVXA/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2020:1655-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TH734NYI5EZD4XQ2VE5Y7HNPWOK3EVXA/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1055186",
        "url": "https://bugzilla.suse.com/1055186"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1065600",
        "url": "https://bugzilla.suse.com/1065600"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1065729",
        "url": "https://bugzilla.suse.com/1065729"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1094244",
        "url": "https://bugzilla.suse.com/1094244"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1112178",
        "url": "https://bugzilla.suse.com/1112178"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1113956",
        "url": "https://bugzilla.suse.com/1113956"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154366",
        "url": "https://bugzilla.suse.com/1154366"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1167527",
        "url": "https://bugzilla.suse.com/1167527"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1168468",
        "url": "https://bugzilla.suse.com/1168468"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1169972",
        "url": "https://bugzilla.suse.com/1169972"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171675",
        "url": "https://bugzilla.suse.com/1171675"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171688",
        "url": "https://bugzilla.suse.com/1171688"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171742",
        "url": "https://bugzilla.suse.com/1171742"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1173115",
        "url": "https://bugzilla.suse.com/1173115"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174899",
        "url": "https://bugzilla.suse.com/1174899"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175228",
        "url": "https://bugzilla.suse.com/1175228"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175749",
        "url": "https://bugzilla.suse.com/1175749"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175882",
        "url": "https://bugzilla.suse.com/1175882"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176011",
        "url": "https://bugzilla.suse.com/1176011"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176022",
        "url": "https://bugzilla.suse.com/1176022"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176038",
        "url": "https://bugzilla.suse.com/1176038"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176069",
        "url": "https://bugzilla.suse.com/1176069"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176235",
        "url": "https://bugzilla.suse.com/1176235"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176242",
        "url": "https://bugzilla.suse.com/1176242"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176278",
        "url": "https://bugzilla.suse.com/1176278"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176316",
        "url": "https://bugzilla.suse.com/1176316"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176317",
        "url": "https://bugzilla.suse.com/1176317"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176318",
        "url": "https://bugzilla.suse.com/1176318"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176319",
        "url": "https://bugzilla.suse.com/1176319"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176320",
        "url": "https://bugzilla.suse.com/1176320"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176321",
        "url": "https://bugzilla.suse.com/1176321"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176381",
        "url": "https://bugzilla.suse.com/1176381"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176423",
        "url": "https://bugzilla.suse.com/1176423"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176482",
        "url": "https://bugzilla.suse.com/1176482"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176507",
        "url": "https://bugzilla.suse.com/1176507"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176536",
        "url": "https://bugzilla.suse.com/1176536"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176544",
        "url": "https://bugzilla.suse.com/1176544"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176545",
        "url": "https://bugzilla.suse.com/1176545"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176546",
        "url": "https://bugzilla.suse.com/1176546"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176548",
        "url": "https://bugzilla.suse.com/1176548"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176659",
        "url": "https://bugzilla.suse.com/1176659"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176698",
        "url": "https://bugzilla.suse.com/1176698"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176699",
        "url": "https://bugzilla.suse.com/1176699"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176700",
        "url": "https://bugzilla.suse.com/1176700"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176721",
        "url": "https://bugzilla.suse.com/1176721"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176722",
        "url": "https://bugzilla.suse.com/1176722"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176725",
        "url": "https://bugzilla.suse.com/1176725"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176732",
        "url": "https://bugzilla.suse.com/1176732"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176788",
        "url": "https://bugzilla.suse.com/1176788"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176789",
        "url": "https://bugzilla.suse.com/1176789"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176869",
        "url": "https://bugzilla.suse.com/1176869"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176877",
        "url": "https://bugzilla.suse.com/1176877"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176935",
        "url": "https://bugzilla.suse.com/1176935"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176950",
        "url": "https://bugzilla.suse.com/1176950"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176962",
        "url": "https://bugzilla.suse.com/1176962"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176966",
        "url": "https://bugzilla.suse.com/1176966"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176990",
        "url": "https://bugzilla.suse.com/1176990"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177030",
        "url": "https://bugzilla.suse.com/1177030"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177041",
        "url": "https://bugzilla.suse.com/1177041"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177042",
        "url": "https://bugzilla.suse.com/1177042"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177043",
        "url": "https://bugzilla.suse.com/1177043"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177044",
        "url": "https://bugzilla.suse.com/1177044"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177121",
        "url": "https://bugzilla.suse.com/1177121"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177206",
        "url": "https://bugzilla.suse.com/1177206"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177258",
        "url": "https://bugzilla.suse.com/1177258"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177291",
        "url": "https://bugzilla.suse.com/1177291"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177293",
        "url": "https://bugzilla.suse.com/1177293"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177294",
        "url": "https://bugzilla.suse.com/1177294"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177295",
        "url": "https://bugzilla.suse.com/1177295"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177296",
        "url": "https://bugzilla.suse.com/1177296"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962356",
        "url": "https://bugzilla.suse.com/962356"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-0404 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-0404/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-0427 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-0427/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-0431 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-0431/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-0432 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-0432/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-14381 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-14381/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-14386 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-14386/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-14390 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-14390/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-25212 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-25212/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-25284 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-25284/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-25641 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-25641/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-25643 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-25643/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-26088 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-26088/"
      }
    ],
    "title": "Security update for the Linux Kernel",
    "tracking": {
      "current_release_date": "2020-10-11T13:53:22Z",
      "generator": {
        "date": "2020-10-11T13:53:22Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2020:1655-1",
      "initial_release_date": "2020-10-11T13:53:22Z",
      "revision_history": [
        {
          "date": "2020-10-11T13:53:22Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-4.12.14-lp151.28.71.1.noarch",
                "product": {
                  "name": "kernel-devel-4.12.14-lp151.28.71.1.noarch",
                  "product_id": "kernel-devel-4.12.14-lp151.28.71.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-docs-4.12.14-lp151.28.71.1.noarch",
                "product": {
                  "name": "kernel-docs-4.12.14-lp151.28.71.1.noarch",
                  "product_id": "kernel-docs-4.12.14-lp151.28.71.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
                "product": {
                  "name": "kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
                  "product_id": "kernel-docs-html-4.12.14-lp151.28.71.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-4.12.14-lp151.28.71.1.noarch",
                "product": {
                  "name": "kernel-macros-4.12.14-lp151.28.71.1.noarch",
                  "product_id": "kernel-macros-4.12.14-lp151.28.71.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-4.12.14-lp151.28.71.1.noarch",
                "product": {
                  "name": "kernel-source-4.12.14-lp151.28.71.1.noarch",
                  "product_id": "kernel-source-4.12.14-lp151.28.71.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
                "product": {
                  "name": "kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
                  "product_id": "kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-debug-4.12.14-lp151.28.71.2.x86_64",
                "product": {
                  "name": "kernel-debug-4.12.14-lp151.28.71.2.x86_64",
                  "product_id": "kernel-debug-4.12.14-lp151.28.71.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
                "product": {
                  "name": "kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
                  "product_id": "kernel-debug-base-4.12.14-lp151.28.71.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
                "product": {
                  "name": "kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
                  "product_id": "kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-4.12.14-lp151.28.71.2.x86_64",
                "product": {
                  "name": "kernel-default-4.12.14-lp151.28.71.2.x86_64",
                  "product_id": "kernel-default-4.12.14-lp151.28.71.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
                "product": {
                  "name": "kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
                  "product_id": "kernel-default-base-4.12.14-lp151.28.71.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
                "product": {
                  "name": "kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
                  "product_id": "kernel-default-devel-4.12.14-lp151.28.71.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
                  "product_id": "kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
                  "product_id": "kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
                  "product_id": "kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
                "product": {
                  "name": "kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
                  "product_id": "kernel-obs-build-4.12.14-lp151.28.71.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
                "product": {
                  "name": "kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
                  "product_id": "kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-syms-4.12.14-lp151.28.71.1.x86_64",
                "product": {
                  "name": "kernel-syms-4.12.14-lp151.28.71.1.x86_64",
                  "product_id": "kernel-syms-4.12.14-lp151.28.71.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
                "product": {
                  "name": "kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
                  "product_id": "kernel-vanilla-4.12.14-lp151.28.71.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
                "product": {
                  "name": "kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
                  "product_id": "kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64",
                "product": {
                  "name": "kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64",
                  "product_id": "kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.1",
                "product": {
                  "name": "openSUSE Leap 15.1",
                  "product_id": "openSUSE Leap 15.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-4.12.14-lp151.28.71.2.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64"
        },
        "product_reference": "kernel-debug-4.12.14-lp151.28.71.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-base-4.12.14-lp151.28.71.2.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64"
        },
        "product_reference": "kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64"
        },
        "product_reference": "kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-4.12.14-lp151.28.71.2.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64"
        },
        "product_reference": "kernel-default-4.12.14-lp151.28.71.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-base-4.12.14-lp151.28.71.2.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64"
        },
        "product_reference": "kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-devel-4.12.14-lp151.28.71.2.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64"
        },
        "product_reference": "kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-4.12.14-lp151.28.71.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch"
        },
        "product_reference": "kernel-devel-4.12.14-lp151.28.71.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-docs-4.12.14-lp151.28.71.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch"
        },
        "product_reference": "kernel-docs-4.12.14-lp151.28.71.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-docs-html-4.12.14-lp151.28.71.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch"
        },
        "product_reference": "kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64"
        },
        "product_reference": "kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64"
        },
        "product_reference": "kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64"
        },
        "product_reference": "kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-4.12.14-lp151.28.71.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch"
        },
        "product_reference": "kernel-macros-4.12.14-lp151.28.71.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-obs-build-4.12.14-lp151.28.71.2.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64"
        },
        "product_reference": "kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64"
        },
        "product_reference": "kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-4.12.14-lp151.28.71.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch"
        },
        "product_reference": "kernel-source-4.12.14-lp151.28.71.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch"
        },
        "product_reference": "kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-syms-4.12.14-lp151.28.71.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64"
        },
        "product_reference": "kernel-syms-4.12.14-lp151.28.71.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-vanilla-4.12.14-lp151.28.71.2.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64"
        },
        "product_reference": "kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64"
        },
        "product_reference": "kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
        },
        "product_reference": "kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-0404",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-0404"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111893654References: Upstream kernel",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-0404",
          "url": "https://www.suse.com/security/cve/CVE-2020-0404"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176423 for CVE-2020-0404",
          "url": "https://bugzilla.suse.com/1176423"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-10-11T13:53:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-0404"
    },
    {
      "cve": "CVE-2020-0427",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-0427"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-140550171",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-0427",
          "url": "https://www.suse.com/security/cve/CVE-2020-0427"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176725 for CVE-2020-0427",
          "url": "https://bugzilla.suse.com/1176725"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-10-11T13:53:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-0427"
    },
    {
      "cve": "CVE-2020-0431",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-0431"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-144161459",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-0431",
          "url": "https://www.suse.com/security/cve/CVE-2020-0431"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176722 for CVE-2020-0431",
          "url": "https://bugzilla.suse.com/1176722"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176896 for CVE-2020-0431",
          "url": "https://bugzilla.suse.com/1176896"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-10-11T13:53:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-0431"
    },
    {
      "cve": "CVE-2020-0432",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-0432"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143560807",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-0432",
          "url": "https://www.suse.com/security/cve/CVE-2020-0432"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176721 for CVE-2020-0432",
          "url": "https://bugzilla.suse.com/1176721"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177165 for CVE-2020-0432",
          "url": "https://bugzilla.suse.com/1177165"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-10-11T13:53:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-0432"
    },
    {
      "cve": "CVE-2020-14381",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-14381"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel\u0027s futex implementation. This flaw allows a local attacker to corrupt system memory or escalate their privileges when creating a futex on a filesystem that is about to be unmounted. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-14381",
          "url": "https://www.suse.com/security/cve/CVE-2020-14381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176011 for CVE-2020-14381",
          "url": "https://bugzilla.suse.com/1176011"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176012 for CVE-2020-14381",
          "url": "https://bugzilla.suse.com/1176012"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-10-11T13:53:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-14381"
    },
    {
      "cve": "CVE-2020-14386",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-14386"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-14386",
          "url": "https://www.suse.com/security/cve/CVE-2020-14386"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176069 for CVE-2020-14386",
          "url": "https://bugzilla.suse.com/1176069"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176072 for CVE-2020-14386",
          "url": "https://bugzilla.suse.com/1176072"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-10-11T13:53:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-14386"
    },
    {
      "cve": "CVE-2020-14390",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-14390"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel in versions before 5.9-rc6. When changing screen size, an out-of-bounds memory write can occur leading to memory corruption or a denial of service. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-14390",
          "url": "https://www.suse.com/security/cve/CVE-2020-14390"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176235 for CVE-2020-14390",
          "url": "https://bugzilla.suse.com/1176235"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176253 for CVE-2020-14390",
          "url": "https://bugzilla.suse.com/1176253"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176278 for CVE-2020-14390",
          "url": "https://bugzilla.suse.com/1176278"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-10-11T13:53:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-14390"
    },
    {
      "cve": "CVE-2020-25212",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-25212"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-25212",
          "url": "https://www.suse.com/security/cve/CVE-2020-25212"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176381 for CVE-2020-25212",
          "url": "https://bugzilla.suse.com/1176381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176382 for CVE-2020-25212",
          "url": "https://bugzilla.suse.com/1176382"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177027 for CVE-2020-25212",
          "url": "https://bugzilla.suse.com/1177027"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-10-11T13:53:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-25212"
    },
    {
      "cve": "CVE-2020-25284",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-25284"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used incomplete permission checking for access to rbd devices, which could be leveraged by local attackers to map or unmap rbd block devices, aka CID-f44d04e696fe.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-25284",
          "url": "https://www.suse.com/security/cve/CVE-2020-25284"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176482 for CVE-2020-25284",
          "url": "https://bugzilla.suse.com/1176482"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-10-11T13:53:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-25284"
    },
    {
      "cve": "CVE-2020-25641",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-25641"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel\u0027s implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loop, causing a denial of service. This flaw allows a local attacker with basic privileges to issue requests to a block device, resulting in a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-25641",
          "url": "https://www.suse.com/security/cve/CVE-2020-25641"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177121 for CVE-2020-25641",
          "url": "https://bugzilla.suse.com/1177121"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-10-11T13:53:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-25641"
    },
    {
      "cve": "CVE-2020-25643",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-25643"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-25643",
          "url": "https://www.suse.com/security/cve/CVE-2020-25643"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177206 for CVE-2020-25643",
          "url": "https://bugzilla.suse.com/1177206"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177226 for CVE-2020-25643",
          "url": "https://bugzilla.suse.com/1177226"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-10-11T13:53:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-25643"
    },
    {
      "cve": "CVE-2020-26088",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-26088"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel before 5.8.2 could be used by local attackers to create raw sockets, bypassing security mechanisms, aka CID-26896f01467a.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
          "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
          "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-26088",
          "url": "https://www.suse.com/security/cve/CVE-2020-26088"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176990 for CVE-2020-26088",
          "url": "https://bugzilla.suse.com/1176990"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:kernel-debug-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-debug-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-default-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-devel-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-docs-html-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-kvmsmall-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-kvmsmall-devel-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-macros-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-obs-build-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-obs-qa-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-source-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-source-vanilla-4.12.14-lp151.28.71.1.noarch",
            "openSUSE Leap 15.1:kernel-syms-4.12.14-lp151.28.71.1.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-base-4.12.14-lp151.28.71.2.x86_64",
            "openSUSE Leap 15.1:kernel-vanilla-devel-4.12.14-lp151.28.71.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-10-11T13:53:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-26088"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\n\nThe openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2020-12351: Fixed a type confusion while processing AMP packets aka \u0027BleedingTooth\u0027 aka \u0027BadKarma\u0027 (bsc#1177724).\n- CVE-2020-24490: Fixed a heap buffer overflow when processing extended advertising report events aka \u0027BleedingTooth\u0027 aka \u0027BadVibes\u0027 (bsc#1177726).\n- CVE-2020-12352: Fixed an information leak when processing certain AMP packets aka \u0027BleedingTooth\u0027 aka \u0027BadChoice\u0027 (bsc#1177725).\n- CVE-2020-25212: A TOCTOU mismatch in the NFS client code in the Linux kernel could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452 (bnc#1176381).\n- CVE-2020-25645: Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality (bnc#1177511).\n- CVE-2020-25643: Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability (bnc#1177206).\n- CVE-2020-25641: A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loop, causing a denial of service. This flaw allowed a local attacker with basic privileges to issue requests to a block device, resulting in a denial of service. The highest threat from this vulnerability is to system availability (bnc#1177121).\n\nThe following non-security bugs were fixed:\n\n- 9p: Fix memory leak in v9fs_mount (git-fixes).\n- ACPI: EC: Reference count query handlers under lock (git-fixes).\n- ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN Converter9 2-in-1 (git-fixes).\n- ASoC: img-i2s-out: Fix runtime PM imbalance on error (git-fixes).\n- ASoC: kirkwood: fix IRQ error handling (git-fixes).\n- ASoC: wm8994: Ensure the device is resumed in wm89xx_mic_detect functions (git-fixes).\n- ASoC: wm8994: Skip setting of the WM8994_MICBIAS register for WM1811 (git-fixes).\n- Bluetooth: Fix refcount use-after-free issue (git-fixes).\n- Bluetooth: Handle Inquiry Cancel error after Inquiry Complete (git-fixes).\n- Bluetooth: L2CAP: handle l2cap config request during open state (git-fixes).\n- Bluetooth: guard against controllers sending zero\u0027d events (git-fixes).\n- Bluetooth: prefetch channel before killing sock (git-fixes).\n- Btrfs: fix crash during unmount due to race with delayed inode workers (bsc#1176019).\n- Input: i8042 - add nopnp quirk for Acer Aspire 5 A515 (bsc#954532).\n- Input: trackpoint - enable Synaptics trackpoints (git-fixes).\n- Move upstreamed intel-vbtn patch into sorted section\n- NFS: Do not move layouts to plh_return_segs list while in use (git-fixes).\n- NFS: Do not return layout segments that are in use (git-fixes).\n- NFS: Fix flexfiles read failover (git-fixes).\n- NFSv4.2: fix client\u0027s attribute cache management for copy_file_range (git-fixes).\n- PCI/IOV: Mark VFs as not implementing PCI_COMMAND_MEMORY (bsc#1176979).\n- PCI: Avoid double hpmemsize MMIO window assignment (git-fixes).\n- PCI: tegra194: Fix runtime PM imbalance on error (git-fixes).\n- PCI: tegra: Fix runtime PM imbalance on error (git-fixes).\n- Platform: OLPC: Fix memleak in olpc_ec_probe (git-fixes).\n- RDMA/hfi1: Correct an interlock issue for TID RDMA WRITE request (bsc#1175621).\n- Refresh patches.suse/fnic-to-not-call-scsi_done-for-unhandled-commands.patch (bsc#1168468, bsc#1171675).\n- SUNRPC: Revert 241b1f419f0e (\u0027SUNRPC: Remove xdr_buf_trim()\u0027) (git-fixes).\n- USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe() (git-fixes).\n- USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int (git-fixes).\n- USB: gadget: f_ncm: Fix NDP16 datagram validation (git-fixes).\n- Update patches.suse/target-add-rbd-backend.patch: (). (simplify block to byte calculations and use consistent error paths)\n- Update config files. Enable ACPI_PCI_SLOT and HOTPLUG_PCI_ACPI (bsc#1177194).\n- airo: Fix read overflows sending packets (git-fixes).\n- ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter (git-fixes).\n- arm64: Enable PCI write-combine resources under sysfs (bsc#1175807).\n- ata: ahci: mvebu: Make SATA PHY optional for Armada 3720 (git-fixes).\n- ath10k: fix array out-of-bounds access (git-fixes).\n- ath10k: fix memory leak for tpc_stats_final (git-fixes).\n- ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read (git-fixes).\n- brcmfmac: Fix double freeing in the fmac usb data path (git-fixes).\n- btrfs: block-group: do not set the wrong READA flag for btrfs_read_block_groups() (bsc#1176019).\n- btrfs: block-group: fix free-space bitmap threshold (bsc#1176019).\n- btrfs: block-group: refactor how we delete one block group item (bsc#1176019).\n- btrfs: block-group: refactor how we insert a block group item (bsc#1176019).\n- btrfs: block-group: refactor how we read one block group item (bsc#1176019).\n- btrfs: block-group: rename write_one_cache_group() (bsc#1176019).\n- btrfs: check the right error variable in btrfs_del_dir_entries_in_log (bsc#1177687).\n- btrfs: do not set the full sync flag on the inode during page release (bsc#1177687).\n- btrfs: do not take an extra root ref at allocation time (bsc#1176019).\n- btrfs: drop logs when we\u0027ve aborted a transaction (bsc#1176019).\n- btrfs: fix a race between scrub and block group removal/allocation (bsc#1176019).\n- btrfs: fix race between page release and a fast fsync (bsc#1177687).\n- btrfs: free block groups after free\u0027ing fs trees (bsc#1176019).\n- btrfs: hold a ref on the root on the dead roots list (bsc#1176019).\n- btrfs: kill the subvol_srcu (bsc#1176019).\n- btrfs: make btrfs_cleanup_fs_roots use the radix tree lock (bsc#1176019).\n- btrfs: make inodes hold a ref on their roots (bsc#1176019).\n- btrfs: make the extent buffer leak check per fs info (bsc#1176019).\n- btrfs: move ino_cache_inode dropping out of btrfs_free_fs_root (bsc#1176019).\n- btrfs: move the block group freeze/unfreeze helpers into block-group.c (bsc#1176019).\n- btrfs: move the root freeing stuff into btrfs_put_root (bsc#1176019).\n- btrfs: only commit delayed items at fsync if we are logging a directory (bsc#1177687).\n- btrfs: only commit the delayed inode when doing a full fsync (bsc#1177687).\n- btrfs: reduce contention on log trees when logging checksums (bsc#1177687).\n- btrfs: release old extent maps during page release (bsc#1177687).\n- btrfs: remove no longer necessary chunk mutex locking cases (bsc#1176019).\n- btrfs: remove no longer needed use of log_writers for the log root tree (bsc#1177687).\n- btrfs: rename member \u0027trimming\u0027 of block group to a more generic name (bsc#1176019).\n- btrfs: scrub, only lookup for csums if we are dealing with a data extent (bsc#1176019).\n- btrfs: stop incremening log_batch for the log root tree when syncing log (bsc#1177687).\n- bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal (git-fixes).\n- clk/ti/adpll: allocate room for terminating null (git-fixes).\n- clk: samsung: exynos4: mark \u0027chipid\u0027 clock as CLK_IGNORE_UNUSED (git-fixes).\n- clk: socfpga: stratix10: fix the divider for the emac_ptp_free_clk (git-fixes).\n- clk: tegra: Always program PLL_E when enabled (git-fixes).\n- clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init() (git-fixes).\n- clocksource/drivers/timer-gx6605s: Fixup counter reload (git-fixes).\n- cpuidle: Poll for a minimum of 30ns and poll for a tick if lower c-states are disabled (bnc#1176588).\n- create Storage / NVMe subsection\n- crypto: algif_aead - Do not set MAY_BACKLOG on the async path (git-fixes).\n- crypto: algif_skcipher - EBUSY on aio should be an error (git-fixes).\n- crypto: bcm - Verify GCM/CCM key length in setkey (git-fixes).\n- crypto: dh - SP800-56A rev 3 local public key validation (bsc#1175718).\n- crypto: dh - check validity of Z before export (bsc#1175718).\n- crypto: ecc - SP800-56A rev 3 local public key validation (bsc#1175718).\n- crypto: ecdh - check validity of Z before export (bsc#1175718).\n- crypto: ixp4xx - Fix the size used in a \u0027dma_free_coherent()\u0027 call (git-fixes).\n- crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc() (git-fixes).\n- crypto: omap-sham - fix digcnt register handling with export/import (git-fixes).\n- crypto: picoxcell - Fix potential race condition bug (git-fixes).\n- crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA (git-fixes).\n- cypto: mediatek - fix leaks in mtk_desc_ring_alloc (git-fixes).\n- dma-fence: Serialise signal enabling (dma_fence_enable_sw_signaling) (git-fixes).\n- dmaengine: mediatek: hsdma_probe: fixed a memory leak when devm_request_irq fails (git-fixes).\n- dmaengine: stm32-dma: use vchan_terminate_vdesc() in .terminate_all (git-fixes).\n- dmaengine: stm32-mdma: use vchan_terminate_vdesc() in .terminate_all (git-fixes).\n- dmaengine: tegra-apb: Prevent race conditions on channel\u0027s freeing (git-fixes).\n- dmaengine: zynqmp_dma: fix burst length configuration (git-fixes).\n- drivers: char: tlclk.c: Avoid data race between init and interrupt handler (git-fixes).\n- drm/amdgpu: restore proper ref count in amdgpu_display_crtc_set_config (git-fixes).\n- drm/radeon: revert \u0027Prefer lower feedback dividers\u0027 (bsc#1177384).\n- drop Storage / bsc#1171688 subsection No effect on expanded tree.\n- e1000: Do not perform reset in reset_task if we are already down (git-fixes).\n- ftrace: Move RCU is watching check after recursion check (git-fixes).\n- fuse: do not ignore errors from fuse_writepages_fill() (bsc#1177193).\n- gpio: mockup: fix resource leak in error path (git-fixes).\n- gpio: rcar: Fix runtime PM imbalance on error (git-fixes).\n- gpio: siox: explicitly support only threaded irqs (git-fixes).\n- gpio: sprd: Clear interrupt when setting the type as edge (git-fixes).\n- gpio: tc35894: fix up tc35894 interrupt configuration (git-fixes).\n- hwmon: (applesmc) check status earlier (git-fixes).\n- hwmon: (mlxreg-fan) Fix double \u0027Mellanox\u0027 (git-fixes).\n- hwmon: (pmbus/max34440) Fix status register reads for MAX344{51,60,61} (git-fixes).\n- i2c: aspeed: Mask IRQ status to relevant bits (git-fixes).\n- i2c: core: Call i2c_acpi_install_space_handler() before i2c_acpi_register_devices() (git-fixes).\n- i2c: cpm: Fix i2c_ram structure (git-fixes).\n- i2c: i801: Exclude device from suspend direct complete optimization (git-fixes).\n- i2c: meson: fix clock setting overwrite (git-fixes).\n- i2c: meson: fixup rate calculation with filter delay (git-fixes).\n- i2c: owl: Clear NACK and BUS error bits (git-fixes).\n- i2c: tegra: Prevent interrupt triggering after transfer timeout (git-fixes).\n- i2c: tegra: Restore pinmux on system resume (git-fixes).\n- ieee802154/adf7242: check status of adf7242_read_reg (git-fixes).\n- ieee802154: fix one possible memleak in ca8210_dev_com_init (git-fixes).\n- iio: adc: qcom-spmi-adc5: fix driver name (git-fixes).\n- ima: extend boot_aggregate with kernel measurements (bsc#1177617).\n- iommu/amd: Fix IOMMU AVIC not properly update the is_run bit in IRTE (bsc#1177297).\n- iommu/amd: Fix potential @entry null deref (bsc#1177283).\n- iommu/amd: Re-factor guest virtual APIC (de-)activation code (bsc#1177284).\n- iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode (bsc#1177285).\n- iommu/exynos: add missing put_device() call in exynos_iommu_of_xlate() (bsc#1177286).\n- iommu/vt-d: Correctly calculate agaw in domain_init() (bsc#1176400).\n- kABI: Fix kABI for 12856e7acde4 PCI/IOV: Mark VFs as not implementing PCI_COMMAND_MEMORY (bsc#1176979).\n- kabi fix for NFS: Fix flexfiles read failover (git-fixes).\n- kabi/severities: ignore kABI for target_core_rbd Match behaviour for all other Ceph specific modules.\n- kernel-binary.spec.in: Exclude .config.old from kernel-devel  - use tar excludes for .kernel-binary.spec.buildenv\n- kernel-binary.spec.in: Package the obj_install_dir as explicit filelist.\n- leds: mlxreg: Fix possible buffer overflow (git-fixes).\n- lib/mpi: Add mpi_sub_ui() (bsc#1175718).\n- libceph-add-support-for-CMPEXT-compare-extent-reques.patch: (bsc#1177090).\n- locking/rwsem: Disable reader optimistic spinning (bnc#1176588).\n- mac80211: do not allow bigger VHT MPDUs than the hardware supports (git-fixes).\n- mac80211: skip mpath lookup also for control port tx (git-fixes).\n- mac802154: tx: fix use-after-free (git-fixes).\n- macsec: avoid use-after-free in macsec_handle_frame() (git-fixes).\n- media: Revert \u0027media: exynos4-is: Add missed check for pinctrl_lookup_state()\u0027 (git-fixes).\n- media: camss: Fix a reference count leak (git-fixes).\n- media: m5mols: Check function pointer in m5mols_sensor_power (git-fixes).\n- media: mc-device.c: fix memleak in media_device_register_entity (git-fixes).\n- media: mx2_emmaprp: Fix memleak in emmaprp_probe (git-fixes).\n- media: omap3isp: Fix memleak in isp_probe (git-fixes).\n- media: ov5640: Correct Bit Div register in clock tree diagram (git-fixes).\n- media: platform: fcp: Fix a reference count leak (git-fixes).\n- media: rc: do not access device via sysfs after rc_unregister_device() (git-fixes).\n- media: rc: uevent sysfs file races with rc_unregister_device() (git-fixes).\n- media: rcar-csi2: Allocate v4l2_async_subdev dynamically (git-fixes).\n- media: rcar-vin: Fix a reference count leak (git-fixes).\n- media: rockchip/rga: Fix a reference count leak (git-fixes).\n- media: s5p-mfc: Fix a reference count leak (git-fixes).\n- media: smiapp: Fix error handling at NVM reading (git-fixes).\n- media: staging/intel-ipu3: css: Correctly reset some memory (git-fixes).\n- media: stm32-dcmi: Fix a reference count leak (git-fixes).\n- media: tc358743: cleanup tc358743_cec_isr (git-fixes).\n- media: tc358743: initialize variable (git-fixes).\n- media: ti-vpe: Fix a missing check and reference count leak (git-fixes).\n- media: ti-vpe: cal: Restrict DMA to avoid memory corruption (git-fixes).\n- media: tuner-simple: fix regression in simple_set_radio_freq (git-fixes).\n- media: usbtv: Fix refcounting mixup (git-fixes).\n- media: uvcvideo: Set media controller entity functions (git-fixes).\n- media: uvcvideo: Silence shift-out-of-bounds warning (git-fixes).\n- media: v4l2-async: Document asd allocation requirements (git-fixes).\n- mfd: mfd-core: Protect against NULL call-back function pointer (git-fixes).\n- mm, compaction: fully assume capture is not NULL in compact_zone_order() (git fixes (mm/compaction), bsc#1177681).\n- mm, compaction: make capture control handling safe wrt interrupts (git fixes (mm/compaction), bsc#1177681).\n- mm, slab/slub: move and improve cache_from_obj() (mm/slub bsc#1165692).\n- mm, slab/slub: improve error reporting and overhead of cache_from_obj() (mm/slub bsc#1165692).\n- mm, slub: extend checks guarded by slub_debug static key (mm/slub bsc#1165692).\n- mm, slub: extend slub_debug syntax for multiple blocks (mm/slub bsc#1165692).\n- mm, slub: introduce kmem_cache_debug_flags() (mm/slub bsc#1165692).\n- mm, slub: introduce static key for slub_debug() (mm/slub bsc#1165692).\n- mm, slub: make reclaim_account attribute read-only (mm/slub bsc#1165692).\n- mm, slub: make remaining slub_debug related attributes read-only (mm/slub bsc#1165692).\n- mm, slub: make some slub_debug related attributes read-only (mm/slub bsc#1165692).\n- mm, slub: remove runtime allocation order changes (mm/slub bsc#1165692).\n- mm, slub: restore initial kmem_cache flags (mm/slub bsc#1165692).\n- mm/debug.c: always print flags in dump_page() (git fixes (mm/debug)).\n- mm/memcontrol.c: lost css_put in memcg_expand_shrinker_maps() (bsc#1177694).\n- mm/migrate.c: also overwrite error when it is bigger than zero (git fixes (mm/move_pages), bsc#1177683).\n- mm/pagealloc.c: call touch_nmi_watchdog() on max order boundaries in deferred init (git fixes (mm/init), bsc#1177697).\n- mm: call cond_resched() from deferred_init_memmap() (git fixes (mm/init), bsc#1177697).\n- mm: initialize deferred pages with interrupts enabled (git fixes (mm/init), bsc#1177697).\n- mm: move_pages: report the number of non-attempted pages (git fixes (mm/move_pages), bsc#1177683).\n- mm: move_pages: return valid node id in status if the page is already on the target node (git fixes (mm/move_pages), bsc#1177683).\n- mmc: core: Rework wp-gpio handling (git-fixes).\n- mmc: core: do not set limits.discard_granularity as 0 (git-fixes).\n- mmc: sdhci-acpi: AMDI0040: Set SDHCI_QUIRK2_PRESET_VALUE_BROKEN (git-fixes).\n- mmc: sdhci: Add LTR support for some Intel BYT based controllers (git-fixes).\n- mmc: sdhci: Workaround broken command queuing on Intel GLK based IRBIS models (git-fixes).\n- mt76: add missing locking around ampdu action (git-fixes).\n- mt76: clear skb pointers from rx aggregation reorder buffer during cleanup (git-fixes).\n- mt76: do not use devm API for led classdev (git-fixes).\n- mt76: fix LED link time failure (git-fixes).\n- mt76: fix handling full tx queues in mt76_dma_tx_queue_skb_raw (git-fixes).\n- mtd: cfi_cmdset_0002: do not free cfi-\u003ecfiq in error path of cfi_amdstd_setup() (git-fixes).\n- mtd: rawnand: gpmi: Fix runtime PM imbalance on error (git-fixes).\n- mtd: rawnand: omap_elm: Fix runtime PM imbalance on error (git-fixes).\n- net: phy: realtek: fix rtl8211e rx/tx delay config (git-fixes).\n- nfs: Fix security label length not being reset (bsc#1176381).\n- nfs: ensure correct writeback errors are returned on close() (git-fixes).\n- nfs: nfs_file_write() should check for writeback errors (git-fixes).\n- nfsd4: fix NULL dereference in nfsd/clients display code (git-fixes).\n- nvme-multipath: retry commands for dying queues (bsc#1171688).\n- pNFS/flexfiles: Ensure we initialise the mirror bsizes correctly on read (git-fixes).\n- phy: ti: am654: Fix a leak in serdes_am654_probe() (git-fixes).\n- pinctrl: bcm: fix kconfig dependency warning when !GPIOLIB (git-fixes).\n- pinctrl: mvebu: Fix i2c sda definition for 98DX3236 (git-fixes).\n- platform/x86: fix kconfig dependency warning for FUJITSU_LAPTOP (git-fixes).\n- platform/x86: fix kconfig dependency warning for LG_LAPTOP (git-fixes).\n- platform/x86: intel-vbtn: Switch to an allow-list for SW_TABLET_MODE reporting (bsc#1175599).\n- platform/x86: intel_pmc_core: do not create a static struct device (git-fixes).\n- platform/x86: thinkpad_acpi: initialize tp_nvram_state variable (git-fixes).\n- platform/x86: thinkpad_acpi: re-initialize ACPI buffer size when reuse (git-fixes).\n- power: supply: max17040: Correct voltage reading (git-fixes).\n- powerpc/dma: Fix dma_map_ops::get_required_mask (bsc#1065729).\n- qla2xxx: Return EBUSY on fcport deletion (bsc#1171688).\n- r8169: fix data corruption issue on RTL8402 (bsc#1174098).\n- rbd-add-rbd_img_fill_cmp_and_write_from_bvecs.patch: (bsc#1177090).\n- rbd-add-support-for-COMPARE_AND_WRITE-CMPEXT.patch: (bsc#1177090).\n- regulator: axp20x: fix LDO2/4 description (git-fixes).\n- regulator: resolve supply after creating regulator (git-fixes).\n- rename Other drivers / Intel IOMMU subsection to IOMMU\n- rtc: ds1374: fix possible race condition (git-fixes).\n- rtc: sa1100: fix possible race condition (git-fixes).\n- s390/pci: Mark all VFs as not implementing PCI_COMMAND_MEMORY (bsc#1176979).\n- sched/fair: Ignore cache hotness for SMT migration (bnc#1155798 (CPU scheduler functional and performance backports)).\n- sched/fair: Use dst group while checking imbalance for NUMA balancer (bnc#1155798 (CPU scheduler functional and performance backports)).\n- sched/numa: Avoid creating large imbalances at task creation time (bnc#1176588).\n- sched/numa: Check numa balancing information only when enabled (bnc#1176588).\n- sched/numa: Use runnable_avg to classify node (bnc#1155798 (CPU scheduler functional and performance backports)).\n- scsi: iscsi: iscsi_tcp: Avoid holding spinlock while calling getpeername() (bsc#1177258).\n- scsi: qla2xxx: Add IOCB resource tracking (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Add SLER and PI control support (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Add rport fields in debugfs (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Allow dev_loss_tmo setting for FC-NVMe devices (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Correct the check for sscanf() return value (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix I/O errors during LIP reset tests (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix I/O failures during remote port toggle testing (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix MPI reset needed message (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix buffer-buffer credit extraction error (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix crash on session cleanup with unload (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix inconsistent format argument type in qla_dbg.c (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix inconsistent format argument type in tcm_qla2xxx.c (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix memory size truncation (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix point-to-point (N2N) device discovery issue (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix reset of MPI firmware (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Honor status qualifier in FCP_RSP per spec (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Make tgt_port_database available in initiator mode (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Performance tweak (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Reduce duplicate code in reporting speed (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Remove unneeded variable \u0027rval\u0027 (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Setup debugfs entries for remote ports (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Update version to 10.02.00.102-k (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Update version to 10.02.00.103-k (bsc#1171688 bsc#1174003).\n- serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout (git-fixes).\n- serial: 8250_omap: Fix sleeping function called from invalid context during probe (git-fixes).\n- serial: 8250_port: Do not service RX FIFO if throttled (git-fixes).\n- serial: uartps: Wait for tx_empty in console setup (git-fixes).\n- spi: dw-pci: free previously allocated IRQs if desc-\u003esetup() fails (git-fixes).\n- spi: fsl-espi: Only process interrupts for expected events (git-fixes).\n- spi: omap2-mcspi: Improve performance waiting for CHSTAT (git-fixes).\n- spi: sprd: Release DMA channel also on probe deferral (git-fixes).\n- spi: stm32: Rate-limit the \u0027Communication suspended\u0027 message (git-fixes).\n- staging:r8188eu: avoid skb_clone for amsdu to msdu conversion (git-fixes).\n- svcrdma: Fix page leak in svc_rdma_recv_read_chunk() (git-fixes).\n- target-compare-and-write-backend-driver-sense-handli.patch: (bsc#1177719).\n- target-rbd-add-WRITE-SAME-support.patch: (bsc#1177090).\n- target-rbd-add-emulate_legacy_capacity-dev-attribute.patch: (bsc#1177109).\n- target-rbd-conditionally-fix-off-by-one-bug-in-get_b.patch: (bsc#1177109).\n- target-rbd-detect-stripe_unit-SCSI-block-size-misali.patch: (bsc#1177090).\n- target-rbd-fix-unmap-discard-block-size-conversion.patch: (bsc#1177271).\n- target-rbd-fix-unmap-handling-with-unmap_zeroes_data.patch: (bsc#1177271).\n- target-rbd-support-COMPARE_AND_WRITE.patch: (bsc#1177090).\n- thermal: rcar_thermal: Handle probe error gracefully (git-fixes).\n- usb: dwc3: Increase timeout for CmdAct cleared by device controller (git-fixes).\n- vfio/pci: Decouple PCI_COMMAND_MEMORY bit checks from is_virtfn (bsc#1176979).\n- virtio-net: do not disable guest csum when disable LRO (git-fixes).\n- vmxnet3: fix cksum offload issues for non-udp tunnels (git-fixes).\n- wlcore: fix runtime pm imbalance in wl1271_tx_work (git-fixes).\n- wlcore: fix runtime pm imbalance in wlcore_regdomain_config (git-fixes).\n- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10 compiled kernels (bsc#1176907).\n- xen/events: do not use chip_data for legacy IRQs (bsc#1065600).\n- xprtrdma: fix incorrect header size calculations (git-fixes).\n- yam: fix possible memory leak in yam_init_driver (git-fixes).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2020-1698",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_1698-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2020:1698-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ODIY42JEXH7RGWFLZMCA4RHYSA2XEWTJ/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2020:1698-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ODIY42JEXH7RGWFLZMCA4RHYSA2XEWTJ/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1065600",
        "url": "https://bugzilla.suse.com/1065600"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1065729",
        "url": "https://bugzilla.suse.com/1065729"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155798",
        "url": "https://bugzilla.suse.com/1155798"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1165692",
        "url": "https://bugzilla.suse.com/1165692"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1168468",
        "url": "https://bugzilla.suse.com/1168468"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171675",
        "url": "https://bugzilla.suse.com/1171675"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171688",
        "url": "https://bugzilla.suse.com/1171688"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174003",
        "url": "https://bugzilla.suse.com/1174003"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174098",
        "url": "https://bugzilla.suse.com/1174098"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175599",
        "url": "https://bugzilla.suse.com/1175599"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175621",
        "url": "https://bugzilla.suse.com/1175621"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175718",
        "url": "https://bugzilla.suse.com/1175718"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175807",
        "url": "https://bugzilla.suse.com/1175807"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176019",
        "url": "https://bugzilla.suse.com/1176019"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176381",
        "url": "https://bugzilla.suse.com/1176381"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176400",
        "url": "https://bugzilla.suse.com/1176400"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176588",
        "url": "https://bugzilla.suse.com/1176588"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176907",
        "url": "https://bugzilla.suse.com/1176907"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176979",
        "url": "https://bugzilla.suse.com/1176979"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177090",
        "url": "https://bugzilla.suse.com/1177090"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177109",
        "url": "https://bugzilla.suse.com/1177109"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177121",
        "url": "https://bugzilla.suse.com/1177121"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177193",
        "url": "https://bugzilla.suse.com/1177193"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177194",
        "url": "https://bugzilla.suse.com/1177194"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177206",
        "url": "https://bugzilla.suse.com/1177206"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177258",
        "url": "https://bugzilla.suse.com/1177258"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177271",
        "url": "https://bugzilla.suse.com/1177271"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177283",
        "url": "https://bugzilla.suse.com/1177283"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177284",
        "url": "https://bugzilla.suse.com/1177284"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177285",
        "url": "https://bugzilla.suse.com/1177285"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177286",
        "url": "https://bugzilla.suse.com/1177286"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177297",
        "url": "https://bugzilla.suse.com/1177297"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177384",
        "url": "https://bugzilla.suse.com/1177384"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177511",
        "url": "https://bugzilla.suse.com/1177511"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177617",
        "url": "https://bugzilla.suse.com/1177617"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177681",
        "url": "https://bugzilla.suse.com/1177681"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177683",
        "url": "https://bugzilla.suse.com/1177683"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177687",
        "url": "https://bugzilla.suse.com/1177687"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177694",
        "url": "https://bugzilla.suse.com/1177694"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177697",
        "url": "https://bugzilla.suse.com/1177697"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177719",
        "url": "https://bugzilla.suse.com/1177719"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177724",
        "url": "https://bugzilla.suse.com/1177724"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177725",
        "url": "https://bugzilla.suse.com/1177725"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177726",
        "url": "https://bugzilla.suse.com/1177726"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 802154",
        "url": "https://bugzilla.suse.com/802154"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 954532",
        "url": "https://bugzilla.suse.com/954532"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-12351 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-12351/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-12352 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-12352/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-24490 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-24490/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-25212 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-25212/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-25641 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-25641/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-25643 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-25643/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-25645 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-25645/"
      }
    ],
    "title": "Security update for the Linux Kernel",
    "tracking": {
      "current_release_date": "2020-10-19T16:23:34Z",
      "generator": {
        "date": "2020-10-19T16:23:34Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2020:1698-1",
      "initial_release_date": "2020-10-19T16:23:34Z",
      "revision_history": [
        {
          "date": "2020-10-19T16:23:34Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-5.3.18-lp152.47.2.noarch",
                "product": {
                  "name": "kernel-devel-5.3.18-lp152.47.2.noarch",
                  "product_id": "kernel-devel-5.3.18-lp152.47.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-docs-5.3.18-lp152.47.1.noarch",
                "product": {
                  "name": "kernel-docs-5.3.18-lp152.47.1.noarch",
                  "product_id": "kernel-docs-5.3.18-lp152.47.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-docs-html-5.3.18-lp152.47.1.noarch",
                "product": {
                  "name": "kernel-docs-html-5.3.18-lp152.47.1.noarch",
                  "product_id": "kernel-docs-html-5.3.18-lp152.47.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-5.3.18-lp152.47.2.noarch",
                "product": {
                  "name": "kernel-macros-5.3.18-lp152.47.2.noarch",
                  "product_id": "kernel-macros-5.3.18-lp152.47.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-5.3.18-lp152.47.2.noarch",
                "product": {
                  "name": "kernel-source-5.3.18-lp152.47.2.noarch",
                  "product_id": "kernel-source-5.3.18-lp152.47.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
                "product": {
                  "name": "kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
                  "product_id": "kernel-source-vanilla-5.3.18-lp152.47.2.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-debug-5.3.18-lp152.47.2.x86_64",
                "product": {
                  "name": "kernel-debug-5.3.18-lp152.47.2.x86_64",
                  "product_id": "kernel-debug-5.3.18-lp152.47.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
                "product": {
                  "name": "kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
                  "product_id": "kernel-debug-devel-5.3.18-lp152.47.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-5.3.18-lp152.47.2.x86_64",
                "product": {
                  "name": "kernel-default-5.3.18-lp152.47.2.x86_64",
                  "product_id": "kernel-default-5.3.18-lp152.47.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-devel-5.3.18-lp152.47.2.x86_64",
                "product": {
                  "name": "kernel-default-devel-5.3.18-lp152.47.2.x86_64",
                  "product_id": "kernel-default-devel-5.3.18-lp152.47.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
                  "product_id": "kernel-kvmsmall-5.3.18-lp152.47.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
                  "product_id": "kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-build-5.3.18-lp152.47.2.x86_64",
                "product": {
                  "name": "kernel-obs-build-5.3.18-lp152.47.2.x86_64",
                  "product_id": "kernel-obs-build-5.3.18-lp152.47.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
                "product": {
                  "name": "kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
                  "product_id": "kernel-obs-qa-5.3.18-lp152.47.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-preempt-5.3.18-lp152.47.2.x86_64",
                "product": {
                  "name": "kernel-preempt-5.3.18-lp152.47.2.x86_64",
                  "product_id": "kernel-preempt-5.3.18-lp152.47.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
                "product": {
                  "name": "kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
                  "product_id": "kernel-preempt-devel-5.3.18-lp152.47.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-syms-5.3.18-lp152.47.1.x86_64",
                "product": {
                  "name": "kernel-syms-5.3.18-lp152.47.1.x86_64",
                  "product_id": "kernel-syms-5.3.18-lp152.47.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.2",
                "product": {
                  "name": "openSUSE Leap 15.2",
                  "product_id": "openSUSE Leap 15.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-5.3.18-lp152.47.2.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64"
        },
        "product_reference": "kernel-debug-5.3.18-lp152.47.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-5.3.18-lp152.47.2.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64"
        },
        "product_reference": "kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-5.3.18-lp152.47.2.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64"
        },
        "product_reference": "kernel-default-5.3.18-lp152.47.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-devel-5.3.18-lp152.47.2.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64"
        },
        "product_reference": "kernel-default-devel-5.3.18-lp152.47.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-5.3.18-lp152.47.2.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch"
        },
        "product_reference": "kernel-devel-5.3.18-lp152.47.2.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-docs-5.3.18-lp152.47.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch"
        },
        "product_reference": "kernel-docs-5.3.18-lp152.47.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-docs-html-5.3.18-lp152.47.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch"
        },
        "product_reference": "kernel-docs-html-5.3.18-lp152.47.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-5.3.18-lp152.47.2.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64"
        },
        "product_reference": "kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64"
        },
        "product_reference": "kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-5.3.18-lp152.47.2.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch"
        },
        "product_reference": "kernel-macros-5.3.18-lp152.47.2.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-obs-build-5.3.18-lp152.47.2.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64"
        },
        "product_reference": "kernel-obs-build-5.3.18-lp152.47.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-obs-qa-5.3.18-lp152.47.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64"
        },
        "product_reference": "kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-preempt-5.3.18-lp152.47.2.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64"
        },
        "product_reference": "kernel-preempt-5.3.18-lp152.47.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-preempt-devel-5.3.18-lp152.47.2.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64"
        },
        "product_reference": "kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-5.3.18-lp152.47.2.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch"
        },
        "product_reference": "kernel-source-5.3.18-lp152.47.2.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-5.3.18-lp152.47.2.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch"
        },
        "product_reference": "kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-syms-5.3.18-lp152.47.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
        },
        "product_reference": "kernel-syms-5.3.18-lp152.47.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-12351",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-12351"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-12351",
          "url": "https://www.suse.com/security/cve/CVE-2020-12351"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177724 for CVE-2020-12351",
          "url": "https://bugzilla.suse.com/1177724"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177729 for CVE-2020-12351",
          "url": "https://bugzilla.suse.com/1177729"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178397 for CVE-2020-12351",
          "url": "https://bugzilla.suse.com/1178397"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-10-19T16:23:34Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-12351"
    },
    {
      "cve": "CVE-2020-12352",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-12352"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-12352",
          "url": "https://www.suse.com/security/cve/CVE-2020-12352"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177725 for CVE-2020-12352",
          "url": "https://bugzilla.suse.com/1177725"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178398 for CVE-2020-12352",
          "url": "https://bugzilla.suse.com/1178398"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-10-19T16:23:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-12352"
    },
    {
      "cve": "CVE-2020-24490",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-24490"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access. This affects all Linux kernel versions that support BlueZ.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-24490",
          "url": "https://www.suse.com/security/cve/CVE-2020-24490"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177726 for CVE-2020-24490",
          "url": "https://bugzilla.suse.com/1177726"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177727 for CVE-2020-24490",
          "url": "https://bugzilla.suse.com/1177727"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-10-19T16:23:34Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-24490"
    },
    {
      "cve": "CVE-2020-25212",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-25212"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-25212",
          "url": "https://www.suse.com/security/cve/CVE-2020-25212"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176381 for CVE-2020-25212",
          "url": "https://bugzilla.suse.com/1176381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176382 for CVE-2020-25212",
          "url": "https://bugzilla.suse.com/1176382"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177027 for CVE-2020-25212",
          "url": "https://bugzilla.suse.com/1177027"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-10-19T16:23:34Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-25212"
    },
    {
      "cve": "CVE-2020-25641",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-25641"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel\u0027s implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loop, causing a denial of service. This flaw allows a local attacker with basic privileges to issue requests to a block device, resulting in a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-25641",
          "url": "https://www.suse.com/security/cve/CVE-2020-25641"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177121 for CVE-2020-25641",
          "url": "https://bugzilla.suse.com/1177121"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-10-19T16:23:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-25641"
    },
    {
      "cve": "CVE-2020-25643",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-25643"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-25643",
          "url": "https://www.suse.com/security/cve/CVE-2020-25643"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177206 for CVE-2020-25643",
          "url": "https://bugzilla.suse.com/1177206"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177226 for CVE-2020-25643",
          "url": "https://bugzilla.suse.com/1177226"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-10-19T16:23:34Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-25643"
    },
    {
      "cve": "CVE-2020-25645",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-25645"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-25645",
          "url": "https://www.suse.com/security/cve/CVE-2020-25645"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177511 for CVE-2020-25645",
          "url": "https://bugzilla.suse.com/1177511"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177513 for CVE-2020-25645",
          "url": "https://bugzilla.suse.com/1177513"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.47.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.47.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.47.2.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.47.2.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.47.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-10-19T16:23:34Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-25645"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\n\nThe openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2020-12351: Fixed a type confusion while processing AMP packets aka \u0027BleedingTooth\u0027 aka \u0027BadKarma\u0027 (bsc#1177724).\n- CVE-2020-24490: Fixed a heap buffer overflow when processing extended advertising report events aka \u0027BleedingTooth\u0027 aka \u0027BadVibes\u0027 (bsc#1177726).\n- CVE-2020-12352: Fixed an information leak when processing certain AMP packets aka \u0027BleedingTooth\u0027 aka \u0027BadChoice\u0027 (bsc#1177725).\n- CVE-2020-25212: A TOCTOU mismatch in the NFS client code in the Linux kernel could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452 (bnc#1176381).\n- CVE-2020-25645: Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality (bnc#1177511).\n- CVE-2020-25643: Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability (bnc#1177206).\n- CVE-2020-25641: A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loop, causing a denial of service. This flaw allowed a local attacker with basic privileges to issue requests to a block device, resulting in a denial of service. The highest threat from this vulnerability is to system availability (bnc#1177121).\n- CVE-2020-25704: Fixed a memory leak in perf_event_parse_addr_filter()  (bsc#1178393).\n- CVE-2020-25668: Make FONTX ioctl use the tty pointer they were actually passed (bsc#1178123).\n- CVE-2020-25656: Extend func_buf_lock to readers (bnc#1177766).\n- CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel could be used by local attackers to corrupt memory, cause a NULL pointer dereference, or possibly have unspecified other impact, aka CID-17743798d812 (bnc#1176485).\n- CVE-2020-14351: Fixed race in the perf_mmap_close() function  (bsc#1177086).\n- CVE-2020-8694: Restrict energy meter to root access (bsc#1170415).\n- CVE-2020-16120: Check permission to open real file in overlayfs (bsc#1177470).\n- CVE-2020-25705: A ICMP global rate limiting side-channel was removed which could lead to e.g. the SADDNS attack (bsc#1175721)\n\nThe following non-security bugs were fixed:\n\n- 9p: Fix memory leak in v9fs_mount (git-fixes).\n- ACPI: Always build evged in (git-fixes).\n- ACPI: button: fix handling lid state changes when input device closed (git-fixes).\n- ACPI: configfs: Add missing config_item_put() to fix refcount leak (git-fixes).\n- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (git-fixes).\n- ACPI: debug: do not allow debugging when ACPI is disabled (git-fixes).\n- ACPI: EC: Reference count query handlers under lock (git-fixes).\n- ACPI / extlog: Check for RDMSR failure (git-fixes).\n- ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).\n- act_ife: load meta modules before tcf_idr_check_alloc() (networking-stable-20_09_24).\n- Add CONFIG_CHECK_CODESIGN_EKU\n- airo: Fix read overflows sending packets (git-fixes).\n- ALSA: ac97: (cosmetic) align argument names (git-fixes).\n- ALSA: aoa: i2sbus: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes).\n- ALSA: asihpi: fix spellint typo in comments (git-fixes).\n- ALSA: atmel: ac97: clarify operator precedence (git-fixes).\n- ALSA: bebob: potential info leak in hwdep_read() (git-fixes).\n- ALSA: compress_offload: remove redundant initialization (git-fixes).\n- ALSA: core: init: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes).\n- ALSA: core: pcm: simplify locking for timers (git-fixes).\n- ALSA: core: timer: clarify operator precedence (git-fixes).\n- ALSA: core: timer: remove redundant assignment (git-fixes).\n- ALSA: ctl: Workaround for lockdep warning wrt card-\u003ectl_files_rwlock (git-fixes).\n- ALSA: fireworks: use semicolons rather than commas to separate statements (git-fixes).\n- ALSA: fix kernel-doc markups (git-fixes).\n- ALSA: hda: auto_parser: remove shadowed variable declaration (git-fixes).\n- ALSA: hda: (cosmetic) align function parameters (git-fixes).\n- ALSA: hda - Do not register a cb func if it is registered already (git-fixes).\n- ALSA: hda - Fix the return value if cb func is already registered (git-fixes).\n- ALSA: hda/hdmi: fix incorrect locking in hdmi_pcm_close (git-fixes).\n- ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (git-fixes).\n- ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7 (git-fixes).\n- ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (git-fixes).\n- ALSA: hda/realtek - Enable headphone for ASUS TM420 (git-fixes).\n- ALSA: hda/realtek - Fixed HP headset Mic can\u0027t be detected (git-fixes).\n- ALSA: hda/realtek - set mic to auto detect on a HP AIO machine (git-fixes).\n- ALSA: hda/realtek - The front Mic on a HP machine does not work (git-fixes).\n- ALSA: hda: use semicolons rather than commas to separate statements (git-fixes).\n- ALSA: hdspm: Fix typo arbitary (git-fixes).\n- ALSA: mixart: Correct comment wrt obsoleted tasklet usage (git-fixes).\n- ALSA: portman2x4: fix repeated word \u0027if\u0027 (git-fixes).\n- ALSA: rawmidi: (cosmetic) align function parameters (git-fixes).\n- ALSA: seq: oss: Avoid mutex lock for a long-time ioctl (git-fixes).\n- ALSA: sparc: dbri: fix repeated word \u0027the\u0027 (git-fixes).\n- ALSA: usb-audio: Add implicit feedback quirk for MODX (git-fixes).\n- ALSA: usb-audio: Add implicit feedback quirk for Qu-16 (git-fixes).\n- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2 (git-fixes).\n- ALSA: usb-audio: Add mixer support for Pioneer DJ DJM-250MK2 (git-fixes).\n- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas devices (git-fixes).\n- ALSA: usb-audio: endpoint.c: fix repeated word \u0027there\u0027 (git-fixes).\n- ALSA: usb-audio: fix spelling mistake \u0027Frequence\u0027 -\u003e \u0027Frequency\u0027 (git-fixes).\n- ALSA: usb-audio: Line6 Pod Go interface requires static clock rate quirk (git-fixes).\n- ALSA: usb: scarless_gen2: fix endianness issue (git-fixes).\n- ALSA: vx: vx_core: clarify operator precedence (git-fixes).\n- ALSA: vx: vx_pcm: remove redundant assignment (git-fixes).\n- ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter (git-fixes).\n- arm64: Enable PCI write-combine resources under sysfs (bsc#1175807).\n- ASoC: codecs: wcd9335: Set digital gain range correctly (git-fixes).\n- ASoC: cs42l51: manage mclk shutdown delay (git-fixes).\n- ASoC: fsl: imx-es8328: add missing put_device() call in imx_es8328_probe() (git-fixes).\n- ASoC: fsl_sai: Instantiate snd_soc_dai_driver (git-fixes).\n- ASoC: img-i2s-out: Fix runtime PM imbalance on error (git-fixes).\n- ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN Converter9 2-in-1 (git-fixes).\n- ASoC: Intel: kbl_rt5663_max98927: Fix kabylake_ssp_fixup function (git-fixes).\n- ASoC: kirkwood: fix IRQ error handling (git-fixes).\n- ASoC: qcom: lpass-cpu: fix concurrency issue (git-fixes).\n- ASoC: qcom: lpass-platform: fix memory leak (git-fixes).\n- ASoC: qcom: sdm845: set driver name correctly (git-fixes).\n- ASoC: sun50i-codec-analog: Fix duplicate use of ADC enable bits (git-fixes).\n- ASoC: tlv320aic32x4: Fix bdiv clock rate derivation (git-fixes).\n- ASoC: wm8994: Ensure the device is resumed in wm89xx_mic_detect functions (git-fixes).\n- ASoC: wm8994: Skip setting of the WM8994_MICBIAS register for WM1811 (git-fixes).\n- ata: ahci: mvebu: Make SATA PHY optional for Armada 3720 (git-fixes).\n- ata: sata_rcar: Fix DMA boundary mask (git-fixes).\n- ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() (git-fixes).\n- ath10k: fix array out-of-bounds access (git-fixes).\n- ath10k: fix memory leak for tpc_stats_final (git-fixes).\n- ath10k: Fix the size used in a \u0027dma_free_coherent()\u0027 call in an error handling path (git-fixes).\n- ath10k: fix VHT NSS calculation when STBC is enabled (git-fixes).\n- ath10k: provide survey info as accumulated data (git-fixes).\n- ath10k: start recovery process when payload length exceeds max htc length for sdio (git-fixes).\n- ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read (git-fixes).\n- ath6kl: prevent potential array overflow in ath6kl_add_new_sta() (git-fixes).\n- ath6kl: wmi: prevent a shift wrapping bug in ath6kl_wmi_delete_pstream_cmd() (git-fixes).\n- ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb() (git-fixes).\n- ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() (git-fixes).\n- ath9k_htc: Use appropriate rs_datalen type (git-fixes).\n- backlight: sky81452-backlight: Fix refcount imbalance on error (git-fixes).\n- blk-mq: order adding requests to hctx-\u003edispatch and checking SCHED_RESTART (bsc#1177750).\n- block: ensure bdi-\u003eio_pages is always initialized (bsc#1177749).\n- block: Fix page_is_mergeable() for compound pages (bsc#1177814).\n- block: Set same_page to false in __bio_try_merge_page if ret is false (git-fixes).\n- Bluetooth: btusb: Fix memleak in btusb_mtk_submit_wmt_recv_urb (git-fixes).\n- Bluetooth: Fix refcount use-after-free issue (git-fixes).\n- Bluetooth: guard against controllers sending zero\u0027d events (git-fixes).\n- Bluetooth: Handle Inquiry Cancel error after Inquiry Complete (git-fixes).\n- Bluetooth: hci_uart: Cancel init work before unregistering (git-fixes).\n- Bluetooth: L2CAP: handle l2cap config request during open state (git-fixes).\n- Bluetooth: MGMT: Fix not checking if BT_HS is enabled (git-fixes).\n- Bluetooth: Only mark socket zapped after unlocking (git-fixes).\n- Bluetooth: prefetch channel before killing sock (git-fixes).\n- bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex (git-fixes).\n- bonding: show saner speed for broadcast mode (networking-stable-20_08_24).\n- brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach (git-fixes).\n- brcmfmac: check ndev pointer (git-fixes).\n- brcmfmac: Fix double freeing in the fmac usb data path (git-fixes).\n- brcmsmac: fix memory leak in wlc_phy_attach_lcnphy (git-fixes).\n- btrfs: Account for merged patches upstream Move below patches to sorted section.\n- btrfs: add owner and fs_info to alloc_state io_tree (bsc#1177854).\n- btrfs: allocate scrub workqueues outside of locks (bsc#1178183).\n- btrfs: block-group: do not set the wrong READA flag for btrfs_read_block_groups() (bsc#1176019).\n- btrfs: block-group: fix free-space bitmap threshold (bsc#1176019).\n- btrfs: block-group: refactor how we delete one block group item (bsc#1176019).\n- btrfs: block-group: refactor how we insert a block group item (bsc#1176019).\n- btrfs: block-group: refactor how we read one block group item (bsc#1176019).\n- btrfs: block-group: rename write_one_cache_group() (bsc#1176019).\n- btrfs: check the right error variable in btrfs_del_dir_entries_in_log (bsc#1177687).\n- btrfs: cleanup cow block on error (bsc#1178584).\n- btrfs: do not force read-only after error in drop snapshot (bsc#1176354).\n- btrfs: do not set the full sync flag on the inode during page release (bsc#1177687).\n- btrfs: do not take an extra root ref at allocation time (bsc#1176019).\n- btrfs: drop logs when we\u0027ve aborted a transaction (bsc#1176019).\n- btrfs: drop path before adding new uuid tree entry (bsc#1178176).\n- btrfs: fix a race between scrub and block group removal/allocation (bsc#1176019).\n- Btrfs: fix crash during unmount due to race with delayed inode workers (bsc#1176019).\n- btrfs: fix filesystem corruption after a device replace (bsc#1178395).\n- btrfs: fix NULL pointer dereference after failure to create snapshot (bsc#1178190).\n- btrfs: fix overflow when copying corrupt csums for a message (bsc#1178191).\n- btrfs: fix race between page release and a fast fsync (bsc#1177687).\n- btrfs: fix space cache memory leak after transaction abort (bsc#1178173).\n- btrfs: free block groups after free\u0027ing fs trees (bsc#1176019).\n- btrfs: hold a ref on the root on the dead roots list (bsc#1176019).\n- btrfs: kill the subvol_srcu (bsc#1176019).\n- btrfs: make btrfs_cleanup_fs_roots use the radix tree lock (bsc#1176019).\n- btrfs: make inodes hold a ref on their roots (bsc#1176019).\n- btrfs: make the extent buffer leak check per fs info (bsc#1176019).\n- btrfs: move btrfs_rm_dev_replace_free_srcdev outside of all locks (bsc#1178395).\n- btrfs: move btrfs_scratch_superblocks into btrfs_dev_replace_finishing (bsc#1178395).\n- btrfs: move ino_cache_inode dropping out of btrfs_free_fs_root (bsc#1176019).\n- btrfs: move the block group freeze/unfreeze helpers into block-group.c (bsc#1176019).\n- btrfs: move the root freeing stuff into btrfs_put_root (bsc#1176019).\n- btrfs: only commit delayed items at fsync if we are logging a directory (bsc#1177687).\n- btrfs: only commit the delayed inode when doing a full fsync (bsc#1177687).\n- btrfs: qgroup: fix qgroup meta rsv leak for subvolume operations (bsc#1177856).\n- btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode (bsc#1177855).\n- btrfs: reduce contention on log trees when logging checksums (bsc#1177687).\n- btrfs: release old extent maps during page release (bsc#1177687).\n- btrfs: remove no longer necessary chunk mutex locking cases (bsc#1176019).\n- btrfs: remove no longer needed use of log_writers for the log root tree (bsc#1177687).\n- btrfs: rename member \u0027trimming\u0027 of block group to a more generic name (bsc#1176019).\n- btrfs: reschedule if necessary when logging directory items (bsc#1178585).\n- btrfs: scrub, only lookup for csums if we are dealing with a data extent (bsc#1176019).\n- btrfs: send, orphanize first all conflicting inodes when processing references (bsc#1178579).\n- btrfs: send, recompute reference path after orphanization of a directory (bsc#1178581).\n- btrfs: set the correct lockdep class for new nodes (bsc#1178184).\n- btrfs: set the lockdep class for log tree extent buffers (bsc#1178186).\n- btrfs: stop incremening log_batch for the log root tree when syncing log (bsc#1177687).\n- btrfs: tree-checker: fix false alert caused by legacy btrfs root item (bsc#1177861).\n- bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal (git-fixes).\n- can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() (git-fixes).\n- can: c_can: reg_map_{c,d}_can: mark as __maybe_unused (git-fixes).\n- can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames (git-fixes).\n- can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context (git-fixes).\n- can: flexcan: flexcan_chip_stop(): add error handling and propagate error value (git-fixes).\n- can: flexcan: flexcan_remove(): disable wakeup completely (git-fixes).\n- can: flexcan: remove ack_grp and ack_bit handling from driver (git-fixes).\n- can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for LS1021A (git-fixes).\n- can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on (git-fixes).\n- can: peak_usb: add range checking in decode operations (git-fixes).\n- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping (git-fixes).\n- can: rx-offload: do not call kfree_skb() from IRQ context (git-fixes).\n- can: softing: softing_card_shutdown(): add braces around empty body in an \u0027if\u0027 statement (git-fixes).\n- ceph: promote to unsigned long long before shifting (bsc#1178175).\n- clk: at91: clk-main: update key before writing AT91_CKGR_MOR (git-fixes).\n- clk: at91: remove the checking of parent_name (git-fixes).\n- clk: bcm2835: add missing release if devm_clk_hw_register fails (git-fixes).\n- clk: imx8mq: Fix usdhc parents order (git-fixes).\n- clk: keystone: sci-clk: fix parsing assigned-clock data during probe (git-fixes).\n- clk: meson: g12a: mark fclk_div2 as critical (git-fixes).\n- clk: qcom: gcc-sdm660: Fix wrong parent_map (git-fixes).\n- clk: samsung: exynos4: mark \u0027chipid\u0027 clock as CLK_IGNORE_UNUSED (git-fixes).\n- clk: socfpga: stratix10: fix the divider for the emac_ptp_free_clk (git-fixes).\n- clk: tegra: Always program PLL_E when enabled (git-fixes).\n- clk/ti/adpll: allocate room for terminating null (git-fixes).\n- clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init() (git-fixes).\n- clocksource/drivers/timer-gx6605s: Fixup counter reload (git-fixes).\n- cpuidle: Poll for a minimum of 30ns and poll for a tick if lower c-states are disabled (bnc#1176588).\n- create Storage / NVMe subsection\n- crypto: algif_aead - Do not set MAY_BACKLOG on the async path (git-fixes).\n- crypto: algif_skcipher - EBUSY on aio should be an error (git-fixes).\n- crypto: bcm - Verify GCM/CCM key length in setkey (git-fixes).\n- crypto: ccp - fix error handling (git-fixes).\n- crypto: dh - check validity of Z before export (bsc#1175718).\n- crypto: dh - SP800-56A rev 3 local public key validation (bsc#1175718).\n- crypto: ecc - SP800-56A rev 3 local public key validation (bsc#1175718).\n- crypto: ecdh - check validity of Z before export (bsc#1175718).\n- crypto: ixp4xx - Fix the size used in a \u0027dma_free_coherent()\u0027 call (git-fixes).\n- crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc() (git-fixes).\n- crypto: omap-sham - fix digcnt register handling with export/import (git-fixes).\n- crypto: picoxcell - Fix potential race condition bug (git-fixes).\n- crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA (git-fixes).\n- cxgb4: fix memory leak during module unload (networking-stable-20_09_24).\n- cxgb4: Fix offset when clearing filter byte counters (networking-stable-20_09_24).\n- cxl: Rework error message for incompatible slots (bsc#1055014 git-fixes).\n- cypto: mediatek - fix leaks in mtk_desc_ring_alloc (git-fixes).\n- dax: Fix compilation for CONFIG_DAX \u0026\u0026 !CONFIG_FS_DAX (bsc#1177817).\n- Disable module compression on SLE15 SP2 (bsc#1178307)\n- dma-direct: add missing set_memory_decrypted() for coherent mapping (bsc#1175898, ECO-2743).\n- dma-direct: always align allocation size in dma_direct_alloc_pages() (bsc#1175898, ECO-2743).\n- dma-direct: atomic allocations must come from atomic coherent pools (bsc#1175898, ECO-2743).\n- dma-direct: check return value when encrypting or decrypting memory (bsc#1175898, ECO-2743).\n- dma-direct: consolidate the error handling in dma_direct_alloc_pages (bsc#1175898, ECO-2743).\n- dma-direct: make uncached_kernel_address more general (bsc#1175898, ECO-2743).\n- dma-direct: provide function to check physical memory area validity (bsc#1175898, ECO-2743).\n- dma-direct: provide mmap and get_sgtable method overrides (bsc#1175898, ECO-2743).\n- dma-direct: re-encrypt memory if dma_direct_alloc_pages() fails (bsc#1175898, ECO-2743).\n- dma-direct: remove __dma_direct_free_pages (bsc#1175898, ECO-2743).\n- dma-direct: remove the dma_handle argument to __dma_direct_alloc_pages (bsc#1175898, ECO-2743).\n- dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status (git-fixes).\n- dmaengine: dmatest: Check list for emptiness before access its last entry (git-fixes).\n- dmaengine: dw: Activate FIFO-mode for memory peripherals only (git-fixes).\n- dmaengine: mediatek: hsdma_probe: fixed a memory leak when devm_request_irq fails (git-fixes).\n- dmaengine: stm32-dma: use vchan_terminate_vdesc() in .terminate_all (git-fixes).\n- dmaengine: stm32-mdma: use vchan_terminate_vdesc() in .terminate_all (git-fixes).\n- dmaengine: tegra-apb: Prevent race conditions on channel\u0027s freeing (git-fixes).\n- dmaengine: zynqmp_dma: fix burst length configuration (git-fixes).\n- dma-fence: Serialise signal enabling (dma_fence_enable_sw_signaling) (git-fixes).\n- dma-mapping: add a dma_can_mmap helper (bsc#1175898, ECO-2743).\n- dma-mapping: always use VM_DMA_COHERENT for generic DMA remap (bsc#1175898, ECO-2743).\n- dma-mapping: DMA_COHERENT_POOL should select GENERIC_ALLOCATOR (bsc#1175898, ECO-2743).\n- dma-mapping: make dma_atomic_pool_init self-contained (bsc#1175898, ECO-2743).\n- dma-mapping: merge the generic remapping helpers into dma-direct (bsc#1175898, ECO-2743).\n- dma-mapping: remove arch_dma_mmap_pgprot (bsc#1175898, ECO-2743).\n- dma-mapping: warn when coherent pool is depleted (bsc#1175898, ECO-2743).\n- dma-pool: add additional coherent pools to map to gfp mask (bsc#1175898, ECO-2743).\n- dma-pool: add pool sizes to debugfs (bsc#1175898, ECO-2743).\n- dma-pool: decouple DMA_REMAP from DMA_COHERENT_POOL (bsc#1175898, ECO-2743).\n- dma-pool: do not allocate pool memory from CMA (bsc#1175898, ECO-2743).\n- dma-pool: dynamically expanding atomic pools (bsc#1175898, ECO-2743).\n- dma-pool: Fix an uninitialized variable bug in atomic_pool_expand() (bsc#1175898, ECO-2743).\n- dma-pool: fix coherent pool allocations for IOMMU mappings (bsc#1175898, ECO-2743).\n- dma-pool: fix too large DMA pools on medium memory size systems (bsc#1175898, ECO-2743).\n- dma-pool: get rid of dma_in_atomic_pool() (bsc#1175898, ECO-2743).\n- dma-pool: introduce dma_guess_pool() (bsc#1175898, ECO-2743).\n- dma-pool: make sure atomic pool suits device (bsc#1175898, ECO-2743).\n- dma-pool: Only allocate from CMA when in same memory zone (bsc#1175898, ECO-2743).\n- dma-pool: scale the default DMA coherent pool size with memory capacity (bsc#1175898, ECO-2743).\n- dma-remap: separate DMA atomic pools from direct remap code (bsc#1175898, ECO-2743).\n- dm: Call proper helper to determine dax support (bsc#1177817).\n- dm/dax: Fix table reference counts (bsc#1178246).\n- docs: driver-api: remove a duplicated index entry (git-fixes).\n- drivers: char: tlclk.c: Avoid data race between init and interrupt handler (git-fixes).\n- drivers: watchdog: rdc321x_wdt: Fix race condition bugs (git-fixes).\n- drm/amdgpu: restore proper ref count in amdgpu_display_crtc_set_config (git-fixes).\n- drm/radeon: revert \u0027Prefer lower feedback dividers\u0027 (bsc#1177384).\n- drop Storage / bsc#1171688 subsection No effect on expanded tree.\n- e1000: Do not perform reset in reset_task if we are already down (git-fixes).\n- EDAC/i5100: Fix error handling order in i5100_init_one() (bsc#1152489).\n- eeprom: at25: set minimum read/write access stride to 1 (git-fixes).\n- exfat: fix name_hash computation on big endian systems (git-fixes).\n- exfat: fix overflow issue in exfat_cluster_to_sector() (git-fixes).\n- exfat: fix possible memory leak in exfat_find() (git-fixes).\n- exfat: fix use of uninitialized spinlock on error path (git-fixes).\n- exfat: fix wrong hint_stat initialization in exfat_find_dir_entry() (git-fixes).\n- exfat: fix wrong size update of stream entry by typo (git-fixes).\n- extcon: ptn5150: Fix usage of atomic GPIO with sleeping GPIO chips (git-fixes).\n- ftrace: Move RCU is watching check after recursion check (git-fixes).\n- fuse: do not ignore errors from fuse_writepages_fill() (bsc#1177193).\n- futex: Adjust absolute futex timeouts with per time namespace offset (bsc#1164648).\n- futex: Consistently use fshared as boolean (bsc#1149032).\n- futex: Fix incorrect should_fail_futex() handling (bsc#1149032).\n- futex: Remove put_futex_key() (bsc#1149032).\n- futex: Remove unused or redundant includes (bsc#1149032).\n- gpio: mockup: fix resource leak in error path (git-fixes).\n- gpio: rcar: Fix runtime PM imbalance on error (git-fixes).\n- gpio: siox: explicitly support only threaded irqs (git-fixes).\n- gpio: sprd: Clear interrupt when setting the type as edge (git-fixes).\n- gpio: tc35894: fix up tc35894 interrupt configuration (git-fixes).\n- gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY (networking-stable-20_08_24).\n- gtp: add GTPA_LINK info to msg sent to userspace (networking-stable-20_09_11).\n- HID: hid-input: fix stylus battery reporting (git-fixes).\n- HID: ite: Add USB id match for Acer One S1003 keyboard dock (git-fixes).\n- HID: roccat: add bounds checking in kone_sysfs_write_settings() (git-fixes).\n- HID: wacom: Avoid entering wacom_wac_pen_report for pad / battery (git-fixes).\n- hwmon: (applesmc) check status earlier (git-fixes).\n- hwmon: (mlxreg-fan) Fix double \u0027Mellanox\u0027 (git-fixes).\n- hwmon: (pmbus/max34440) Fix status register reads for MAX344{51,60,61} (git-fixes).\n- hyperv_fb: Update screen_info after removing old framebuffer (bsc#1175306).\n- i2c: aspeed: Mask IRQ status to relevant bits (git-fixes).\n- i2c: core: Call i2c_acpi_install_space_handler() before i2c_acpi_register_devices() (git-fixes).\n- i2c: core: Restore acpi_walk_dep_device_list() getting called after registering the ACPI i2c devs (git-fixes).\n- i2c: cpm: Fix i2c_ram structure (git-fixes).\n- i2c: i801: Exclude device from suspend direct complete optimization (git-fixes).\n- i2c: imx: Fix external abort on interrupt in exit paths (git-fixes).\n- i2c: meson: fix clock setting overwrite (git-fixes).\n- i2c: meson: fixup rate calculation with filter delay (git-fixes).\n- i2c: owl: Clear NACK and BUS error bits (git-fixes).\n- i2c: rcar: Auto select RESET_CONTROLLER (git-fixes).\n- i2c: tegra: Prevent interrupt triggering after transfer timeout (git-fixes).\n- i2c: tegra: Restore pinmux on system resume (git-fixes).\n- i3c: master add i3c_master_attach_boardinfo to preserve boardinfo (git-fixes).\n- i3c: master: Fix error return in cdns_i3c_master_probe() (git-fixes).\n- ibmveth: Identify ingress large send packets (bsc#1178185 ltc#188897).\n- ibmveth: Switch order of ibmveth_helper calls (bsc#1061843 git-fixes).\n- ibmvnic: fix ibmvnic_set_mac (bsc#1066382 ltc#160943 git-fixes).\n- ibmvnic: save changed mac address to adapter-\u003emac_addr (bsc#1134760 ltc#177449 git-fixes).\n- ibmvnic: set up 200GBPS speed (bsc#1129923 git-fixes).\n- icmp: randomize the global rate limiter (git-fixes).\n- ida: Free allocated bitmap in error path (git-fixes).\n- ieee802154/adf7242: check status of adf7242_read_reg (git-fixes).\n- ieee802154: fix one possible memleak in ca8210_dev_com_init (git-fixes).\n- iio:accel:bma180: Fix use of true when should be iio_shared_by enum (git-fixes).\n- iio: adc: gyroadc: fix leak of device node iterator (git-fixes).\n- iio: adc: qcom-spmi-adc5: fix driver name (git-fixes).\n- iio: adc: stm32-adc: fix runtime autosuspend delay when slow polling (git-fixes).\n- iio:adc:ti-adc0832 Fix alignment issue with timestamp (git-fixes).\n- iio:adc:ti-adc12138 Fix alignment issue with timestamp (git-fixes).\n- iio:dac:ad5592r: Fix use of true for IIO_SHARED_BY_TYPE (git-fixes).\n- iio:gyro:itg3200: Fix timestamp alignment and prevent data leak (git-fixes).\n- iio:light:si1145: Fix timestamp alignment and prevent data leak (git-fixes).\n- iio:magn:hmc5843: Fix passing true where iio_shared_by enum required (git-fixes).\n- ima: Do not ignore errors from crypto_shash_update() (git-fixes).\n- ima: extend boot_aggregate with kernel measurements (bsc#1177617).\n- ima: Remove semicolon at the end of ima_get_binary_runtime_size() (git-fixes).\n- Input: ati_remote2 - add missing newlines when printing module parameters (git-fixes).\n- Input: ep93xx_keypad - fix handling of platform_get_irq() error (git-fixes).\n- Input: i8042 - add nopnp quirk for Acer Aspire 5 A515 (bsc#954532).\n- Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume() (git-fixes).\n- Input: omap4-keypad - fix handling of platform_get_irq() error (git-fixes).\n- Input: stmfts - fix a \u0026 vs \u0026\u0026 typo (git-fixes).\n- Input: sun4i-ps2 - fix handling of platform_get_irq() error (git-fixes).\n- Input: trackpoint - enable Synaptics trackpoints (git-fixes).\n- Input: twl4030_keypad - fix handling of platform_get_irq() error (git-fixes).\n- iomap: Make sure iomap_end is called after iomap_begin (bsc#1177754).\n- iommu/amd: Fix IOMMU AVIC not properly update the is_run bit in IRTE (bsc#1177297).\n- iommu/amd: Fix potential @entry null deref (bsc#1177283).\n- iommu/amd: Re-factor guest virtual APIC (de-)activation code (bsc#1177284).\n- iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode (bsc#1177285).\n- iommu/exynos: add missing put_device() call in exynos_iommu_of_xlate() (bsc#1177286).\n- iommu/vt-d: Correctly calculate agaw in domain_init() (bsc#1176400).\n- iommu/vt-d: Gracefully handle DMAR units with no supported address widths (bsc#1177739).\n- ip: fix tos reflection in ack and reset packets (networking-stable-20_09_24).\n- ipmi_si: Fix wrong return value in try_smi_init() (git-fixes).\n- ipv4: Initialize flowi4_multipath_hash in data path (networking-stable-20_09_24).\n- ipv4: Restore flowi4_oif update before call to xfrm_lookup_route (git-fixes).\n- ipv4: Update exception handling for multipath routes via same device (networking-stable-20_09_24).\n- ipv6: avoid lockdep issue in fib6_del() (networking-stable-20_09_24).\n- ipv6: Fix sysctl max for fib_multipath_hash_policy (networking-stable-20_09_11).\n- ipvlan: fix device features (networking-stable-20_08_24).\n- iwlwifi: mvm: split a print to avoid a WARNING in ROC (git-fixes).\n- kabi fix for NFS: Fix flexfiles read failover (git-fixes).\n- kABI: Fix kABI after add CodeSigning extended key usage (bsc#1177353).\n- kABI: Fix kABI for 12856e7acde4 PCI/IOV: Mark VFs as not implementing PCI_COMMAND_MEMORY (bsc#1176979).\n- kabi/severities: ignore kABI for target_core_rbd Match behaviour for all other Ceph specific modules.\n- kallsyms: Refactor kallsyms_show_value() to take cred (git-fixes).\n- kbuild: enforce -Werror=return-type (bsc#1177281).\n- kernel-binary.spec.in: Exclude .config.old from kernel-devel  - use tar excludes for .kernel-binary.spec.buildenv\n- kernel-binary.spec.in: Package the obj_install_dir as explicit filelist.\n- KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages (git-fixes).\n- leds: bcm6328, bcm6358: use devres LED registering function (git-fixes).\n- leds: mlxreg: Fix possible buffer overflow (git-fixes).\n- leds: mt6323: move period calculation (git-fixes).\n- libceph-add-support-for-CMPEXT-compare-extent-reques.patch: (bsc#1177090).\n- libceph: clear con-\u003eout_msg on Policy::stateful_server faults (bsc#1178177).\n- lib/crc32.c: fix trivial typo in preprocessor condition (git-fixes).\n- lib/mpi: Add mpi_sub_ui() (bsc#1175718).\n- locking/rwsem: Disable reader optimistic spinning (bnc#1176588).\n- mac80211: do not allow bigger VHT MPDUs than the hardware supports (git-fixes).\n- mac80211: handle lack of sband-\u003ebitrates in rates (git-fixes).\n- mac80211: skip mpath lookup also for control port tx (git-fixes).\n- mac802154: tx: fix use-after-free (git-fixes).\n- macsec: avoid use-after-free in macsec_handle_frame() (git-fixes).\n- mailbox: avoid timer start from callback (git-fixes).\n- media: ati_remote: sanity check for both endpoints (git-fixes).\n- media: bdisp: Fix runtime PM imbalance on error (git-fixes).\n- media: camss: Fix a reference count leak (git-fixes).\n- media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync (git-fixes).\n- media: exynos4-is: Fix a reference count leak (git-fixes).\n- media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync (git-fixes).\n- media: firewire: fix memory leak (git-fixes).\n- media: i2c: ov5640: Enable data pins on poweron for DVP mode (git-fixes).\n- media: i2c: ov5640: Remain in power down for DVP mode unless streaming (git-fixes).\n- media: i2c: ov5640: Separate out mipi configuration from s_power (git-fixes).\n- media: imx274: fix frame interval handling (git-fixes).\n- media: m5mols: Check function pointer in m5mols_sensor_power (git-fixes).\n- media: mc-device.c: fix memleak in media_device_register_entity (git-fixes).\n- media: media/pci: prevent memory leak in bttv_probe (git-fixes).\n- media: mx2_emmaprp: Fix memleak in emmaprp_probe (git-fixes).\n- media: omap3isp: Fix memleak in isp_probe (git-fixes).\n- media: ov5640: Correct Bit Div register in clock tree diagram (git-fixes).\n- media: platform: fcp: Fix a reference count leak (git-fixes).\n- media: platform: Improve queue set up flow for bug fixing (git-fixes).\n- media: platform: s3c-camif: Fix runtime PM imbalance on error (git-fixes).\n- media: platform: sti: hva: Fix runtime PM imbalance on error (git-fixes).\n- media: rcar-csi2: Allocate v4l2_async_subdev dynamically (git-fixes).\n- media: rcar_drif: Allocate v4l2_async_subdev dynamically (git-fixes).\n- media: rcar_drif: Fix fwnode reference leak when parsing DT (git-fixes).\n- media: rcar-vin: Fix a reference count leak (git-fixes).\n- media: rc: do not access device via sysfs after rc_unregister_device() (git-fixes).\n- media: rc: uevent sysfs file races with rc_unregister_device() (git-fixes).\n- media: Revert \u0027media: exynos4-is: Add missed check for pinctrl_lookup_state()\u0027 (git-fixes).\n- media: rockchip/rga: Fix a reference count leak (git-fixes).\n- media: s5p-mfc: Fix a reference count leak (git-fixes).\n- media: saa7134: avoid a shift overflow (git-fixes).\n- media: smiapp: Fix error handling at NVM reading (git-fixes).\n- media: staging/intel-ipu3: css: Correctly reset some memory (git-fixes).\n- media: st-delta: Fix reference count leak in delta_run_work (git-fixes).\n- media: sti: Fix reference count leaks (git-fixes).\n- media: stm32-dcmi: Fix a reference count leak (git-fixes).\n- media: tc358743: cleanup tc358743_cec_isr (git-fixes).\n- media: tc358743: initialize variable (git-fixes).\n- media: ti-vpe: cal: Restrict DMA to avoid memory corruption (git-fixes).\n- media: ti-vpe: Fix a missing check and reference count leak (git-fixes).\n- media: tuner-simple: fix regression in simple_set_radio_freq (git-fixes).\n- media: tw5864: check status of tw5864_frameinterval_get (git-fixes).\n- media: usbtv: Fix refcounting mixup (git-fixes).\n- media: uvcvideo: Ensure all probed info is returned to v4l2 (git-fixes).\n- media: uvcvideo: Fix dereference of out-of-bound list iterator (git-fixes).\n- media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any effect (git-fixes).\n- media: uvcvideo: Set media controller entity functions (git-fixes).\n- media: uvcvideo: Silence shift-out-of-bounds warning (git-fixes).\n- media: v4l2-async: Document asd allocation requirements (git-fixes).\n- media: venus: core: Fix runtime PM imbalance in venus_probe (git-fixes).\n- media: vsp1: Fix runtime PM imbalance on error (git-fixes).\n- memory: fsl-corenet-cf: Fix handling of platform_get_irq() error (git-fixes).\n- memory: omap-gpmc: Fix a couple off by ones (git-fixes).\n- memory: omap-gpmc: Fix build error without CONFIG_OF (git-fixes).\n- mfd: mfd-core: Protect against NULL call-back function pointer (git-fixes).\n- mfd: sm501: Fix leaks in probe() (git-fixes).\n- mic: vop: copy data to kernel space then write to io memory (git-fixes).\n- misc: mic: scif: Fix error handling path (git-fixes).\n- misc: rtsx: Fix memory leak in rtsx_pci_probe (git-fixes).\n- misc: vop: add round_up(x,4) for vring_size to avoid kernel panic (git-fixes).\n- mm: call cond_resched() from deferred_init_memmap() (git fixes (mm/init), bsc#1177697).\n- mmc: core: do not set limits.discard_granularity as 0 (git-fixes).\n- mmc: core: Rework wp-gpio handling (git-fixes).\n- mm, compaction: fully assume capture is not NULL in compact_zone_order() (git fixes (mm/compaction), bsc#1177681).\n- mm, compaction: make capture control handling safe wrt interrupts (git fixes (mm/compaction), bsc#1177681).\n- mmc: sdhci-acpi: AMDI0040: Set SDHCI_QUIRK2_PRESET_VALUE_BROKEN (git-fixes).\n- mmc: sdhci: Add LTR support for some Intel BYT based controllers (git-fixes).\n- mmc: sdhci: Workaround broken command queuing on Intel GLK based IRBIS models (git-fixes).\n- mmc: sdio: Check for CISTPL_VERS_1 buffer size (git-fixes).\n- mm/debug.c: always print flags in dump_page() (git fixes (mm/debug)).\n- mm: do not panic when links can\u0027t be created in sysfs (bsc#1178002).\n- mm: do not rely on system state to detect hot-plug operations (bsc#1178002).\n- mm: fix a race during THP splitting (bsc#1178255).\n- mm/huge_memory.c: use head to check huge zero page (git-fixes (mm/thp)).\n- mm: initialize deferred pages with interrupts enabled (git fixes (mm/init), bsc#1177697).\n- mm: madvise: fix vma user-after-free (git-fixes).\n- mm/memcontrol.c: lost css_put in memcg_expand_shrinker_maps() (bsc#1177694).\n- mm/mempolicy.c: fix out of bounds write in mpol_parse_str() (git-fixes (mm/mempolicy)).\n- mm/migrate.c: also overwrite error when it is bigger than zero (git fixes (mm/move_pages), bsc#1177683).\n- mm: move_pages: report the number of non-attempted pages (git fixes (mm/move_pages), bsc#1177683).\n- mm: move_pages: return valid node id in status if the page is already on the target node (git fixes (mm/move_pages), bsc#1177683).\n- mm/pagealloc.c: call touch_nmi_watchdog() on max order boundaries in deferred init (git fixes (mm/init), bsc#1177697).\n- mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio() (git-fixes (mm/writeback)).\n- mm/page-writeback.c: improve arithmetic divisions (git-fixes (mm/writeback)).\n- mm: replace memmap_context by meminit_context (bsc#1178002).\n- mm/rmap: fixup copying of soft dirty and uffd ptes (git-fixes (mm/rmap)).\n- mm, slab/slub: improve error reporting and overhead of cache_from_obj() (mm/slub bsc#1165692).\n- mm, slab/slub: move and improve cache_from_obj() (mm/slub bsc#1165692).\n- mm, slub: extend checks guarded by slub_debug static key (mm/slub bsc#1165692).\n- mm, slub: extend slub_debug syntax for multiple blocks (mm/slub bsc#1165692).\n- mm, slub: introduce kmem_cache_debug_flags() (mm/slub bsc#1165692).\n- mm, slub: introduce static key for slub_debug() (mm/slub bsc#1165692).\n- mm, slub: make reclaim_account attribute read-only (mm/slub bsc#1165692).\n- mm, slub: make remaining slub_debug related attributes read-only (mm/slub bsc#1165692).\n- mm, slub: make some slub_debug related attributes read-only (mm/slub bsc#1165692).\n- mm, slub: remove runtime allocation order changes (mm/slub bsc#1165692).\n- mm, slub: restore initial kmem_cache flags (mm/slub bsc#1165692).\n- mm/swapfile.c: fix potential memory leak in sys_swapon (git-fixes).\n- mm/zsmalloc.c: fix the migrated zspage statistics (git-fixes (mm/zsmalloc)).\n- module: Correctly truncate sysfs sections output (git-fixes).\n- module: Do not expose section addresses to non-CAP_SYSLOG (git-fixes).\n- module: Refactor section attr into bin attribute (git-fixes).\n- module: statically initialize init section freeing data (git-fixes).\n- Move upstreamed BT patch into sorted section\n- Move upstreamed intel-vbtn patch into sorted section\n- mt76: add missing locking around ampdu action (git-fixes).\n- mt76: clear skb pointers from rx aggregation reorder buffer during cleanup (git-fixes).\n- mt76: do not use devm API for led classdev (git-fixes).\n- mt76: fix handling full tx queues in mt76_dma_tx_queue_skb_raw (git-fixes).\n- mt76: fix LED link time failure (git-fixes).\n- mtd: cfi_cmdset_0002: do not free cfi-\u003ecfiq in error path of cfi_amdstd_setup() (git-fixes).\n- mtd: lpddr: Fix bad logic in print_drs_error (git-fixes).\n- mtd: lpddr: fix excessive stack usage with clang (git-fixes).\n- mtd: mtdoops: Do not write panic data twice (git-fixes).\n- mtd: rawnand: gpmi: Fix runtime PM imbalance on error (git-fixes).\n- mtd: rawnand: omap_elm: Fix runtime PM imbalance on error (git-fixes).\n- mtd: rawnand: stm32_fmc2: fix a buffer overflow (git-fixes).\n- mtd: rawnand: vf610: disable clk on error handling path in probe (git-fixes).\n- mtd: spinand: gigadevice: Add QE Bit (git-fixes).\n- mtd: spinand: gigadevice: Only one dummy byte in QUADIO (git-fixes).\n- mwifiex: do not call del_timer_sync() on uninitialized timer (git-fixes).\n- mwifiex: Do not use GFP_KERNEL in atomic context (git-fixes).\n- mwifiex: fix double free (git-fixes).\n- mwifiex: remove function pointer check (git-fixes).\n- mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO (git-fixes).\n- net: bridge: br_vlan_get_pvid_rcu() should dereference the VLAN group under RCU (networking-stable-20_09_24).\n- net/core: check length before updating Ethertype in skb_mpls_{push,pop} (git-fixes).\n- net: DCB: Validate DCB_ATTR_DCB_BUFFER argument (networking-stable-20_09_24).\n- net: disable netpoll on fresh napis (networking-stable-20_09_11).\n- net: dsa: b53: check for timeout (networking-stable-20_08_24).\n- net: dsa: rtl8366: Properly clear member config (networking-stable-20_09_24).\n- net: fec: correct the error path for regulator disable in probe (networking-stable-20_08_24).\n- net: Fix bridge enslavement failure (networking-stable-20_09_24).\n- net: Fix potential wrong skb-\u003eprotocol in skb_vlan_untag() (networking-stable-20_08_24).\n- net: hns: Fix memleak in hns_nic_dev_probe (networking-stable-20_09_11).\n- net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC (networking-stable-20_09_24).\n- netlabel: fix problems with mapping removal (networking-stable-20_09_11).\n- net: lantiq: Disable IRQs only if NAPI gets scheduled (networking-stable-20_09_24).\n- net: lantiq: Use napi_complete_done() (networking-stable-20_09_24).\n- net: lantiq: use netif_tx_napi_add() for TX NAPI (networking-stable-20_09_24).\n- net: lantiq: Wake TX queue again (networking-stable-20_09_24).\n- net/mlx5e: Enable adding peer miss rules only if merged eswitch is supported (networking-stable-20_09_24).\n- net/mlx5e: TLS, Do not expose FPGA TLS counter if not supported (networking-stable-20_09_24).\n- net/mlx5: Fix FTE cleanup (networking-stable-20_09_24).\n- net: mscc: ocelot: fix race condition with TX timestamping (bsc#1178461).\n- net: phy: Avoid NPD upon phy_detach() when driver is unbound (networking-stable-20_09_24).\n- net: phy: Do not warn in phy_stop() on PHY_DOWN (networking-stable-20_09_24).\n- net: phy: realtek: fix rtl8211e rx/tx delay config (git-fixes).\n- net: qrtr: fix usage of idr in port assignment to socket (networking-stable-20_08_24).\n- net/sched: act_ct: Fix skb double-free in tcf_ct_handle_fragments() error flow (networking-stable-20_08_24).\n- net: sctp: Fix IPv6 ancestor_size calc in sctp_copy_descendant (networking-stable-20_09_24).\n- net: sctp: Fix negotiation of the number of data streams (networking-stable-20_08_24).\n- net/smc: Prevent kernel-infoleak in __smc_diag_dump() (networking-stable-20_08_24).\n- net: systemport: Fix memleak in bcm_sysport_probe (networking-stable-20_09_11).\n- net: usb: dm9601: Add USB ID of Keenetic Plus DSL (networking-stable-20_09_11).\n- net: usb: qmi_wwan: add Cellient MPL200 card (git-fixes).\n- net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails (git-fixes).\n- net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key() (git-fixes).\n- nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download() (git-fixes).\n- nfp: use correct define to return NONE fec (networking-stable-20_09_24).\n- nfsd4: fix NULL dereference in nfsd/clients display code (git-fixes).\n- NFS: Do not move layouts to plh_return_segs list while in use (git-fixes).\n- NFS: Do not return layout segments that are in use (git-fixes).\n- nfs: ensure correct writeback errors are returned on close() (git-fixes).\n- NFS: Fix flexfiles read failover (git-fixes).\n- nfs: Fix security label length not being reset (bsc#1176381).\n- nfs: nfs_file_write() should check for writeback errors (git-fixes).\n- NFSv4.2: fix client\u0027s attribute cache management for copy_file_range (git-fixes).\n- nl80211: fix non-split wiphy information (git-fixes).\n- NTB: hw: amd: fix an issue about leak system resources (git-fixes).\n- ntb: intel: Fix memleak in intel_ntb_pci_probe (git-fixes).\n- nvme-multipath: retry commands for dying queues (bsc#1171688).\n- nvme-rdma: fix crash due to incorrect cqe (bsc#1174748).\n- nvme-rdma: fix crash when connect rejected (bsc#1174748).\n- overflow: Include header file with SIZE_MAX declaration (git-fixes).\n- p54: avoid accessing the data mapped to streaming DMA (git-fixes).\n- PCI: aardvark: Check for errors from pci_bridge_emul_init() call (git-fixes).\n- PCI/ACPI: Whitelist hotplug ports for D3 if power managed by ACPI (git-fixes).\n- PCI: Avoid double hpmemsize MMIO window assignment (git-fixes).\n- PCI/IOV: Mark VFs as not implementing PCI_COMMAND_MEMORY (bsc#1176979).\n- PCI: tegra194: Fix runtime PM imbalance on error (git-fixes).\n- PCI: tegra: Fix runtime PM imbalance on error (git-fixes).\n- percpu: fix first chunk size calculation for populated bitmap (git-fixes (mm/percpu)).\n- perf/x86/amd: Fix sampling Large Increment per Cycle events (bsc#1152489).\n- perf/x86: Fix n_pair for cancelled txn (bsc#1152489).\n- phy: ti: am654: Fix a leak in serdes_am654_probe() (git-fixes).\n- pinctrl: bcm: fix kconfig dependency warning when !GPIOLIB (git-fixes).\n- pinctrl: mcp23s08: Fix mcp23x17 precious range (git-fixes).\n- pinctrl: mcp23s08: Fix mcp23x17_regmap initialiser (git-fixes).\n- pinctrl: mvebu: Fix i2c sda definition for 98DX3236 (git-fixes).\n- PKCS#7: Check codeSigning EKU for kernel module and kexec pe verification.\n- PKCS#7: Check codeSigning EKU for kernel module and kexec pe verification (bsc#1177353).\n- Platform: OLPC: Fix memleak in olpc_ec_probe (git-fixes).\n- platform/x86: fix kconfig dependency warning for FUJITSU_LAPTOP (git-fixes).\n- platform/x86: fix kconfig dependency warning for LG_LAPTOP (git-fixes).\n- platform/x86: intel_pmc_core: do not create a static struct device (git-fixes).\n- platform/x86: intel-vbtn: Switch to an allow-list for SW_TABLET_MODE reporting (bsc#1175599).\n- platform/x86: mlx-platform: Remove PSU EEPROM configuration (git-fixes).\n- platform/x86: thinkpad_acpi: initialize tp_nvram_state variable (git-fixes).\n- platform/x86: thinkpad_acpi: re-initialize ACPI buffer size when reuse (git-fixes).\n- PM: hibernate: Batch hibernate and resume IO requests (bsc#1178079).\n- PM: hibernate: remove the bogus call to get_gendisk() in software_resume() (git-fixes).\n- PM: runtime: Drop runtime PM references to supplier on link removal (git-fixes).\n- pNFS/flexfiles: Ensure we initialise the mirror bsizes correctly on read (git-fixes).\n- powerpc/book3s64/radix: Make radix_mem_block_size 64bit (bsc#1055186 ltc#153436 git-fixes).\n- powerpc/dma: Fix dma_map_ops::get_required_mask (bsc#1065729).\n- powerpc: Fix undetected data corruption with P9N DD2.1 VSX CI load emulation (bsc#1065729).\n- powerpc/hwirq: Remove stale forward irq_chip declaration (bsc#1065729).\n- powerpc/icp-hv: Fix missing of_node_put() in success path (bsc#1065729).\n- powerpc/irq: Drop forward declaration of struct irqaction (bsc#1065729).\n- powerpc/papr_scm: Fix warning triggered by perf_stats_show() (bsc#1175052 jsc#SLE-13823 bsc#1174969 jsc#SLE-12769 git-fixes).\n- powerpc/perf/hv-gpci: Fix starting index value (bsc#1065729).\n- powerpc/powernv/dump: Fix race while processing OPAL dump (bsc#1065729).\n- powerpc/powernv/elog: Fix race while processing OPAL error log event (bsc#1065729).\n- powerpc/pseries: Avoid using addr_to_pfn in real mode (jsc#SLE-9246 git-fixes).\n- powerpc/pseries: explicitly reschedule during drmem_lmb list traversal (bsc#1077428 ltc#163882 git-fixes).\n- powerpc/pseries: Fix missing of_node_put() in rng_init() (bsc#1065729).\n- power: supply: bq27xxx: report \u0027not charging\u0027 on all types (git-fixes).\n- power: supply: max17040: Correct voltage reading (git-fixes).\n- power: supply: test_power: add missing newlines when printing parameters by sysfs (git-fixes).\n- pwm: img: Fix null pointer access in probe (git-fixes).\n- pwm: lpss: Add range limit check for the base_unit register value (git-fixes).\n- pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare() (git-fixes).\n- qla2xxx: Return EBUSY on fcport deletion (bsc#1171688).\n- qtnfmac: fix resource leaks on unsupported iftype error return path (git-fixes).\n- r8169: fix data corruption issue on RTL8402 (bsc#1174098).\n- r8169: fix issue with forced threading in combination with shared interrupts (git-fixes).\n- r8169: fix operation under forced interrupt threading (git-fixes).\n- rapidio: fix the missed put_device() for rio_mport_add_riodev (git-fixes).\n- rbd-add-rbd_img_fill_cmp_and_write_from_bvecs.patch: (bsc#1177090).\n- rbd-add-support-for-COMPARE_AND_WRITE-CMPEXT.patch: (bsc#1177090).\n- RDMA/hfi1: Correct an interlock issue for TID RDMA WRITE request (bsc#1175621).\n- Refresh patches.suse/fnic-to-not-call-scsi_done-for-unhandled-commands.patch (bsc#1168468, bsc#1171675).\n- regulator: axp20x: fix LDO2/4 description (git-fixes).\n- regulator: defer probe when trying to get voltage from unresolved supply (git-fixes).\n- regulator: resolve supply after creating regulator (git-fixes).\n- rename Other drivers / Intel IOMMU subsection to IOMMU\n- reset: sti: reset-syscfg: fix struct description warnings (git-fixes).\n- ring-buffer: Return 0 on success from ring_buffer_resize() (git-fixes).\n- rpm/kernel-module-subpackage: make Group tag optional (bsc#1163592)\n- rtc: ds1374: fix possible race condition (git-fixes).\n- rtc: rx8010: do not modify the global rtc ops (git-fixes).\n- rtc: sa1100: fix possible race condition (git-fixes).\n- rtl8xxxu: prevent potential memory leak (git-fixes).\n- rtw88: increse the size of rx buffer size (git-fixes).\n- s390/cio: add cond_resched() in the slow_eval_known_fn() loop (bsc#1177799 LTC#188733).\n- s390/dasd: Fix zero write for FBA devices (bsc#1177801 LTC#188735).\n- s390/pci: Mark all VFs as not implementing PCI_COMMAND_MEMORY (bsc#1176979).\n- sched/fair: Ignore cache hotness for SMT migration (bnc#1155798 (CPU scheduler functional and performance backports)).\n- sched/fair: Use dst group while checking imbalance for NUMA balancer (bnc#1155798 (CPU scheduler functional and performance backports)).\n- sched/numa: Avoid creating large imbalances at task creation time (bnc#1176588).\n- sched/numa: Check numa balancing information only when enabled (bnc#1176588).\n- sched/numa: Use runnable_avg to classify node (bnc#1155798 (CPU scheduler functional and performance backports)).\n- scsi: ibmvfc: Fix error return in ibmvfc_probe() (bsc#1065729).\n- scsi: ibmvscsi: Fix potential race after loss of transport (bsc#1178166 ltc#188226).\n- scsi: iscsi: iscsi_tcp: Avoid holding spinlock while calling getpeername() (bsc#1177258).\n- scsi: mptfusion: Do not use GFP_ATOMIC for larger DMA allocations (bsc#1175898, ECO-2743).\n- scsi: qla2xxx: Add IOCB resource tracking (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Add rport fields in debugfs (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Add SLER and PI control support (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Allow dev_loss_tmo setting for FC-NVMe devices (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Correct the check for sscanf() return value (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix buffer-buffer credit extraction error (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix crash on session cleanup with unload (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix inconsistent format argument type in qla_dbg.c (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix inconsistent format argument type in tcm_qla2xxx.c (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix I/O errors during LIP reset tests (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix I/O failures during remote port toggle testing (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix memory size truncation (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix MPI reset needed message (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix point-to-point (N2N) device discovery issue (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Fix reset of MPI firmware (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Honor status qualifier in FCP_RSP per spec (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Make tgt_port_database available in initiator mode (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Performance tweak (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Reduce duplicate code in reporting speed (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Remove unneeded variable \u0027rval\u0027 (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Setup debugfs entries for remote ports (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Update version to 10.02.00.102-k (bsc#1171688 bsc#1174003).\n- scsi: qla2xxx: Update version to 10.02.00.103-k (bsc#1171688 bsc#1174003).\n- sctp: not disable bh in the whole sctp_get_port_local() (networking-stable-20_09_11).\n- selftests/timers: Turn off timeout setting (git-fixes).\n- serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout (git-fixes).\n- serial: 8250_mtk: Fix uart_get_baud_rate warning (git-fixes).\n- serial: 8250_omap: Fix sleeping function called from invalid context during probe (git-fixes).\n- serial: 8250_port: Do not service RX FIFO if throttled (git-fixes).\n- serial: txx9: add missing platform_driver_unregister() on error in serial_txx9_init (git-fixes).\n- serial: uartps: Wait for tx_empty in console setup (git-fixes).\n- slimbus: core: check get_addr before removing laddr ida (git-fixes).\n- slimbus: core: do not enter to clock pause mode in core (git-fixes).\n- slimbus: qcom-ngd-ctrl: disable ngd in qmi server down callback (git-fixes).\n- soc: fsl: qbman: Fix return value on success (git-fixes).\n- spi: dw-pci: free previously allocated IRQs if desc-\u003esetup() fails (git-fixes).\n- spi: fsl-espi: Only process interrupts for expected events (git-fixes).\n- spi: omap2-mcspi: Improve performance waiting for CHSTAT (git-fixes).\n- spi: spi-s3c64xx: Check return values (git-fixes).\n- spi: spi-s3c64xx: swap s3c64xx_spi_set_cs() and s3c64xx_enable_datapath() (git-fixes).\n- spi: sprd: Release DMA channel also on probe deferral (git-fixes).\n- spi: stm32: Rate-limit the \u0027Communication suspended\u0027 message (git-fixes).\n- staging: comedi: cb_pcidas: Allow 2-channel commands for AO subdevice (git-fixes).\n- staging: comedi: check validity of wMaxPacketSize of usb endpoints found (git-fixes).\n- staging: octeon: Drop on uncorrectable alignment or FCS error (git-fixes).\n- staging: octeon: repair \u0027fixed-link\u0027 support (git-fixes).\n- staging:r8188eu: avoid skb_clone for amsdu to msdu conversion (git-fixes).\n- staging: rtl8192u: Do not use GFP_KERNEL in atomic context (git-fixes).\n- SUNRPC: Revert 241b1f419f0e (\u0027SUNRPC: Remove xdr_buf_trim()\u0027) (git-fixes).\n- svcrdma: Fix page leak in svc_rdma_recv_read_chunk() (git-fixes).\n- taprio: Fix allowing too small intervals (networking-stable-20_09_24).\n- target-compare-and-write-backend-driver-sense-handli.patch: (bsc#1177719).\n- target-rbd-add-emulate_legacy_capacity-dev-attribute.patch: (bsc#1177109).\n- target-rbd-add-WRITE-SAME-support.patch: (bsc#1177090).\n- target-rbd-conditionally-fix-off-by-one-bug-in-get_b.patch: (bsc#1177109).\n- target-rbd-detect-stripe_unit-SCSI-block-size-misali.patch: (bsc#1177090).\n- target-rbd-fix-unmap-discard-block-size-conversion.patch: (bsc#1177271).\n- target-rbd-fix-unmap-handling-with-unmap_zeroes_data.patch: (bsc#1177271).\n- target-rbd-support-COMPARE_AND_WRITE.patch: (bsc#1177090).\n- thermal: rcar_thermal: Handle probe error gracefully (git-fixes).\n- time: Prevent undefined behaviour in timespec64_to_ns() (bsc#1164648).\n- tipc: fix memory leak caused by tipc_buf_append() (git-fixes).\n- tipc: Fix memory leak in tipc_group_create_member() (networking-stable-20_09_24).\n- tipc: fix shutdown() of connectionless socket (networking-stable-20_09_11).\n- tipc: fix shutdown() of connection oriented socket (networking-stable-20_09_24).\n- tipc: fix the skb_unshare() in tipc_buf_append() (git-fixes).\n- tipc: fix uninit skb-\u003edata in tipc_nl_compat_dumpit() (networking-stable-20_08_24).\n- tipc: use skb_unshare() instead in tipc_buf_append() (networking-stable-20_09_24).\n- tracing: Check return value of __create_val_fields() before using its result (git-fixes).\n- tracing: Save normal string variables (git-fixes).\n- tty: ipwireless: fix error handling (git-fixes).\n- tty: serial: fsl_lpuart: fix lpuart32_poll_get_char (git-fixes).\n- uio: free uio id after uio file node is freed (git-fixes).\n- Update config files. Enable ACPI_PCI_SLOT and HOTPLUG_PCI_ACPI (bsc#1177194).\n- Update patches.suse/target-add-rbd-backend.patch: (). (simplify block to byte calculations and use consistent error paths)\n- USB: adutux: fix debugging (git-fixes).\n- usb: cdc-acm: add quirk to blacklist ETAS ES58X devices (git-fixes).\n- usb: cdc-acm: fix cooldown mechanism (git-fixes).\n- USB: cdc-acm: handle broken union descriptors (git-fixes).\n- USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync() (git-fixes).\n- usb: core: Solve race condition in anchor cleanup functions (git-fixes).\n- usb: dwc2: Fix INTR OUT transfers in DDMA mode (git-fixes).\n- usb: dwc2: Fix parameter type in function pointer prototype (git-fixes).\n- usb: dwc3: core: add phy cleanup for probe error handling (git-fixes).\n- usb: dwc3: core: do not trigger runtime pm when remove driver (git-fixes).\n- usb: dwc3: ep0: Fix ZLP for OUT ep0 requests (git-fixes).\n- usb: dwc3: gadget: Resume pending requests after CLEAR_STALL (git-fixes).\n- usb: dwc3: Increase timeout for CmdAct cleared by device controller (git-fixes).\n- usb: dwc3: pci: Allow Elkhart Lake to utilize DSM method for PM functionality (git-fixes).\n- usb: dwc3: simple: add support for Hikey 970 (git-fixes).\n- USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe() (git-fixes).\n- USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int (git-fixes).\n- usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets (git-fixes).\n- usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above (git-fixes).\n- USB: gadget: f_ncm: Fix NDP16 datagram validation (git-fixes).\n- usb: gadget: function: printer: fix use-after-free in __lock_acquire (git-fixes).\n- usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well (git-fixes).\n- usblp: fix race between disconnect() and read() (git-fixes).\n- usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).\n- usb: ohci: Default to per-port over-current protection (git-fixes).\n- USB: serial: cyberjack: fix write-URB completion race (git-fixes).\n- USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters (git-fixes).\n- USB: serial: option: add Cellient MPL200 card (git-fixes).\n- USB: serial: option: Add Telit FT980-KS composition (git-fixes).\n- USB: serial: pl2303: add device-id for HP GC device (git-fixes).\n- USB: serial: qcserial: fix altsetting probing (git-fixes).\n- usb: typec: tcpm: During PR_SWAP, source caps should be sent only after tSwapSourceStart (git-fixes).\n- usb: xhci-mtk: Fix typo (git-fixes).\n- usb: xhci: omit duplicate actions when suspending a runtime suspended host (git-fixes).\n- vfio/pci: Decouple PCI_COMMAND_MEMORY bit checks from is_virtfn (bsc#1176979).\n- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (bsc#1175306).\n- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (bsc#1175306).\n- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV Gen 1 VMs (bsc#1175306).\n- virtio-net: do not disable guest csum when disable LRO (git-fixes).\n- VMCI: check return value of get_user_pages_fast() for errors (git-fixes).\n- vmxnet3: fix cksum offload issues for non-udp tunnels (git-fixes).\n- w1: mxc_w1: Fix timeout resolution problem leading to bus error (git-fixes).\n- watchdog: Fix memleak in watchdog_cdev_register (git-fixes).\n- watchdog: sp5100: Fix definition of EFCH_PM_DECODEEN3 (git-fixes).\n- watchdog: Use put_device on error (git-fixes).\n- wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680 (git-fixes).\n- wlcore: fix runtime pm imbalance in wl1271_tx_work (git-fixes).\n- wlcore: fix runtime pm imbalance in wlcore_regdomain_config (git-fixes).\n- writeback: Avoid skipping inode writeback (bsc#1177755).\n- writeback: Fix sync livelock due to b_dirty_time processing (bsc#1177755).\n- writeback: Protect inode-\u003ei_io_list with inode-\u003ei_lock (bsc#1177755).\n- X.509: Add CodeSigning extended key usage parsing (bsc#1177353).\n- x86/alternative: Do not call text_poke() in lazy TLB mode (bsc#1175749).\n- x86/fpu: Allow multiple bits in clearcpuid= parameter (bsc#1152489).\n- x86/ioapic: Unbreak check_timer() (bsc#1152489).\n- x86/kexec: Use up-to-dated screen_info copy to fill boot params (bsc#1175306).\n- x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (bsc#1177765).\n- x86/mm: unencrypted non-blocking DMA allocations use coherent pools (bsc#1175898, ECO-2743).\n- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10 compiled kernels (bsc#1176907).\n- x86/xen: disable Firmware First mode for correctable memory errors (bsc#1176713).\n- xen/blkback: use lateeoi irq binding (XSA-332 bsc#1177411).\n- xen/events: add a new \u0027late EOI\u0027 evtchn framework (XSA-332 bsc#1177411).\n- xen/events: add a proper barrier to 2-level uevent unmasking (XSA-332 bsc#1177411).\n- xen/events: avoid removing an event channel while handling it (XSA-331 bsc#1177410).\n- xen/events: block rogue events for some time (XSA-332 bsc#1177411).\n- xen/events: defer eoi in case of excessive number of events (XSA-332 bsc#1177411).\n- xen/events: do not use chip_data for legacy IRQs (bsc#1065600).\n- xen/events: fix race in evtchn_fifo_unmask() (XSA-332 bsc#1177411).\n- xen/events: switch user event channels to lateeoi model (XSA-332 bsc#1177411).\n- xen/events: use a common cpu hotplug hook for event channels (XSA-332 bsc#1177411).\n- xen/gntdev.c: Mark pages as dirty (bsc#1065600).\n- xen/netback: use lateeoi irq binding (XSA-332 bsc#1177411).\n- xen/pciback: use lateeoi irq binding (XSA-332 bsc#1177411).\n- xen/pvcallsback: use lateeoi irq binding (XSA-332 bsc#1177411).\n- xen/scsiback: use lateeoi irq binding (XSA-332 bsc#1177411).\n- xfs: complain if anyone tries to create a too-large buffer log item (bsc#1166146).\n- xfs: do not update mtime on COW faults (bsc#1167030).\n- xfs: fix high key handling in the rt allocator\u0027s query_range function (git-fixes).\n- xfs: fix scrub flagging rtinherit even if there is no rt device (git-fixes).\n- xfs: fix xfs_bmap_validate_extent_raw when checking attr fork of rt files (git-fixes).\n- xfs: flush new eof page on truncate to avoid post-eof corruption (git-fixes).\n- xfs: force the log after remapping a synchronous-writes file (git-fixes).\n- xfs: introduce XFS_MAX_FILEOFF (bsc#1166166).\n- xfs: limit entries returned when counting fsmap records (git-fixes).\n- xfs: remove unused variable \u0027done\u0027 (bsc#1166166).\n- xfs: set xefi_discard when creating a deferred agfl free log intent item (git-fixes).\n- xfs: truncate should remove all blocks, not just to the end of the page cache (bsc#1166166).\n- xhci: do not create endpoint debugfs entry before ring buffer is set (git-fixes).\n- xprtrdma: fix incorrect header size calculations (git-fixes).\n- yam: fix possible memory leak in yam_init_driver (git-fixes).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2020-2112",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_2112-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2020:2112-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4EZ6GLHJ7GRNO5SFTV2VI7JJOEEIMD6U/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2020:2112-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4EZ6GLHJ7GRNO5SFTV2VI7JJOEEIMD6U/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1055014",
        "url": "https://bugzilla.suse.com/1055014"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1055186",
        "url": "https://bugzilla.suse.com/1055186"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1061843",
        "url": "https://bugzilla.suse.com/1061843"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1065600",
        "url": "https://bugzilla.suse.com/1065600"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1065729",
        "url": "https://bugzilla.suse.com/1065729"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1066382",
        "url": "https://bugzilla.suse.com/1066382"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1077428",
        "url": "https://bugzilla.suse.com/1077428"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1129923",
        "url": "https://bugzilla.suse.com/1129923"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1134760",
        "url": "https://bugzilla.suse.com/1134760"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1149032",
        "url": "https://bugzilla.suse.com/1149032"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1152489",
        "url": "https://bugzilla.suse.com/1152489"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155798",
        "url": "https://bugzilla.suse.com/1155798"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1163592",
        "url": "https://bugzilla.suse.com/1163592"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1164648",
        "url": "https://bugzilla.suse.com/1164648"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1165692",
        "url": "https://bugzilla.suse.com/1165692"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1166146",
        "url": "https://bugzilla.suse.com/1166146"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1166166",
        "url": "https://bugzilla.suse.com/1166166"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1167030",
        "url": "https://bugzilla.suse.com/1167030"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1168468",
        "url": "https://bugzilla.suse.com/1168468"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1170415",
        "url": "https://bugzilla.suse.com/1170415"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171675",
        "url": "https://bugzilla.suse.com/1171675"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171688",
        "url": "https://bugzilla.suse.com/1171688"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174003",
        "url": "https://bugzilla.suse.com/1174003"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174098",
        "url": "https://bugzilla.suse.com/1174098"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174748",
        "url": "https://bugzilla.suse.com/1174748"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1174969",
        "url": "https://bugzilla.suse.com/1174969"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175052",
        "url": "https://bugzilla.suse.com/1175052"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175306",
        "url": "https://bugzilla.suse.com/1175306"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175599",
        "url": "https://bugzilla.suse.com/1175599"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175621",
        "url": "https://bugzilla.suse.com/1175621"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175718",
        "url": "https://bugzilla.suse.com/1175718"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175721",
        "url": "https://bugzilla.suse.com/1175721"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175749",
        "url": "https://bugzilla.suse.com/1175749"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175807",
        "url": "https://bugzilla.suse.com/1175807"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175898",
        "url": "https://bugzilla.suse.com/1175898"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176019",
        "url": "https://bugzilla.suse.com/1176019"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176354",
        "url": "https://bugzilla.suse.com/1176354"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176381",
        "url": "https://bugzilla.suse.com/1176381"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176400",
        "url": "https://bugzilla.suse.com/1176400"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176485",
        "url": "https://bugzilla.suse.com/1176485"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176588",
        "url": "https://bugzilla.suse.com/1176588"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176713",
        "url": "https://bugzilla.suse.com/1176713"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176907",
        "url": "https://bugzilla.suse.com/1176907"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176979",
        "url": "https://bugzilla.suse.com/1176979"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177086",
        "url": "https://bugzilla.suse.com/1177086"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177090",
        "url": "https://bugzilla.suse.com/1177090"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177109",
        "url": "https://bugzilla.suse.com/1177109"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177121",
        "url": "https://bugzilla.suse.com/1177121"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177193",
        "url": "https://bugzilla.suse.com/1177193"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177194",
        "url": "https://bugzilla.suse.com/1177194"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177206",
        "url": "https://bugzilla.suse.com/1177206"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177258",
        "url": "https://bugzilla.suse.com/1177258"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177271",
        "url": "https://bugzilla.suse.com/1177271"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177281",
        "url": "https://bugzilla.suse.com/1177281"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177283",
        "url": "https://bugzilla.suse.com/1177283"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177284",
        "url": "https://bugzilla.suse.com/1177284"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177285",
        "url": "https://bugzilla.suse.com/1177285"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177286",
        "url": "https://bugzilla.suse.com/1177286"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177297",
        "url": "https://bugzilla.suse.com/1177297"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177353",
        "url": "https://bugzilla.suse.com/1177353"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177384",
        "url": "https://bugzilla.suse.com/1177384"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177410",
        "url": "https://bugzilla.suse.com/1177410"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177411",
        "url": "https://bugzilla.suse.com/1177411"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177470",
        "url": "https://bugzilla.suse.com/1177470"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177511",
        "url": "https://bugzilla.suse.com/1177511"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177617",
        "url": "https://bugzilla.suse.com/1177617"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177681",
        "url": "https://bugzilla.suse.com/1177681"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177683",
        "url": "https://bugzilla.suse.com/1177683"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177687",
        "url": "https://bugzilla.suse.com/1177687"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177694",
        "url": "https://bugzilla.suse.com/1177694"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177697",
        "url": "https://bugzilla.suse.com/1177697"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177719",
        "url": "https://bugzilla.suse.com/1177719"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177724",
        "url": "https://bugzilla.suse.com/1177724"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177725",
        "url": "https://bugzilla.suse.com/1177725"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177726",
        "url": "https://bugzilla.suse.com/1177726"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177739",
        "url": "https://bugzilla.suse.com/1177739"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177749",
        "url": "https://bugzilla.suse.com/1177749"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177750",
        "url": "https://bugzilla.suse.com/1177750"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177754",
        "url": "https://bugzilla.suse.com/1177754"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177755",
        "url": "https://bugzilla.suse.com/1177755"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177765",
        "url": "https://bugzilla.suse.com/1177765"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177766",
        "url": "https://bugzilla.suse.com/1177766"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177799",
        "url": "https://bugzilla.suse.com/1177799"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177801",
        "url": "https://bugzilla.suse.com/1177801"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177814",
        "url": "https://bugzilla.suse.com/1177814"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177817",
        "url": "https://bugzilla.suse.com/1177817"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177854",
        "url": "https://bugzilla.suse.com/1177854"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177855",
        "url": "https://bugzilla.suse.com/1177855"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177856",
        "url": "https://bugzilla.suse.com/1177856"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177861",
        "url": "https://bugzilla.suse.com/1177861"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178002",
        "url": "https://bugzilla.suse.com/1178002"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178079",
        "url": "https://bugzilla.suse.com/1178079"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178123",
        "url": "https://bugzilla.suse.com/1178123"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178166",
        "url": "https://bugzilla.suse.com/1178166"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178173",
        "url": "https://bugzilla.suse.com/1178173"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178175",
        "url": "https://bugzilla.suse.com/1178175"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178176",
        "url": "https://bugzilla.suse.com/1178176"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178177",
        "url": "https://bugzilla.suse.com/1178177"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178183",
        "url": "https://bugzilla.suse.com/1178183"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178184",
        "url": "https://bugzilla.suse.com/1178184"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178185",
        "url": "https://bugzilla.suse.com/1178185"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178186",
        "url": "https://bugzilla.suse.com/1178186"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178190",
        "url": "https://bugzilla.suse.com/1178190"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178191",
        "url": "https://bugzilla.suse.com/1178191"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178246",
        "url": "https://bugzilla.suse.com/1178246"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178255",
        "url": "https://bugzilla.suse.com/1178255"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178307",
        "url": "https://bugzilla.suse.com/1178307"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178330",
        "url": "https://bugzilla.suse.com/1178330"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178393",
        "url": "https://bugzilla.suse.com/1178393"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178395",
        "url": "https://bugzilla.suse.com/1178395"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178461",
        "url": "https://bugzilla.suse.com/1178461"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178579",
        "url": "https://bugzilla.suse.com/1178579"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178581",
        "url": "https://bugzilla.suse.com/1178581"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178584",
        "url": "https://bugzilla.suse.com/1178584"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178585",
        "url": "https://bugzilla.suse.com/1178585"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 802154",
        "url": "https://bugzilla.suse.com/802154"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 954532",
        "url": "https://bugzilla.suse.com/954532"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-12351 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-12351/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-12352 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-12352/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-14351 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-14351/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-16120 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-16120/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-24490 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-24490/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-25212 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-25212/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-25285 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-25285/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-25641 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-25641/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-25643 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-25643/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-25645 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-25645/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-25656 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-25656/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-25668 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-25668/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-25704 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-25704/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-25705 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-25705/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-8694 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-8694/"
      }
    ],
    "title": "Security update for the Linux Kernel",
    "tracking": {
      "current_release_date": "2020-11-29T15:25:26Z",
      "generator": {
        "date": "2020-11-29T15:25:26Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2020:2112-1",
      "initial_release_date": "2020-11-29T15:25:26Z",
      "revision_history": [
        {
          "date": "2020-11-29T15:25:26Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
                "product": {
                  "name": "kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
                  "product_id": "kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
                "product": {
                  "name": "kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
                  "product_id": "kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.2",
                "product": {
                  "name": "openSUSE Leap 15.2",
                  "product_id": "openSUSE Leap 15.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
        },
        "product_reference": "kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
        },
        "product_reference": "kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-12351",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-12351"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-12351",
          "url": "https://www.suse.com/security/cve/CVE-2020-12351"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177724 for CVE-2020-12351",
          "url": "https://bugzilla.suse.com/1177724"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177729 for CVE-2020-12351",
          "url": "https://bugzilla.suse.com/1177729"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178397 for CVE-2020-12351",
          "url": "https://bugzilla.suse.com/1178397"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-29T15:25:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-12351"
    },
    {
      "cve": "CVE-2020-12352",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-12352"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-12352",
          "url": "https://www.suse.com/security/cve/CVE-2020-12352"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177725 for CVE-2020-12352",
          "url": "https://bugzilla.suse.com/1177725"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178398 for CVE-2020-12352",
          "url": "https://bugzilla.suse.com/1178398"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-29T15:25:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-12352"
    },
    {
      "cve": "CVE-2020-14351",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-14351"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-14351",
          "url": "https://www.suse.com/security/cve/CVE-2020-14351"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177086 for CVE-2020-14351",
          "url": "https://bugzilla.suse.com/1177086"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-29T15:25:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-14351"
    },
    {
      "cve": "CVE-2020-16120",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-16120"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Overlayfs did not properly perform permission checking when copying up files in an overlayfs and could be exploited from within a user namespace, if, for example, unprivileged user namespaces were allowed. It was possible to have a file not readable by an unprivileged user to be copied to a mountpoint controlled by the user, like a removable device. This was introduced in kernel version 4.19 by commit d1d04ef (\"ovl: stack file ops\"). This was fixed in kernel version 5.8 by commits 56230d9 (\"ovl: verify permissions in ovl_path_open()\"), 48bd024 (\"ovl: switch to mounter creds in readdir\") and 05acefb (\"ovl: check permission to open real file\"). Additionally, commits 130fdbc (\"ovl: pass correct flags for opening real directory\") and 292f902 (\"ovl: call secutiry hook in ovl_real_ioctl()\") in kernel 5.8 might also be desired or necessary. These additional commits introduced a regression in overlay mounts within user namespaces which prevented access to files with ownership outside of the user namespace. This regression was mitigated by subsequent commit b6650da (\"ovl: do not fail because of O_NOATIMEi\") in kernel 5.11.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-16120",
          "url": "https://www.suse.com/security/cve/CVE-2020-16120"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177470 for CVE-2020-16120",
          "url": "https://bugzilla.suse.com/1177470"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-29T15:25:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-16120"
    },
    {
      "cve": "CVE-2020-24490",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-24490"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access. This affects all Linux kernel versions that support BlueZ.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-24490",
          "url": "https://www.suse.com/security/cve/CVE-2020-24490"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177726 for CVE-2020-24490",
          "url": "https://bugzilla.suse.com/1177726"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177727 for CVE-2020-24490",
          "url": "https://bugzilla.suse.com/1177727"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-29T15:25:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-24490"
    },
    {
      "cve": "CVE-2020-25212",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-25212"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-25212",
          "url": "https://www.suse.com/security/cve/CVE-2020-25212"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176381 for CVE-2020-25212",
          "url": "https://bugzilla.suse.com/1176381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176382 for CVE-2020-25212",
          "url": "https://bugzilla.suse.com/1176382"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177027 for CVE-2020-25212",
          "url": "https://bugzilla.suse.com/1177027"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-29T15:25:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-25212"
    },
    {
      "cve": "CVE-2020-25285",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-25285"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8 could be used by local attackers to corrupt memory, cause a NULL pointer dereference, or possibly have unspecified other impact, aka CID-17743798d812.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-25285",
          "url": "https://www.suse.com/security/cve/CVE-2020-25285"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176485 for CVE-2020-25285",
          "url": "https://bugzilla.suse.com/1176485"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-29T15:25:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-25285"
    },
    {
      "cve": "CVE-2020-25641",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-25641"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel\u0027s implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loop, causing a denial of service. This flaw allows a local attacker with basic privileges to issue requests to a block device, resulting in a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-25641",
          "url": "https://www.suse.com/security/cve/CVE-2020-25641"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177121 for CVE-2020-25641",
          "url": "https://bugzilla.suse.com/1177121"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-29T15:25:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-25641"
    },
    {
      "cve": "CVE-2020-25643",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-25643"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-25643",
          "url": "https://www.suse.com/security/cve/CVE-2020-25643"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177206 for CVE-2020-25643",
          "url": "https://bugzilla.suse.com/1177206"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177226 for CVE-2020-25643",
          "url": "https://bugzilla.suse.com/1177226"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-29T15:25:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-25643"
    },
    {
      "cve": "CVE-2020-25645",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-25645"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-25645",
          "url": "https://www.suse.com/security/cve/CVE-2020-25645"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177511 for CVE-2020-25645",
          "url": "https://bugzilla.suse.com/1177511"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177513 for CVE-2020-25645",
          "url": "https://bugzilla.suse.com/1177513"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-29T15:25:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-25645"
    },
    {
      "cve": "CVE-2020-25656",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-25656"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKBSENT and KDSKBSENT. A local user could use this flaw to get read memory access out of bounds. The highest threat from this vulnerability is to data confidentiality.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-25656",
          "url": "https://www.suse.com/security/cve/CVE-2020-25656"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177766 for CVE-2020-25656",
          "url": "https://bugzilla.suse.com/1177766"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-29T15:25:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-25656"
    },
    {
      "cve": "CVE-2020-25668",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-25668"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-25668",
          "url": "https://www.suse.com/security/cve/CVE-2020-25668"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178123 for CVE-2020-25668",
          "url": "https://bugzilla.suse.com/1178123"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178622 for CVE-2020-25668",
          "url": "https://bugzilla.suse.com/1178622"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196914 for CVE-2020-25668",
          "url": "https://bugzilla.suse.com/1196914"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-29T15:25:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-25668"
    },
    {
      "cve": "CVE-2020-25704",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-25704"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local user could use this flaw to starve the resources causing denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-25704",
          "url": "https://www.suse.com/security/cve/CVE-2020-25704"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178393 for CVE-2020-25704",
          "url": "https://bugzilla.suse.com/1178393"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-29T15:25:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-25704"
    },
    {
      "cve": "CVE-2020-25705",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-25705"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well on the Linux Based Products (RUGGEDCOM RM1224: All versions between v5.0 and v6.4, SCALANCE M-800: All versions between v5.0 and v6.4, SCALANCE S615: All versions between v5.0 and v6.4, SCALANCE SC-600: All versions prior to v2.1.3, SCALANCE W1750D: v8.3.0.1, v8.6.0, and v8.7.0, SIMATIC Cloud Connect 7: All versions, SIMATIC MV500 Family: All versions, SIMATIC NET CP 1243-1 (incl. SIPLUS variants): Versions 3.1.39 and later, SIMATIC NET CP 1243-7 LTE EU: Version",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-25705",
          "url": "https://www.suse.com/security/cve/CVE-2020-25705"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1175721 for CVE-2020-25705",
          "url": "https://bugzilla.suse.com/1175721"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178782 for CVE-2020-25705",
          "url": "https://bugzilla.suse.com/1178782"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178783 for CVE-2020-25705",
          "url": "https://bugzilla.suse.com/1178783"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1191790 for CVE-2020-25705",
          "url": "https://bugzilla.suse.com/1191790"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-29T15:25:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-25705"
    },
    {
      "cve": "CVE-2020-8694",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-8694"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-8694",
          "url": "https://www.suse.com/security/cve/CVE-2020-8694"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1170415 for CVE-2020-8694",
          "url": "https://bugzilla.suse.com/1170415"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1170446 for CVE-2020-8694",
          "url": "https://bugzilla.suse.com/1170446"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178591 for CVE-2020-8694",
          "url": "https://bugzilla.suse.com/1178591"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178700 for CVE-2020-8694",
          "url": "https://bugzilla.suse.com/1178700"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179661 for CVE-2020-8694",
          "url": "https://bugzilla.suse.com/1179661"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-29T15:25:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-8694"
    }
  ]
}