[LU-14218] kernel update [SLES15 SP1 4.12.14-197.75.1]

• Type: Improvement
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.14.0
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various
security and bugfixes.

The following security bugs were fixed:

• CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c
  which could have allowed local users to gain privileges or cause a
  denial of service (bsc#1179141).
• CVE-2020-15437: Fixed a null pointer dereference which could have
  allowed local users to cause a denial of service(bsc#1179140).
• CVE-2020-25669: Fixed a use-after-free read in sunkbd_reinit()
  (bsc#1178182).
• CVE-2020-27777: Restrict RTAS requests from userspace (bsc#1179107).
• CVE-2020-28915: Fixed a buffer over-read in the fbcon code which could
  have been used by local attackers to read kernel memory (bsc#1178886).
• CVE-2020-28974: Fixed a slab-out-of-bounds read in fbcon which could
  have been used by local attackers to read privileged information or
  potentially crash the kernel (bsc#1178589).
• CVE-2020-29371: Fixed uninitialized memory leaks to userspace
  (bsc#1179429).

The following non-security bugs were fixed:
https://lists.suse.com/pipermail/sle-security-updates/2020-December/007943.html

Issue Links

• is related to: LU-14374 kernel update [SLES15 SP1 4.12.14-197.78.1]
• is related to: LU-14077 kernel update [SLES15 SP1 4.12.14-197.64.1]

Comments

[Peter Jones]

Landed for 2.14

[Gerrit Updater]

Oleg Drokin ([e-mail]) merged in patch https://review.whamcloud.com/41030/
Subject: LU-14218 kernel: kernel update SLES15 SP1 [4.12.14-197.75.1]
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 3fb39dbcd1e925f7c65e59b9819b36e7a076ae36

[Gerrit Updater]

Jian Yu ([e-mail]) uploaded a new patch: https://review.whamcloud.com/41032
Subject: LU-14218 kernel: new kernel [SLES15 SP1 4.12.14-197.75]
Project: fs/lustre-release
Branch: b2_12
Current Patch Set: 1
Commit: 7f97e67e5a5e108519e9b4b095e2677c643384e3

[Gerrit Updater]

Jian Yu ([e-mail]) uploaded a new patch: https://review.whamcloud.com/41030
Subject: LU-14218 kernel: kernel update SLES15 SP1 [4.12.14-197.75.1]
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 2292f9067345aafbd7e63cdfebf1b3d791b11023