[LU-15160] kernel update [SLES12 SP5 4.12.14-122.91.2]

• Type: Improvement
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.12.8, Lustre 2.15.0
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

The SUSE Linux Enterprise 12 SP5 kernel was updated.

The following security bugs were fixed:

• CVE-2020-3702: Fixed a bug which could be triggered with specifically
  timed and handcrafted traffic and cause internal errors in a WLAN device
  that lead to improper layer 2 Wi-Fi encryption with a consequent
  possibility of information disclosure. (bnc#1191193)
• CVE-2021-3752: Fixed a use after free vulnerability in the Linux
  kernel's bluetooth module. (bsc#1190023)
• CVE-2021-40490: Fixed a race condition discovered in the ext4 subsystem
  that could leat to local priviledge escalation. (bnc#1190159)
• CVE-2021-3744: Fixed a bug which could allows attackers to cause a
  denial of service. (bsc#1189884)
• CVE-2021-3764: Fixed a bug which could allows attackers to cause a
  denial of service. (bsc#1190534)

The following non-security bugs were fixed:
https://lists.suse.com/pipermail/sle-security-updates/2021-October/009580.html

Issue Links

• is related to: LU-15303 kernel update [SLES12 SP5 4.12.14-122.98.1]
• is related to: LU-15037 kernel update [SLES12 SP5 4.12.14-122.88.1]