[LU-14127] kernel update [SLES15 SP2 5.3.18-24.34.1]

Related — Wed, 11 Nov 2020 22:51:31 +0000

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various
security and bugfixes.

The following security bugs were fixed:

CVE-2020-25285: A race condition between hugetlb sysctl handlers in
mm/hugetlb.c could be used by local attackers to corrupt memory, cause a
NULL pointer dereference, or possibly have unspecified other impact
(bnc#1176485).
CVE-2020-16120: Fixed permission check to open real file when using
overlayfs. It was possible to have a file not readable by an
unprivileged user be copied to a mountpoint controlled by that user and
then be able to access the file. (bsc#1177470)
CVE-2020-14351: Fixed a race condition in the perf_mmap_close() function
(bsc#1177086).

Whamcloud Community JIRA