Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP1)
Details
This update for the Linux Kernel 4.12.14-197_64 fixes several issues.
The following security issues were fixed:
CVE-2020-25668: Fixed a concurrency use-after-free in confontop (bsc#1178622).
CVE-2020-8694: Fixed an insufficient access control in the Linux kernel driver for some Intel(R) Processors which might have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1178700).
CVE-2020-25705: Fixed a flaw which could have allowed an off-path remote user to effectively bypass source port UDP randomization (bsc#1178783).
Fixed an issue where system was hanging due to a massive amount of soft lockups in btrfsdropandfreefs_root() (bsc#1178046).