Security update for the Linux Kernel

Announcement ID:	SUSE-RU-2021:14663-1
Rating:	important
References:	bsc#1179745 bsc#1182505
Cross-References:	CVE-2020-29660 CVE-2020-29661
CVSS scores:	CVE-2020-29660 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2020-29660 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N CVE-2020-29661 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2020-29661 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products:	SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4

An update that solves two vulnerabilities can now be installed.

Description:

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes.

The following non-security bug was fixed:

• Fixed a regression where KVM VM hangs caused by the fix CVE-2020-29660 and CVE-2020-29661 (bsc#1182505).

Special Instructions and Notes:

• Please reboot the system after installing this update.

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4
  zypper in -t patch slessp4-kernel-source-14663=1
• SUSE Linux Enterprise Server 11 SP4
  zypper in -t patch slessp4-kernel-source-14663=1

Package List:

• SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4 (s390x x86_64 i586 ppc64 nosrc)
  • kernel-trace-3.0.101-108.123.1
  • kernel-default-3.0.101-108.123.1
• SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4 (ppc64 s390x x86_64 i586)
  • kernel-syms-3.0.101-108.123.1
  • kernel-trace-devel-3.0.101-108.123.1
  • kernel-source-3.0.101-108.123.1
  • kernel-trace-base-3.0.101-108.123.1
  • kernel-default-devel-3.0.101-108.123.1
  • kernel-default-base-3.0.101-108.123.1
• SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4 (nosrc x86_64 i586)
  • kernel-xen-3.0.101-108.123.1
  • kernel-ec2-3.0.101-108.123.1
• SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4 (x86_64 i586)
  • kernel-ec2-base-3.0.101-108.123.1
  • kernel-xen-devel-3.0.101-108.123.1
  • kernel-ec2-devel-3.0.101-108.123.1
  • kernel-xen-base-3.0.101-108.123.1
• SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4 (nosrc i586)
  • kernel-pae-3.0.101-108.123.1
• SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4 (i586)
  • kernel-pae-base-3.0.101-108.123.1
  • kernel-pae-devel-3.0.101-108.123.1
• SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4 (ppc64 nosrc)
  • kernel-ppc64-3.0.101-108.123.1
  • kernel-bigmem-3.0.101-108.123.1
• SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4 (ppc64)
  • kernel-ppc64-base-3.0.101-108.123.1
  • kernel-bigmem-devel-3.0.101-108.123.1
  • kernel-bigmem-base-3.0.101-108.123.1
  • kernel-ppc64-devel-3.0.101-108.123.1
• SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4 (s390x)
  • kernel-default-man-3.0.101-108.123.1
• SUSE Linux Enterprise Server 11 SP4 (s390x x86_64 i586 ppc64 nosrc)
  • kernel-trace-3.0.101-108.123.1
  • kernel-default-3.0.101-108.123.1
• SUSE Linux Enterprise Server 11 SP4 (ppc64 s390x x86_64 i586)
  • kernel-syms-3.0.101-108.123.1
  • kernel-trace-devel-3.0.101-108.123.1
  • kernel-source-3.0.101-108.123.1
  • kernel-trace-base-3.0.101-108.123.1
  • kernel-default-devel-3.0.101-108.123.1
  • kernel-default-base-3.0.101-108.123.1
• SUSE Linux Enterprise Server 11 SP4 (nosrc x86_64 i586)
  • kernel-xen-3.0.101-108.123.1
  • kernel-ec2-3.0.101-108.123.1
• SUSE Linux Enterprise Server 11 SP4 (x86_64 i586)
  • kernel-ec2-base-3.0.101-108.123.1
  • kernel-xen-devel-3.0.101-108.123.1
  • kernel-ec2-devel-3.0.101-108.123.1
  • kernel-xen-base-3.0.101-108.123.1
• SUSE Linux Enterprise Server 11 SP4 (nosrc i586)
  • kernel-pae-3.0.101-108.123.1
• SUSE Linux Enterprise Server 11 SP4 (i586)
  • kernel-pae-base-3.0.101-108.123.1
  • kernel-pae-devel-3.0.101-108.123.1
• SUSE Linux Enterprise Server 11 SP4 (ppc64 nosrc)
  • kernel-ppc64-3.0.101-108.123.1
  • kernel-bigmem-3.0.101-108.123.1
• SUSE Linux Enterprise Server 11 SP4 (ppc64)
  • kernel-ppc64-base-3.0.101-108.123.1
  • kernel-bigmem-devel-3.0.101-108.123.1
  • kernel-bigmem-base-3.0.101-108.123.1
  • kernel-ppc64-devel-3.0.101-108.123.1
• SUSE Linux Enterprise Server 11 SP4 (s390x)
  • kernel-default-man-3.0.101-108.123.1

References:

• https://www.suse.com/security/cve/CVE-2020-29660.html
• https://www.suse.com/security/cve/CVE-2020-29661.html
• https://bugzilla.suse.com/show_bug.cgi?id=1179745
• https://bugzilla.suse.com/show_bug.cgi?id=1182505