The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetooth may have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent attacker could impersonate a Bluetooth BR/EDR master or slave to pair with a previously paired remote device to successfully complete the authentication procedure without knowing the link key . - CVE-2020-10711: A NULL pointer dereference flaw was found in the SELinux subsystem. This flaw occurs while importing the Commercial IP Security Option protocol"s category bitmap into the SELinux extensible bitmap via the" ebitmap_netlbl_import" routine. This flaw allowed a remote network user to crash the system kernel, resulting in a denial of service . - CVE-2020-10751: A flaw was found in the SELinux LSM hook implementation, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages within the skb with the granted permission without further processing . - CVE-2019-20812: An issue was discovered in the prb_calc_retire_blk_tmo function in net/packet/af_packet.c can result in a denial of service in a certain failure case involving TPACKET_V3, aka CID-b43d1f9f7067 . - CVE-2020-10732: A flaw was found in the implementation of userspace core dumps. This flaw allowed an attacker with a local account to crash a trivial program and exfiltrate private kernel data . - CVE-2020-0305: In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation . - CVE-2020-12771: btree_gc_coalesce in drivers/md/bcache/btree.c had a deadlock if a coalescing operation fails . - CVE-2020-10773: A kernel stack information leak on s390/s390x was fixed . - CVE-2020-14416: A race condition in tty-gt;disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c . - CVE-2020-13974: drivers/tty/vt/keyboard.c had an integer overflow if k_ascii is called several times in a row, aka CID-b86dab054059. - CVE-2019-20810: go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel did not call snd_card_free for a failure path, which causes a memory leak, aka CID-9453264ef586 . The following non-security bugs were fixed: - Drivers: hv: Change flag to write log level in panic msg to false . - ibmvnic: Do not process device remove during device reset . - ibmvnic: Do not process reset during or after device removal . - ibmvnic: Flush existing work items before device removal . - ibmvnic: Harden device login requests . - ibmvnic: Skip fatal error reset after passive init . - ibmvnic: Unmap DMA address of TX descriptor buffers after use . - ibmvnic: continue to init in CRQ reset returns H_CLOSED . - intel_idle: Graceful probe failure when MWAIT is disabled . - mm, vmstat: reduce zone-gt;lock holding time by /proc/pagetypeinfo . - net/ibmvnic: Fix missing { in __ibmvnic_reset . - net/ibmvnic: free reset work of removed device from queue . - net/ibmvnic: prevent more than one thread from running in reset . - net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run . - udp: drop corrupt packets earlier to avoid data corruption . Special Instructions and Notes: Please reboot the system after installing this update.