The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel . - CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation . - CVE-2020-25211: Fixed a flaw where a local attacker was able to inject conntrack netlink configuration that could cause a denial of service or trigger the use of incorrect protocol numbers in ctnetlink_parse_tuple_filter . - CVE-2020-14390: Fixed an out-of-bounds memory write leading to memory corruption or a denial of service when changing screen size . - CVE-2020-25284: Fixed an incomplete permission checking for access to rbd devices, which could have been leveraged by local attackers to map or unmap rbd block devices . - CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to gain privileges or cause a denial of service . - CVE-2020-14331: Fixed a missing check in vgacon scrollback handling . - CVE-2017-18270: Fixed an issue where keys - for keyctl prevent creating a different user"s keyrings . - CVE-2020-14381: Fixed requeue paths such that filp was valid when dropping the references . - CVE-2020-27068: Fixed an out-of-bounds read due to a missing bounds check in the nl80211_policy policy of nl80211.c . - CVE-2020-27777: Fixed a privilege escalation in the Run-Time Abstraction Services interface, affecting guests running on top of PowerVM or KVM hypervisors . - CVE-2020-27786: Fixed an out-of-bounds write in the MIDI implementation . - CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID . - CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP . - CVE-2020-28974: Fixed a slab-out-of-bounds read in fbcon which could have been used by local attackers to read privileged information or potentially crash the kernel . - CVE-2020-28915: Fixed a buffer over-read in the fbcon code which could have been used by local attackers to read kernel memory . - CVE-2020-25669: Fixed a use-after-free read in sunkbd_reinit . - CVE-2020-25285: A race condition between hugetlb sysctl handlers in mm/hugetlb.c could be used by local attackers to corrupt memory, cause a NULL pointer dereference, or possibly have unspecified other impact . - CVE-2020-15437: Fixed a null pointer dereference which could have allowed local users to cause a denial of service . - CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver . - CVE-2020-11668: Fixed the mishandling of invalid descriptors in the Xirlink camera USB driver . - CVE-2020-25668: Fixed a use-after-free in con_font_op . - CVE-2020-4788: Fixed an issue with IBM Power9 processors could have allowed a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances . - CVE-2020-0431: Fixed an out of bounds write due to a missing bounds check . - CVE-2020-0404: Fixed a linked list corruption due to an unusual root cause . - CVE-2019-20934: Fixed a use-after-free in show_numa_stats because NUMA fault statistics were inappropriately freed . - CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl . - CVE-2020-25643: Fixed a memory corruption and a read overflow which could have caused by improper input validation in the ppp_cp_parse_cr function . - CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c .