The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel . - CVE-2020-29569: Fixed a potential privilege escalation and information leaks related to the PV block backend, as used by Xen . - CVE-2020-29568: Fixed a denial of service issue, related to processing watch events . - CVE-2020-25211: Fixed a flaw where a local attacker was able to inject conntrack netlink configuration that could cause a denial of service or trigger the use of incorrect protocol numbers in ctnetlink_parse_tuple_filter . - CVE-2020-0444: Fixed a bad kfree due to a logic error in audit_data_to_entry . - CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation . - CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c . - CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to gain privileges or cause a denial of service . - CVE-2020-27068: Fixed an out-of-bounds read due to a missing bounds check in the nl80211_policy policy of nl80211.c . - CVE-2020-27777: Fixed a privilege escalation in the Run-Time Abstraction Services interface, affecting guests running on top of PowerVM or KVM hypervisors . - CVE-2020-27786: Fixed an out-of-bounds write in the MIDI implementation . - CVE-2020-27825: Fixed a race in the trace_open and buffer resize calls . - CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID . - CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP . - CVE-2020-28974: Fixed a slab-out-of-bounds read in fbcon which could have been used by local attackers to read privileged information or potentially crash the kernel . - CVE-2020-28915: Fixed a buffer over-read in the fbcon code which could have been used by local attackers to read kernel memory . - CVE-2020-25669: Fixed a use-after-free read in sunkbd_reinit . - CVE-2020-25285: A race condition between hugetlb sysctl handlers in mm/hugetlb.c could be used by local attackers to corrupt memory, cause a NULL pointer dereference, or possibly have unspecified other impact . - CVE-2020-15437: Fixed a null pointer dereference which could have allowed local users to cause a denial of service . - CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver . - CVE-2020-11668: Fixed the mishandling of invalid descriptors in the Xirlink camera USB driver . - CVE-2020-25668: Fixed a use-after-free in con_font_op . - CVE-2020-27673: Fixed an issue where rogue guests could have caused denial of service of Dom0 via high frequency events - CVE-2019-20934: Fixed a use-after-free in show_numa_stats because NUMA fault statistics were inappropriately freed . - CVE-2019-19063: Fixed two memory leaks in the rtl_usb_probe which could eventually have allowed attackers to cause a denial of service . - CVE-2019-6133: Fixed an issue where the quot;start timequot; protection mechanism could have been bypassed and therefore authorization decisions are improperly cached .