{
   affected: [],
   aliases: [
      "CVE-2020-10781",
   ],
   database_specific: {
      cwe_ids: [
         "CWE-732",
      ],
      github_reviewed: false,
      github_reviewed_at: null,
      nvd_published_at: "2020-09-16T13:15:00Z",
      severity: "MODERATE",
   },
   details: "A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device. With this vulnerability, continually reading the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes, possibly making the system inoperable.",
   id: "GHSA-93vf-4x6g-q64v",
   modified: "2022-10-07T18:15:55Z",
   published: "2022-05-24T17:28:22Z",
   references: [
      {
         type: "ADVISORY",
         url: "https://nvd.nist.gov/vuln/detail/CVE-2020-10781",
      },
      {
         type: "WEB",
         url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10781",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=853eab68afc80f59f36bbdeb715e5c88c501e680",
      },
      {
         type: "WEB",
         url: "https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html",
      },
      {
         type: "WEB",
         url: "https://www.openwall.com/lists/oss-security/2020/06/18/1",
      },
   ],
   schema_version: "1.4.0",
   severity: [
      {
         score: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
         type: "CVSS_V3",
      },
   ],
}

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for the Linux Kernel",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2020-15393: Fixed a memory leak in usbtest_disconnect (bnc#1173514).\n- CVE-2020-12771: An issue was discovered in btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails (bnc#1171732).\n- CVE-2020-12888: The VFIO PCI driver mishandled attempts to access disabled memory space (bnc#1171868).\n- CVE-2020-10773: Fixed a memory leak on s390/s390x, in the cmm_timeout_hander in file arch/s390/mm/cmm.c (bnc#1172999).\n- CVE-2020-14416: Fixed a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c (bnc#1162002).\n- CVE-2020-10768: Fixed an issue with the prctl() function, where indirect branch speculation could be enabled even though it was diabled before (bnc#1172783).\n- CVE-2020-10766: Fixed an issue which allowed an attacker with a local account to disable SSBD protection (bnc#1172781).\n- CVE-2020-10767: Fixed an issue where Indirect Branch Prediction Barrier was disabled in certain circumstances, leaving the system open to a spectre v2 style attack (bnc#1172782).\n- CVE-2020-13974: Fixed a integer overflow in drivers/tty/vt/keyboard.c, if k_ascii is called several times in a row (bnc#1172775).\n- CVE-2019-20810: Fixed a memory leak in go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c because it did not call snd_card_free for a failure path (bnc#1172458).\n- CVE-2020-10769: A buffer over-read flaw was found in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. This flaw allowed a local attacker with user privileges to cause a denial of service (bnc#1173265).\n- CVE-2020-10781: Fixed a denial of service issue in the ZRAM implementation (bsc#1173074).\n- CVE-2020-0305: In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bsc#1174462).\n- CVE-2019-20908: An issue was discovered in drivers/firmware/efi/efi.c: incorrect access permissions for the efivar_ssdt ACPI variable could be used by attackers to bypass lockdown or secure boot restrictions, aka CID-1957a85b0032 (bsc#1173567).\n- CVE-2020-15780: An issue was discovered in drivers/acpi/acpi_configfs.c: injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30 (bsc#1173573).\n\nThe following non-security bugs were fixed:\n\n- ACPI: GED: add support for _Exx / _Lxx handler methods (bsc#1111666).\n- ACPI: GED: use correct trigger type field in _Exx / _Lxx handling (bsc#1111666).\n- ACPI: NFIT: Fix unlock on error in scrub_show() (bsc#1171753).\n- ACPI: PM: Avoid using power resources if there are none for D0 (bsc#1051510).\n- ACPI: sysfs: Fix pm_profile_attr type (bsc#1111666).\n- ACPI: video: Use native backlight on Acer Aspire 5783z (bsc#1111666).\n- ACPI: video: Use native backlight on Acer TravelMate 5735Z (bsc#1111666).\n- ALSA: es1688: Add the missed snd_card_free() (bsc#1051510).\n- ALSA: hda: Add ElkhartLake HDMI codec vid (bsc#1111666).\n- ALSA: hda: add sienna_cichlid audio asic id for sienna_cichlid up (bsc#1111666).\n- ALSA: hda/hdmi - enable runtime pm for newer AMD display audio (bsc#1111666).\n- ALSA: hda - let hs_mic be picked ahead of hp_mic (bsc#1111666).\n- ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines (bsc#1111666).\n- ALSA: hda/realtek - Add LED class support for micmute LED (bsc#1111666).\n- ALSA: hda/realtek - Enable micmute LED on and HP system (bsc#1111666).\n- ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534 (bsc#1111666).\n- ALSA: hda/realtek - Fix unused variable warning w/o CONFIG_LEDS_TRIGGER_AUDIO (bsc#1111666).\n- ALSA: hda/realtek - Introduce polarity for micmute LED GPIO (bsc#1111666).\n- ALSA: lx6464es - add support for LX6464ESe pci express variant (bsc#1111666).\n- ALSA: opl3: fix infoleak in opl3 (bsc#1111666).\n- ALSA: pcm: disallow linking stream to itself (bsc#1111666).\n- ALSA: usb-audio: Add duplex sound support for USB devices using implicit feedback (bsc#1111666).\n- ALSA: usb-audio: Add Pioneer DJ DJM-900NXS2 support (bsc#1111666).\n- ALSA: usb-audio: add quirk for MacroSilicon MS2109 (bsc#1111666).\n- ALSA: usb-audio: Add vendor, product and profile name for HP Thunderbolt Dock (bsc#1111666).\n- ALSA: usb-audio: Clean up quirk entries with macros (bsc#1111666).\n- ALSA: usb-audio: Fix inconsistent card PM state after resume (bsc#1111666).\n- ALSA: usb-audio: Fix packet size calculation (bsc#1111666).\n- ALSA: usb-audio: Fix racy list management in output queue (bsc#1111666).\n- ALSA: usb-audio: Improve frames size computation (bsc#1111666).\n- ALSA: usb-audio: Manage auto-pm of all bundled interfaces (bsc#1111666).\n- ALSA: usb-audio: Use the new macro for HP Dock rename quirks (bsc#1111666).\n- amdgpu: a NULL ->mm does not mean a thread is a kthread (git-fixes).\n- arm64: map FDT as RW for early_init_dt_scan() (jsc#SLE-12423).\n- ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb (bsc#1111666).\n- ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx (bsc#1111666).\n- ath9k: Fix use-after-free Write in ath9k_htc_rx_msg (bsc#1111666).\n- ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb (bsc#1111666).\n- ax25: fix setsockopt(SO_BINDTODEVICE) (networking-stable-20_05_27).\n- b43: Fix connection problem with WPA3 (bsc#1111666).\n- b43_legacy: Fix connection problem with WPA3 (bsc#1111666).\n- bcache: Fix an error code in bch_dump_read() (git fixes (block drivers)).\n- be2net: fix link failure after ethtool offline test (git-fixes).\n- block: nr_sects_write(): Disable preemption on seqcount write (bsc#1173818).\n- block: remove QUEUE_FLAG_STACKABLE (git fixes (block drivers)).\n- block: sed-opal: fix sparse warning: convert __be64 data (git fixes (block drivers)).\n- Bluetooth: Add SCO fallback for invalid LMP parameters error (bsc#1111666).\n- bnxt_en: Fix AER reset logic on 57500 chips (git-fixes).\n- bnxt_en: Fix ethtool selftest crash under error conditions (git-fixes).\n- bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails (git-fixes).\n- bnxt_en: Fix ipv6 RFS filter matching logic (git-fixes).\n- bnxt_en: fix NULL dereference in case SR-IOV configuration fails (git-fixes).\n- bnxt_en: Fix VF anti-spoof filter setup (networking-stable-20_05_12).\n- bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features() (networking-stable-20_05_12).\n- bnxt_en: Improve AER slot reset (networking-stable-20_05_12).\n- brcmfmac: fix wrong location to get firmware feature (bsc#1111666).\n- brcmfmac: Transform compatible string for FW loading (bsc#1169771).\n- btrfs: add assertions for tree == inode->io_tree to extent IO helpers (bsc#1174438).\n- btrfs: add new helper btrfs_lock_and_flush_ordered_range (bsc#1174438).\n- btrfs: Always use a cached extent_state in btrfs_lock_and_flush_ordered_range (bsc#1174438).\n- btrfs: do not zero f_bavail if we have available space (bsc#1168081).\n- btrfs: do not zero f_bavail if we have available space (bsc#1168081).\n- btrfs: drop argument tree from btrfs_lock_and_flush_ordered_range (bsc#1174438).\n- btrfs: fix extent_state leak in btrfs_lock_and_flush_ordered_range (bsc#1174438).\n- btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof (bsc#1174438).\n- btrfs: fix hang on snapshot creation after RWF_NOWAIT write (bsc#1174438).\n- btrfs: fix RWF_NOWAIT write not failling when we need to cow (bsc#1174438).\n- btrfs: fix RWF_NOWAIT writes blocking on extent locks and waiting for IO (bsc#1174438).\n- btrfs: qgroup: Fix a bug that prevents qgroup to be re-enabled after disable (bsc#1172247).\n- btrfs: Return EAGAIN if we can't start no snpashot write in check_can_nocow (bsc#1174438).\n- btrfs: use correct count in btrfs_file_write_iter() (bsc#1174438).\n- btrfs: Use newly introduced btrfs_lock_and_flush_ordered_range (bsc#1174438).\n- btrfs: volumes: Remove ENOSPC-prone btrfs_can_relocate() (bsc#1171124).\n- bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads (bsc#1111666).\n- carl9170: remove P2P_GO support (bsc#1111666).\n- CDC-ACM: heed quirk also in error handling (git-fixes).\n- ceph: convert mdsc->cap_dirty to a per-session list (bsc#1167104).\n- ceph: request expedited service on session's last cap flush (bsc#1167104).\n- cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages (bsc#1173857).\n- char/random: Add a newline at the end of the file (jsc#SLE-12423).\n- cifs: get rid of unused parameter in reconn_setup_dfs_targets() (bsc#1144333).\n- cifs: handle hostnames that resolve to same ip in failover (bsc#1144333 bsc#1161016).\n- cifs: set up next DFS target before generic_ip_connect() (bsc#1144333 bsc#1161016).\n- clk: bcm2835: Fix return type of bcm2835_register_gate (bsc#1051510).\n- clk: clk-flexgen: fix clock-critical handling (bsc#1051510).\n- clk: sunxi: Fix incorrect usage of round_down() (bsc#1051510).\n- clocksource: dw_apb_timer: Make CPU-affiliation being optional (bsc#1111666).\n- compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE (git fixes (block drivers)).\n- compat_ioctl: block: handle Persistent Reservations (git fixes (block drivers)).\n- copy_{to,from}_user(): consolidate object size checks (git fixes).\n- crypto: algboss - do not wait during notifier callback (bsc#1111666).\n- crypto: algif_skcipher - Cap recv SG list at ctx->used (bsc#1111666).\n- crypto: caam - update xts sector size for large input length (bsc#1111666).\n- crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (bsc#1111666).\n- crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (git-fixes).\n- Crypto/chcr: fix for ccm(aes) failed test (bsc#1111666).\n- crypto: chelsio/chtls: properly set tp->lsndtime (bsc#1111666).\n- crypto: talitos - fix IPsec cipher in length (git-fixes).\n- crypto: talitos - reorder code in talitos_edesc_alloc() (git-fixes).\n- debugfs: Check module state before warning in {full/open}_proxy_open() (bsc#1173746).\n- devinet: fix memleak in inetdev_init() (networking-stable-20_06_07).\n- /dev/mem: Add missing memory barriers for devmem_inode (git-fixes).\n- /dev/mem: Revoke mappings when a driver claims the region (git-fixes).\n- dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()' (bsc#1111666).\n- dm btree: increase rebalance threshold in __rebalance2() (git fixes (block drivers)).\n- dm cache: fix a crash due to incorrect work item cancelling (git fixes (block drivers)).\n- dm crypt: fix benbi IV constructor crash if used in authenticated mode (git fixes (block drivers)).\n- dm: fix potential for q->make_request_fn NULL pointer (git fixes (block drivers)).\n- dm space map common: fix to ensure new block isn't already in use (git fixes (block drivers)).\n- dm: various cleanups to md->queue initialization code (git fixes).\n- dm verity fec: fix hash block number in verity_fec_decode (git fixes (block drivers)).\n- dm verity fec: fix memory leak in verity_fec_dtr (git fixes (block drivers)).\n- dpaa_eth: fix usage as DSA master, try 3 (networking-stable-20_05_27).\n- driver-core, libnvdimm: Let device subsystems add local lockdep coverage (bsc#1171753).\n- Drivers: hv: Change flag to write log level in panic msg to false (bsc#1170617, bsc#1170618).\n- drivers: soc: ti: knav_qmss_queue: Make knav_gp_range_ops static (bsc#1051510).\n- drm: amd/display: fix Kconfig help text (bsc#1113956) \t* only fix DEBUG_KERNEL_DC\n- drm: bridge: adv7511: Extend list of audio sample rates (bsc#1111666).\n- drm/dp_mst: Increase ACT retry timeout to 3s (bsc#1113956)  * context changes\n- drm: encoder_slave: fix refcouting error for modules (bsc#1111666).\n- drm: encoder_slave: fix refcouting error for modules (bsc#1114279)\n- drm/i915/icl+: Fix hotplug interrupt disabling after storm detection (bsc#1112178)\n- drm/i915: Whitelist context-local timestamp in the gen9 cmdparser (bsc#1111666).\n- drm/mediatek: Check plane visibility in atomic_update (bsc#1113956)  * context changes\n- drm/msm/dpu: fix error return code in dpu_encoder_init (bsc#1111666).\n- drm: panel-orientation-quirks: Add quirk for Asus T101HA panel (bsc#1111666).\n- drm: panel-orientation-quirks: Use generic orientation-data for Acer S1003 (bsc#1111666).\n- drm/qxl: Use correct notify port address when creating cursor ring (bsc#1113956)\n- drm/radeon: fix double free (bsc#1113956)\n- drm/radeon: fix fb_div check in ni_init_smc_spll_table() (bsc#1113956)\n- drm/sun4i: hdmi ddc clk: Fix size of m divider (bsc#1111666).\n- drm/tegra: hub: Do not enable orphaned window group (bsc#1111666).\n- drm/vkms: Hold gem object while still in-use (bsc#1113956)  * context changes\n- Drop another USB dwc3 gadget patch that broke the build\n- Drop USB dwc3 gadget patch that broke the build on openSUSE-15.1 branch\n- e1000: Distribute switch variables for initialization (bsc#1111666).\n- e1000e: Disable TSO for buffer overrun workaround (bsc#1051510).\n- e1000e: Do not wake up the system via WOL if device wakeup is disabled (bsc#1051510).\n- e1000e: Relax condition to trigger reset for ME workaround (bsc#1111666).\n- EDAC/amd64: Read back the scrub rate PCI register on F15h (bsc#1114279).\n- efi/random: Increase size of firmware supplied randomness (jsc#SLE-12423).\n- efi/random: Treat EFI_RNG_PROTOCOL output as bootloader randomness (jsc#SLE-12423).\n- efi: READ_ONCE rng seed size before munmap (jsc#SLE-12423).\n- efi: Reorder pr_notice() with add_device_randomness() call (jsc#SLE-12423).\n- evm: Check also if *tfm is an error pointer in init_desc() (bsc#1051510).\n- evm: Fix a small race in init_desc() (bsc#1051510).\n- ext4: fix a data race at inode->i_blocks (bsc#1171835).\n- ext4: fix partial cluster initialization when splitting extent (bsc#1173839).\n- ext4: fix race between ext4_sync_parent() and rename() (bsc#1173838).\n- ext4, jbd2: ensure panic by fix a race between jbd2 abort and ext4 error handlers (bsc#1173833).\n- extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()' (bsc#1051510).\n- fanotify: fix ignore mask logic for events on child and on dir (bsc#1172719).\n- fdt: add support for rng-seed (jsc#SLE-12423).\n- fdt: Update CRC check for rng-seed (jsc#SLE-12423).\n- firmware: imx: scu: Fix corruption of header (git-fixes).\n- firmware: imx: scu: Fix possible memory leak in imx_scu_probe() (bsc#1111666).\n- Fix boot crash with MD (bsc#1174343) Refresh patches.suse/mdraid-fix-read-write-bytes-accounting.patch\n- fix multiplication overflow in copy_fdtable() (bsc#1173825).\n- Fix Patch-mainline tag in the previous zram fix patch\n- fpga: dfl: afu: Corrected error handling levels (git-fixes).\n- fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks (networking-stable-20_05_12).\n- gpiolib: Document that GPIO line names are not globally unique (bsc#1051510).\n- gpu: host1x: Detach driver on unregister (bsc#1111666).\n- gpu: ipu-v3: pre: do not trigger update if buffer address does not change (bsc#1111666).\n- HID: magicmouse: do not set up autorepeat (git-fixes).\n- HID: sony: Fix for broken buttons on DS3 USB dongles (bsc#1051510).\n- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).\n- hwmon: (acpi_power_meter) Fix potential memory leak in acpi_power_meter_add() (bsc#1111666).\n- hwmon: (emc2103) fix unable to change fan pwm1_enable attribute (bsc#1111666).\n- hwmon: (max6697) Make sure the OVERT mask is set correctly (bsc#1111666).\n- i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665 (bsc#1111666).\n- i2c: eg20t: Load module automatically if ID matches (bsc#1111666).\n- i2c: mlxcpld: check correct size of maximum RECV_LEN packet (bsc#1111666).\n- i40e: reduce stack usage in i40e_set_fc (git-fixes).\n- IB/hfi1: Do not destroy hfi1_wq when the device is shut down (bsc#1174409).\n- IB/hfi1: Do not destroy link_wq when the device is shut down (bsc#1174409).\n- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).\n- ibmvnic: continue to init in CRQ reset returns H_CLOSED (bsc#1173280 ltc#185369).\n- ibmvnic: Flush existing work items before device removal (bsc#1065729).\n- ibmvnic: Harden device login requests (bsc#1170011 ltc#183538).\n- iio: buffer: Do not allow buffers without any channels enabled to be activated (bsc#1051510).\n- iio:health:afe4404 Fix timestamp alignment and prevent data leak (bsc#1111666).\n- iio:humidity:hdc100x Fix alignment and data leak issues (bsc#1111666).\n- iio:magnetometer:ak8974: Fix alignment and data leak issues (bsc#1111666).\n- iio: mma8452: Add missed iio_device_unregister() call in mma8452_probe() (bsc#1111666).\n- iio: pressure: bmp280: Tolerate IRQ before registering (bsc#1051510).\n- iio:pressure:ms5611 Fix buffer element alignment (bsc#1111666).\n- iio: pressure: zpa2326: handle pm_runtime_get_sync failure (bsc#1111666).\n- ima: Directly assign the ima_default_policy pointer to ima_rules (bsc#1051510).\n- ima: Fix ima digest hash table key calculation (bsc#1051510).\n- include/asm-generic/topology.h: guard cpumask_of_node() macro argument (bsc#1148868).\n- Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list (bsc#1111666).\n- input: i8042 - Remove special PowerPC handling (git-fixes).\n- Input: synaptics - add a second working PNP_ID for Lenovo T470s (bsc#1111666).\n- intel_idle: Graceful probe failure when MWAIT is disabled (bsc#1174115).\n- intel_th: Fix a NULL dereference when hub driver is not loaded (bsc#1111666).\n- ipvlan: call dev_change_flags when ipvlan mode is reset (git-fixes).\n- ixgbevf: Remove limit of 10 entries for unicast filter list (git-fixes).\n- jbd2: avoid leaking transaction credits when unreserving handle (bsc#1173845).\n- jbd2: Preserve kABI when adding j_abort_mutex (bsc#1173833).\n- kabi: hv: prevent struct device_node to become defined (bsc#1172871).\n- kabi: ppc64le: prevent struct dma_map_ops to become defined (jsc#SLE-12423).\n- kABI: protect struct mlx5_cmd_work_ent (kabi).\n- kABI: reintroduce inet_hashtables.h include to l2tp_ip (kabi).\n- kernfs: fix barrier usage in __kernfs_new_node() (bsc#1111666).\n- KVM: nVMX: Do not reread VMCS-agnostic state when switching VMCS (bsc#1114279).\n- KVM: nVMX: Skip IBPB when switching between vmcs01 and vmcs02 (bsc#1114279).\n- KVM: x86: Fix APIC page invalidation race (bsc#1174122).\n- kvm: x86: Fix L1TF mitigation for shadow MMU (bsc#1171904).\n- KVM: x86/mmu: Set mmio_value to '0' if reserved #PF can't be generated (bsc#1171904).\n- KVM: x86: only do L1TF workaround on affected processors (bsc#1171904).\n- l2tp: add sk_family checks to l2tp_validate_socket (networking-stable-20_06_07).\n- l2tp: do not use inet_hash()/inet_unhash() (networking-stable-20_06_07).\n- libceph: do not omit recovery_deletes in target_copy() (bsc#1174113).\n- libceph: ignore pool overlay and cache logic on redirects (bsc#1173146).\n- libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock (bsc#1171753).\n- libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant (bsc#1171753).\n- libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl() (bsc#1171753).\n- libnvdimm: cover up changes in struct nvdimm_bus (bsc#1171753).\n- libnvdimm: cover up nd_pfn_sb changes (bsc#1171759).\n- libnvdimm/dax: Pick the right alignment default when creating dax devices (bsc#1171759).\n- libnvdimm/label: Remove the dpa align check (bsc#1171759).\n- libnvdimm/of_pmem: Provide a unique name for bus provider (bsc#1171739).\n- libnvdimm/pfn_dev: Add a build check to make sure we notice when struct page size change (bsc#1171743).\n- libnvdimm/pfn_dev: Add page size and struct page size to pfn superblock (bsc#1171759).\n- libnvdimm/pfn: Prevent raw mode fallback if pfn-infoblock valid (bsc#1171743).\n- libnvdimm/pmem: Advance namespace seed for specific probe errors (bsc#1171743).\n- libnvdimm/region: Initialize bad block for volatile namespaces (bnc#1151927 5.3.6).\n- libnvdimm/region: Rewrite _probe_success() to _advance_seeds() (bsc#1171743).\n- libnvdimm: Use PAGE_SIZE instead of SZ_4K for align check (bsc#1171759).\n- livepatch: Apply vmlinux-specific KLP relocations early (bsc#1071995).\n- livepatch: Disallow vmlinux.ko (bsc#1071995).\n- livepatch: Make klp_apply_object_relocs static (bsc#1071995).\n- livepatch: Prevent module-specific KLP rela sections from referencing vmlinux symbols (bsc#1071995).\n- livepatch: Remove .klp.arch (bsc#1071995).\n- loop: replace kill_bdev with invalidate_bdev (bsc#1173820).\n- lpfc_debugfs: get rid of pointless access_ok() (bsc#1172687 bsc#1171530).\n- lpfc: Synchronize NVME transport and lpfc driver devloss_tmo (bcs#1173060).\n- mac80211: add option for setting control flags (bsc#1111666).\n- mac80211: set IEEE80211_TX_CTRL_PORT_CTRL_PROTO for nl80211 TX (bsc#1111666).\n- mailbox: imx: Disable the clock on devm_mbox_controller_register() failure (git-fixes).\n- md: Avoid namespace collision with bitmap API (git fixes (block drivers)).\n- mdraid: fix read/write bytes accounting (bsc#1172537).\n- md: use memalloc scope APIs in mddev_suspend()/mddev_resume() (bsc#1166985)).\n- media: cec: silence shift wrapping warning in __cec_s_log_addrs() (git-fixes).\n- media: si2157: Better check for running tuner in init (bsc#1111666).\n- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw ordered workqueue (git-fixes).\n- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw workqueue (git-fixes).\n- mlxsw: pci: Return error on PCI reset timeout (git-fixes).\n- mlxsw: spectrum_acl_tcam: Position vchunk in a vregion list properly (networking-stable-20_05_12).\n- mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed (git-fixes).\n- mlxsw: spectrum_dpipe: Add missing error path (git-fixes).\n- mlxsw: spectrum: Prevent force of 56G (git-fixes).\n- mlxsw: spectrum_router: Refresh nexthop neighbour when it becomes dead (git-fixes).\n- mlxsw: spectrum_router: Remove inappropriate usage of WARN_ON() (git-fixes).\n- mlxsw: spectrum_switchdev: Add MDB entries in prepare phase (git-fixes).\n- mlxsw: spectrum_switchdev: Do not treat static FDB entries as sticky (git-fixes).\n- mmc: block: Fix request completion in the CQE timeout path (bsc#1111666).\n- mmc: block: Fix use-after-free issue for rpmb (bsc#1111666).\n- mmc: fix compilation of user API (bsc#1051510).\n- mmc: sdhci: do not enable card detect interrupt for gpio cd type (bsc#1111666).\n- mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk (bsc#1111666).\n- Move upstreamed lpfc patches into sorted section\n- mvpp2: remove misleading comment (git-fixes).\n- net: be more gentle about silly gso requests coming from user (networking-stable-20_06_07).\n- net: check untrusted gso_size at kernel entry (networking-stable-20_06_07).\n- net/cxgb4: Check the return from t4_query_params properly (git-fixes).\n- net: dsa: bcm_sf2: Fix node reference count (git-fixes).\n- net: dsa: loop: Add module soft dependency (networking-stable-20_05_16).\n- net: dsa: mt7530: fix roaming from DSA user ports (networking-stable-20_05_27).\n- net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it (git-fixes).\n- net: ena: add missing ethtool TX timestamping indication (git-fixes).\n- net: ena: avoid memory access violation by validating req_id properly (git-fixes).\n- net: ena: do not wake up tx queue when down (git-fixes).\n- net: ena: ena-com.c: prevent NULL pointer dereference (git-fixes).\n- net: ena: ethtool: use correct value for crc32 hash (git-fixes).\n- net: ena: fix continuous keep-alive resets (git-fixes).\n- net: ena: fix corruption of dev_idx_to_host_tbl (git-fixes).\n- net: ena: fix default tx interrupt moderation interval (git-fixes).\n- net: ena: fix incorrect default RSS key (git-fixes).\n- net: ena: fix incorrectly saving queue numbers when setting RSS indirection table (git-fixes).\n- net: ena: fix issues in setting interrupt moderation params in ethtool (git-fixes).\n- net: ena: fix potential crash when rxfh key is NULL (git-fixes).\n- net: ena: fix retrieval of nonadaptive interrupt moderation intervals (git-fixes).\n- net: ena: fix uses of round_jiffies() (git-fixes).\n- net: ena: make ena rxfh support ETH_RSS_HASH_NO_CHANGE (git-fixes).\n- net: ena: reimplement set/get_coalesce() (git-fixes).\n- net: ena: rss: do not allocate key when not supported (git-fixes).\n- net: ena: rss: fix failure to get indirection table (git-fixes).\n- net: ena: rss: store hash function as values and not bits (git-fixes).\n- netfilter: connlabels: prefer static lock initialiser (git-fixes).\n- netfilter: ctnetlink: netns exit must wait for callbacks (bsc#1169795).\n- netfilter: not mark a spinlock as __read_mostly (git-fixes).\n- net: fix a potential recursive NETDEV_FEAT_CHANGE (networking-stable-20_05_16).\n- net: inet_csk: Fix so_reuseport bind-address cache in tb->fast* (networking-stable-20_05_27).\n- net: ipip: fix wrong address family in init error path (networking-stable-20_05_27).\n- net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set (git-fixes).\n- net: macsec: preserve ingress frame ordering (networking-stable-20_05_12).\n- net/mlx4_core: drop useless LIST_HEAD (git-fixes).\n- net/mlx4_core: fix a memory leak bug (git-fixes).\n- net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc() (networking-stable-20_05_12).\n- net/mlx5: Add command entry handling completion (networking-stable-20_05_27).\n- net/mlx5: Avoid panic when setting vport rate (git-fixes).\n- net/mlx5: Continue driver initialization despite debugfs failure (git-fixes).\n- net/mlx5e: ethtool, Fix a typo in WOL function names (git-fixes).\n- net/mlx5e: Fix traffic duplication in ethtool steering (git-fixes).\n- net/mlx5e: Remove unnecessary clear_bit()s (git-fixes).\n- net/mlx5e: Update netdev txq on completions during closure (networking-stable-20_05_27).\n- net/mlx5: Fix command entry leak in Internal Error State (networking-stable-20_05_12).\n- net/mlx5: Fix crash upon suspend/resume (networking-stable-20_06_07).\n- net/mlx5: Fix forced completion access non initialized command entry (networking-stable-20_05_12).\n- net: mvmdio: allow up to four clocks to be specified for orion-mdio (git-fixes).\n- net: mvpp2: prs: Do not override the sign bit in SRAM parser shift (git-fixes).\n- net: phy: fix aneg restart in phy_ethtool_set_eee (networking-stable-20_05_16).\n- netprio_cgroup: Fix unlimited memory leak of v2 cgroups (networking-stable-20_05_16).\n- net: qede: stop adding events on an already destroyed workqueue (git-fixes).\n- net: qed: fix excessive QM ILT lines consumption (git-fixes).\n- net: qed: fix NVMe login fails over VFs (git-fixes).\n- net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() (networking-stable-20_05_27).\n- net: revert 'net: get rid of an signed integer overflow in ip_idents_reserve()' (networking-stable-20_05_27).\n- net sched: fix reporting the first-time use timestamp (networking-stable-20_05_27).\n- net: stricter validation of untrusted gso packets (networking-stable-20_05_12).\n- net/tls: Fix sk_psock refcnt leak in bpf_exec_tx_verdict() (networking-stable-20_05_12).\n- net/tls: Fix sk_psock refcnt leak when in tls_data_ready() (networking-stable-20_05_12).\n- net: usb: qmi_wwan: add support for DW5816e (networking-stable-20_05_12).\n- net: usb: qmi_wwan: add Telit 0x1050 composition (networking-stable-20_06_07).\n- net: usb: qmi_wwan: add Telit LE910C1-EUX composition (networking-stable-20_06_07).\n- net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss() (bsc#1172484).\n- nfp: bpf: fix code-gen bug on BPF_ALU | BPF_XOR | BPF_K (git-fixes).\n- NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid() (bsc#1170592).\n- NFSv4: Retry CLOSE and DELEGRETURN on NFS4ERR_OLD_STATEID (bsc#1170592).\n- nilfs2: fix null pointer dereference at nilfs_segctor_do_construct() (bsc#1173857).\n- nl80211: fix NL80211_ATTR_CHANNEL_WIDTH attribute type (bsc#1111666).\n- nvdimm: Avoid race between probe and reading device attributes (bsc#1170442).\n- nvme: check for NVME_CTRL_LIVE in nvme_report_ns_ids() (bcs#1171558 bsc#1159058).\n- nvme: do not update multipath disk information if the controller is down (bcs#1171558 bsc#1159058).\n- nvme: fail cancelled commands with NVME_SC_HOST_PATH_ERROR (bsc#1158983 bsc#1172538).\n- nvme-fc: Fail transport errors with NVME_SC_HOST_PATH (bsc#1158983 bsc#1172538).\n- nvme-tcp: fail command with NVME_SC_HOST_PATH_ERROR send failed (bsc#1158983 bsc#1172538).\n- objtool: Clean instruction state before each function validation (bsc#1169514).\n- objtool: Ignore empty alternatives (bsc#1169514).\n- ocfs2: no need try to truncate file beyond i_size (bsc#1171841).\n- overflow: Fix -Wtype-limits compilation warnings (git fixes).\n- overflow.h: Add arithmetic shift helper (git fixes).\n- p54usb: add AirVasT USB stick device-id (bsc#1051510).\n- padata: ensure the reorder timer callback runs on the correct CPU (git-fixes).\n- padata: reorder work kABI fixup (git-fixes).\n- PCI/AER: Remove HEST/FIRMWARE_FIRST parsing for AER ownership (bsc#1174356).\n- PCI/AER: Use only _OSC to determine AER ownership (bsc#1174356).\n- PCI: Allow pci_resize_resource() for devices on root bus (bsc#1051510).\n- PCI: Fix pci_register_host_bridge() device_register() error handling (bsc#1051510).\n- PCI: Generalize multi-function power dependency device links (bsc#1111666).\n- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871, bsc#1172872).\n- PCI: hv: Fix the PCI HyperV probe failure path to release resource properly (bsc#1172871, bsc#1172872).\n- PCI: hv: Introduce hv_msi_entry (bsc#1172871, bsc#1172872).\n- PCI: hv: Move hypercall related definitions into tlfs header (bsc#1172871, bsc#1172872).\n- PCI: hv: Move retarget related structures into tlfs header (bsc#1172871, bsc#1172872).\n- PCI: hv: Reorganize the code in preparation of hibernation (bsc#1172871, bsc#1172872).\n- PCI: hv: Retry PCI bus D0 entry on invalid device state (bsc#1172871, bsc#1172872).\n- PCI: pciehp: Fix indefinite wait on sysfs requests (git-fixes).\n- PCI: pciehp: Support interrupts sent from D3hot (git-fixes).\n- PCI/PM: Call .bridge_d3() hook only if non-NULL (git-fixes).\n- PCI: Program MPS for RCiEP devices (bsc#1051510).\n- PCI/PTM: Inherit Switch Downstream Port PTM settings from Upstream Port (bsc#1051510).\n- pci: Revive pci_dev __aer_firmware_first* fields for kABI (bsc#1174356).\n- pcm_native: result of put_user() needs to be checked (bsc#1111666).\n- perf: Allocate context task_ctx_data for child event (git-fixes).\n- perf/cgroup: Fix perf cgroup hierarchy support (git-fixes).\n- perf: Copy parent's address filter offsets on clone (git-fixes).\n- perf/core: Add sanity check to deal with pinned event failure (git-fixes).\n- perf/core: Avoid freeing static PMU contexts when PMU is unregistered (git-fixes).\n- perf/core: Correct event creation with PERF_FORMAT_GROUP (git-fixes).\n- perf/core: Do not WARN() for impossible ring-buffer sizes (git-fixes).\n- perf/core: Fix ctx_event_type in ctx_resched() (git-fixes).\n- perf/core: Fix error handling in perf_event_alloc() (git-fixes).\n- perf/core: Fix exclusive events' grouping (git-fixes).\n- perf/core: Fix group scheduling with mixed hw and sw events (git-fixes).\n- perf/core: Fix impossible ring-buffer sizes warning (git-fixes).\n- perf/core: Fix locking for children siblings group read (git-fixes).\n- perf/core: Fix lock inversion between perf,trace,cpuhp (git-fixes (dependent patch for 18736eef1213)).\n- perf/core: Fix perf_event_read_value() locking (git-fixes).\n- perf/core: Fix perf_pmu_unregister() locking (git-fixes).\n- perf/core: Fix __perf_read_group_add() locking (git-fixes (dependent patch)).\n- perf/core: Fix perf_sample_regs_user() mm check (git-fixes).\n- perf/core: Fix possible Spectre-v1 indexing for ->aux_pages (git-fixes).\n- perf/core: Fix race between close() and fork() (git-fixes).\n- perf/core: Fix the address filtering fix (git-fixes).\n- perf/core: Fix use-after-free in uprobe_perf_close() (git-fixes).\n- perf/core: Force USER_DS when recording user stack data (git-fixes).\n- perf/core: Restore mmap record type correctly (git-fixes).\n- perf: Fix header.size for namespace events (git-fixes).\n- perf/ioctl: Add check for the sample_period value (git-fixes).\n- perf, pt, coresight: Fix address filters for vmas with non-zero offset (git-fixes).\n- perf: Return proper values for user stack errors (git-fixes).\n- perf/x86/amd: Constrain Large Increment per Cycle events (git-fixes).\n- perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity (git-fixes).\n- perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops (git-fixes).\n- perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) (git-fixes).\n- perf/x86/amd/iommu: Make the 'amd_iommu_attr_groups' symbol static (git-fixes).\n- perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs (git-fixes stable).\n- perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs (git-fixes).\n- perf/x86/amd/uncore: Set ThreadMask and SliceMask for L3 Cache perf events (git-fixes stable).\n- perf/x86: Enable free running PEBS for REGS_USER/INTR (git-fixes).\n- perf/x86: Fix incorrect PEBS_REGS (git-fixes).\n- perf/x86/intel: Add generic branch tracing check to intel_pmu_has_bts() (git-fixes).\n- perf/x86/intel: Add proper condition to run sched_task callbacks (git-fixes).\n- perf/x86/intel/bts: Fix the use of page_private() (git-fixes).\n- perf/x86/intel: Fix PT PMI handling (git-fixes).\n- perf/x86/intel: Move branch tracing setup to the Intel-specific source file (git-fixes).\n- perf/x86/intel/uncore: Add Node ID mask (git-fixes).\n- perf/x86/intel/uncore: Fix PCI BDF address of M3UPI on SKX (git-fixes).\n- perf/x86/intel/uncore: Handle invalid event coding for free-running counter (git-fixes).\n- perf/x86/uncore: Fix event group support (git-fixes).\n- pid: Improve the comment about waiting in zap_pid_ns_processes (git fixes)).\n- pinctrl: freescale: imx: Fix an error handling path in 'imx_pinctrl_probe()' (bsc#1051510).\n- pinctrl: imxl: Fix an error handling path in 'imx1_pinctrl_core_probe()' (bsc#1051510).\n- pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs (bsc#1051510).\n- platform/x86: dell-laptop: do not register micmute LED if there is no token (bsc#1111666).\n- platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32() (bsc#1111666).\n- PM / Domains: Allow genpd users to specify default active wakeup behavior (git-fixes).\n- pnp: Use list_for_each_entry() instead of open coding (git fixes).\n- powerpc/64s: Do not let DT CPU features set FSCR_DSCR (bsc#1065729).\n- powerpc/64s: Save FSCR to init_task.thread.fscr after feature init (bsc#1065729).\n- powerpc/book3s64: Export has_transparent_hugepage() related functions (bsc#1171759).\n- powerpc/book3s64/pkeys: Fix pkey_access_permitted() for execute disable pkey (bsc#1065729).\n- powerpc/fadump: fix race between pstore write and fadump crash trigger (bsc#1168959 ltc#185010).\n- powerpc/xive: Clear the page tables for the ESB IO mapping (bsc#1085030).\n- powerpc/xmon: Reset RCU and soft lockup watchdogs (bsc#1065729).\n- power: supply: bq24257_charger: Replace depends on REGMAP_I2C with select (bsc#1051510).\n- power: supply: lp8788: Fix an error handling path in 'lp8788_charger_probe()' (bsc#1051510).\n- power: supply: smb347-charger: IRQSTAT_D is volatile (bsc#1051510).\n- power: vexpress: add suppress_bind_attrs to true (bsc#1111666).\n- pppoe: only process PADT targeted at local interfaces (networking-stable-20_05_16).\n- qed: reduce maximum stack frame size (git-fixes).\n- qlcnic: fix missing release in qlcnic_83xx_interrupt_test (git-fixes).\n- r8152: support additional Microsoft Surface Ethernet Adapter variant (networking-stable-20_05_27).\n- raid5: remove gfp flags from scribble_alloc() (bsc#1166985).\n- RDMA/efa: Fix setting of wrong bit in get/set_feature commands (bsc#1111666)\n- RDMA/efa: Set maximum pkeys device attribute (bsc#1111666)\n- RDMA/efa: Support remote read access in MR registration (bsc#1111666)\n- RDMA/efa: Unified getters/setters for device structs bitmask access (bsc#1111666)\n- README.BRANCH: Add Takashi Iwai as primary maintainer.\n- regmap: debugfs: Do not sleep while atomic for fast_io regmaps (bsc#1111666).\n- resolve KABI warning for perf-pt-coresight (git-fixes).\n- Revert 'bcache: ignore pending signals when creating gc and allocator thread' (git fixes (block drivers)).\n- Revert commit e918e570415c ('tpm_tis: Remove the HID IFX0102') (bsc#1111666).\n- Revert 'dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues' (git fixes (block drivers)).\n- Revert 'thermal: mediatek: fix register index error' (bsc#1111666).\n- Revert 'tools lib traceevent: Remove unneeded qsort and uses memmove'\n- rtnetlink: Fix memory(net_device) leak when ->newlink fails (git-fixes).\n- s390/bpf: Maintain 8-byte stack alignment (bsc#1169194).\n- s390: fix syscall_get_error for compat processes (git-fixes).\n- s390/qdio: consistently restore the IRQ handler (git-fixes).\n- s390/qdio: lock device while installing IRQ handler (git-fixes).\n- s390/qdio: put thinint indicator after early error (git-fixes).\n- s390/qdio: tear down thinint indicator after early error (git-fixes).\n- s390/qeth: fix error handling for isolation mode cmds (git-fixes).\n- sch_choke: avoid potential panic in choke_reset() (networking-stable-20_05_12).\n- sch_sfq: validate silly quantum values (networking-stable-20_05_12).\n- scsi: aacraid: fix a signedness bug (bsc#1174296).\n- scsi: hisi_sas: fix calls to dma_set_mask_and_coherent() (bsc#1174296).\n- scsi: ibmvscsi: Do not send host info in adapter info MAD after LPM (bsc#1172759 ltc#184814).\n- scsi: lpfc: Add an internal trace log buffer (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Add blk_io_poll support for latency improvment (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Add support to display if adapter dumps are available (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Allow applications to issue Common Set Features mailbox command (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Avoid another null dereference in lpfc_sli4_hba_unset() (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix inconsistent indenting (bsc#1158983).\n- scsi: lpfc: Fix interrupt assignments when multiple vectors are supported on same CPU (bsc#1158983).\n- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix language in 0373 message to reflect non-error message (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix less-than-zero comparison of unsigned value (bsc#1158983).\n- scsi: lpfc: Fix missing MDS functionality (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix NVMe rport deregister and registration during ADISC (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix oops due to overrun when reading SLI3 data (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix shost refcount mismatch when deleting vport (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix stack trace seen while setting rrq active (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix unused assignment in lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1158983).\n- scsi: megaraid_sas: Fix a compilation warning (bsc#1174296).\n- scsi: mpt3sas: Fix double free in attach error handling (bsc#1174296).\n- scsi: qedf: Add port_id getter (bsc#1150660).\n- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() (bsc#1174296).\n- scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (bsc#1158983).\n- sctp: Do not add the shutdown timer if its already been added (networking-stable-20_05_27).\n- sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed (networking-stable-20_05_27).\n- spi: dw: use 'smp_mb()' to avoid sending spi data error (bsc#1051510).\n- spi: fix initial SPI_SR value in spi-fsl-dspi (bsc#1111666).\n- spi: pxa2xx: Apply CS clk quirk to BXT (bsc#1111666).\n- spi: spidev: fix a race between spidev_release and spidev_remove (bsc#1111666).\n- spi: spi-mem: Fix Dual/Quad modes on Octal-capable devices (bsc#1111666).\n- spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate (bsc#1111666).\n- staging: comedi: verify array index is correct before using it (bsc#1111666).\n- staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK (bsc#1051510).\n- staging: sm750fb: add missing case while setting FB_VISUAL (bsc#1051510).\n- SUNRPC: The TCP back channel mustn't disappear while requests are outstanding (bsc#1152624).\n- tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes (bsc#1173284).\n- timers: Add a function to start/reduce a timer (networking-stable-20_05_27).\n- tpm_tis: extra chip->ops check on error path in tpm_tis_core_init (bsc#1111666).\n- tpm_tis: Remove the HID IFX0102 (bsc#1111666).\n- tracing: Fix event trigger to accept redundant spaces (git-fixes).\n- tty: hvc_console, fix crashes on parallel open/close (git-fixes).\n- tty: n_gsm: Fix bogus i++ in gsm_data_kick (bsc#1051510).\n- tty: n_gsm: Fix SOF skipping (bsc#1051510).\n- tty: n_gsm: Fix waking up upper tty layer when room available (bsc#1051510).\n- tunnel: Propagate ECT(1) when decapsulating as recommended by RFC6040 (networking-stable-20_05_12).\n- ubifs: remove broken lazytime support (bsc#1173826).\n- usb: add USB_QUIRK_DELAY_INIT for Logitech C922 (git-fixes).\n- USB: c67x00: fix use after free in c67x00_giveback_urb (bsc#1111666).\n- usb: chipidea: core: add wakeup support for extcon (bsc#1111666).\n- usb: dwc2: Fix shutdown callback in platform (bsc#1111666).\n- usb: dwc2: gadget: move gadget resume after the core is in L0 state (bsc#1051510).\n- usb: dwc3: gadget: introduce cancelled_list (git-fixes).\n- usb: dwc3: gadget: never call ->complete() from ->ep_queue() (git-fixes).\n- usb: dwc3: gadget: Properly handle ClearFeature(halt) (git-fixes).\n- usb: dwc3: gadget: Properly handle failed kick_transfer (git-fixes).\n- USB: ehci: reopen solution for Synopsys HC bug (git-fixes).\n- usb: gadget: fix potential double-free in m66592_probe (bsc#1111666).\n- usb: gadget: lpc32xx_udc: do not dereference ep pointer before null check (bsc#1051510).\n- usb: gadget: udc: atmel: fix uninitialized read in debug printk (bsc#1111666).\n- usb: gadget: udc: atmel: remove outdated comment in usba_ep_disable() (bsc#1111666).\n- usb: gadget: udc: Potential Oops in error handling code (bsc#1111666).\n- USB: gadget: udc: s3c2410_udc: Remove pointless NULL check in s3c2410_udc_nuke (bsc#1051510).\n- usb: host: ehci-exynos: Fix error check in exynos_ehci_probe() (bsc#1111666).\n- USB: host: ehci-mxc: Add error handling in ehci_mxc_drv_probe() (bsc#1051510).\n- usb: musb: Fix runtime PM imbalance on error (bsc#1051510).\n- usb: musb: start session in resume for host port (bsc#1051510).\n- usbnet: smsc95xx: Fix use-after-free after removal (bsc#1111666).\n- USB: ohci-sm501: Add missed iounmap() in remove (bsc#1111666).\n- USB: serial: ch341: add new Product ID for CH340 (bsc#1111666).\n- USB: serial: cypress_m8: enable Simply Automated UPB PIM (bsc#1111666).\n- USB: serial: iuu_phoenix: fix memory corruption (bsc#1111666).\n- USB: serial: option: add GosunCn GM500 series (bsc#1111666).\n- USB: serial: option: add Quectel EG95 LTE modem (bsc#1111666).\n- USB: serial: option: add Telit LE910C1-EUX compositions (bsc#1051510).\n- USB: serial: qcserial: add DW5816e QDL support (bsc#1051510).\n- USB: serial: usb_wwan: do not resubmit rx urb on fatal errors (bsc#1051510).\n- USB: serial: usb_wwan: do not resubmit rx urb on fatal errors (git-fixes).\n- vfio/pci: Fix SR-IOV VF handling with MMIO blocking (bsc#1174123).\n- vfs: Fix EOVERFLOW testing in put_compat_statfs64 (bnc#1151927 5.3.6).\n- virtio-blk: handle block_device_operations callbacks after hot unplug (git fixes (block drivers)).\n- virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial (git-fixes).\n- vmxnet3: add geneve and vxlan tunnel offload support (bsc#1172484).\n- vmxnet3: add support to get/set rx flow hash (bsc#1172484).\n- vmxnet3: allow rx flow hash ops only when rss is enabled (bsc#1172484).\n- vmxnet3: avoid format strint overflow warning (bsc#1172484).\n- vmxnet3: prepare for version 4 changes (bsc#1172484).\n- vmxnet3: Remove always false conditional statement (bsc#1172484).\n- vmxnet3: remove redundant initialization of pointer 'rq' (bsc#1172484).\n- vmxnet3: remove unused flag 'rxcsum' from struct vmxnet3_adapter (bsc#1172484).\n- vmxnet3: Replace msleep(1) with usleep_range() (bsc#1172484).\n- vmxnet3: update to version 4 (bsc#1172484).\n- vmxnet3: use correct hdr reference when packet is encapsulated (bsc#1172484).\n- vsock: fix timeout in vsock_accept() (networking-stable-20_06_07).\n- vxlan: Avoid infinite loop when suppressing NS messages with invalid options (git-fixes).\n- w1: omap-hdq: cleanup to add missing newline for some dev_dbg (bsc#1051510).\n- watchdog: sp805: fix restart handler (bsc#1111666).\n- wil6210: add general initialization/size checks (bsc#1111666).\n- wil6210: check rx_buff_mgmt before accessing it (bsc#1111666).\n- wil6210: ignore HALP ICR if already handled (bsc#1111666).\n- wil6210: make sure Rx ring sizes are correlated (git-fixes).\n- work around mvfs bug (bsc#1162063).\n- x86/apic: Install an empty physflat_init_apic_ldr (bsc#1163309).\n- x86/cpu/amd: Make erratum #1054 a legacy erratum (bsc#1114279).\n- x86/events/intel/ds: Add PERF_SAMPLE_PERIOD into PEBS_FREERUNNING_FLAGS (git-fixes).\n- x86: Fix early boot crash on gcc-10, third try (bsc#1114279).\n- x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (bsc#1172257).\n- x86/reboot/quirks: Add MacBook6,1 reboot quirk (bsc#1114279).\n- xfrm: fix error in comment (git fixes).\n- xhci: Fix incorrect EP_STATE_MASK (git-fixes).\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2020-2103,SUSE-SLE-Module-Public-Cloud-15-SP1-2020-2103",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_2103-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2020:2103-1",
            url: "https://www.suse.com/support/update/announcement/2020/suse-su-20202103-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2020:2103-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2020-August/007208.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1051510",
            url: "https://bugzilla.suse.com/1051510",
         },
         {
            category: "self",
            summary: "SUSE Bug 1065729",
            url: "https://bugzilla.suse.com/1065729",
         },
         {
            category: "self",
            summary: "SUSE Bug 1071995",
            url: "https://bugzilla.suse.com/1071995",
         },
         {
            category: "self",
            summary: "SUSE Bug 1085030",
            url: "https://bugzilla.suse.com/1085030",
         },
         {
            category: "self",
            summary: "SUSE Bug 1111666",
            url: "https://bugzilla.suse.com/1111666",
         },
         {
            category: "self",
            summary: "SUSE Bug 1112178",
            url: "https://bugzilla.suse.com/1112178",
         },
         {
            category: "self",
            summary: "SUSE Bug 1113956",
            url: "https://bugzilla.suse.com/1113956",
         },
         {
            category: "self",
            summary: "SUSE Bug 1114279",
            url: "https://bugzilla.suse.com/1114279",
         },
         {
            category: "self",
            summary: "SUSE Bug 1144333",
            url: "https://bugzilla.suse.com/1144333",
         },
         {
            category: "self",
            summary: "SUSE Bug 1148868",
            url: "https://bugzilla.suse.com/1148868",
         },
         {
            category: "self",
            summary: "SUSE Bug 1150660",
            url: "https://bugzilla.suse.com/1150660",
         },
         {
            category: "self",
            summary: "SUSE Bug 1151927",
            url: "https://bugzilla.suse.com/1151927",
         },
         {
            category: "self",
            summary: "SUSE Bug 1152624",
            url: "https://bugzilla.suse.com/1152624",
         },
         {
            category: "self",
            summary: "SUSE Bug 1158983",
            url: "https://bugzilla.suse.com/1158983",
         },
         {
            category: "self",
            summary: "SUSE Bug 1159058",
            url: "https://bugzilla.suse.com/1159058",
         },
         {
            category: "self",
            summary: "SUSE Bug 1161016",
            url: "https://bugzilla.suse.com/1161016",
         },
         {
            category: "self",
            summary: "SUSE Bug 1162002",
            url: "https://bugzilla.suse.com/1162002",
         },
         {
            category: "self",
            summary: "SUSE Bug 1162063",
            url: "https://bugzilla.suse.com/1162063",
         },
         {
            category: "self",
            summary: "SUSE Bug 1163309",
            url: "https://bugzilla.suse.com/1163309",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166985",
            url: "https://bugzilla.suse.com/1166985",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167104",
            url: "https://bugzilla.suse.com/1167104",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168081",
            url: "https://bugzilla.suse.com/1168081",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168959",
            url: "https://bugzilla.suse.com/1168959",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169194",
            url: "https://bugzilla.suse.com/1169194",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169514",
            url: "https://bugzilla.suse.com/1169514",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169771",
            url: "https://bugzilla.suse.com/1169771",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169795",
            url: "https://bugzilla.suse.com/1169795",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170011",
            url: "https://bugzilla.suse.com/1170011",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170442",
            url: "https://bugzilla.suse.com/1170442",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170592",
            url: "https://bugzilla.suse.com/1170592",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170617",
            url: "https://bugzilla.suse.com/1170617",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170618",
            url: "https://bugzilla.suse.com/1170618",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171124",
            url: "https://bugzilla.suse.com/1171124",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171424",
            url: "https://bugzilla.suse.com/1171424",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171529",
            url: "https://bugzilla.suse.com/1171529",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171530",
            url: "https://bugzilla.suse.com/1171530",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171558",
            url: "https://bugzilla.suse.com/1171558",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171732",
            url: "https://bugzilla.suse.com/1171732",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171739",
            url: "https://bugzilla.suse.com/1171739",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171743",
            url: "https://bugzilla.suse.com/1171743",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171753",
            url: "https://bugzilla.suse.com/1171753",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171759",
            url: "https://bugzilla.suse.com/1171759",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171835",
            url: "https://bugzilla.suse.com/1171835",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171841",
            url: "https://bugzilla.suse.com/1171841",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171868",
            url: "https://bugzilla.suse.com/1171868",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171904",
            url: "https://bugzilla.suse.com/1171904",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172247",
            url: "https://bugzilla.suse.com/1172247",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172257",
            url: "https://bugzilla.suse.com/1172257",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172344",
            url: "https://bugzilla.suse.com/1172344",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172458",
            url: "https://bugzilla.suse.com/1172458",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172484",
            url: "https://bugzilla.suse.com/1172484",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172537",
            url: "https://bugzilla.suse.com/1172537",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172538",
            url: "https://bugzilla.suse.com/1172538",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172687",
            url: "https://bugzilla.suse.com/1172687",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172719",
            url: "https://bugzilla.suse.com/1172719",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172759",
            url: "https://bugzilla.suse.com/1172759",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172775",
            url: "https://bugzilla.suse.com/1172775",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172781",
            url: "https://bugzilla.suse.com/1172781",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172782",
            url: "https://bugzilla.suse.com/1172782",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172783",
            url: "https://bugzilla.suse.com/1172783",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172871",
            url: "https://bugzilla.suse.com/1172871",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172872",
            url: "https://bugzilla.suse.com/1172872",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172999",
            url: "https://bugzilla.suse.com/1172999",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173060",
            url: "https://bugzilla.suse.com/1173060",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173074",
            url: "https://bugzilla.suse.com/1173074",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173146",
            url: "https://bugzilla.suse.com/1173146",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173265",
            url: "https://bugzilla.suse.com/1173265",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173280",
            url: "https://bugzilla.suse.com/1173280",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173284",
            url: "https://bugzilla.suse.com/1173284",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173428",
            url: "https://bugzilla.suse.com/1173428",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173514",
            url: "https://bugzilla.suse.com/1173514",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173567",
            url: "https://bugzilla.suse.com/1173567",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173573",
            url: "https://bugzilla.suse.com/1173573",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173746",
            url: "https://bugzilla.suse.com/1173746",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173818",
            url: "https://bugzilla.suse.com/1173818",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173820",
            url: "https://bugzilla.suse.com/1173820",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173825",
            url: "https://bugzilla.suse.com/1173825",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173826",
            url: "https://bugzilla.suse.com/1173826",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173833",
            url: "https://bugzilla.suse.com/1173833",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173838",
            url: "https://bugzilla.suse.com/1173838",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173839",
            url: "https://bugzilla.suse.com/1173839",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173845",
            url: "https://bugzilla.suse.com/1173845",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173857",
            url: "https://bugzilla.suse.com/1173857",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174113",
            url: "https://bugzilla.suse.com/1174113",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174115",
            url: "https://bugzilla.suse.com/1174115",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174122",
            url: "https://bugzilla.suse.com/1174122",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174123",
            url: "https://bugzilla.suse.com/1174123",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174186",
            url: "https://bugzilla.suse.com/1174186",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174187",
            url: "https://bugzilla.suse.com/1174187",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174296",
            url: "https://bugzilla.suse.com/1174296",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174343",
            url: "https://bugzilla.suse.com/1174343",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174356",
            url: "https://bugzilla.suse.com/1174356",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174409",
            url: "https://bugzilla.suse.com/1174409",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174438",
            url: "https://bugzilla.suse.com/1174438",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174462",
            url: "https://bugzilla.suse.com/1174462",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174543",
            url: "https://bugzilla.suse.com/1174543",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-20810 page",
            url: "https://www.suse.com/security/cve/CVE-2019-20810/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-20908 page",
            url: "https://www.suse.com/security/cve/CVE-2019-20908/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-0305 page",
            url: "https://www.suse.com/security/cve/CVE-2020-0305/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10766 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10766/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10767 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10767/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10768 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10768/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10769 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10769/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10773 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10773/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10781 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10781/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-12771 page",
            url: "https://www.suse.com/security/cve/CVE-2020-12771/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-12888 page",
            url: "https://www.suse.com/security/cve/CVE-2020-12888/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-13974 page",
            url: "https://www.suse.com/security/cve/CVE-2020-13974/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-14416 page",
            url: "https://www.suse.com/security/cve/CVE-2020-14416/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-15393 page",
            url: "https://www.suse.com/security/cve/CVE-2020-15393/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-15780 page",
            url: "https://www.suse.com/security/cve/CVE-2020-15780/",
         },
      ],
      title: "Security update for the Linux Kernel",
      tracking: {
         current_release_date: "2020-08-03T09:31:26Z",
         generator: {
            date: "2020-08-03T09:31:26Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2020:2103-1",
         initial_release_date: "2020-08-03T09:31:26Z",
         revision_history: [
            {
               date: "2020-08-03T09:31:26Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "kernel-devel-azure-4.12.14-8.38.1.noarch",
                        product: {
                           name: "kernel-devel-azure-4.12.14-8.38.1.noarch",
                           product_id: "kernel-devel-azure-4.12.14-8.38.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-source-azure-4.12.14-8.38.1.noarch",
                        product: {
                           name: "kernel-source-azure-4.12.14-8.38.1.noarch",
                           product_id: "kernel-source-azure-4.12.14-8.38.1.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "cluster-md-kmp-azure-4.12.14-8.38.1.x86_64",
                        product: {
                           name: "cluster-md-kmp-azure-4.12.14-8.38.1.x86_64",
                           product_id: "cluster-md-kmp-azure-4.12.14-8.38.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dlm-kmp-azure-4.12.14-8.38.1.x86_64",
                        product: {
                           name: "dlm-kmp-azure-4.12.14-8.38.1.x86_64",
                           product_id: "dlm-kmp-azure-4.12.14-8.38.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gfs2-kmp-azure-4.12.14-8.38.1.x86_64",
                        product: {
                           name: "gfs2-kmp-azure-4.12.14-8.38.1.x86_64",
                           product_id: "gfs2-kmp-azure-4.12.14-8.38.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-azure-4.12.14-8.38.1.x86_64",
                        product: {
                           name: "kernel-azure-4.12.14-8.38.1.x86_64",
                           product_id: "kernel-azure-4.12.14-8.38.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-azure-base-4.12.14-8.38.1.x86_64",
                        product: {
                           name: "kernel-azure-base-4.12.14-8.38.1.x86_64",
                           product_id: "kernel-azure-base-4.12.14-8.38.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-azure-devel-4.12.14-8.38.1.x86_64",
                        product: {
                           name: "kernel-azure-devel-4.12.14-8.38.1.x86_64",
                           product_id: "kernel-azure-devel-4.12.14-8.38.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-azure-extra-4.12.14-8.38.1.x86_64",
                        product: {
                           name: "kernel-azure-extra-4.12.14-8.38.1.x86_64",
                           product_id: "kernel-azure-extra-4.12.14-8.38.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-azure-livepatch-devel-4.12.14-8.38.1.x86_64",
                        product: {
                           name: "kernel-azure-livepatch-devel-4.12.14-8.38.1.x86_64",
                           product_id: "kernel-azure-livepatch-devel-4.12.14-8.38.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-syms-azure-4.12.14-8.38.1.x86_64",
                        product: {
                           name: "kernel-syms-azure-4.12.14-8.38.1.x86_64",
                           product_id: "kernel-syms-azure-4.12.14-8.38.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kselftests-kmp-azure-4.12.14-8.38.1.x86_64",
                        product: {
                           name: "kselftests-kmp-azure-4.12.14-8.38.1.x86_64",
                           product_id: "kselftests-kmp-azure-4.12.14-8.38.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ocfs2-kmp-azure-4.12.14-8.38.1.x86_64",
                        product: {
                           name: "ocfs2-kmp-azure-4.12.14-8.38.1.x86_64",
                           product_id: "ocfs2-kmp-azure-4.12.14-8.38.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "reiserfs-kmp-azure-4.12.14-8.38.1.x86_64",
                        product: {
                           name: "reiserfs-kmp-azure-4.12.14-8.38.1.x86_64",
                           product_id: "reiserfs-kmp-azure-4.12.14-8.38.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Module for Public Cloud 15 SP1",
                        product: {
                           name: "SUSE Linux Enterprise Module for Public Cloud 15 SP1",
                           product_id: "SUSE Linux Enterprise Module for Public Cloud 15 SP1",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-module-public-cloud:15:sp1",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-azure-4.12.14-8.38.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
            },
            product_reference: "kernel-azure-4.12.14-8.38.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Public Cloud 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-azure-base-4.12.14-8.38.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
            },
            product_reference: "kernel-azure-base-4.12.14-8.38.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Public Cloud 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-azure-devel-4.12.14-8.38.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
            },
            product_reference: "kernel-azure-devel-4.12.14-8.38.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Public Cloud 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-devel-azure-4.12.14-8.38.1.noarch as component of SUSE Linux Enterprise Module for Public Cloud 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
            },
            product_reference: "kernel-devel-azure-4.12.14-8.38.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Public Cloud 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-source-azure-4.12.14-8.38.1.noarch as component of SUSE Linux Enterprise Module for Public Cloud 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
            },
            product_reference: "kernel-source-azure-4.12.14-8.38.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Public Cloud 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-azure-4.12.14-8.38.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP1",
               product_id: "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
            },
            product_reference: "kernel-syms-azure-4.12.14-8.38.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Public Cloud 15 SP1",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2019-20810",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-20810",
            },
         ],
         notes: [
            {
               category: "general",
               text: "go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call snd_card_free for a failure path, which causes a memory leak, aka CID-9453264ef586.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-20810",
               url: "https://www.suse.com/security/cve/CVE-2019-20810",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172458 for CVE-2019-20810",
               url: "https://bugzilla.suse.com/1172458",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-08-03T09:31:26Z",
               details: "low",
            },
         ],
         title: "CVE-2019-20810",
      },
      {
         cve: "CVE-2019-20908",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-20908",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. Incorrect access permissions for the efivar_ssdt ACPI variable could be used by attackers to bypass lockdown or secure boot restrictions, aka CID-1957a85b0032.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-20908",
               url: "https://www.suse.com/security/cve/CVE-2019-20908",
            },
            {
               category: "external",
               summary: "SUSE Bug 1173567 for CVE-2019-20908",
               url: "https://bugzilla.suse.com/1173567",
            },
            {
               category: "external",
               summary: "SUSE Bug 1174187 for CVE-2019-20908",
               url: "https://bugzilla.suse.com/1174187",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-08-03T09:31:26Z",
               details: "important",
            },
         ],
         title: "CVE-2019-20908",
      },
      {
         cve: "CVE-2020-0305",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-0305",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153467744",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-0305",
               url: "https://www.suse.com/security/cve/CVE-2020-0305",
            },
            {
               category: "external",
               summary: "SUSE Bug 1174462 for CVE-2020-0305",
               url: "https://bugzilla.suse.com/1174462",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-08-03T09:31:26Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-0305",
      },
      {
         cve: "CVE-2020-10766",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10766",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per task/process conditional STIPB switching was added on top of the existing SSBD switching. The highest threat from this vulnerability is to confidentiality.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10766",
               url: "https://www.suse.com/security/cve/CVE-2020-10766",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159281 for CVE-2020-10766",
               url: "https://bugzilla.suse.com/1159281",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172781 for CVE-2020-10766",
               url: "https://bugzilla.suse.com/1172781",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.6,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-08-03T09:31:26Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-10766",
      },
      {
         cve: "CVE-2020-10767",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10767",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB (Indirect Branch Prediction Barrier). The IBPB mitigation will be disabled when STIBP is not available or when the Enhanced Indirect Branch Restricted Speculation (IBRS) is available. This flaw allows a local attacker to perform a Spectre V2 style attack when this configuration is active. The highest threat from this vulnerability is to confidentiality.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10767",
               url: "https://www.suse.com/security/cve/CVE-2020-10767",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159281 for CVE-2020-10767",
               url: "https://bugzilla.suse.com/1159281",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172782 for CVE-2020-10767",
               url: "https://bugzilla.suse.com/1172782",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-08-03T09:31:26Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-10767",
      },
      {
         cve: "CVE-2020-10768",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10768",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as being 'force disabled' when it is not and opens the system to Spectre v2 attacks. The highest threat from this vulnerability is to confidentiality.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10768",
               url: "https://www.suse.com/security/cve/CVE-2020-10768",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159281 for CVE-2020-10768",
               url: "https://bugzilla.suse.com/1159281",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172783 for CVE-2020-10768",
               url: "https://bugzilla.suse.com/1172783",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-08-03T09:31:26Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-10768",
      },
      {
         cve: "CVE-2020-10769",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10769",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A buffer over-read flaw was found in RH kernel versions before 5.0 in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. When a payload longer than 4 bytes, and is not following 4-byte alignment boundary guidelines, it causes a buffer over-read threat, leading to a system crash. This flaw allows a local attacker with user privileges to cause a denial of service.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10769",
               url: "https://www.suse.com/security/cve/CVE-2020-10769",
            },
            {
               category: "external",
               summary: "SUSE Bug 1173265 for CVE-2020-10769",
               url: "https://bugzilla.suse.com/1173265",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-08-03T09:31:26Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-10769",
      },
      {
         cve: "CVE-2020-10773",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10773",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A stack information leak flaw was found in s390/s390x in the Linux kernel's memory manager functionality, where it incorrectly writes to the /proc/sys/vm/cmm_timeout file. This flaw allows a local user to see the kernel data.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10773",
               url: "https://www.suse.com/security/cve/CVE-2020-10773",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172999 for CVE-2020-10773",
               url: "https://bugzilla.suse.com/1172999",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 2.5,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-08-03T09:31:26Z",
               details: "low",
            },
         ],
         title: "CVE-2020-10773",
      },
      {
         cve: "CVE-2020-10781",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10781",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device. With this vulnerability, continually reading the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes, possibly making the system inoperable.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10781",
               url: "https://www.suse.com/security/cve/CVE-2020-10781",
            },
            {
               category: "external",
               summary: "SUSE Bug 1173074 for CVE-2020-10781",
               url: "https://bugzilla.suse.com/1173074",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-08-03T09:31:26Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-10781",
      },
      {
         cve: "CVE-2020-12771",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-12771",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-12771",
               url: "https://www.suse.com/security/cve/CVE-2020-12771",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171732 for CVE-2020-12771",
               url: "https://bugzilla.suse.com/1171732",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-08-03T09:31:26Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-12771",
      },
      {
         cve: "CVE-2020-12888",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-12888",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-12888",
               url: "https://www.suse.com/security/cve/CVE-2020-12888",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159281 for CVE-2020-12888",
               url: "https://bugzilla.suse.com/1159281",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171868 for CVE-2020-12888",
               url: "https://bugzilla.suse.com/1171868",
            },
            {
               category: "external",
               summary: "SUSE Bug 1176979 for CVE-2020-12888",
               url: "https://bugzilla.suse.com/1176979",
            },
            {
               category: "external",
               summary: "SUSE Bug 1179612 for CVE-2020-12888",
               url: "https://bugzilla.suse.com/1179612",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-08-03T09:31:26Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-12888",
      },
      {
         cve: "CVE-2020-13974",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-13974",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if k_ascii is called several times in a row, aka CID-b86dab054059. NOTE: Members in the community argue that the integer overflow does not lead to a security issue in this case.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-13974",
               url: "https://www.suse.com/security/cve/CVE-2020-13974",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172775 for CVE-2020-13974",
               url: "https://bugzilla.suse.com/1172775",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.2,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-08-03T09:31:26Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-13974",
      },
      {
         cve: "CVE-2020-14416",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-14416",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-14416",
               url: "https://www.suse.com/security/cve/CVE-2020-14416",
            },
            {
               category: "external",
               summary: "SUSE Bug 1162002 for CVE-2020-14416",
               url: "https://bugzilla.suse.com/1162002",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-08-03T09:31:26Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-14416",
      },
      {
         cve: "CVE-2020-15393",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-15393",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel 4.4 through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebeb8db770.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-15393",
               url: "https://www.suse.com/security/cve/CVE-2020-15393",
            },
            {
               category: "external",
               summary: "SUSE Bug 1173514 for CVE-2020-15393",
               url: "https://bugzilla.suse.com/1173514",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-08-03T09:31:26Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-15393",
      },
      {
         cve: "CVE-2020-15780",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-15780",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
               "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-15780",
               url: "https://www.suse.com/security/cve/CVE-2020-15780",
            },
            {
               category: "external",
               summary: "SUSE Bug 1173573 for CVE-2020-15780",
               url: "https://bugzilla.suse.com/1173573",
            },
            {
               category: "external",
               summary: "SUSE Bug 1174186 for CVE-2020-15780",
               url: "https://bugzilla.suse.com/1174186",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-base-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-azure-devel-4.12.14-8.38.1.x86_64",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-devel-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-source-azure-4.12.14-8.38.1.noarch",
                  "SUSE Linux Enterprise Module for Public Cloud 15 SP1:kernel-syms-azure-4.12.14-8.38.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-08-03T09:31:26Z",
               details: "important",
            },
         ],
         title: "CVE-2020-15780",
      },
   ],
}

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for the Linux Kernel",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "The SUSE Linux Enterprise 15 SP1 RT kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent attacker could impersonate a Bluetooth BR/EDR master or slave to pair with a previously paired remote device to successfully complete the authentication procedure without knowing the link key (bnc#1171988).\n- CVE-2020-0305: In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1174462).\n- CVE-2019-20908: An issue was discovered in drivers/firmware/efi/efi.c where incorrect access permissions for the efivar_ssdt ACPI variable could be used by attackers to bypass lockdown or secure boot restrictions, aka CID-1957a85b0032 (bnc#1173567).\n- CVE-2020-10781: zram sysfs resource consumption was fixed (bnc#1173074).\n- CVE-2020-15780: An issue was discovered in drivers/acpi/acpi_configfs.c where injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30 (bnc#1173573).\n- CVE-2020-15393: usbtest_disconnect in drivers/usb/misc/usbtest.c had a memory leak, aka CID-28ebeb8db770 (bnc#1173514).\n- CVE-2020-12771: btree_gc_coalesce in drivers/md/bcache/btree.c had a deadlock if a coalescing operation fails (bnc#1171732).\n- CVE-2020-12888: The VFIO PCI driver mishandled attempts to access disabled memory space (bnc#1171868).\n- CVE-2020-10769: A buffer over-read flaw was found in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. When a payload longer than 4 bytes, and is not following 4-byte alignment boundary guidelines, it causes a buffer over-read threat, leading to a system crash. This flaw allowed a local attacker with user privileges to cause a denial of service (bnc#1173265).\n- CVE-2020-10773: A kernel stack information leak on s390/s390x was fixed (bnc#1172999).\n- CVE-2020-14416: A race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c (bnc#1162002).\n- CVE-2020-10766: Fixed an issue which allowed an attacker with a local account to disable SSBD protection (bnc#1172781).\n- CVE-2020-10767: Fixed an issue where Indirect Branch Prediction Barrier was disabled in certain circumstances, leaving the system open to a spectre v2 style attack (bnc#1172782).\n- CVE-2020-10768: Fixed an issue with the prctl() function, where indirect branch speculation could be enabled even though it was diabled before (bnc#1172783).\n- CVE-2020-13974: Fixed a integer overflow in drivers/tty/vt/keyboard.c, if k_ascii is called several times in a row (bnc#1172775).\n- CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it.\n  This attack is known as Special Register Buffer Data Sampling (SRBDS) or 'CrossTalk' (bsc#1154824).\n- CVE-2020-13143: Fixed an out-of-bounds read in gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c (bsc#1171982).\n- CVE-2020-12769: Fixed an issue which could have allowed attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one (bsc#1171983).\n- CVE-2020-12659: Fixed an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) due to improper headroom validation (bsc#1171214).\n- CVE-2020-12657: An a use-after-free in block/bfq-iosched.c (bsc#1171205).\n- CVE-2020-12656: Fixed an improper handling of certain domain_release calls leadingch could have led to a memory leak (bsc#1171219).\n- CVE-2020-12655: Fixed an issue which could have allowed attackers to trigger a sync of excessive duration via an XFS v5 image with crafted metadata (bsc#1171217).\n- CVE-2020-12654: Fixed an issue in he wifi driver which could have allowed a remote AP to trigger a heap-based buffer overflow (bsc#1171202).\n- CVE-2020-12653: Fixed an issue in the wifi driver which could have allowed local users to gain privileges or cause a denial of service (bsc#1171195).\n- CVE-2020-12652: Fixed an issue which could have allowed local users to hold an incorrect lock during the ioctl operation and trigger a race condition (bsc#1171218).\n- CVE-2020-12464: Fixed a use-after-free due to a transfer without a reference (bsc#1170901).\n- CVE-2020-12114: Fixed a pivot_root race condition which could have allowed local users to cause a denial of service (panic) by corrupting a mountpoint reference counter (bsc#1171098).\n- CVE-2020-11669: Fixed an issue where arch/powerpc/kernel/idle_book3s.S did not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR (bnc#1169390).\n- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172317).\n- CVE-2020-10751: Fixed an improper implementation in SELinux LSM hook  where it was assumed that an skb would only contain a single netlink message (bsc#1171189).\n- CVE-2020-10732: Fixed kernel data leak in userspace coredumps due to uninitialized data (bsc#1171220).\n- CVE-2020-10720: Fixed a use-after-free read in napi_gro_frags() (bsc#1170778).\n- CVE-2020-10711: Fixed a null pointer dereference in SELinux subsystem which could have allowed a remote network user to crash the kernel resulting in a denial of service (bsc#1171191).\n- CVE-2020-10690: Fixed the race between the release of ptp_clock and cdev (bsc#1170056).\n- CVE-2019-9455: Fixed a pointer leak due to a WARN_ON statement in a video driver. This could lead to local information disclosure with System execution privileges needed (bsc#1170345).\n- CVE-2019-20812: Fixed an issue in prb_calc_retire_blk_tmo() which could have resulted in a denial of service (bsc#1172453).\n- CVE-2019-20806: Fixed a null pointer dereference which may had lead to denial of service (bsc#1172199).\n- CVE-2019-19462: Fixed an issue which could have allowed local user to cause denial of service (bsc#1158265).\n- CVE-2019-20810: go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c did not call snd_card_free for a failure path, which caused a memory leak, aka CID-9453264ef586 (bnc#1172458).\n- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1089895).\n\nThe following non-security bugs were fixed:\n\n- ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe() (bsc#1051510).\n- ACPI: GED: add support for _Exx / _Lxx handler methods (bsc#1111666).\n- ACPI: GED: use correct trigger type field in _Exx / _Lxx handling (bsc#1111666).\n- ACPI: NFIT: Fix unlock on error in scrub_show() (bsc#1171753).\n- ACPI: PM: Avoid using power resources if there are none for D0 (bsc#1051510).\n- ACPI: sysfs: Fix pm_profile_attr type (bsc#1111666).\n- ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile() (bsc#1051510).\n- ACPI: video: Use native backlight on Acer Aspire 5783z (bsc#1111666).\n- ACPI: video: Use native backlight on Acer TravelMate 5735Z (bsc#1111666).\n- acpi/x86: ignore unspecified bit positions in the ACPI global lock field (bsc#1051510).\n- Add br_netfilter to kernel-default-base (bsc#1169020)\n- Add commit for git-fix that's not a fix This commit cleans up debug code but does not fix anything, and it relies on a new kernel function that isn't yet in this version of SLE.\n- agp/intel: Reinforce the barrier after GTT updates (bsc#1051510).\n- ALSA: ctxfi: Remove unnecessary cast in kfree (bsc#1051510).\n- ALSA: doc: Document PC Beep Hidden Register on Realtek ALC256 (bsc#1051510).\n- ALSA: dummy: Fix PCM format loop in proc output (bsc#1111666).\n- ALSA: es1688: Add the missed snd_card_free() (bsc#1051510).\n- ALSA: hda: Add driver blacklist (bsc#1051510).\n- ALSA: hda: Add ElkhartLake HDMI codec vid (bsc#1111666).\n- ALSA: hda: add sienna_cichlid audio asic id for sienna_cichlid up (bsc#1111666).\n- ALSA: hda: Always use jackpoll helper for jack update after resume (bsc#1051510).\n- ALSA: hda: call runtime_allow() for all hda controllers (bsc#1051510).\n- ALSA: hda: Do not release card at firmware loading error (bsc#1051510).\n- ALSA: hda: Explicitly permit using autosuspend if runtime PM is supported (bsc#1051510).\n- ALSA: hda: Fix potential access overflow in beep helper (bsc#1051510).\n- ALSA: hda/hdmi - enable runtime pm for newer AMD display audio (bsc#1111666).\n- ALSA: hda/hdmi: fix race in monitor detection during probe (bsc#1051510).\n- ALSA: hda/hdmi: fix without unlocked before return (bsc#1051510).\n- ALSA: hda: Honor PM disablement in PM freeze and thaw_noirq ops (bsc#1051510).\n- ALSA: hda: Keep the controller initialization even if no codecs found (bsc#1051510).\n- ALSA: hda - let hs_mic be picked ahead of hp_mic (bsc#1111666).\n- ALSA: hda: Match both PCI ID and SSID for driver blacklist (bsc#1111666).\n- ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround (bsc#1172017).\n- ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines (bsc#1111666).\n- ALSA: hda/realtek - Add COEF workaround for ASUS ZenBook UX431DA (git-fixes).\n- ALSA: hda/realtek - Add HP new mute led supported for ALC236 (git-fixes).\n- ALSA: hda/realtek - Add LED class support for micmute LED (bsc#1111666).\n- ALSA: hda/realtek - Add more fixup entries for Clevo machines (git-fixes).\n- ALSA: hda/realtek - Add new codec supported for ALC245 (bsc#1051510).\n- ALSA: hda/realtek - Add new codec supported for ALC287 (git-fixes).\n- ALSA: hda/realtek: Add quirk for Samsung Notebook (git-fixes).\n- ALSA: hda/realtek - Add supported new mute Led for HP (git-fixes).\n- ALSA: hda/realtek - Enable headset mic of ASUS GL503VM with ALC295 (git-fixes).\n- ALSA: hda/realtek - Enable headset mic of ASUS UX550GE with ALC295 (git-fixes).\n- ALSA: hda/realtek: Enable headset mic of ASUS UX581LV with ALC295 (git-fixes).\n- ALSA: hda/realtek - Enable micmute LED on and HP system (bsc#1111666).\n- ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534 (bsc#1111666).\n- ALSA: hda/realtek - Enable the headset mic on Asus FX505DT (bsc#1051510).\n- ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse (git-fixes).\n- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Xtreme (bsc#1111666).\n- ALSA: hda/realtek - Fix unexpected init_amp override (bsc#1051510).\n- ALSA: hda/realtek - Fix unused variable warning w/o CONFIG_LEDS_TRIGGER_AUDIO (bsc#1111666).\n- ALSA: hda/realtek - Introduce polarity for micmute LED GPIO (bsc#1111666).\n- ALSA: hda/realtek - Limit int mic boost for Thinkpad T530 (git-fixes bsc#1171293).\n- ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter (bsc#1051510).\n- ALSA: hda: Release resources at error in delayed probe (bsc#1051510).\n- ALSA: hda: Remove ASUS ROG Zenith from the blacklist (bsc#1051510).\n- ALSA: hda: Skip controller resume if not needed (bsc#1051510).\n- ALSA: hwdep: fix a left shifting 1 by 31 UB bug (git-fixes).\n- ALSA: ice1724: Fix invalid access for enumerated ctl items (bsc#1051510).\n- ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio option (git-fixes).\n- ALSA: lx6464es - add support for LX6464ESe pci express variant (bsc#1111666).\n- ALSA: opl3: fix infoleak in opl3 (bsc#1111666).\n- ALSA: opti9xx: shut up gcc-10 range warning (bsc#1051510).\n- ALSA: pcm: disallow linking stream to itself (bsc#1111666).\n- ALSA: pcm: fix incorrect hw_base increase (git-fixes).\n- ALSA: pcm: oss: Fix regression by buffer overflow fix (bsc#1051510).\n- ALSA: pcm: oss: Place the plugin buffer overflow checks correctly (bsc#1170522).\n- ALSA: rawmidi: Fix racy buffer resize under concurrent accesses (git-fixes).\n- ALSA: usb-audio: Add connector notifier delegation (bsc#1051510).\n- ALSA: usb-audio: Add control message quirk delay for Kingston HyperX headset (git-fixes).\n- ALSA: usb-audio: Add duplex sound support for USB devices using implicit feedback (bsc#1111666).\n- ALSA: usb-audio: add mapping for ASRock TRX40 Creator (git-fixes).\n- ALSA: usb-audio: Add mixer workaround for TRX40 and co (bsc#1051510).\n- ALSA: usb-audio: Add Pioneer DJ DJM-900NXS2 support (bsc#1111666).\n- ALSA: usb-audio: Add quirk for Focusrite Scarlett 2i2 (bsc#1051510).\n- ALSA: usb-audio: add quirk for MacroSilicon MS2109 (bsc#1111666).\n- ALSA: usb-audio: Add static mapping table for ALC1220-VB-based mobos (bsc#1051510).\n- ALSA: usb-audio: Add vendor, product and profile name for HP Thunderbolt Dock (bsc#1111666).\n- ALSA: usb-audio: Apply async workaround for Scarlett 2i4 2nd gen (bsc#1051510).\n- ALSA: usb-audio: Check mapping at creating connector controls, too (bsc#1051510).\n- ALSA: usb-audio: Clean up quirk entries with macros (bsc#1111666).\n- ALSA: usb-audio: Correct a typo of NuPrime DAC-10 USB ID (bsc#1051510).\n- ALSA: usb-audio: Do not create jack controls for PCM terminals (bsc#1051510).\n- ALSA: usb-audio: Do not override ignore_ctl_error value from the map (bsc#1051510).\n- ALSA: usb-audio: Filter error from connector kctl ops, too (bsc#1051510).\n- ALSA: usb-audio: Fix inconsistent card PM state after resume (bsc#1111666).\n- ALSA: usb-audio: Fix packet size calculation (bsc#1111666).\n- ALSA: usb-audio: Fix racy list management in output queue (bsc#1111666).\n- ALSA: usb-audio: Fix usb audio refcnt leak when getting spdif (bsc#1051510).\n- ALSA: usb-audio: Improve frames size computation (bsc#1111666).\n- ALSA: usb-audio: Manage auto-pm of all bundled interfaces (bsc#1111666).\n- ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC (git-fixes).\n- ALSA: usb-audio: Quirks for Gigabyte TRX40 Aorus Master onboard audio (git-fixes).\n- ALSA: usb-audio: Use the new macro for HP Dock rename quirks (bsc#1111666).\n- ALSA: usx2y: Fix potential NULL dereference (bsc#1051510).\n- amdgpu: a NULL ->mm does not mean a thread is a kthread (git-fixes).\n- arm64: map FDT as RW for early_init_dt_scan() (jsc#SLE-12423).\n- ASoC: codecs: hdac_hdmi: Fix incorrect use of list_for_each_entry (bsc#1051510).\n- ASoC: dapm: connect virtual mux with default value (bsc#1051510).\n- ASoC: dapm: fixup dapm kcontrol widget (bsc#1051510).\n- ASoC: dpcm: allow start or stop during pause for backend (bsc#1051510).\n- ASoC: fix regwmask (bsc#1051510).\n- ASoC: Intel: atom: Take the drv->lock mutex before calling sst_send_slot_map() (bsc#1051510).\n- ASoC: msm8916-wcd-digital: Reset RX interpolation path after use (bsc#1051510).\n- ASoC: samsung: Prevent clk_get_rate() calls in atomic context (bsc#1111666).\n- ASoC: topology: Check return value of pcm_new_ver (bsc#1051510).\n- ASoC: topology: use name_prefix for new kcontrol (bsc#1051510).\n- ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb (bsc#1111666).\n- ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx (bsc#1111666).\n- ath9k: Fix use-after-free Write in ath9k_htc_rx_msg (bsc#1111666).\n- ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb (bsc#1111666).\n- ax25: fix setsockopt(SO_BINDTODEVICE) (networking-stable-20_05_27).\n- b43: Fix connection problem with WPA3 (bsc#1111666).\n- b43legacy: Fix case where channel status is corrupted (bsc#1051510).\n- b43_legacy: Fix connection problem with WPA3 (bsc#1111666).\n- batman-adv: Avoid spurious warnings from bat_v neigh_cmp implementation (bsc#1051510).\n- batman-adv: Do not schedule OGM for disabled interface (bsc#1051510).\n- batman-adv: fix batadv_nc_random_weight_tq (git-fixes).\n- batman-adv: Fix refcnt leak in batadv_show_throughput_override (git-fixes).\n- batman-adv: Fix refcnt leak in batadv_store_throughput_override (git-fixes).\n- batman-adv: Fix refcnt leak in batadv_v_ogm_process (git-fixes).\n- batman-adv: prevent TT request storms by not sending inconsistent TT TLVLs (bsc#1051510).\n- bcache: avoid unnecessary btree nodes flushing in btree_flush_write() (git fixes (block drivers)).\n- bcache: Fix an error code in bch_dump_read() (git fixes (block drivers)).\n- bcache: fix incorrect data type usage in btree_flush_write() (git fixes (block drivers)).\n- bcache: Revert 'bcache: shrink btree node cache after bch_btree_check()' (git fixes (block drivers)).\n- be2net: fix link failure after ethtool offline test (git-fixes).\n- blk-mq: honor IO scheduler for multiqueue devices (bsc#1165478).\n- blk-mq: simplify blk_mq_make_request() (bsc#1165478).\n- block, bfq: fix use-after-free in bfq_idle_slice_timer_body (bsc#1168760).\n- block/drbd: delete invalid function drbd_md_mark_dirty_ (bsc#1171527).\n- block: drbd: remove a stray unlock in __drbd_send_protocol() (bsc#1171599).\n- block: fix busy device checking in blk_drop_partitions again (bsc#1171948).\n- block: fix busy device checking in blk_drop_partitions (bsc#1171948).\n- block: fix memleak of bio integrity data (git fixes (block drivers)).\n- block: keep bdi->io_pages in sync with max_sectors_kb for stacked devices (bsc#1168762).\n- block: nr_sects_write(): Disable preemption on seqcount write (bsc#1173818).\n- block: remove QUEUE_FLAG_STACKABLE (git fixes (block drivers)).\n- block: remove the bd_openers checks in blk_drop_partitions (bsc#1171948).\n- block: sed-opal: fix sparse warning: convert __be64 data (git fixes (block drivers)).\n- Bluetooth: Add SCO fallback for invalid LMP parameters error (bsc#1111666).\n- Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl (bsc#1051510).\n- bnxt_en: Fix AER reset logic on 57500 chips (git-fixes).\n- bnxt_en: Fix ethtool selftest crash under error conditions (git-fixes).\n- bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails (git-fixes).\n- bnxt_en: Fix ipv6 RFS filter matching logic (git-fixes).\n- bnxt_en: fix memory leaks in bnxt_dcbnl_ieee_getets() (networking-stable-20_03_28).\n- bnxt_en: fix NULL dereference in case SR-IOV configuration fails (git-fixes).\n- bnxt_en: Fix VF anti-spoof filter setup (networking-stable-20_05_12).\n- bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features() (networking-stable-20_05_12).\n- bnxt_en: Improve AER slot reset (networking-stable-20_05_12).\n- bnxt_en: Reduce BNXT_MSIX_VEC_MAX value to supported CQs per PF (bsc#1104745).\n- bnxt_en: reinitialize IRQs when MTU is modified (networking-stable-20_03_14).\n- bnxt_en: Return error if bnxt_alloc_ctx_mem() fails (bsc#1104745 ).\n- bnxt_en: Return error when allocating zero size context memory (bsc#1104745).\n- bonding/alb: make sure arp header is pulled before accessing it (networking-stable-20_03_14).\n- bpf: Fix sk_psock refcnt leak when receiving message (bsc#1083647).\n- bpf: Forbid XADD on spilled pointers for unprivileged users (bsc#1083647).\n- brcmfmac: abort and release host after error (bsc#1051510).\n- brcmfmac: fix wrong location to get firmware feature (bsc#1111666).\n- brcmfmac: Transform compatible string for FW loading (bsc#1169771).\n- btrfs: add assertions for tree == inode->io_tree to extent IO helpers (bsc#1174438).\n- btrfs: add new helper btrfs_lock_and_flush_ordered_range (bsc#1174438).\n- btrfs: Always use a cached extent_state in btrfs_lock_and_flush_ordered_range (bsc#1174438).\n- btrfs: do not zero f_bavail if we have available space (bsc#1168081).\n- btrfs: do not zero f_bavail if we have available space (bsc#1168081).\n- btrfs: drop argument tree from btrfs_lock_and_flush_ordered_range (bsc#1174438).\n- Btrfs: fix deadlock with memory reclaim during scrub (bsc#1172127).\n- btrfs: fix extent_state leak in btrfs_lock_and_flush_ordered_range (bsc#1174438).\n- btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof (bsc#1174438).\n- btrfs: fix hang on snapshot creation after RWF_NOWAIT write (bsc#1174438).\n- btrfs: fix log context list corruption after rename whiteout error (bsc#1172342).\n- btrfs: fix partial loss of prealloc extent past i_size after fsync (bsc#1172343).\n- btrfs: fix RWF_NOWAIT write not failling when we need to cow (bsc#1174438).\n- btrfs: fix RWF_NOWAIT writes blocking on extent locks and waiting for IO (bsc#1174438).\n- btrfs: qgroup: Fix a bug that prevents qgroup to be re-enabled after disable (bsc#1172247).\n- btrfs: relocation: add error injection points for cancelling balance (bsc#1171417).\n- btrfs: relocation: Check cancel request after each data page read (bsc#1171417).\n- btrfs: relocation: Check cancel request after each extent found (bsc#1171417).\n- btrfs: relocation: Clear the DEAD_RELOC_TREE bit for orphan roots to prevent runaway balance (bsc#1171417).\n- btrfs: relocation: Fix reloc root leakage and the NULL pointer reference caused by the leakage (bsc#1171417).\n- btrfs: relocation: Work around dead relocation stage loop (bsc#1171417).\n- btrfs: reloc: clear DEAD_RELOC_TREE bit for orphan roots to prevent runaway balance (bsc#1171417 bsc#1160947 bsc#1172366).\n- btrfs: reloc: fix reloc root leak and NULL pointer dereference (bsc#1171417 bsc#1160947 bsc#1172366).\n- btrfs: Return EAGAIN if we can't start no snpashot write in check_can_nocow (bsc#1174438).\n- Btrfs: setup a nofs context for memory allocation at btrfs_create_tree() (bsc#1172127).\n- Btrfs: setup a nofs context for memory allocation at __btrfs_set_acl (bsc#1172127).\n- btrfs: use correct count in btrfs_file_write_iter() (bsc#1174438).\n- btrfs: Use newly introduced btrfs_lock_and_flush_ordered_range (bsc#1174438).\n- Btrfs: use nofs context when initializing security xattrs to avoid deadlock (bsc#1172127).\n- btrfs: volumes: Remove ENOSPC-prone btrfs_can_relocate() (bsc#1171124).\n- bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads (bsc#1111666).\n- can: add missing attribute validation for termination (networking-stable-20_03_14).\n- carl9170: remove P2P_GO support (bsc#1111666).\n- cdc-acm: close race betrween suspend() and acm_softint (git-fixes).\n- CDC-ACM: heed quirk also in error handling (git-fixes).\n- cdc-acm: introduce a cool down (git-fixes).\n- ceph: check if file lock exists before sending unlock request (bsc#1168789).\n- ceph: convert mdsc->cap_dirty to a per-session list (bsc#1167104).\n- ceph: demote quotarealm lookup warning to a debug message (bsc#1171692).\n- ceph: fix double unlock in handle_cap_export() (bsc#1171694).\n- ceph: fix endianness bug when handling MDS session feature bits (bsc#1171695).\n- ceph: request expedited service on session's last cap flush (bsc#1167104).\n- cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages (bsc#1173857).\n- cgroup, netclassid: periodically release file_lock on classid updating (networking-stable-20_03_14).\n- char/random: Add a newline at the end of the file (jsc#SLE-12423).\n- CIFS: Allocate crypto structures on the fly for calculating signatures of incoming packets (bsc#1144333).\n- CIFS: Allocate encryption header through kmalloc (bsc#1144333).\n- CIFS: allow unlock flock and OFD lock across fork (bsc#1144333).\n- CIFS: check new file size when extending file by fallocate (bsc#1144333).\n- CIFS: cifspdu.h: Replace zero-length array with flexible-array member (bsc#1144333).\n- CIFS: clear PF_MEMALLOC before exiting demultiplex thread (bsc#1144333).\n- CIFS: do not share tcons with DFS (bsc#1144333).\n- CIFS: dump the session id and keys also for SMB2 sessions (bsc#1144333).\n- CIFS: ensure correct super block for DFS reconnect (bsc#1144333).\n- CIFS: Fix bug which the return value by asynchronous read is error (bsc#1144333).\n- CIFS: fix uninitialised lease_key in open_shroot() (bsc#1144333).\n- cifs: get rid of unused parameter in reconn_setup_dfs_targets() (bsc#1144333).\n- cifs: handle hostnames that resolve to same ip in failover (bsc#1144333 bsc#1161016).\n- CIFS: ignore cached share root handle closing errors (bsc#1166780).\n- CIFS: improve read performance for page size 64KB & cache=strict & vers=2.1+ (bsc#1144333).\n- CIFS: Increment num_remote_opens stats counter even in case of smb2_query_dir_first (bsc#1144333).\n- CIFS: minor update to comments around the cifs_tcp_ses_lock mutex (bsc#1144333).\n- CIFS: protect updating server->dstaddr with a spinlock (bsc#1144333).\n- cifs: set up next DFS target before generic_ip_connect() (bsc#1144333 bsc#1161016).\n- CIFS: smb2pdu.h: Replace zero-length array with flexible-array member (bsc#1144333).\n- CIFS: smbd: Calculate the correct maximum packet size for segmented SMBDirect send/receive (bsc#1144333).\n- CIFS: smbd: Check and extend sender credits in interrupt context (bsc#1144333).\n- CIFS: smbd: Check send queue size before posting a send (bsc#1144333).\n- CIFS: smbd: Do not schedule work to send immediate packet on every receive (bsc#1144333).\n- CIFS: smbd: Merge code to track pending packets (bsc#1144333).\n- CIFS: smbd: Properly process errors on ib_post_send (bsc#1144333).\n- CIFS: smbd: Update receive credits before sending and deal with credits roll back on failure before sending (bsc#1144333).\n- CIFS: Warn less noisily on default mount (bsc#1144333).\n- clk: Add clk_hw_unregister_composite helper function definition (bsc#1051510).\n- clk: bcm2835: Fix return type of bcm2835_register_gate (bsc#1051510).\n- clk: clk-flexgen: fix clock-critical handling (bsc#1051510).\n- clk: imx6ull: use OSC clock during AXI rate change (bsc#1051510).\n- clk: imx: make mux parent strings const (bsc#1051510).\n- clk: mediatek: correct the clocks for MT2701 HDMI PHY module (bsc#1051510).\n- clk: qcom: rcg: Return failure for RCG update (bsc#1051510).\n- clk: sunxi: Fix incorrect usage of round_down() (bsc#1051510).\n- clk: sunxi-ng: a64: Fix gate bit of DSI DPHY (bsc#1051510).\n- clocksource/drivers/hyper-v: Set TSC clocksource as default w/ InvariantTSC (bsc#1170620, bsc#1170621).\n- clocksource: dw_apb_timer: Make CPU-affiliation being optional (bsc#1111666).\n- clocksource: dw_apb_timer_of: Fix missing clockevent timers (bsc#1051510).\n- compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE (git fixes (block drivers)).\n- compat_ioctl: block: handle Persistent Reservations (git fixes (block drivers)).\n- component: Silence bind error on -EPROBE_DEFER (bsc#1051510).\n- config: Enable CONFIG_RCU_BOOST\n- configfs: Fix bool initialization/comparison (bsc#1051510).\n- copy_{to,from}_user(): consolidate object size checks (git fixes).\n- coresight: do not use the BIT() macro in the UAPI header (git fixes (block drivers)).\n- cpufreq: Register drivers only after CPU devices have been registered (bsc#1051510).\n- cpufreq: s3c64xx: Remove pointless NULL check in s3c64xx_cpufreq_driver_init (bsc#1051510).\n- cpuidle: Do not unset the driver if it is there already (bsc#1051510).\n- crypto: algboss - do not wait during notifier callback (bsc#1111666).\n- crypto: algif_skcipher - Cap recv SG list at ctx->used (bsc#1111666).\n- crypto: arm64/sha-ce - implement export/import (bsc#1051510).\n- crypto: caam - update xts sector size for large input length (bsc#1111666).\n- crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (bsc#1111666).\n- crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (git-fixes).\n- crypto: ccp - AES CFB mode is a stream cipher (git-fixes).\n- crypto: ccp - Clean up and exit correctly on allocation failure (git-fixes).\n- crypto: ccp - Cleanup misc_dev on sev_exit() (bsc#1114279).\n- crypto: ccp - Cleanup sp_dev_master in psp_dev_destroy() (bsc#1114279).\n- Crypto/chcr: fix for ccm(aes) failed test (bsc#1111666).\n- crypto: chelsio/chtls: properly set tp->lsndtime (bsc#1111666).\n- crypto: mxs-dcp - fix scatterlist linearization for hash (bsc#1051510).\n- crypto: talitos - fix IPsec cipher in length (git-fixes).\n- crypto: talitos - reorder code in talitos_edesc_alloc() (git-fixes).\n- crypto: tcrypt - fix printed skcipher [a]sync mode (bsc#1051510).\n- cxgb4: fix MPS index overwrite when setting MAC address (bsc#1127355).\n- cxgb4: fix Txq restart check during backpressure (bsc#1127354 bsc#1127371).\n- debugfs: Add debugfs_create_xul() for hexadecimal unsigned long (git-fixes).\n- debugfs: Check module state before warning in {full/open}_proxy_open() (bsc#1173746).\n- debugfs_lookup(): switch to lookup_one_len_unlocked() (bsc#1171979).\n- Deprecate NR_UNSTABLE_NFS, use NR_WRITEBACK (bsc#1163403).\n- devinet: fix memleak in inetdev_init() (networking-stable-20_06_07).\n- devlink: fix return value after hitting end in region read (bsc#1109837).\n- devlink: validate length of param values (bsc#1109837).\n- devlink: validate length of region addr/len (bsc#1109837).\n- /dev/mem: Add missing memory barriers for devmem_inode (git-fixes).\n- /dev/mem: Revoke mappings when a driver claims the region (git-fixes).\n- dmaengine: dmatest: Fix iteration non-stop logic (bsc#1051510).\n- dmaengine: ste_dma40: fix unneeded variable warning (bsc#1051510).\n- dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()' (bsc#1111666).\n- dm btree: increase rebalance threshold in __rebalance2() (git fixes (block drivers)).\n- dm cache: fix a crash due to incorrect work item cancelling (git fixes (block drivers)).\n- dm crypt: fix benbi IV constructor crash if used in authenticated mode (git fixes (block drivers)).\n- dm: fix potential for q->make_request_fn NULL pointer (git fixes (block drivers)).\n- dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574).\n- dm-raid1: fix invalid return value from dm_mirror (bsc#1172378).\n- dm space map common: fix to ensure new block isn't already in use (git fixes (block drivers)).\n- dm: various cleanups to md->queue initialization code (git fixes).\n- dm verity fec: fix hash block number in verity_fec_decode (git fixes (block drivers)).\n- dm verity fec: fix memory leak in verity_fec_dtr (git fixes (block drivers)).\n- dm writecache: fix data corruption when reloading the target (git fixes (block drivers)).\n- dm writecache: fix incorrect flush sequence when doing SSD mode commit (git fixes (block drivers)).\n- dm writecache: verify watermark during resume (git fixes (block drivers)).\n- dm zoned: fix invalid memory access (git fixes (block drivers)).\n- dm zoned: reduce overhead of backing device checks (git fixes (block drivers)).\n- dm zoned: remove duplicate nr_rnd_zones increase in dmz_init_zone() (git fixes (block drivers)).\n- dm zoned: support zone sizes smaller than 128MiB (git fixes (block drivers)).\n- dp83640: reverse arguments to list_add_tail (git-fixes).\n- dpaa_eth: fix usage as DSA master, try 3 (networking-stable-20_05_27).\n- driver-core, libnvdimm: Let device subsystems add local lockdep coverage (bsc#1171753).\n- drivers: hv: Add a module description line to the hv_vmbus driver (bsc#1172249, bsc#1172251).\n- Drivers: hv: Change flag to write log level in panic msg to false (bsc#1170617, bsc#1170618).\n- drivers/net/ibmvnic: Update VNIC protocol version reporting (bsc#1065729).\n- drivers: soc: ti: knav_qmss_queue: Make knav_gp_range_ops static (bsc#1051510).\n- drivers: w1: add hwmon support structures (jsc#SLE-11048).\n- drivers: w1: add hwmon temp support for w1_therm (jsc#SLE-11048).\n- drivers: w1: refactor w1_slave_show to make the temp reading functionality separate (jsc#SLE-11048).\n- drm: amd/acp: fix broken menu structure (bsc#1114279) \t* context changes\n- drm: amd/display: fix Kconfig help text (bsc#1113956) \t* only fix DEBUG_KERNEL_DC\n- drm/amdgpu: Correctly initialize thermal controller for GPUs with Powerplay table v0 (e.g Hawaii) (bsc#1111666).\n- drm/amdgpu: Fix oops when pp_funcs is unset in ACPI event (bsc#1111666).\n- drm/amd/powerplay: force the trim of the mclk dpm_levels if OD is (bsc#1113956)\n- drm/atomic: Take the atomic toys away from X (bsc#1112178) \t* context changes\n- drm/bochs: downgrade pci_request_region failure from error to warning (bsc#1051510).\n- drm: bridge: adv7511: Extend list of audio sample rates (bsc#1111666).\n- drm/crc: Actually allow to change the crc source (bsc#1114279) \t* offset changes\n- drm/dp_mst: Fix clearing payload state on topology disable (bsc#1051510).\n- drm/dp_mst: Increase ACT retry timeout to 3s (bsc#1113956)  * context changes\n- drm/dp_mst: Reformat drm_dp_check_act_status() a bit (bsc#1051510).\n- drm_dp_mst_topology: fix broken drm_dp_sideband_parse_remote_dpcd_read() (bsc#1051510).\n- drm/drm_dp_mst:remove set but not used variable 'origlen' (bsc#1051510).\n- drm/edid: Fix off-by-one in DispID DTD pixel clock (bsc#1114279)\n- drm: encoder_slave: fix refcouting error for modules (bsc#1111666).\n- drm: encoder_slave: fix refcouting error for modules (bsc#1114279)\n- drm/etnaviv: fix perfmon domain interation (bsc#1113956)\n- drm/etnaviv: rework perfmon query infrastructure (bsc#1112178)\n- drm/i915: Apply Wa_1406680159:icl,ehl as an engine workaround (bsc#1112178) \t* rename gt/intel_workarounds.c to intel_workarounds.c \t* context changes\n- drm/i915/gvt: Init DPLL/DDI vreg for virtual display instead of (bsc#1114279)\n- drm/i915: HDCP: fix Ri prime check done during link check (bsc#1112178) \t* rename display/intel_hdmi.c to intel_hdmi.c \t* context changes\n- drm/i915/icl+: Fix hotplug interrupt disabling after storm detection (bsc#1112178)\n- drm/i915: properly sanity check batch_start_offset (bsc#1114279) \t* renamed display/intel_fbc.c -> intel_fb.c \t* renamed gt/intel_rc6.c -> intel_pm.c \t* context changes\n- drm/i915: Whitelist context-local timestamp in the gen9 cmdparser (bsc#1111666).\n- drm/mediatek: Check plane visibility in atomic_update (bsc#1113956)  * context changes\n- drm/meson: Delete an error message in meson_dw_hdmi_bind() (bsc#1051510).\n- drm/msm/dpu: fix error return code in dpu_encoder_init (bsc#1111666).\n- drm/msm: stop abusing dma_map/unmap for cache (bsc#1051510).\n- drm/msm: Use the correct dma_sync calls harder (bsc#1051510).\n- drm/msm: Use the correct dma_sync calls in msm_gem (bsc#1051510).\n- drm: NULL pointer dereference [null-pointer-deref] (CWE 476) problem (bsc#1114279)\n- drm: panel-orientation-quirks: Add quirk for Asus T101HA panel (bsc#1111666).\n- drm: panel-orientation-quirks: Use generic orientation-data for Acer S1003 (bsc#1111666).\n- drm/qxl: qxl_release leak in qxl_draw_dirty_fb() (bsc#1051510).\n- drm/qxl: qxl_release leak in qxl_hw_surface_alloc() (bsc#1051510).\n- drm/qxl: qxl_release use after free (bsc#1051510).\n- drm/qxl: Use correct notify port address when creating cursor ring (bsc#1113956)\n- drm/radeon: fix double free (bsc#1113956)\n- drm/radeon: fix fb_div check in ni_init_smc_spll_table() (bsc#1113956)\n- drm: Remove PageReserved manipulation from drm_pci_alloc (bsc#1114279) \t* offset changes\n- drm/sun4i: dsi: Allow binding the host without a panel (bsc#1113956)\n- drm/sun4i: dsi: Avoid hotplug race with DRM driver bind (bsc#1113956)\n- drm/sun4i: dsi: Remove incorrect use of runtime PM (bsc#1113956) \t* context changes\n- drm/sun4i: dsi: Remove unused drv from driver context (bsc#1113956) \t* context changes \t* keep include of sun4i_drv.h\n- drm/sun4i: hdmi ddc clk: Fix size of m divider (bsc#1111666).\n- drm/tegra: hub: Do not enable orphaned window group (bsc#1111666).\n- drm/vkms: Hold gem object while still in-use (bsc#1113956)  * context changes\n- dump_stack: avoid the livelock of the dump_lock (git fixes (block drivers)).\n- e1000: Distribute switch variables for initialization (bsc#1111666).\n- e1000e: Disable TSO for buffer overrun workaround (bsc#1051510).\n- e1000e: Do not wake up the system via WOL if device wakeup is disabled (bsc#1051510).\n- e1000e: Relax condition to trigger reset for ME workaround (bsc#1111666).\n- EDAC/amd64: Read back the scrub rate PCI register on F15h (bsc#1114279).\n- EDAC, sb_edac: Add support for systems with segmented PCI buses (bsc#1169525).\n- efi/random: Increase size of firmware supplied randomness (jsc#SLE-12423).\n- efi/random: Treat EFI_RNG_PROTOCOL output as bootloader randomness (jsc#SLE-12423).\n- efi: READ_ONCE rng seed size before munmap (jsc#SLE-12423).\n- efi: Reorder pr_notice() with add_device_randomness() call (jsc#SLE-12423).\n- evm: Check also if *tfm is an error pointer in init_desc() (bsc#1051510).\n- evm: Fix a small race in init_desc() (bsc#1051510).\n- ext4: add cond_resched() to __ext4_find_entry() (bsc#1166862).\n- ext4: Check for non-zero journal inum in ext4_calculate_overhead (bsc#1167288).\n- ext4: do not assume that mmp_nodename/bdevname have NUL (bsc#1166860).\n- ext4: do not zeroout extents beyond i_disksize (bsc#1167851).\n- ext4: fix a data race at inode->i_blocks (bsc#1171835).\n- ext4: fix a data race in EXT4_I(inode)->i_disksize (bsc#1166861).\n- ext4: fix extent_status fragmentation for plain files (bsc#1171949).\n- ext4: fix incorrect group count in ext4_fill_super error message (bsc#1168765).\n- ext4: fix incorrect inodes per group in error message (bsc#1168764).\n- ext4: fix partial cluster initialization when splitting extent (bsc#1173839).\n- ext4: fix potential race between online resizing and write operations (bsc#1166864).\n- ext4: fix potential race between s_flex_groups online resizing and access (bsc#1166867).\n- ext4: fix potential race between s_group_info online resizing and access (bsc#1166866).\n- ext4: fix race between ext4_sync_parent() and rename() (bsc#1173838).\n- ext4: fix race between writepages and enabling EXT4_EXTENTS_FL (bsc#1166870).\n- ext4: fix support for inode sizes > 1024 bytes (bsc#1164284).\n- ext4, jbd2: ensure panic by fix a race between jbd2 abort and ext4 error handlers (bsc#1173833).\n- ext4: potential crash on allocation error in ext4_alloc_flex_bg_array() (bsc#1166940).\n- ext4: rename s_journal_flag_rwsem to s_writepages_rwsem (bsc#1166868).\n- ext4: use non-movable memory for superblock readahead (bsc#1171952).\n- ext4: validate the debug_want_extra_isize mount option at parse time (bsc#1163897).\n- extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()' (bsc#1051510).\n- fanotify: fix ignore mask logic for events on child and on dir (bsc#1172719).\n- fanotify: fix merging marks masks with FAN_ONDIR (bsc#1171679).\n- fat: fix uninit-memory access for partial initialized inode (bsc#1051510).\n- fat: work around race with userspace's read via blockdev while mounting (bsc#1051510).\n- fbcon: fix null-ptr-deref in fbcon_switch (bsc#1114279) \t* rename drivers/video/fbdev/core to drivers/video/console \t* context changes\n- fbdev: potential information leak in do_fb_ioctl() (bsc#1114279)\n- fbmem: Adjust indentation in fb_prepare_logo and fb_blank (bsc#1114279)\n- fdt: add support for rng-seed (jsc#SLE-12423).\n- fdt: Update CRC check for rng-seed (jsc#SLE-12423).\n- fib: add missing attribute validation for tun_id (networking-stable-20_03_14).\n- firmware: imx: scu: Fix corruption of header (git-fixes).\n- firmware: imx: scu: Fix possible memory leak in imx_scu_probe() (bsc#1111666).\n- firmware: qcom: scm: fix compilation error when disabled (bsc#1051510).\n- Fix boot crash with MD (bsc#1174343)\n- fix multiplication overflow in copy_fdtable() (bsc#1173825).\n- fpga: dfl: afu: Corrected error handling levels (git-fixes).\n- fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks (networking-stable-20_05_12).\n- fs/cifs: fix gcc warning in sid_to_id (bsc#1144333).\n- fs/seq_file.c: simplify seq_file iteration code and interface (bsc#1170125).\n- gpiolib: Document that GPIO line names are not globally unique (bsc#1051510).\n- gpio: tegra: mask GPIO IRQs during IRQ shutdown (bsc#1051510).\n- gpu: host1x: Detach driver on unregister (bsc#1111666).\n- gpu: ipu-v3: pre: do not trigger update if buffer address does not change (bsc#1111666).\n- gre: fix uninit-value in __iptunnel_pull_header (networking-stable-20_03_14).\n- HID: hid-input: clear unmapped usages (git-fixes).\n- HID: hyperv: Add a module description line (bsc#1172249, bsc#1172251).\n- HID: i2c-hid: add Trekstor Primebook C11B to descriptor override (git-fixes).\n- HID: i2c-hid: override HID descriptors for certain devices (git-fixes).\n- HID: magicmouse: do not set up autorepeat (git-fixes).\n- HID: multitouch: add eGalaxTouch P80H84 support (bsc#1051510).\n- HID: sony: Fix for broken buttons on DS3 USB dongles (bsc#1051510).\n- HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices (git-fixes).\n- hrtimer: Annotate lockless access to timer->state (git fixes (block drivers)).\n- hsr: add restart routine into hsr_get_node_list() (networking-stable-20_03_28).\n- hsr: check protocol version in hsr_newlink() (networking-stable-20_04_17).\n- hsr: fix general protection fault in hsr_addr_is_self() (networking-stable-20_03_28).\n- hsr: set .netnsok flag (networking-stable-20_03_28).\n- hsr: use rcu_read_lock() in hsr_get_node_{list/status}() (networking-stable-20_03_28).\n- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).\n- hwmon: (acpi_power_meter) Fix potential memory leak in acpi_power_meter_add() (bsc#1111666).\n- hwmon: (emc2103) fix unable to change fan pwm1_enable attribute (bsc#1111666).\n- hwmon: (max6697) Make sure the OVERT mask is set correctly (bsc#1111666).\n- i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present (git-fixes).\n- i2c: acpi: put device when verifying client fails (git-fixes).\n- i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665 (bsc#1111666).\n- i2c: brcmstb: remove unused struct member (git-fixes).\n- i2c: core: Allow empty id_table in ACPI case as well (git-fixes).\n- i2c: core: decrease reference count of device node in i2c_unregister_device (git-fixes).\n- i2c: dev: Fix the race between the release of i2c_dev and cdev (bsc#1051510).\n- i2c: eg20t: Load module automatically if ID matches (bsc#1111666).\n- i2c: fix missing pm_runtime_put_sync in i2c_device_probe (git-fixes).\n- i2c-hid: properly terminate i2c_hid_dmi_desc_override_table array (git-fixes).\n- i2c: hix5hd2: add missed clk_disable_unprepare in remove (bsc#1051510).\n- i2c: i801: Do not add ICH_RES_IO_SMI for the iTCO_wdt device (git-fixes).\n- i2c: iproc: Stop advertising support of SMBUS quick cmd (git-fixes).\n- i2c: isch: Remove unnecessary acpi.h include (git-fixes).\n- i2c: jz4780: silence log flood on txabrt (bsc#1051510).\n- i2c: mlxcpld: check correct size of maximum RECV_LEN packet (bsc#1111666).\n- i2c: mux: demux-pinctrl: Fix an error handling path in 'i2c_demux_pinctrl_probe()' (bsc#1051510).\n- i2c: st: fix missing struct parameter description (bsc#1051510).\n- i40e: reduce stack usage in i40e_set_fc (git-fixes).\n- IB/hfi1: Do not destroy hfi1_wq when the device is shut down (bsc#1174409).\n- IB/hfi1: Do not destroy link_wq when the device is shut down (bsc#1174409).\n- IB/mlx5: Fix missing congestion control debugfs on rep rdma device (bsc#1103991).\n- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).\n- ibmvfc: do not send implicit logouts prior to NPIV login (bsc#1169625 ltc#184611).\n- ibmvnic: continue to init in CRQ reset returns H_CLOSED (bsc#1173280 ltc#185369).\n- ibmvnic: Flush existing work items before device removal (bsc#1065729).\n- ibmvnic: Harden device login requests (bsc#1170011 ltc#183538).\n- ibmvnic: Skip fatal error reset after passive init (bsc#1171078 ltc#184239).\n- iio:ad7797: Use correct attribute_group (bsc#1051510).\n- iio: adc: stm32-adc: fix device used to request dma (bsc#1051510).\n- iio: adc: stm32-adc: fix sleep in atomic context (git-fixes).\n- iio: adc: stm32-adc: Use dma_request_chan() instead dma_request_slave_channel() (bsc#1051510).\n- iio: buffer: Do not allow buffers without any channels enabled to be activated (bsc#1051510).\n- iio: dac: vf610: Fix an error handling path in 'vf610_dac_probe()' (bsc#1051510).\n- iio:health:afe4404 Fix timestamp alignment and prevent data leak (bsc#1111666).\n- iio:humidity:hdc100x Fix alignment and data leak issues (bsc#1111666).\n- iio:magnetometer:ak8974: Fix alignment and data leak issues (bsc#1111666).\n- iio: mma8452: Add missed iio_device_unregister() call in mma8452_probe() (bsc#1111666).\n- iio: potentiostat: lmp9100: fix iio_triggered_buffer_{predisable,postenable} positions (bsc#1051510).\n- iio: pressure: bmp280: Tolerate IRQ before registering (bsc#1051510).\n- iio:pressure:ms5611 Fix buffer element alignment (bsc#1111666).\n- iio: pressure: zpa2326: handle pm_runtime_get_sync failure (bsc#1111666).\n- iio: sca3000: Remove an erroneous 'get_device()' (bsc#1051510).\n- iio: xilinx-xadc: Fix ADC-B powerdown (bsc#1051510).\n- iio: xilinx-xadc: Fix clearing interrupt when enabling trigger (bsc#1051510).\n- iio: xilinx-xadc: Fix sequencer configuration for aux channels in simultaneous mode (bsc#1051510).\n- ima: Directly assign the ima_default_policy pointer to ima_rules (bsc#1051510).\n- ima: Fix ima digest hash table key calculation (bsc#1051510).\n- ima: Fix return value of ima_write_policy() (git-fixes).\n- include/asm-generic/topology.h: guard cpumask_of_node() macro argument (bsc#1148868).\n- Input: evdev - call input_flush_device() on release(), not flush() (bsc#1051510).\n- Input: hyperv-keyboard - add module description (bsc#1172249, bsc#1172251).\n- Input: i8042 - add Acer Aspire 5738z to nomux list (bsc#1051510).\n- Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list (bsc#1111666).\n- Input: i8042 - add ThinkPad S230u to i8042 reset list (bsc#1051510).\n- input: i8042 - Remove special PowerPC handling (git-fixes).\n- Input: raydium_i2c_ts - use true and false for boolean values (bsc#1051510).\n- Input: synaptics - add a second working PNP_ID for Lenovo T470s (bsc#1111666).\n- Input: synaptics - enable RMI on HP Envy 13-ad105ng (bsc#1051510).\n- Input: synaptics-rmi4 - fix error return code in rmi_driver_probe() (bsc#1051510).\n- Input: synaptics-rmi4 - really fix attn_data use-after-free (git-fixes).\n- Input: usbtouchscreen - add support for BonXeon TP (bsc#1051510).\n- Input: xpad - add custom init packet for Xbox One S controllers (bsc#1051510).\n- intel_idle: Graceful probe failure when MWAIT is disabled (bsc#1174115).\n- intel_th: Fix a NULL dereference when hub driver is not loaded (bsc#1111666).\n- intel_th: pci: Add Elkhart Lake CPU support (bsc#1051510).\n- iommu/amd: Call domain_flush_complete() in update_domain() (bsc#1172096).\n- iommu/amd: Do not flush Device Table in iommu_map_page() (bsc#1172097).\n- iommu/amd: Do not loop forever when trying to increase address space (bsc#1172098).\n- iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system (bsc#1172099).\n- iommu/amd: Fix over-read of ACPI UID from IVRS table (bsc#1172101).\n- iommu/amd: Fix race in increase_address_space()/fetch_pte() (bsc#1172102).\n- iommu/amd: Fix the configuration of GCR3 table root pointer (bsc#1169057).\n- iommu/amd: Update Device Table in increase_address_space() (bsc#1172103).\n- iommu: Fix reference count leak in iommu_group_alloc (bsc#1172397).\n- ip6_tunnel: Allow rcv/xmit even if remote address is a local address (bsc#1166978).\n- ipmi: fix hung processes in __get_guid() (git-fixes).\n- ipv4: fix a RCU-list lock in fib_triestat_seq_show (networking-stable-20_04_02).\n- ipv6/addrconf: call ipv6_mc_up() for non-Ethernet interface (networking-stable-20_03_14).\n- ipv6: do not auto-add link-local address to lag ports (networking-stable-20_04_09).\n- ipv6: fix IPV6_ADDRFORM operation logic (bsc#1171662).\n- ipv6: Fix nlmsg_flags when splitting a multipath route (networking-stable-20_03_01).\n- ipv6: fix restrict IPV6_ADDRFORM operation (bsc#1171662).\n- ipv6: Fix route replacement with dev-only route (networking-stable-20_03_01).\n- ipvlan: add cond_resched_rcu() while processing muticast backlog (networking-stable-20_03_14).\n- ipvlan: call dev_change_flags when ipvlan mode is reset (git-fixes).\n- ipvlan: do not add hardware address of master to its unicast filter list (bsc#1137325).\n- ipvlan: do not deref eth hdr before checking it's set (networking-stable-20_03_14).\n- ipvlan: do not use cond_resched_rcu() in ipvlan_process_multicast() (networking-stable-20_03_14).\n- irqchip/bcm2835: Quiesce IRQs left enabled by bootloader (bsc#1051510).\n- irqdomain: Fix a memory leak in irq_domain_push_irq() (bsc#1051510).\n- iwlwifi: pcie: actually release queue memory in TVQM (bsc#1051510).\n- ixgbe: do not check firmware errors (bsc#1170284).\n- ixgbevf: Remove limit of 10 entries for unicast filter list (git-fixes).\n- jbd2: avoid leaking transaction credits when unreserving handle (bsc#1173845).\n- jbd2: Preserve kABI when adding j_abort_mutex (bsc#1173833).\n- kabi fix for (bsc#1168202).\n- kabi fix for early XHCI debug (git-fixes).\n- kabi for for md: improve handling of bio with REQ_PREFLUSH in md_flush_request() (git-fixes).\n- kabi: hv: prevent struct device_node to become defined (bsc#1172871).\n- kabi: ppc64le: prevent struct dma_map_ops to become defined (jsc#SLE-12423).\n- kABI: protect struct mlx5_cmd_work_ent (kabi).\n- kABI: reintroduce inet_hashtables.h include to l2tp_ip (kabi).\n- kabi/severities: Do not track KVM internal symbols.\n- kabi/severities: Ingnore get_dev_data() The function is internal to the AMD IOMMU driver and must not be called by any third party.\n- kabi workaround for snd_rawmidi buffer_ref field addition (git-fixes).\n- kernfs: fix barrier usage in __kernfs_new_node() (bsc#1111666).\n- KEYS: reaching the keys quotas correctly (bsc#1051510).\n- KVM: arm64: Change hyp_panic()s dependency on tpidr_el2 (bsc#1133021).\n- KVM: arm64: Stop save/restoring host tpidr_el1 on VHE (bsc#1133021).\n- KVM: Check validity of resolved slot when searching memslots (bsc#1172104).\n- KVM: nVMX: Do not reread VMCS-agnostic state when switching VMCS (bsc#1114279).\n- KVM: nVMX: Skip IBPB when switching between vmcs01 and vmcs02 (bsc#1114279).\n- KVM: s390: vsie: Fix delivery of addressing exceptions (git-fixes).\n- KVM: s390: vsie: Fix possible race when shadowing region 3 tables (git-fixes).\n- KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks (git-fixes).\n- KVM: SVM: Fix potential memory leak in svm_cpu_init() (bsc#1171736).\n- KVM x86: Extend AMD specific guest behavior to Hygon virtual CPUs (bsc#1152489).\n- KVM: x86: Fix APIC page invalidation race (bsc#1174122).\n- kvm: x86: Fix L1TF mitigation for shadow MMU (bsc#1171904).\n- KVM: x86/mmu: Set mmio_value to '0' if reserved #PF can't be generated (bsc#1171904).\n- KVM: x86: only do L1TF workaround on affected processors (bsc#1171904).\n- l2tp: add sk_family checks to l2tp_validate_socket (networking-stable-20_06_07).\n- l2tp: Allow management of tunnels and session in user namespace (networking-stable-20_04_17).\n- l2tp: do not use inet_hash()/inet_unhash() (networking-stable-20_06_07).\n- libata: Remove extra scsi_host_put() in ata_scsi_add_hosts() (bsc#1051510).\n- libata: Return correct status in sata_pmp_eh_recover_pm() when ATA_DFLAG_DETACH is set (bsc#1051510).\n- libceph: do not omit recovery_deletes in target_copy() (bsc#1174113).\n- libceph: ignore pool overlay and cache logic on redirects (bsc#1173146).\n- libfs: fix infoleak in simple_attr_read() (bsc#1168881).\n- libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock (bsc#1171753).\n- libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant (bsc#1171753).\n- libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl() (bsc#1171753).\n- libnvdimm: cover up changes in struct nvdimm_bus (bsc#1171753).\n- libnvdimm: cover up nd_pfn_sb changes (bsc#1171759).\n- libnvdimm/dax: Pick the right alignment default when creating dax devices (bsc#1171759).\n- libnvdimm/label: Remove the dpa align check (bsc#1171759).\n- libnvdimm/of_pmem: Provide a unique name for bus provider (bsc#1171739).\n- libnvdimm/pfn_dev: Add a build check to make sure we notice when struct page size change (bsc#1171743).\n- libnvdimm/pfn_dev: Add page size and struct page size to pfn superblock (bsc#1171759).\n- libnvdimm/pfn: Prevent raw mode fallback if pfn-infoblock valid (bsc#1171743).\n- libnvdimm/pmem: Advance namespace seed for specific probe errors (bsc#1171743).\n- libnvdimm/region: Initialize bad block for volatile namespaces (bnc#1151927 5.3.6).++ kernel-source-rt.spec (revision 4)Release:    <RELEASE>.g93af9dfProvides:    %name-srchash-93af9df3581407689c1ac5b0aa06fcfb62b08f1c\n- libnvdimm/region: Rewrite _probe_success() to _advance_seeds() (bsc#1171743).\n- libnvdimm: Use PAGE_SIZE instead of SZ_4K for align check (bsc#1171759).\n- lib: raid6: fix awk build warnings (git fixes (block drivers)).\n- lib/raid6/test: fix build on distros whose /bin/sh is not bash (git fixes (block drivers)).\n- lib/stackdepot.c: fix global out-of-bounds in stack_slabs (git fixes (block drivers)).\n- livepatch: Apply vmlinux-specific KLP relocations early (bsc#1071995).\n- livepatch: Disallow vmlinux.ko (bsc#1071995).\n- livepatch: Make klp_apply_object_relocs static (bsc#1071995).\n- livepatch: Prevent module-specific KLP rela sections from referencing vmlinux symbols (bsc#1071995).\n- livepatch: Remove .klp.arch (bsc#1071995).\n- locks: print unsigned ino in /proc/locks (bsc#1171951). \n- loop: replace kill_bdev with invalidate_bdev (bsc#1173820).\n- lpfc_debugfs: get rid of pointless access_ok() (bsc#1172687 bsc#1171530).\n- lpfc: Synchronize NVME transport and lpfc driver devloss_tmo (bcs#1173060).\n- mac80211: add ieee80211_is_any_nullfunc() (bsc#1051510).\n- mac80211: add option for setting control flags (bsc#1111666).\n- mac80211: Do not send mesh HWMP PREQ if HWMP is disabled (bsc#1051510).\n- mac80211_hwsim: Use kstrndup() in place of kasprintf() (bsc#1051510).\n- mac80211: mesh: fix discovery timer re-arming issue / crash (bsc#1051510).\n- mac80211: set IEEE80211_TX_CTRL_PORT_CTRL_PROTO for nl80211 TX (bsc#1111666).\n- macsec: avoid to set wrong mtu (bsc#1051510).\n- macsec: restrict to ethernet devices (networking-stable-20_03_28).\n- macvlan: add cond_resched() during multicast processing (networking-stable-20_03_14).\n- macvlan: fix null dereference in macvlan_device_event() (bsc#1051510).\n- mailbox: imx: Disable the clock on devm_mbox_controller_register() failure (git-fixes).\n- md: Avoid namespace collision with bitmap API (git fixes (block drivers)).\n- md: improve handling of bio with REQ_PREFLUSH in md_flush_request() (git-fixes).\n- md/raid0: Fix an error message in raid0_make_request() (git fixes (block drivers)).\n- md/raid10: prevent access of uninitialized resync_pages offset (git-fixes).\n- mdraid: fix read/write bytes accounting (bsc#1172537).\n- md: use memalloc scope APIs in mddev_suspend()/mddev_resume() (bsc#1166985)).\n- media: cec: silence shift wrapping warning in __cec_s_log_addrs() (git-fixes).\n- media: dib0700: fix rc endpoint lookup (bsc#1051510).\n- media: dvb: return -EREMOTEIO on i2c transfer failure (bsc#1051510).\n- media: flexcop-usb: fix endpoint sanity check (git-fixes).\n- media: go7007: Fix URB type for interrupt handling (bsc#1051510).\n- media: platform: fcp: Set appropriate DMA parameters (bsc#1051510).\n- media: si2157: Better check for running tuner in init (bsc#1111666).\n- media: tda10071: fix unsigned sign extension overflow (bsc#1051510).\n- media: ti-vpe: cal: fix disable_irqs to only the intended target (git-fixes).\n- media: usbtv: fix control-message timeouts (bsc#1051510).\n- media: v4l2-core: fix entity initialization in device_register_subdev (bsc#1051510).\n- media: vsp1: tidyup VI6_HGT_LBn_H() macro (bsc#1051510).\n- media: xirlink_cit: add missing descriptor sanity checks (bsc#1051510).\n- mei: release me_cl object reference (bsc#1051510).\n- mfd: dln2: Fix sanity checking for endpoints (bsc#1051510).\n- misc: pci_endpoint_test: Fix to support > 10 pci-endpoint-test devices (bsc#1051510).\n- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw ordered workqueue (git-fixes).\n- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw workqueue (git-fixes).\n- mlxsw: Fix some IS_ERR() vs NULL bugs (networking-stable-20_04_27).\n- mlxsw: pci: Return error on PCI reset timeout (git-fixes).\n- mlxsw: spectrum_acl_tcam: Position vchunk in a vregion list properly (networking-stable-20_05_12).\n- mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed (git-fixes).\n- mlxsw: spectrum_dpipe: Add missing error path (git-fixes).\n- mlxsw: spectrum_flower: Do not stop at FLOW_ACTION_VLAN_MANGLE (networking-stable-20_04_09).\n- mlxsw: spectrum_mr: Fix list iteration in error path (bsc#1112374).\n- mlxsw: spectrum: Prevent force of 56G (git-fixes).\n- mlxsw: spectrum_router: Refresh nexthop neighbour when it becomes dead (git-fixes).\n- mlxsw: spectrum_router: Remove inappropriate usage of WARN_ON() (git-fixes).\n- mlxsw: spectrum_switchdev: Add MDB entries in prepare phase (git-fixes).\n- mlxsw: spectrum_switchdev: Do not treat static FDB entries as sticky (git-fixes).\n- mmc: atmel-mci: Fix debugfs on 64-bit platforms (git-fixes).\n- mmc: block: Fix request completion in the CQE timeout path (bsc#1111666).\n- mmc: block: Fix use-after-free issue for rpmb (bsc#1111666).\n- mmc: core: Check request type before completing the request (git-fixes).\n- mmc: core: Fix recursive locking issue in CQE recovery path (git-fixes).\n- mmc: cqhci: Avoid false 'cqhci: CQE stuck on' by not open-coding timeout loop (git-fixes).\n- mmc: dw_mmc: Fix debugfs on 64-bit platforms (git-fixes).\n- mmc: fix compilation of user API (bsc#1051510).\n- mmc: meson-gx: make sure the descriptor is stopped on errors (git-fixes).\n- mmc: meson-gx: simplify interrupt handler (git-fixes).\n- mmc: renesas_sdhi: limit block count to 16 bit for old revisions (git-fixes).\n- mmc: sdhci: do not enable card detect interrupt for gpio cd type (bsc#1111666).\n- mmc: sdhci-esdhc-imx: fix the mask for tuning start point (bsc#1051510).\n- mmc: sdhci-msm: Clear tuning done flag while hs400 tuning (bsc#1051510).\n- mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk (bsc#1111666).\n- mmc: sdhci-of-at91: fix memleak on clk_get failure (git-fixes).\n- mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers (bsc#1051510).\n- mmc: sdhci-xenon: fix annoying 1.8V regulator warning (bsc#1051510).\n- mmc: sdio: Fix potential NULL pointer error in mmc_sdio_init_card() (bsc#1051510).\n- mmc: tmio: fix access width of Block Count Register (git-fixes).\n- mm/filemap.c: do not initiate writeback if mapping has no dirty pages (bsc#1168884).\n- mm: limit boost_watermark on small zones (git fixes (mm/pgalloc)).\n- mm/memory_hotplug.c: only respect mem= parameter during boot stage (bsc#1065600).\n- mm: replace PF_LESS_THROTTLE with PF_LOCAL_THROTTLE (bsc#1163403).\n- mm: thp: handle page cache THP correctly in PageTransCompoundMap (git fixes (block drivers)).\n- mtd: cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer (bsc#1051510).\n- mtd: spi-nor: cadence-quadspi: add a delay in write sequence (git-fixes).\n- mtd: spi-nor: enable 4B opcodes for mx66l51235l (git-fixes).\n- mtd: spi-nor: fsl-quadspi: Do not let -EINVAL on the bus (git-fixes).\n- mvpp2: remove misleading comment (git-fixes).\n- mwifiex: avoid -Wstringop-overflow warning (bsc#1051510).\n- mwifiex: Fix memory corruption in dump_station (bsc#1051510).\n- net: bcmgenet: correct per TX/RX ring statistics (networking-stable-20_04_27).\n- net: be more gentle about silly gso requests coming from user (networking-stable-20_06_07).\n- net: check untrusted gso_size at kernel entry (networking-stable-20_06_07).\n- net/cxgb4: Check the return from t4_query_params properly (git-fixes).\n- net: dsa: b53: Fix ARL register definitions (networking-stable-20_04_27).\n- net: dsa: b53: Rework ARL bin logic (networking-stable-20_04_27).\n- net: dsa: bcm_sf2: Do not register slave MDIO bus with OF (networking-stable-20_04_09).\n- net: dsa: bcm_sf2: Ensure correct sub-node is parsed (networking-stable-20_04_09).\n- net: dsa: bcm_sf2: Fix node reference count (git-fixes).\n- net: dsa: bcm_sf2: Fix overflow checks (git-fixes).\n- net: dsa: Fix duplicate frames flooded by learning (networking-stable-20_03_28).\n- net: dsa: loop: Add module soft dependency (networking-stable-20_05_16).\n- net: dsa: mt7530: fix roaming from DSA user ports (networking-stable-20_05_27).\n- net: dsa: mv88e6xxx: fix lockup on warm boot (networking-stable-20_03_14).\n- net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it (git-fixes).\n- net: ena: add missing ethtool TX timestamping indication (git-fixes).\n- net: ena: avoid memory access violation by validating req_id properly (git-fixes).\n- net: ena: do not wake up tx queue when down (git-fixes).\n- net: ena: ena-com.c: prevent NULL pointer dereference (git-fixes).\n- net: ena: ethtool: use correct value for crc32 hash (git-fixes).\n- net: ena: fix continuous keep-alive resets (git-fixes).\n- net: ena: fix corruption of dev_idx_to_host_tbl (git-fixes).\n- net: ena: fix default tx interrupt moderation interval (git-fixes).\n- net: ena: fix incorrect default RSS key (git-fixes).\n- net: ena: fix incorrectly saving queue numbers when setting RSS indirection table (git-fixes).\n- net: ena: fix issues in setting interrupt moderation params in ethtool (git-fixes).\n- net: ena: fix potential crash when rxfh key is NULL (git-fixes).\n- net: ena: fix retrieval of nonadaptive interrupt moderation intervals (git-fixes).\n- net: ena: fix uses of round_jiffies() (git-fixes).\n- net: ena: make ena rxfh support ETH_RSS_HASH_NO_CHANGE (git-fixes).\n- net: ena: reimplement set/get_coalesce() (git-fixes).\n- net: ena: rss: do not allocate key when not supported (git-fixes).\n- net: ena: rss: fix failure to get indirection table (git-fixes).\n- net: ena: rss: store hash function as values and not bits (git-fixes).\n- net/ethernet: add Google GVE driver (jsc#SLE-10538)\n- net: fec: add phy_reset_after_clk_enable() support (git-fixes).\n- net: fec: validate the new settings in fec_enet_set_coalesce() (networking-stable-20_03_14).\n- net: fib_rules: Correctly set table field when table number exceeds 8 bits (networking-stable-20_03_01).\n- netfilter: connlabels: prefer static lock initialiser (git-fixes).\n- netfilter: conntrack: sctp: use distinct states for new SCTP connections (bsc#1159199).\n- netfilter: ctnetlink: netns exit must wait for callbacks (bsc#1169795).\n- netfilter: not mark a spinlock as __read_mostly (git-fixes).\n- net: fix a potential recursive NETDEV_FEAT_CHANGE (networking-stable-20_05_16).\n- net: fix race condition in __inet_lookup_established() (bsc#1151794).\n- net: fq: add missing attribute validation for orphan mask (networking-stable-20_03_14).\n- net: hns3: fix 'tc qdisc del' failed issue (bsc#1109837).\n- net: inet_csk: Fix so_reuseport bind-address cache in tb->fast* (networking-stable-20_05_27).\n- net: ipip: fix wrong address family in init error path (networking-stable-20_05_27).\n- net, ip_tunnel: fix interface lookup with no key (networking-stable-20_04_02).\n- net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin (networking-stable-20_04_17).\n- net: ipv6: do not consider routes via gateways for anycast address check (networking-stable-20_04_17).\n- net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set (git-fixes).\n- netlink: Use netlink header as base to calculate bad attribute offset (networking-stable-20_03_14).\n- net: macsec: preserve ingress frame ordering (networking-stable-20_05_12).\n- net: memcg: fix lockdep splat in inet_csk_accept() (networking-stable-20_03_14).\n- net: memcg: late association of sock to memcg (networking-stable-20_03_14).\n- net/mlx4_core: drop useless LIST_HEAD (git-fixes).\n- net/mlx4_core: fix a memory leak bug (git-fixes).\n- net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc() (networking-stable-20_05_12).\n- net/mlx4_en: avoid indirect call in TX completion (networking-stable-20_04_27).\n- net/mlx5: Add command entry handling completion (networking-stable-20_05_27).\n- net/mlx5: Add new fields to Port Type and Speed register (bsc#1171118).\n- net/mlx5: Avoid panic when setting vport rate (git-fixes).\n- net/mlx5: Continue driver initialization despite debugfs failure (git-fixes).\n- net/mlx5e: ethtool, Fix a typo in WOL function names (git-fixes).\n- net/mlx5e: Fix traffic duplication in ethtool steering (git-fixes).\n- net/mlx5e: Remove unnecessary clear_bit()s (git-fixes).\n- net/mlx5e: Update netdev txq on completions during closure (networking-stable-20_05_27).\n- net/mlx5: Expose link speed directly (bsc#1171118).\n- net/mlx5: Expose port speed when possible (bsc#1171118).\n- net/mlx5: Fix command entry leak in Internal Error State (networking-stable-20_05_12).\n- net/mlx5: Fix crash upon suspend/resume (networking-stable-20_06_07).\n- net/mlx5: Fix failing fw tracer allocation on s390 (bsc#1103990 ).\n- net/mlx5: Fix forced completion access non initialized command entry (networking-stable-20_05_12).\n- net: mvmdio: allow up to four clocks to be specified for orion-mdio (git-fixes).\n- net: mvneta: Fix the case where the last poll did not process all rx (networking-stable-20_03_28).\n- net: mvpp2: prs: Do not override the sign bit in SRAM parser shift (git-fixes).\n- net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node (networking-stable-20_04_27).\n- net/packet: tpacket_rcv: do not increment ring index on drop (networking-stable-20_03_14).\n- net: phy: fix aneg restart in phy_ethtool_set_eee (networking-stable-20_05_16).\n- net: phy: micrel: kszphy_resume(): add delay after genphy_resume() before accessing PHY registers (bsc#1051510).\n- net: phy: restore mdio regs in the iproc mdio driver (networking-stable-20_03_01).\n- netprio_cgroup: Fix unlimited memory leak of v2 cgroups (networking-stable-20_05_16).\n- net: qede: stop adding events on an already destroyed workqueue (git-fixes).\n- net: qed: fix excessive QM ILT lines consumption (git-fixes).\n- net: qed: fix NVMe login fails over VFs (git-fixes).\n- net: qmi_wwan: add support for ASKEY WWHC050 (networking-stable-20_03_28).\n- net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() (networking-stable-20_05_27).\n- net: revert default NAPI poll timeout to 2 jiffies (networking-stable-20_04_17).\n- net: revert 'net: get rid of an signed integer overflow in ip_idents_reserve()' (networking-stable-20_05_27).\n- net_sched: cls_route: remove the right filter from hashtable (networking-stable-20_03_28).\n- net sched: fix reporting the first-time use timestamp (networking-stable-20_05_27).\n- net_sched: sch_skbprio: add message validation to skbprio_change() (bsc#1109837).\n- net: stricter validation of untrusted gso packets (networking-stable-20_05_12).\n- net/tls: Fix sk_psock refcnt leak in bpf_exec_tx_verdict() (networking-stable-20_05_12).\n- net/tls: Fix sk_psock refcnt leak when in tls_data_ready() (networking-stable-20_05_12).\n- net: usb: qmi_wwan: add support for DW5816e (networking-stable-20_05_12).\n- net: usb: qmi_wwan: add Telit 0x1050 composition (networking-stable-20_06_07).\n- net: usb: qmi_wwan: add Telit LE910C1-EUX composition (networking-stable-20_06_07).\n- net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss() (bsc#1172484).\n- net/x25: Fix x25_neigh refcnt leak when receiving frame (networking-stable-20_04_27).\n- nfc: add missing attribute validation for SE API (networking-stable-20_03_14).\n- nfc: add missing attribute validation for vendor subcommand (networking-stable-20_03_14).\n- nfc: fdp: Fix a signedness bug in fdp_nci_send_patch() (bsc#1051510).\n- nfc: pn544: Fix occasional HW initialization failure (networking-stable-20_03_01).\n- nfc: st21nfca: add missed kfree_skb() in an error path (bsc#1051510).\n- nfp: abm: fix a memory leak bug (bsc#1109837).\n- nfp: bpf: fix code-gen bug on BPF_ALU | BPF_XOR | BPF_K (git-fixes).\n- nfsd4: fix up replay_matches_cache() (git-fixes).\n- nfsd: Ensure CLONE persists data and metadata changes to the target file (git-fixes).\n- nfsd: fix delay timer on 32-bit architectures (git-fixes).\n- nfsd: fix jiffies/time_t mixup in LRU list (git-fixes).\n- nfs: Directory page cache pages need to be locked when read (git-fixes).\n- nfsd: memory corruption in nfsd4_lock() (git-fixes).\n- nfs: Do not call generic_error_remove_page() while holding locks (bsc#1170457).\n- NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid() (bsc#1170592).\n- nfs: Fix memory leaks and corruption in readdir (git-fixes).\n- nfs: Fix O_DIRECT accounting of number of bytes read/written (git-fixes).\n- nfs: Fix potential posix_acl refcnt leak in nfs3_set_acl (git-fixes).\n- nfs: fix racey wait in nfs_set_open_stateid_locked (bsc#1170592).\n- nfs/flexfiles: Use the correct TCP timeout for flexfiles I/O (git-fixes).\n- nfs/pnfs: Fix pnfs_generic_prepare_to_resend_writes() (git-fixes).\n- nfs: Revalidate the file size on a fatal write error (git-fixes).\n- NFSv4.0: nfs4_do_fsinfo() should not do implicit lease renewals (git-fixes).\n- NFSv4: Do not allow a cached open with a revoked delegation (git-fixes).\n- NFSv4: Fix leak of clp->cl_acceptor string (git-fixes).\n- NFSv4/pnfs: Return valid stateids in nfs_layout_find_inode_by_stateid() (git-fixes).\n- NFSv4: Retry CLOSE and DELEGRETURN on NFS4ERR_OLD_STATEID (bsc#1170592).\n- NFSv4: try lease recovery on NFS4ERR_EXPIRED (git-fixes).\n- NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn (git-fixes).\n- nilfs2: fix null pointer dereference at nilfs_segctor_do_construct() (bsc#1173857).\n- nl80211: fix NL80211_ATTR_CHANNEL_WIDTH attribute type (bsc#1111666).\n- nl802154: add missing attribute validation for dev_type (networking-stable-20_03_14).\n- nl802154: add missing attribute validation (networking-stable-20_03_14).\n- nvdimm: Avoid race between probe and reading device attributes (bsc#1170442).\n- nvme: check for NVME_CTRL_LIVE in nvme_report_ns_ids() (bcs#1171558 bsc#1159058).\n- nvme: do not update multipath disk information if the controller is down (bcs#1171558 bsc#1159058).\n- nvme: fail cancelled commands with NVME_SC_HOST_PATH_ERROR (bsc#1158983 bsc#1172538).\n- nvme-fc: Fail transport errors with NVME_SC_HOST_PATH (bsc#1158983 bsc#1172538).\n- nvme-fc: print proper nvme-fc devloss_tmo value (bsc#1172391).\n- nvme-tcp: fail command with NVME_SC_HOST_PATH_ERROR send failed (bsc#1158983 bsc#1172538).\n- objtool: Add is_static_jump() helper (bsc#1169514).\n- objtool: Add relocation check for alternative sections (bsc#1169514).\n- objtool: Clean instruction state before each function validation (bsc#1169514).\n- objtool: Fix stack offset tracking for indirect CFAs (bsc#1169514).\n- objtool: Fix switch table detection in .text.unlikely (bsc#1169514).\n- objtool: Ignore empty alternatives (bsc#1169514).\n- objtool: Make BP scratch register warning more robust (bsc#1169514).\n- ocfs2: no need try to truncate file beyond i_size (bsc#1171841).\n- OMAP: DSS2: remove non-zero check on variable r (bsc#1114279)\n- overflow: Fix -Wtype-limits compilation warnings (git fixes).\n- overflow.h: Add arithmetic shift helper (git fixes).\n- p54usb: add AirVasT USB stick device-id (bsc#1051510).\n- padata: ensure the reorder timer callback runs on the correct CPU (git-fixes).\n- padata: Remove broken queue flushing (git-fixes).\n- padata: reorder work kABI fixup (git-fixes).\n- Partially revert 'kfifo: fix kfifo_alloc() and kfifo_init()' (git fixes (block drivers)).\n- partitions/efi: Fix partition name parsing in GUID partition entry (bsc#1168763).\n- PCI/AER: Remove HEST/FIRMWARE_FIRST parsing for AER ownership (bsc#1174356).\n- PCI/AER: Use only _OSC to determine AER ownership (bsc#1174356).\n- PCI: Allow pci_resize_resource() for devices on root bus (bsc#1051510).\n- PCI/ASPM: Clear the correct bits when enabling L1 substates (bsc#1051510).\n- PCI: endpoint: Fix clearing start entry in configfs (bsc#1051510).\n- PCI: Fix pci_register_host_bridge() device_register() error handling (bsc#1051510).\n- PCI: Generalize multi-function power dependency device links (bsc#1111666).\n- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (bsc#1172201, bsc#1172202).\n- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871, bsc#1172872).\n- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (bsc#1172201, bsc#1172202).\n- PCI: hv: Fix the PCI HyperV probe failure path to release resource properly (bsc#1172871, bsc#1172872).\n- PCI: hv: Introduce hv_msi_entry (bsc#1172871, bsc#1172872).\n- PCI: hv: Move hypercall related definitions into tlfs header (bsc#1172871, bsc#1172872).\n- PCI: hv: Move retarget related structures into tlfs header (bsc#1172871, bsc#1172872).\n- PCI: hv: Reorganize the code in preparation of hibernation (bsc#1172871, bsc#1172872).\n- PCI: hv: Retry PCI bus D0 entry on invalid device state (bsc#1172871, bsc#1172872).\n- PCI: pciehp: Fix indefinite wait on sysfs requests (git-fixes).\n- PCI: pciehp: Fix MSI interrupt race (bsc#1159037).\n- PCI: pciehp: Support interrupts sent from D3hot (git-fixes).\n- PCI/PM: Call .bridge_d3() hook only if non-NULL (git-fixes).\n- PCI: Program MPS for RCiEP devices (bsc#1051510).\n- PCI/PTM: Inherit Switch Downstream Port PTM settings from Upstream Port (bsc#1051510).\n- pci: Revive pci_dev __aer_firmware_first* fields for kABI (bsc#1174356).\n- PCI/switchtec: Fix init_completion race condition with poll_wait() (bsc#1051510).\n- pcm_native: result of put_user() needs to be checked (bsc#1111666).\n- perf: Allocate context task_ctx_data for child event (git-fixes).\n- perf/cgroup: Fix perf cgroup hierarchy support (git-fixes).\n- perf: Copy parent's address filter offsets on clone (git-fixes).\n- perf/core: Add sanity check to deal with pinned event failure (git-fixes).\n- perf/core: Avoid freeing static PMU contexts when PMU is unregistered (git-fixes).\n- perf/core: Correct event creation with PERF_FORMAT_GROUP (git-fixes).\n- perf/core: Do not WARN() for impossible ring-buffer sizes (git-fixes).\n- perf/core: Fix ctx_event_type in ctx_resched() (git-fixes).\n- perf/core: Fix error handling in perf_event_alloc() (git-fixes).\n- perf/core: Fix exclusive events' grouping (git-fixes).\n- perf/core: Fix group scheduling with mixed hw and sw events (git-fixes).\n- perf/core: Fix impossible ring-buffer sizes warning (git-fixes).\n- perf/core: Fix locking for children siblings group read (git-fixes).\n- perf/core: Fix perf_event_read_value() locking (git-fixes).\n- perf/core: Fix perf_pmu_unregister() locking (git-fixes).\n- perf/core: Fix perf_sample_regs_user() mm check (git-fixes).\n- perf/core: Fix possible Spectre-v1 indexing for ->aux_pages (git-fixes).\n- perf/core: Fix race between close() and fork() (git-fixes).\n- perf/core: Fix the address filtering fix (git-fixes).\n- perf/core: Fix use-after-free in uprobe_perf_close() (git-fixes).\n- perf/core: Force USER_DS when recording user stack data (git-fixes).\n- perf/core: Restore mmap record type correctly (git-fixes).\n- perf: Fix header.size for namespace events (git-fixes).\n- perf/ioctl: Add check for the sample_period value (git-fixes).\n- perf, pt, coresight: Fix address filters for vmas with non-zero offset (git-fixes).\n- perf: Return proper values for user stack errors (git-fixes).\n- perf/x86/amd: Constrain Large Increment per Cycle events (git-fixes).\n- perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity (git-fixes).\n- perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops (git-fixes).\n- perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) (git-fixes).\n- perf/x86/amd/iommu: Make the 'amd_iommu_attr_groups' symbol static (git-fixes).\n- perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs (git-fixes stable).\n- perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs (git-fixes).\n- perf/x86/amd/uncore: Set ThreadMask and SliceMask for L3 Cache perf events (git-fixes stable).\n- perf/x86: Enable free running PEBS for REGS_USER/INTR (git-fixes).\n- perf/x86: Fix incorrect PEBS_REGS (git-fixes).\n- perf/x86/intel: Add generic branch tracing check to intel_pmu_has_bts() (git-fixes).\n- perf/x86/intel: Add proper condition to run sched_task callbacks (git-fixes).\n- perf/x86/intel/bts: Fix the use of page_private() (git-fixes).\n- perf/x86/intel: Fix PT PMI handling (git-fixes).\n- perf/x86/intel: Move branch tracing setup to the Intel-specific source file (git-fixes).\n- perf/x86/intel/uncore: Add Node ID mask (git-fixes).\n- perf/x86/intel/uncore: Fix PCI BDF address of M3UPI on SKX (git-fixes).\n- perf/x86/intel/uncore: Handle invalid event coding for free-running counter (git-fixes).\n- perf/x86/uncore: Fix event group support (git-fixes).\n- pid: Improve the comment about waiting in zap_pid_ns_processes (git fixes)).\n- pinctrl: baytrail: Enable pin configuration setting for GPIO chip (git-fixes).\n- pinctrl: cherryview: Add missing spinlock usage in chv_gpio_irq_handler (git-fixes).\n- pinctrl: core: Remove extra kref_get which blocks hogs being freed (bsc#1051510).\n- pinctrl: freescale: imx: Fix an error handling path in 'imx_pinctrl_probe()' (bsc#1051510).\n- pinctrl: imxl: Fix an error handling path in 'imx1_pinctrl_core_probe()' (bsc#1051510).\n- pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs (bsc#1051510).\n- pinctrl: sunrisepoint: Fix PAD lock register offset for SPT-H (git-fixes).\n- platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA (bsc#1051510).\n- platform/x86: dell-laptop: do not register micmute LED if there is no token (bsc#1111666).\n- platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32() (bsc#1111666).\n- PM / Domains: Allow genpd users to specify default active wakeup behavior (git-fixes).\n- pNFS: Ensure we do clear the return-on-close layout stateid on fatal errors (git-fixes).\n- pnp: Use list_for_each_entry() instead of open coding (git fixes).\n- powerpc/64s: Do not let DT CPU features set FSCR_DSCR (bsc#1065729).\n- powerpc/64s: Save FSCR to init_task.thread.fscr after feature init (bsc#1065729).\n- powerpc: Add attributes for setjmp/longjmp (bsc#1065729).\n- powerpc/book3s64: Export has_transparent_hugepage() related functions (bsc#1171759).\n- powerpc/book3s64/pkeys: Fix pkey_access_permitted() for execute disable pkey (bsc#1065729).\n- powerpc/fadump: fix race between pstore write and fadump crash trigger (bsc#1168959 ltc#185010).\n- powerpc/hash64/devmap: Use H_PAGE_THP_HUGE when setting up huge devmap PTE entries (bsc#1065729).\n- powerpc/pci/of: Parse unassigned resources (bsc#1065729).\n- powerpc/setup_64: Set cache-line-size based on cache-block-size (bsc#1065729).\n- powerpc/sstep: Fix DS operand in ld encoding to appropriate value (bsc#1065729).\n- powerpc/xive: Clear the page tables for the ESB IO mapping (bsc#1085030).\n- powerpc/xmon: Reset RCU and soft lockup watchdogs (bsc#1065729).\n- power: supply: bq24257_charger: Replace depends on REGMAP_I2C with select (bsc#1051510).\n- power: supply: lp8788: Fix an error handling path in 'lp8788_charger_probe()' (bsc#1051510).\n- power: supply: smb347-charger: IRQSTAT_D is volatile (bsc#1051510).\n- power: vexpress: add suppress_bind_attrs to true (bsc#1111666).\n- pppoe: only process PADT targeted at local interfaces (networking-stable-20_05_16).\n- pwm: bcm2835: Dynamically allocate base (bsc#1051510).\n- pwm: meson: Fix confusing indentation (bsc#1051510).\n- pwm: pca9685: Fix PWM/GPIO inter-operation (bsc#1051510).\n- pwm: rcar: Fix late Runtime PM enablement (bsc#1051510).\n- pwm: renesas-tpu: Fix late Runtime PM enablement (bsc#1051510).\n- pxa168fb: fix release function mismatch in probe failure (bsc#1051510).\n- qede: Fix race between rdma destroy workqueue and link change event (networking-stable-20_03_01).\n- qed: reduce maximum stack frame size (git-fixes).\n- qlcnic: fix missing release in qlcnic_83xx_interrupt_test (git-fixes).\n- qmi_wwan: unconditionally reject 2 ep interfaces (bsc#1051510).\n- r8152: check disconnect status after long sleep (networking-stable-20_03_14).\n- r8152: support additional Microsoft Surface Ethernet Adapter variant (networking-stable-20_05_27).\n- raid5: remove gfp flags from scribble_alloc() (bsc#1166985).\n- raid6/ppc: Fix build for clang (git fixes (block drivers)).\n- random: always use batched entropy for get_random_u{32,64} (bsc#1164871).\n- rcu: locking and unlocking need to always be at least barriers (git fixes (block drivers)).\n- RDMA/efa: Fix setting of wrong bit in get/set_feature commands (bsc#1111666)\n- RDMA/efa: Set maximum pkeys device attribute (bsc#1111666)\n- RDMA/efa: Support remote read access in MR registration (bsc#1111666)\n- RDMA/efa: Unified getters/setters for device structs bitmask access (bsc#1111666)\n- README.BRANCH: Add Takashi Iwai as primary maintainer.\n- README.BRANCH: Replace Matt Fleming with Davidlohr Bueso as maintainer.\n- regmap: debugfs: Do not sleep while atomic for fast_io regmaps (bsc#1111666).\n- resolve KABI warning for perf-pt-coresight (git-fixes).\n- Revert 'ALSA: hda/realtek: Fix pop noise on ALC225' (git-fixes).\n- Revert 'bcache: ignore pending signals when creating gc and allocator thread' (git fixes (block drivers)).\n- Revert commit e918e570415c ('tpm_tis: Remove the HID IFX0102') (bsc#1111666).\n- Revert 'dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues' (git fixes (block drivers)).\n- Revert 'drm/panel: simple: Add support for Sharp LQ150X1LG11 panels' (bsc#1114279) \t* offset changes\n- Revert 'HID: i2c-hid: add Trekstor Primebook C11B to descriptor override' Depends on 9b5c747685982d22efffeafc5ec601bd28f6d78b, which was also reverted.\n- Revert 'HID: i2c-hid: override HID descriptors for certain devices' This broke i2c-hid.ko's build, there is no way around it without a big file rename or renaming the kernel module.\n- Revert 'i2c-hid: properly terminate i2c_hid_dmi_desc_override_table' Fixed 9b5c747685982d22efffeafc5ec601bd28f6d78b, which was also reverted.\n- Revert 'ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()' (bsc#1172221).\n- Revert 'RDMA/cma: Simplify rdma_resolve_addr() error flow' (bsc#1103992).\n- Revert 'thermal: mediatek: fix register index error' (bsc#1111666).\n- Revert 'tools lib traceevent: Remove unneeded qsort and uses memmove'\n- rtlwifi: Fix a double free in _rtl_usb_tx_urb_setup() (bsc#1051510).\n- rtnetlink: Fix memory(net_device) leak when ->newlink fails (git-fixes).\n- s390/bpf: Maintain 8-byte stack alignment (bsc#1169194).\n- s390/cio: avoid duplicated 'ADD' uevents (git-fixes).\n- s390/cio: generate delayed uevent for vfio-ccw subchannels (git-fixes).\n- s390/cpuinfo: fix wrong output when CPU0 is offline (git-fixes).\n- s390/cpum_cf: Add new extended counters for IBM z15 (bsc#1169762 LTC#185291).\n- s390/diag: fix display of diagnose call statistics (git-fixes).\n- s390: fix syscall_get_error for compat processes (git-fixes).\n- s390/ftrace: fix potential crashes when switching tracers (git-fixes).\n- s390/gmap: return proper error code on ksm unsharing (git-fixes).\n- s390/ism: fix error return code in ism_probe() (git-fixes).\n- s390/pci: do not set affinity for floating irqs (git-fixes).\n- s390/pci: Fix possible deadlock in recover_store() (bsc#1165183 LTC#184103).\n- s390/pci: Recover handle in clp_set_pci_fn() (bsc#1165183 LTC#184103).\n- s390/qdio: consistently restore the IRQ handler (git-fixes).\n- s390/qdio: lock device while installing IRQ handler (git-fixes).\n- s390/qdio: put thinint indicator after early error (git-fixes).\n- s390/qdio: tear down thinint indicator after early error (git-fixes).\n- s390/qeth: cancel RX reclaim work earlier (git-fixes).\n- s390/qeth: do not return -ENOTSUPP to userspace (git-fixes).\n- s390/qeth: do not warn for napi with 0 budget (git-fixes).\n- s390/qeth: fix error handling for isolation mode cmds (git-fixes).\n- s390/qeth: fix off-by-one in RX copybreak check (git-fixes).\n- s390/qeth: fix promiscuous mode after reset (git-fixes).\n- s390/qeth: fix qdio teardown after early init error (git-fixes).\n- s390/qeth: handle error due to unsupported transport mode (git-fixes).\n- s390/qeth: handle error when backing RX buffer (git-fixes).\n- s390/qeth: lock the card while changing its hsuid (git-fixes).\n- s390/qeth: support net namespaces for L3 devices (git-fixes).\n- s390/time: Fix clk type in get_tod_clock (git-fixes).\n- sch_choke: avoid potential panic in choke_reset() (networking-stable-20_05_12).\n- sch_sfq: validate silly quantum values (networking-stable-20_05_12).\n- scripts/decodecode: fix trapping instruction formatting (bsc#1065729).\n- scripts/dtc: Remove redundant YYLOC global declaration (bsc#1160388).\n- scripts/git_sort/git_sort.py: add bluetooth/bluetooth-next.git repository\n- scsi: aacraid: fix a signedness bug (bsc#1174296).\n- scsi: bnx2i: fix potential use after free (bsc#1171600).\n- scsi: core: avoid repetitive logging of device offline messages (bsc#1145929).\n- scsi: core: Handle drivers which set sg_tablesize to zero (bsc#1171601) This commit also required: > scsi: core: avoid preallocating big SGL for data\n- scsi: core: kABI fix offline_already (bsc#1145929).\n- scsi: core: save/restore command resid for error handling (bsc#1171602).\n- scsi: core: scsi_trace: Use get_unaligned_be*() (bsc#1171604).\n- scsi: core: try to get module before removing device (bsc#1171605).\n- scsi: csiostor: Adjust indentation in csio_device_reset (bsc#1171606).\n- scsi: csiostor: Do not enable IRQs too early (bsc#1171607).\n- scsi: esas2r: unlock on error in esas2r_nvram_read_direct() (bsc#1171608).\n- scsi: fnic: fix invalid stack access (bsc#1171609).\n- scsi: fnic: fix msix interrupt allocation (bsc#1171610).\n- scsi: hisi_sas: fix calls to dma_set_mask_and_coherent() (bsc#1174296).\n- scsi: ibmvscsi: Do not send host info in adapter info MAD after LPM (bsc#1172759 ltc#184814).\n- scsi: ibmvscsi: Fix WARN_ON during event pool release (bsc#1170791 ltc#185128).\n- scsi: iscsi: Avoid potential deadlock in iscsi_if_rx func (bsc#1171611).\n- scsi: iscsi: Fix a potential deadlock in the timeout handler (bsc#1171612).\n- scsi: iscsi: qla4xxx: fix double free in probe (bsc#1171613).\n- scsi: lpfc: Add an internal trace log buffer (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Add blk_io_poll support for latency improvment (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Add support to display if adapter dumps are available (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Allow applications to issue Common Set Features mailbox command (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Avoid another null dereference in lpfc_sli4_hba_unset() (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Change default queue allocation for reduced memory consumption (bsc#1164780).\n- scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences (bsc#1171614).\n- scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG (bsc#1171615).\n- scsi: lpfc: Fix inconsistent indenting (bsc#1158983).\n- scsi: lpfc: Fix interrupt assignments when multiple vectors are supported on same CPU (bsc#1158983).\n- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix language in 0373 message to reflect non-error message (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix less-than-zero comparison of unsigned value (bsc#1158983).\n- scsi: lpfc: Fix lpfc_nodelist leak when processing unsolicited event (bsc#1164780).\n- scsi: lpfc: Fix MDS Diagnostic Enablement definition (bsc#1164780).\n- scsi: lpfc: Fix missing MDS functionality (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix negation of else clause in lpfc_prep_node_fc4type (bsc#1164780).\n- scsi: lpfc: Fix noderef and address space warnings (bsc#1164780).\n- scsi: lpfc: Fix NVMe rport deregister and registration during ADISC (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix oops due to overrun when reading SLI3 data (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix shost refcount mismatch when deleting vport (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix stack trace seen while setting rrq active (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Fix unused assignment in lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).\n- scsi: lpfc: Maintain atomic consistency of queue_claimed flag (bsc#1164780).\n- scsi: lpfc: remove duplicate unloading checks (bsc#1164780).\n- scsi: lpfc: Remove re-binding of nvme rport during registration (bsc#1164780).\n- scsi: lpfc: Remove redundant initialization to variable rc (bsc#1164780).\n- scsi: lpfc: Remove unnecessary lockdep_assert_held calls (bsc#1164780).\n- scsi: lpfc: Update lpfc version to 12.8.0.1 (bsc#1164780).\n- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1158983).\n- scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state (bsc#1171616).\n- scsi: megaraid_sas: Fix a compilation warning (bsc#1174296).\n- scsi: mpt3sas: Fix double free in attach error handling (bsc#1174296).\n- scsi: qedf: Add port_id getter (bsc#1150660).\n- scsi: qla2xxx: add ring buffer for tracing debug logs (bsc#1157169).\n- scsi: qla2xxx: check UNLOADING before posting async work (bsc#1157169).\n- scsi: qla2xxx: Delete all sessions before unregister local nvme port (bsc#1157169).\n- scsi: qla2xxx: Do not log message when reading port speed via sysfs (bsc#1157169).\n- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() (bsc#1174296).\n- scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV (bsc#1157169).\n- scsi: qla2xxx: Fix regression warnings (bsc#1157169).\n- scsi: qla2xxx: Remove non functional code (bsc#1157169).\n- scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (bsc#1158983).\n- scsi: qla2xxx: set UNLOADING before waiting for session deletion (bsc#1157169).\n- scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free (bsc#1171617).\n- scsi: qla4xxx: fix double free bug (bsc#1171618).\n- scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI (bsc#1171619).\n- scsi: sg: add sg_remove_request in sg_common_write (bsc#1171620).\n- scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and WRITE(6) (bsc#1171621).\n- scsi: ufs: change msleep to usleep_range (bsc#1171622).\n- scsi: ufs: Clean up ufshcd_scale_clks() and clock scaling error out path (bsc#1171623).\n- scsi: ufs: Fix ufshcd_hold() caused scheduling while atomic (bsc#1171624).\n- scsi: ufs: Fix ufshcd_probe_hba() reture value in case ufshcd_scsi_add_wlus() fails (bsc#1171625).\n- scsi: ufs: Recheck bkops level if bkops is disabled (bsc#1171626).\n- scsi: zfcp: fix missing erp_lock in port recovery trigger for point-to-point (git-fixes).\n- sctp: Do not add the shutdown timer if its already been added (networking-stable-20_05_27).\n- sctp: fix possibly using a bad saddr with a given dst (networking-stable-20_04_02).\n- sctp: fix refcount bug in sctp_wfree (networking-stable-20_04_02).\n- sctp: move the format error check out of __sctp_sf_do_9_1_abort (networking-stable-20_03_01).\n- sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed (networking-stable-20_05_27).\n- selftests/powerpc: Fix build errors in powerpc ptrace selftests (boo#1124278).\n- Separate one more kABI fixup from the functional change:\n- seq_file: fix problem when seeking mid-record (bsc#1170125).\n- serdev: ttyport: restore client ops on deregistration (bsc#1051510).\n- serial: uartps: Move the spinlock after the read of the tx empty (git-fixes).\n- sfc: detach from cb_page in efx_copy_channel() (networking-stable-20_03_14).\n- signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig (bsc#1172185).\n- slcan: not call free_netdev before rtnl_unlock in slcan_open (networking-stable-20_03_28).\n- slip: make slhc_compress() more robust against malicious packets (networking-stable-20_03_14).\n- smb3: Additional compression structures (bsc#1144333).\n- smb3: Add new compression flags (bsc#1144333).\n- smb3: change noisy error message to FYI (bsc#1144333).\n- smb3: enable swap on SMB3 mounts (bsc#1144333).\n- smb3: Minor cleanup of protocol definitions (bsc#1144333).\n- smb3: remove overly noisy debug line in signing errors (bsc#1144333).\n- smb3: smbdirect support can be configured by default (bsc#1144333).\n- smb3: use SMB2_SIGNATURE_SIZE define (bsc#1144333).\n- spi: bcm2835: Fix 3-wire mode if DMA is enabled (git-fixes).\n- spi: bcm63xx-hsspi: Really keep pll clk enabled (bsc#1051510).\n- spi: bcm-qspi: when tx/rx buffer is NULL set to 0 (bsc#1051510).\n- spi: dw: Add SPI Rx-done wait method to DMA-based transfer (bsc#1051510).\n- spi: dw: Add SPI Tx-done wait method to DMA-based transfer (bsc#1051510).\n- spi: dw: use 'smp_mb()' to avoid sending spi data error (bsc#1051510).\n- spi: dw: Zero DMA Tx and Rx configurations on stack (bsc#1051510).\n- spi: fix initial SPI_SR value in spi-fsl-dspi (bsc#1111666).\n- spi: fsl: do not map irq during probe (git-fixes).\n- spi: fsl: use platform_get_irq() instead of of_irq_to_resource() (git-fixes).\n- spi: pxa2xx: Add CS control clock quirk (bsc#1051510).\n- spi: pxa2xx: Apply CS clk quirk to BXT (bsc#1111666).\n- spi: qup: call spi_qup_pm_resume_runtime before suspending (bsc#1051510).\n- spi: spidev: fix a race between spidev_release and spidev_remove (bsc#1111666).\n- spi: spi-fsl-dspi: Replace interruptible wait queue with a simple completion (git-fixes).\n- spi: spi-mem: Fix Dual/Quad modes on Octal-capable devices (bsc#1111666).\n- spi: spi-s3c64xx: Fix system resume support (git-fixes).\n- spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate (bsc#1111666).\n- spi/zynqmp: remove entry that causes a cs glitch (bsc#1051510).\n- staging: comedi: dt2815: fix writing hi byte of analog output (bsc#1051510).\n- staging: comedi: Fix comedi_device refcnt leak in comedi_open (bsc#1051510).\n- staging: comedi: verify array index is correct before using it (bsc#1111666).\n- staging: iio: ad2s1210: Fix SPI reading (bsc#1051510).\n- staging: rtl8188eu: Add ASUS USB-N10 Nano B1 to device table (bsc#1051510).\n- staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK (bsc#1051510).\n- staging: sm750fb: add missing case while setting FB_VISUAL (bsc#1051510).\n- staging: vt6656: Do not set RCR_MULTICAST or RCR_BROADCAST by default (git-fixes).\n- staging: vt6656: Fix drivers TBTT timing counter (git-fixes).\n- staging: vt6656: Fix pairwise key entry save (git-fixes).\n- staging: vt6656: fix sign of rx_dbm to bb_pre_ed_rssi (bsc#1051510).\n- staging: wlan-ng: fix ODEBUG bug in prism2sta_disconnect_usb (bsc#1051510).\n- staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback (bsc#1051510).\n- SUNRPC: defer slow parts of rpc_free_client() to a workqueue (bsc#1168202).\n- SUNRPC: expiry_time should be seconds not timeval (git-fixes).\n- SUNRPC: Fix a potential buffer overflow in 'svc_print_xprts()' (git-fixes).\n- SUNRPC: The TCP back channel mustn't disappear while requests are outstanding (bsc#1152624).\n- supported.conf: Add br_netfilter to base (bsc#1169020).\n- svcrdma: Fix double svc_rdma_send_ctxt_put() in an error path (bsc#1103992).\n- svcrdma: Fix leak of transport addresses (git-fixes).\n- svcrdma: Fix trace point use-after-free race (bsc#1103992 ).\n- taskstats: fix data-race (bsc#1172188).\n- tcp: cache line align MAX_TCP_HEADER (networking-stable-20_04_27).\n- tcp: repair: fix TCP_QUEUE_SEQ implementation (networking-stable-20_03_28).\n- team: add missing attribute validation for array index (networking-stable-20_03_14).\n- team: add missing attribute validation for port ifindex (networking-stable-20_03_14).\n- team: fix hang in team_mode_get() (networking-stable-20_04_27).\n- tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes (bsc#1173284).\n- thermal: devfreq_cooling: inline all stubs for CONFIG_DEVFREQ_THERMAL=n (bsc#1051510).\n- timers: Add a function to start/reduce a timer (networking-stable-20_05_27).\n- tools lib traceevent: Remove unneeded qsort and uses memmove instead (git-fixes).\n- tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send() (bsc#1065729).\n- tpm_tis: extra chip->ops check on error path in tpm_tis_core_init (bsc#1111666).\n- tpm_tis: Remove the HID IFX0102 (bsc#1111666).\n- tpm/tpm_tis: Free IRQ if probing fails (bsc#1082555).\n- tpm/tpm_tis: Free IRQ if probing fails (git-fixes).\n- tracing: Add a vmalloc_sync_mappings() for safe measure (git-fixes).\n- tracing: Disable trace_printk() on post poned tests (git-fixes).\n- tracing: Fix event trigger to accept redundant spaces (git-fixes).\n- tracing: Fix the race between registering 'snapshot' event trigger and triggering 'snapshot' operation (git-fixes).\n- tty: evh_bytechan: Fix out of bounds accesses (bsc#1051510).\n- tty: hvc_console, fix crashes on parallel open/close (git-fixes).\n- tty: n_gsm: Fix bogus i++ in gsm_data_kick (bsc#1051510).\n- tty: n_gsm: Fix SOF skipping (bsc#1051510).\n- tty: n_gsm: Fix waking up upper tty layer when room available (bsc#1051510).\n- tty: rocket, avoid OOB access (git-fixes).\n- tty/serial: atmel: manage shutdown in case of RS485 or ISO7816 mode (bsc#1051510).\n- tty: serial: imx: setup the correct sg entry for tx dma (bsc#1051510).\n- tun: Do not put_page() for all negative return values from XDP program (bsc#1109837).\n- tunnel: Propagate ECT(1) when decapsulating as recommended by RFC6040 (networking-stable-20_05_12).\n- UAS: fix deadlock in error handling and PM flushing work (git-fixes).\n- UAS: no use logging any details in case of ENODEV (git-fixes).\n- ubifs: remove broken lazytime support (bsc#1173826).\n- Update config files: Build w1 bus on arm64 (jsc#SLE-11048)\n- USB: Add USB_QUIRK_DELAY_CTRL_MSG and USB_QUIRK_DELAY_INIT for Corsair K70 RGB RAPIDFIRE (git-fixes).\n- usb: add USB_QUIRK_DELAY_INIT for Logitech C922 (git-fixes).\n- USB: c67x00: fix use after free in c67x00_giveback_urb (bsc#1111666).\n- USB: cdc-acm: restore capability check order (git-fixes).\n- usb: chipidea: core: add wakeup support for extcon (bsc#1111666).\n- USB: core: Fix misleading driver bug report (bsc#1051510).\n- usb: dwc2: Fix shutdown callback in platform (bsc#1111666).\n- usb: dwc2: gadget: move gadget resume after the core is in L0 state (bsc#1051510).\n- USB: dwc3: do not set gadget->is_otg flag (git-fixes).\n- USB: dwc3: gadget: Do link recovery for SS and SSP (git-fixes).\n- usb: dwc3: gadget: introduce cancelled_list (git-fixes).\n- usb: dwc3: gadget: never call ->complete() from ->ep_queue() (git-fixes).\n- usb: dwc3: gadget: Properly handle ClearFeature(halt) (git-fixes).\n- usb: dwc3: gadget: Properly handle failed kick_transfer (git-fixes).\n- USB: early: Handle AMD's spec-compliant identifiers, too (git-fixes).\n- USB: ehci: reopen solution for Synopsys HC bug (git-fixes).\n- USB: f_fs: Clear OS Extended descriptor counts to zero in ffs_data_reset() (git-fixes).\n- USB: gadget: audio: Fix a missing error return value in audio_bind() (git-fixes).\n- USB: gadget: composite: Inform controller driver of self-powered (git-fixes).\n- USB: gadget: f_fs: Fix use after free issue as part of queue failure (bsc#1051510).\n- usb: gadget: fix potential double-free in m66592_probe (bsc#1111666).\n- USB: gadget: legacy: fix error return code in cdc_bind() (git-fixes).\n- USB: gadget: legacy: fix error return code in gncm_bind() (git-fixes).\n- USB: gadget: legacy: fix redundant initialization warnings (bsc#1051510).\n- usb: gadget: lpc32xx_udc: do not dereference ep pointer before null check (bsc#1051510).\n- USB: gadget: net2272: Fix a memory leak in an error handling path in 'net2272_plat_probe()' (git-fixes).\n- usb: gadget: udc: atmel: fix uninitialized read in debug printk (bsc#1111666).\n- USB: gadget: udc: atmel: Fix vbus disconnect handling (git-fixes).\n- USB: gadget: udc: atmel: Make some symbols static (git-fixes).\n- usb: gadget: udc: atmel: remove outdated comment in usba_ep_disable() (bsc#1111666).\n- USB: gadget: udc: bdc: Remove unnecessary NULL checks in bdc_req_complete (git-fixes).\n- usb: gadget: udc: Potential Oops in error handling code (bsc#1111666).\n- USB: gadget: udc: s3c2410_udc: Remove pointless NULL check in s3c2410_udc_nuke (bsc#1051510).\n- usb: host: ehci-exynos: Fix error check in exynos_ehci_probe() (bsc#1111666).\n- USB: host: ehci-mxc: Add error handling in ehci_mxc_drv_probe() (bsc#1051510).\n- USB: host: xhci-plat: keep runtime active when removing host (git-fixes).\n- USB: hub: Fix handling of connect changes during sleep (git-fixes).\n- USB: musb: fix crash with highmen PIO and usbmon (bsc#1051510).\n- usb: musb: Fix runtime PM imbalance on error (bsc#1051510).\n- usb: musb: start session in resume for host port (bsc#1051510).\n- USBnet: silence an unnecessary warning (bsc#1170770).\n- usbnet: smsc95xx: Fix use-after-free after removal (bsc#1111666).\n- USB: ohci-sm501: Add missed iounmap() in remove (bsc#1111666).\n- USB: serial: ch341: add new Product ID for CH340 (bsc#1111666).\n- USB: serial: cypress_m8: enable Simply Automated UPB PIM (bsc#1111666).\n- USB: serial: garmin_gps: add sanity checking for data length (git-fixes).\n- USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback (bsc#1051510).\n- USB: serial: iuu_phoenix: fix memory corruption (bsc#1111666).\n- USB: serial: option: add BroadMobi BM806U (git-fixes).\n- USB: serial: option: add GosunCn GM500 series (bsc#1111666).\n- USB: serial: option: add Quectel EG95 LTE modem (bsc#1111666).\n- USB: serial: option: add support for ASKEY WWHC050 (git-fixes).\n- USB: serial: option: add Telit LE910C1-EUX compositions (bsc#1051510).\n- USB: serial: option: add Wistron Neweb D19Q1 (git-fixes).\n- USB: serial: qcserial: add DW5816e QDL support (bsc#1051510).\n- USB: serial: qcserial: Add DW5816e support (git-fixes).\n- USB: serial: usb_wwan: do not resubmit rx urb on fatal errors (bsc#1051510).\n- USB: serial: usb_wwan: do not resubmit rx urb on fatal errors (git-fixes).\n- USB: sisusbvga: Change port variable from signed to unsigned (git-fixes).\n- usb-storage: Add unusual_devs entry for JMicron JMS566 (git-fixes).\n- USB: uas: add quirk for LaCie 2Big Quadra (git-fixes).\n- USB: xhci: Fix NULL pointer dereference when enqueuing trbs from urb sg list (git-fixes).\n- vfio/pci: Fix SR-IOV VF handling with MMIO blocking (bsc#1174123).\n- vfs: Fix EOVERFLOW testing in put_compat_statfs64 (bnc#1151927 5.3.6).\n- video: fbdev: sis: Remove unnecessary parentheses and commented code (bsc#1114279)\n- video: fbdev: w100fb: Fix a potential double free (bsc#1051510).\n- virtio-blk: handle block_device_operations callbacks after hot unplug (git fixes (block drivers)).\n- virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial (git-fixes).\n- vmxnet3: add geneve and vxlan tunnel offload support (bsc#1172484).\n- vmxnet3: add support to get/set rx flow hash (bsc#1172484).\n- vmxnet3: allow rx flow hash ops only when rss is enabled (bsc#1172484).\n- vmxnet3: avoid format strint overflow warning (bsc#1172484).\n- vmxnet3: prepare for version 4 changes (bsc#1172484).\n- vmxnet3: Remove always false conditional statement (bsc#1172484).\n- vmxnet3: remove redundant initialization of pointer 'rq' (bsc#1172484).\n- vmxnet3: remove unused flag 'rxcsum' from struct vmxnet3_adapter (bsc#1172484).\n- vmxnet3: Replace msleep(1) with usleep_range() (bsc#1172484).\n- vmxnet3: update to version 4 (bsc#1172484).\n- vmxnet3: use correct hdr reference when packet is encapsulated (bsc#1172484).\n- vrf: Check skb for XFRM_TRANSFORMED flag (networking-stable-20_04_27).\n- vsock: fix timeout in vsock_accept() (networking-stable-20_06_07).\n- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (git-fixes).\n- vt: selection, introduce vc_is_sel (git-fixes).\n- vt: vt_ioctl: fix race in VT_RESIZEX (git-fixes).\n- vt: vt_ioctl: fix use-after-free in vt_in_use() (git-fixes).\n- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (git-fixes).\n- vxlan: Avoid infinite loop when suppressing NS messages with invalid options (git-fixes).\n- vxlan: check return value of gro_cells_init() (networking-stable-20_03_28).\n- w1: Add subsystem kernel public interface (jsc#SLE-11048).\n- w1: Fix slave count on 1-Wire bus (resend) (jsc#SLE-11048).\n- w1: keep balance of mutex locks and refcnts (jsc#SLE-11048).\n- w1: omap-hdq: cleanup to add missing newline for some dev_dbg (bsc#1051510).\n- w1: use put_device() if device_register() fail (jsc#SLE-11048).\n- watchdog: reset last_hw_keepalive time at start (git-fixes).\n- watchdog: sp805: fix restart handler (bsc#1111666).\n- wcn36xx: Fix error handling path in 'wcn36xx_probe()' (bsc#1051510).\n- wil6210: add general initialization/size checks (bsc#1111666).\n- wil6210: check rx_buff_mgmt before accessing it (bsc#1111666).\n- wil6210: ignore HALP ICR if already handled (bsc#1111666).\n- wil6210: make sure Rx ring sizes are correlated (git-fixes).\n- wil6210: remove reset file from debugfs (git-fixes).\n- wimax/i2400m: Fix potential urb refcnt leak (bsc#1051510).\n- work around mvfs bug (bsc#1162063).\n- workqueue: do not use wq_select_unbound_cpu() for bound works (bsc#1172130).\n- x86/apic: Install an empty physflat_init_apic_ldr (bsc#1163309).\n- x86/cpu/amd: Make erratum #1054 a legacy erratum (bsc#1114279).\n- x86/entry/64: Fix unwind hints in kernel exit path (bsc#1058115).\n- x86/entry/64: Fix unwind hints in register clearing code (bsc#1058115).\n- x86/entry/64: Fix unwind hints in rewind_stack_do_exit() (bsc#1058115).\n- x86/entry/64: Fix unwind hints in __switch_to_asm() (bsc#1058115).\n- x86/events/intel/ds: Add PERF_SAMPLE_PERIOD into PEBS_FREERUNNING_FLAGS (git-fixes).\n- x86: Fix early boot crash on gcc-10, third try (bsc#1114279).\n- x86/hyperv: Allow guests to enable InvariantTSC (bsc#1170621, bsc#1170620).\n- x86/Hyper-V: Free hv_panic_page when fail to register kmsg dump (bsc#1170617, bsc#1170618).\n- x86/Hyper-V: Report crash data in die() when panic_on_oops is set (bsc#1170617, bsc#1170618).\n- x86/Hyper-V: Report crash register data or kmsg before running crash kernel (bsc#1170617, bsc#1170618).\n- x86/Hyper-V: Report crash register data when sysctl_record_panic_msg is not set (bsc#1170617, bsc#1170618).\n- x86: hyperv: report value of misc_features (git fixes).\n- x86/Hyper-V: Trigger crash enlightenment only once during system crash (bsc#1170617, bsc#1170618).\n- x86/Hyper-V: Unload vmbus channel in hv panic callback (bsc#1170617, bsc#1170618).\n- x86/kprobes: Avoid kretprobe recursion bug (bsc#1114279).\n- x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (bsc#1172257).\n- x86/reboot/quirks: Add MacBook6,1 reboot quirk (bsc#1114279).\n- x86/resctrl: Fix invalid attempt at removing the default resource group (git-fixes).\n- x86/resctrl: Preserve CDP enable over CPU hotplug (bsc#1114279).\n- x86/unwind/orc: Do not skip the first frame for inactive tasks (bsc#1058115).\n- x86/unwind/orc: Fix error handling in __unwind_start() (bsc#1058115).\n- x86/unwind/orc: Fix error path for bad ORC entry type (bsc#1058115).\n- x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks (bsc#1058115).\n- x86/unwind/orc: Prevent unwinding before ORC initialization (bsc#1058115).\n- x86/unwind: Prevent false warnings for non-current tasks (bsc#1058115).\n- x86/xen: fix booting 32-bit pv guest (bsc#1071995).\n- x86/xen: Make the boot CPU idle task reliable (bsc#1071995).\n- x86/xen: Make the secondary CPU idle tasks reliable (bsc#1071995).\n- xen/blkfront: fix memory allocation flags in blkfront_setup_indirect() (bsc#1168486).\n- xen/pci: reserve MCFG areas earlier (bsc#1170145).\n- xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish (networking-stable-20_04_27).\n- xfrm: fix error in comment (git fixes).\n- xfs: clear PF_MEMALLOC before exiting xfsaild thread (git-fixes).\n- xfs: Correctly invert xfs_buftarg LRU isolation logic (git-fixes).\n- xfs: do not ever return a stale pointer from __xfs_dir3_free_read (git-fixes).\n- xhci: Fix incorrect EP_STATE_MASK (git-fixes).\n- xprtrdma: Fix completion wait during device removal (git-fixes).\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2020-2487,SUSE-SLE-Module-RT-15-SP1-2020-2487",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_2487-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2020:2487-1",
            url: "https://www.suse.com/support/update/announcement/2020/suse-su-20202487-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2020:2487-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2020-September/007352.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1051510",
            url: "https://bugzilla.suse.com/1051510",
         },
         {
            category: "self",
            summary: "SUSE Bug 1058115",
            url: "https://bugzilla.suse.com/1058115",
         },
         {
            category: "self",
            summary: "SUSE Bug 1065600",
            url: "https://bugzilla.suse.com/1065600",
         },
         {
            category: "self",
            summary: "SUSE Bug 1065729",
            url: "https://bugzilla.suse.com/1065729",
         },
         {
            category: "self",
            summary: "SUSE Bug 1071995",
            url: "https://bugzilla.suse.com/1071995",
         },
         {
            category: "self",
            summary: "SUSE Bug 1082555",
            url: "https://bugzilla.suse.com/1082555",
         },
         {
            category: "self",
            summary: "SUSE Bug 1083647",
            url: "https://bugzilla.suse.com/1083647",
         },
         {
            category: "self",
            summary: "SUSE Bug 1085030",
            url: "https://bugzilla.suse.com/1085030",
         },
         {
            category: "self",
            summary: "SUSE Bug 1089895",
            url: "https://bugzilla.suse.com/1089895",
         },
         {
            category: "self",
            summary: "SUSE Bug 1090036",
            url: "https://bugzilla.suse.com/1090036",
         },
         {
            category: "self",
            summary: "SUSE Bug 1103990",
            url: "https://bugzilla.suse.com/1103990",
         },
         {
            category: "self",
            summary: "SUSE Bug 1103991",
            url: "https://bugzilla.suse.com/1103991",
         },
         {
            category: "self",
            summary: "SUSE Bug 1103992",
            url: "https://bugzilla.suse.com/1103992",
         },
         {
            category: "self",
            summary: "SUSE Bug 1104745",
            url: "https://bugzilla.suse.com/1104745",
         },
         {
            category: "self",
            summary: "SUSE Bug 1109837",
            url: "https://bugzilla.suse.com/1109837",
         },
         {
            category: "self",
            summary: "SUSE Bug 1111666",
            url: "https://bugzilla.suse.com/1111666",
         },
         {
            category: "self",
            summary: "SUSE Bug 1112178",
            url: "https://bugzilla.suse.com/1112178",
         },
         {
            category: "self",
            summary: "SUSE Bug 1112374",
            url: "https://bugzilla.suse.com/1112374",
         },
         {
            category: "self",
            summary: "SUSE Bug 1113956",
            url: "https://bugzilla.suse.com/1113956",
         },
         {
            category: "self",
            summary: "SUSE Bug 1114279",
            url: "https://bugzilla.suse.com/1114279",
         },
         {
            category: "self",
            summary: "SUSE Bug 1124278",
            url: "https://bugzilla.suse.com/1124278",
         },
         {
            category: "self",
            summary: "SUSE Bug 1127354",
            url: "https://bugzilla.suse.com/1127354",
         },
         {
            category: "self",
            summary: "SUSE Bug 1127355",
            url: "https://bugzilla.suse.com/1127355",
         },
         {
            category: "self",
            summary: "SUSE Bug 1127371",
            url: "https://bugzilla.suse.com/1127371",
         },
         {
            category: "self",
            summary: "SUSE Bug 1133021",
            url: "https://bugzilla.suse.com/1133021",
         },
         {
            category: "self",
            summary: "SUSE Bug 1137325",
            url: "https://bugzilla.suse.com/1137325",
         },
         {
            category: "self",
            summary: "SUSE Bug 1142685",
            url: "https://bugzilla.suse.com/1142685",
         },
         {
            category: "self",
            summary: "SUSE Bug 1144333",
            url: "https://bugzilla.suse.com/1144333",
         },
         {
            category: "self",
            summary: "SUSE Bug 1145929",
            url: "https://bugzilla.suse.com/1145929",
         },
         {
            category: "self",
            summary: "SUSE Bug 1148868",
            url: "https://bugzilla.suse.com/1148868",
         },
         {
            category: "self",
            summary: "SUSE Bug 1150660",
            url: "https://bugzilla.suse.com/1150660",
         },
         {
            category: "self",
            summary: "SUSE Bug 1151794",
            url: "https://bugzilla.suse.com/1151794",
         },
         {
            category: "self",
            summary: "SUSE Bug 1151927",
            url: "https://bugzilla.suse.com/1151927",
         },
         {
            category: "self",
            summary: "SUSE Bug 1152489",
            url: "https://bugzilla.suse.com/1152489",
         },
         {
            category: "self",
            summary: "SUSE Bug 1152624",
            url: "https://bugzilla.suse.com/1152624",
         },
         {
            category: "self",
            summary: "SUSE Bug 1154824",
            url: "https://bugzilla.suse.com/1154824",
         },
         {
            category: "self",
            summary: "SUSE Bug 1157169",
            url: "https://bugzilla.suse.com/1157169",
         },
         {
            category: "self",
            summary: "SUSE Bug 1158265",
            url: "https://bugzilla.suse.com/1158265",
         },
         {
            category: "self",
            summary: "SUSE Bug 1158983",
            url: "https://bugzilla.suse.com/1158983",
         },
         {
            category: "self",
            summary: "SUSE Bug 1159037",
            url: "https://bugzilla.suse.com/1159037",
         },
         {
            category: "self",
            summary: "SUSE Bug 1159058",
            url: "https://bugzilla.suse.com/1159058",
         },
         {
            category: "self",
            summary: "SUSE Bug 1159199",
            url: "https://bugzilla.suse.com/1159199",
         },
         {
            category: "self",
            summary: "SUSE Bug 1160388",
            url: "https://bugzilla.suse.com/1160388",
         },
         {
            category: "self",
            summary: "SUSE Bug 1160947",
            url: "https://bugzilla.suse.com/1160947",
         },
         {
            category: "self",
            summary: "SUSE Bug 1161016",
            url: "https://bugzilla.suse.com/1161016",
         },
         {
            category: "self",
            summary: "SUSE Bug 1162002",
            url: "https://bugzilla.suse.com/1162002",
         },
         {
            category: "self",
            summary: "SUSE Bug 1162063",
            url: "https://bugzilla.suse.com/1162063",
         },
         {
            category: "self",
            summary: "SUSE Bug 1163309",
            url: "https://bugzilla.suse.com/1163309",
         },
         {
            category: "self",
            summary: "SUSE Bug 1163403",
            url: "https://bugzilla.suse.com/1163403",
         },
         {
            category: "self",
            summary: "SUSE Bug 1163897",
            url: "https://bugzilla.suse.com/1163897",
         },
         {
            category: "self",
            summary: "SUSE Bug 1164284",
            url: "https://bugzilla.suse.com/1164284",
         },
         {
            category: "self",
            summary: "SUSE Bug 1164780",
            url: "https://bugzilla.suse.com/1164780",
         },
         {
            category: "self",
            summary: "SUSE Bug 1164871",
            url: "https://bugzilla.suse.com/1164871",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165183",
            url: "https://bugzilla.suse.com/1165183",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165478",
            url: "https://bugzilla.suse.com/1165478",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165741",
            url: "https://bugzilla.suse.com/1165741",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166780",
            url: "https://bugzilla.suse.com/1166780",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166860",
            url: "https://bugzilla.suse.com/1166860",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166861",
            url: "https://bugzilla.suse.com/1166861",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166862",
            url: "https://bugzilla.suse.com/1166862",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166864",
            url: "https://bugzilla.suse.com/1166864",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166866",
            url: "https://bugzilla.suse.com/1166866",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166867",
            url: "https://bugzilla.suse.com/1166867",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166868",
            url: "https://bugzilla.suse.com/1166868",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166870",
            url: "https://bugzilla.suse.com/1166870",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166940",
            url: "https://bugzilla.suse.com/1166940",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166969",
            url: "https://bugzilla.suse.com/1166969",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166978",
            url: "https://bugzilla.suse.com/1166978",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166985",
            url: "https://bugzilla.suse.com/1166985",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167104",
            url: "https://bugzilla.suse.com/1167104",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167288",
            url: "https://bugzilla.suse.com/1167288",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167574",
            url: "https://bugzilla.suse.com/1167574",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167851",
            url: "https://bugzilla.suse.com/1167851",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167867",
            url: "https://bugzilla.suse.com/1167867",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168081",
            url: "https://bugzilla.suse.com/1168081",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168202",
            url: "https://bugzilla.suse.com/1168202",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168332",
            url: "https://bugzilla.suse.com/1168332",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168486",
            url: "https://bugzilla.suse.com/1168486",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168670",
            url: "https://bugzilla.suse.com/1168670",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168760",
            url: "https://bugzilla.suse.com/1168760",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168762",
            url: "https://bugzilla.suse.com/1168762",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168763",
            url: "https://bugzilla.suse.com/1168763",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168764",
            url: "https://bugzilla.suse.com/1168764",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168765",
            url: "https://bugzilla.suse.com/1168765",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168789",
            url: "https://bugzilla.suse.com/1168789",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168881",
            url: "https://bugzilla.suse.com/1168881",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168884",
            url: "https://bugzilla.suse.com/1168884",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168952",
            url: "https://bugzilla.suse.com/1168952",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168959",
            url: "https://bugzilla.suse.com/1168959",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169020",
            url: "https://bugzilla.suse.com/1169020",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169057",
            url: "https://bugzilla.suse.com/1169057",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169194",
            url: "https://bugzilla.suse.com/1169194",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169390",
            url: "https://bugzilla.suse.com/1169390",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169514",
            url: "https://bugzilla.suse.com/1169514",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169525",
            url: "https://bugzilla.suse.com/1169525",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169625",
            url: "https://bugzilla.suse.com/1169625",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169762",
            url: "https://bugzilla.suse.com/1169762",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169771",
            url: "https://bugzilla.suse.com/1169771",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169795",
            url: "https://bugzilla.suse.com/1169795",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170011",
            url: "https://bugzilla.suse.com/1170011",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170056",
            url: "https://bugzilla.suse.com/1170056",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170125",
            url: "https://bugzilla.suse.com/1170125",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170145",
            url: "https://bugzilla.suse.com/1170145",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170284",
            url: "https://bugzilla.suse.com/1170284",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170345",
            url: "https://bugzilla.suse.com/1170345",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170442",
            url: "https://bugzilla.suse.com/1170442",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170457",
            url: "https://bugzilla.suse.com/1170457",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170522",
            url: "https://bugzilla.suse.com/1170522",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170592",
            url: "https://bugzilla.suse.com/1170592",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170617",
            url: "https://bugzilla.suse.com/1170617",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170618",
            url: "https://bugzilla.suse.com/1170618",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170620",
            url: "https://bugzilla.suse.com/1170620",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170621",
            url: "https://bugzilla.suse.com/1170621",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170770",
            url: "https://bugzilla.suse.com/1170770",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170778",
            url: "https://bugzilla.suse.com/1170778",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170791",
            url: "https://bugzilla.suse.com/1170791",
         },
         {
            category: "self",
            summary: "SUSE Bug 1170901",
            url: "https://bugzilla.suse.com/1170901",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171078",
            url: "https://bugzilla.suse.com/1171078",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171098",
            url: "https://bugzilla.suse.com/1171098",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171118",
            url: "https://bugzilla.suse.com/1171118",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171124",
            url: "https://bugzilla.suse.com/1171124",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171189",
            url: "https://bugzilla.suse.com/1171189",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171191",
            url: "https://bugzilla.suse.com/1171191",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171195",
            url: "https://bugzilla.suse.com/1171195",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171202",
            url: "https://bugzilla.suse.com/1171202",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171205",
            url: "https://bugzilla.suse.com/1171205",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171214",
            url: "https://bugzilla.suse.com/1171214",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171217",
            url: "https://bugzilla.suse.com/1171217",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171218",
            url: "https://bugzilla.suse.com/1171218",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171219",
            url: "https://bugzilla.suse.com/1171219",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171220",
            url: "https://bugzilla.suse.com/1171220",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171244",
            url: "https://bugzilla.suse.com/1171244",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171293",
            url: "https://bugzilla.suse.com/1171293",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171417",
            url: "https://bugzilla.suse.com/1171417",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171424",
            url: "https://bugzilla.suse.com/1171424",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171527",
            url: "https://bugzilla.suse.com/1171527",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171529",
            url: "https://bugzilla.suse.com/1171529",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171530",
            url: "https://bugzilla.suse.com/1171530",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171558",
            url: "https://bugzilla.suse.com/1171558",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171599",
            url: "https://bugzilla.suse.com/1171599",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171600",
            url: "https://bugzilla.suse.com/1171600",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171601",
            url: "https://bugzilla.suse.com/1171601",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171602",
            url: "https://bugzilla.suse.com/1171602",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171604",
            url: "https://bugzilla.suse.com/1171604",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171605",
            url: "https://bugzilla.suse.com/1171605",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171606",
            url: "https://bugzilla.suse.com/1171606",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171607",
            url: "https://bugzilla.suse.com/1171607",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171608",
            url: "https://bugzilla.suse.com/1171608",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171609",
            url: "https://bugzilla.suse.com/1171609",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171610",
            url: "https://bugzilla.suse.com/1171610",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171611",
            url: "https://bugzilla.suse.com/1171611",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171612",
            url: "https://bugzilla.suse.com/1171612",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171613",
            url: "https://bugzilla.suse.com/1171613",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171614",
            url: "https://bugzilla.suse.com/1171614",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171615",
            url: "https://bugzilla.suse.com/1171615",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171616",
            url: "https://bugzilla.suse.com/1171616",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171617",
            url: "https://bugzilla.suse.com/1171617",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171618",
            url: "https://bugzilla.suse.com/1171618",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171619",
            url: "https://bugzilla.suse.com/1171619",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171620",
            url: "https://bugzilla.suse.com/1171620",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171621",
            url: "https://bugzilla.suse.com/1171621",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171622",
            url: "https://bugzilla.suse.com/1171622",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171623",
            url: "https://bugzilla.suse.com/1171623",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171624",
            url: "https://bugzilla.suse.com/1171624",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171625",
            url: "https://bugzilla.suse.com/1171625",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171626",
            url: "https://bugzilla.suse.com/1171626",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171662",
            url: "https://bugzilla.suse.com/1171662",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171679",
            url: "https://bugzilla.suse.com/1171679",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171691",
            url: "https://bugzilla.suse.com/1171691",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171692",
            url: "https://bugzilla.suse.com/1171692",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171694",
            url: "https://bugzilla.suse.com/1171694",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171695",
            url: "https://bugzilla.suse.com/1171695",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171732",
            url: "https://bugzilla.suse.com/1171732",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171736",
            url: "https://bugzilla.suse.com/1171736",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171739",
            url: "https://bugzilla.suse.com/1171739",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171743",
            url: "https://bugzilla.suse.com/1171743",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171753",
            url: "https://bugzilla.suse.com/1171753",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171759",
            url: "https://bugzilla.suse.com/1171759",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171817",
            url: "https://bugzilla.suse.com/1171817",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171835",
            url: "https://bugzilla.suse.com/1171835",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171841",
            url: "https://bugzilla.suse.com/1171841",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171868",
            url: "https://bugzilla.suse.com/1171868",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171904",
            url: "https://bugzilla.suse.com/1171904",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171948",
            url: "https://bugzilla.suse.com/1171948",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171949",
            url: "https://bugzilla.suse.com/1171949",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171951",
            url: "https://bugzilla.suse.com/1171951",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171952",
            url: "https://bugzilla.suse.com/1171952",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171979",
            url: "https://bugzilla.suse.com/1171979",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171982",
            url: "https://bugzilla.suse.com/1171982",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171983",
            url: "https://bugzilla.suse.com/1171983",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171988",
            url: "https://bugzilla.suse.com/1171988",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172017",
            url: "https://bugzilla.suse.com/1172017",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172096",
            url: "https://bugzilla.suse.com/1172096",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172097",
            url: "https://bugzilla.suse.com/1172097",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172098",
            url: "https://bugzilla.suse.com/1172098",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172099",
            url: "https://bugzilla.suse.com/1172099",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172101",
            url: "https://bugzilla.suse.com/1172101",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172102",
            url: "https://bugzilla.suse.com/1172102",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172103",
            url: "https://bugzilla.suse.com/1172103",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172104",
            url: "https://bugzilla.suse.com/1172104",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172127",
            url: "https://bugzilla.suse.com/1172127",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172130",
            url: "https://bugzilla.suse.com/1172130",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172185",
            url: "https://bugzilla.suse.com/1172185",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172188",
            url: "https://bugzilla.suse.com/1172188",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172199",
            url: "https://bugzilla.suse.com/1172199",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172201",
            url: "https://bugzilla.suse.com/1172201",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172202",
            url: "https://bugzilla.suse.com/1172202",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172221",
            url: "https://bugzilla.suse.com/1172221",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172247",
            url: "https://bugzilla.suse.com/1172247",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172249",
            url: "https://bugzilla.suse.com/1172249",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172251",
            url: "https://bugzilla.suse.com/1172251",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172257",
            url: "https://bugzilla.suse.com/1172257",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172317",
            url: "https://bugzilla.suse.com/1172317",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172342",
            url: "https://bugzilla.suse.com/1172342",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172343",
            url: "https://bugzilla.suse.com/1172343",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172344",
            url: "https://bugzilla.suse.com/1172344",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172366",
            url: "https://bugzilla.suse.com/1172366",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172378",
            url: "https://bugzilla.suse.com/1172378",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172391",
            url: "https://bugzilla.suse.com/1172391",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172397",
            url: "https://bugzilla.suse.com/1172397",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172453",
            url: "https://bugzilla.suse.com/1172453",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172458",
            url: "https://bugzilla.suse.com/1172458",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172484",
            url: "https://bugzilla.suse.com/1172484",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172537",
            url: "https://bugzilla.suse.com/1172537",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172538",
            url: "https://bugzilla.suse.com/1172538",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172687",
            url: "https://bugzilla.suse.com/1172687",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172719",
            url: "https://bugzilla.suse.com/1172719",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172759",
            url: "https://bugzilla.suse.com/1172759",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172775",
            url: "https://bugzilla.suse.com/1172775",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172781",
            url: "https://bugzilla.suse.com/1172781",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172782",
            url: "https://bugzilla.suse.com/1172782",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172783",
            url: "https://bugzilla.suse.com/1172783",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172871",
            url: "https://bugzilla.suse.com/1172871",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172872",
            url: "https://bugzilla.suse.com/1172872",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172999",
            url: "https://bugzilla.suse.com/1172999",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173060",
            url: "https://bugzilla.suse.com/1173060",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173074",
            url: "https://bugzilla.suse.com/1173074",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173146",
            url: "https://bugzilla.suse.com/1173146",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173265",
            url: "https://bugzilla.suse.com/1173265",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173280",
            url: "https://bugzilla.suse.com/1173280",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173284",
            url: "https://bugzilla.suse.com/1173284",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173428",
            url: "https://bugzilla.suse.com/1173428",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173514",
            url: "https://bugzilla.suse.com/1173514",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173567",
            url: "https://bugzilla.suse.com/1173567",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173573",
            url: "https://bugzilla.suse.com/1173573",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173746",
            url: "https://bugzilla.suse.com/1173746",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173818",
            url: "https://bugzilla.suse.com/1173818",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173820",
            url: "https://bugzilla.suse.com/1173820",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173825",
            url: "https://bugzilla.suse.com/1173825",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173826",
            url: "https://bugzilla.suse.com/1173826",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173833",
            url: "https://bugzilla.suse.com/1173833",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173838",
            url: "https://bugzilla.suse.com/1173838",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173839",
            url: "https://bugzilla.suse.com/1173839",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173845",
            url: "https://bugzilla.suse.com/1173845",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173857",
            url: "https://bugzilla.suse.com/1173857",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174113",
            url: "https://bugzilla.suse.com/1174113",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174115",
            url: "https://bugzilla.suse.com/1174115",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174122",
            url: "https://bugzilla.suse.com/1174122",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174123",
            url: "https://bugzilla.suse.com/1174123",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174186",
            url: "https://bugzilla.suse.com/1174186",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174187",
            url: "https://bugzilla.suse.com/1174187",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174296",
            url: "https://bugzilla.suse.com/1174296",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174343",
            url: "https://bugzilla.suse.com/1174343",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174356",
            url: "https://bugzilla.suse.com/1174356",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174409",
            url: "https://bugzilla.suse.com/1174409",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174438",
            url: "https://bugzilla.suse.com/1174438",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174462",
            url: "https://bugzilla.suse.com/1174462",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-1000199 page",
            url: "https://www.suse.com/security/cve/CVE-2018-1000199/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-19462 page",
            url: "https://www.suse.com/security/cve/CVE-2019-19462/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-20806 page",
            url: "https://www.suse.com/security/cve/CVE-2019-20806/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-20810 page",
            url: "https://www.suse.com/security/cve/CVE-2019-20810/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-20812 page",
            url: "https://www.suse.com/security/cve/CVE-2019-20812/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-20908 page",
            url: "https://www.suse.com/security/cve/CVE-2019-20908/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-9455 page",
            url: "https://www.suse.com/security/cve/CVE-2019-9455/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-0305 page",
            url: "https://www.suse.com/security/cve/CVE-2020-0305/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-0543 page",
            url: "https://www.suse.com/security/cve/CVE-2020-0543/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10135 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10135/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10690 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10690/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10711 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10711/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10720 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10720/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10732 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10732/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10751 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10751/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10757 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10757/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10766 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10766/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10767 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10767/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10768 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10768/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10769 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10769/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10773 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10773/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10781 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10781/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-11669 page",
            url: "https://www.suse.com/security/cve/CVE-2020-11669/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-12114 page",
            url: "https://www.suse.com/security/cve/CVE-2020-12114/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-12464 page",
            url: "https://www.suse.com/security/cve/CVE-2020-12464/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-12652 page",
            url: "https://www.suse.com/security/cve/CVE-2020-12652/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-12653 page",
            url: "https://www.suse.com/security/cve/CVE-2020-12653/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-12654 page",
            url: "https://www.suse.com/security/cve/CVE-2020-12654/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-12655 page",
            url: "https://www.suse.com/security/cve/CVE-2020-12655/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-12656 page",
            url: "https://www.suse.com/security/cve/CVE-2020-12656/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-12657 page",
            url: "https://www.suse.com/security/cve/CVE-2020-12657/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-12659 page",
            url: "https://www.suse.com/security/cve/CVE-2020-12659/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-12769 page",
            url: "https://www.suse.com/security/cve/CVE-2020-12769/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-12771 page",
            url: "https://www.suse.com/security/cve/CVE-2020-12771/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-12888 page",
            url: "https://www.suse.com/security/cve/CVE-2020-12888/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-13143 page",
            url: "https://www.suse.com/security/cve/CVE-2020-13143/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-13974 page",
            url: "https://www.suse.com/security/cve/CVE-2020-13974/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-14416 page",
            url: "https://www.suse.com/security/cve/CVE-2020-14416/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-15393 page",
            url: "https://www.suse.com/security/cve/CVE-2020-15393/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-15780 page",
            url: "https://www.suse.com/security/cve/CVE-2020-15780/",
         },
      ],
      title: "Security update for the Linux Kernel",
      tracking: {
         current_release_date: "2020-09-04T06:06:02Z",
         generator: {
            date: "2020-09-04T06:06:02Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2020:2487-1",
         initial_release_date: "2020-09-04T06:06:02Z",
         revision_history: [
            {
               date: "2020-09-04T06:06:02Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "kernel-devel-rt-4.12.14-14.28.1.noarch",
                        product: {
                           name: "kernel-devel-rt-4.12.14-14.28.1.noarch",
                           product_id: "kernel-devel-rt-4.12.14-14.28.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-source-rt-4.12.14-14.28.1.noarch",
                        product: {
                           name: "kernel-source-rt-4.12.14-14.28.1.noarch",
                           product_id: "kernel-source-rt-4.12.14-14.28.1.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                           product_id: "cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "cluster-md-kmp-rt_debug-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "cluster-md-kmp-rt_debug-4.12.14-14.28.1.x86_64",
                           product_id: "cluster-md-kmp-rt_debug-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                           product_id: "dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dlm-kmp-rt_debug-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "dlm-kmp-rt_debug-4.12.14-14.28.1.x86_64",
                           product_id: "dlm-kmp-rt_debug-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                           product_id: "gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gfs2-kmp-rt_debug-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "gfs2-kmp-rt_debug-4.12.14-14.28.1.x86_64",
                           product_id: "gfs2-kmp-rt_debug-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "kernel-rt-4.12.14-14.28.1.x86_64",
                           product_id: "kernel-rt-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt-base-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "kernel-rt-base-4.12.14-14.28.1.x86_64",
                           product_id: "kernel-rt-base-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt-devel-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "kernel-rt-devel-4.12.14-14.28.1.x86_64",
                           product_id: "kernel-rt-devel-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt-extra-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "kernel-rt-extra-4.12.14-14.28.1.x86_64",
                           product_id: "kernel-rt-extra-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt-livepatch-devel-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "kernel-rt-livepatch-devel-4.12.14-14.28.1.x86_64",
                           product_id: "kernel-rt-livepatch-devel-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt_debug-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "kernel-rt_debug-4.12.14-14.28.1.x86_64",
                           product_id: "kernel-rt_debug-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt_debug-base-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "kernel-rt_debug-base-4.12.14-14.28.1.x86_64",
                           product_id: "kernel-rt_debug-base-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                           product_id: "kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt_debug-extra-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "kernel-rt_debug-extra-4.12.14-14.28.1.x86_64",
                           product_id: "kernel-rt_debug-extra-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt_debug-livepatch-devel-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "kernel-rt_debug-livepatch-devel-4.12.14-14.28.1.x86_64",
                           product_id: "kernel-rt_debug-livepatch-devel-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-syms-rt-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "kernel-syms-rt-4.12.14-14.28.1.x86_64",
                           product_id: "kernel-syms-rt-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kselftests-kmp-rt-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "kselftests-kmp-rt-4.12.14-14.28.1.x86_64",
                           product_id: "kselftests-kmp-rt-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kselftests-kmp-rt_debug-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "kselftests-kmp-rt_debug-4.12.14-14.28.1.x86_64",
                           product_id: "kselftests-kmp-rt_debug-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                           product_id: "ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ocfs2-kmp-rt_debug-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "ocfs2-kmp-rt_debug-4.12.14-14.28.1.x86_64",
                           product_id: "ocfs2-kmp-rt_debug-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "reiserfs-kmp-rt-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "reiserfs-kmp-rt-4.12.14-14.28.1.x86_64",
                           product_id: "reiserfs-kmp-rt-4.12.14-14.28.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "reiserfs-kmp-rt_debug-4.12.14-14.28.1.x86_64",
                        product: {
                           name: "reiserfs-kmp-rt_debug-4.12.14-14.28.1.x86_64",
                           product_id: "reiserfs-kmp-rt_debug-4.12.14-14.28.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Real Time Module 15 SP1",
                        product: {
                           name: "SUSE Real Time Module 15 SP1",
                           product_id: "SUSE Real Time Module 15 SP1",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-module-rt:15:sp1",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "cluster-md-kmp-rt-4.12.14-14.28.1.x86_64 as component of SUSE Real Time Module 15 SP1",
               product_id: "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
            },
            product_reference: "cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
            relates_to_product_reference: "SUSE Real Time Module 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dlm-kmp-rt-4.12.14-14.28.1.x86_64 as component of SUSE Real Time Module 15 SP1",
               product_id: "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
            },
            product_reference: "dlm-kmp-rt-4.12.14-14.28.1.x86_64",
            relates_to_product_reference: "SUSE Real Time Module 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gfs2-kmp-rt-4.12.14-14.28.1.x86_64 as component of SUSE Real Time Module 15 SP1",
               product_id: "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            },
            product_reference: "gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            relates_to_product_reference: "SUSE Real Time Module 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-devel-rt-4.12.14-14.28.1.noarch as component of SUSE Real Time Module 15 SP1",
               product_id: "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
            },
            product_reference: "kernel-devel-rt-4.12.14-14.28.1.noarch",
            relates_to_product_reference: "SUSE Real Time Module 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt-4.12.14-14.28.1.x86_64 as component of SUSE Real Time Module 15 SP1",
               product_id: "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
            },
            product_reference: "kernel-rt-4.12.14-14.28.1.x86_64",
            relates_to_product_reference: "SUSE Real Time Module 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt-base-4.12.14-14.28.1.x86_64 as component of SUSE Real Time Module 15 SP1",
               product_id: "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
            },
            product_reference: "kernel-rt-base-4.12.14-14.28.1.x86_64",
            relates_to_product_reference: "SUSE Real Time Module 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt-devel-4.12.14-14.28.1.x86_64 as component of SUSE Real Time Module 15 SP1",
               product_id: "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
            },
            product_reference: "kernel-rt-devel-4.12.14-14.28.1.x86_64",
            relates_to_product_reference: "SUSE Real Time Module 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt_debug-devel-4.12.14-14.28.1.x86_64 as component of SUSE Real Time Module 15 SP1",
               product_id: "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
            },
            product_reference: "kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
            relates_to_product_reference: "SUSE Real Time Module 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-source-rt-4.12.14-14.28.1.noarch as component of SUSE Real Time Module 15 SP1",
               product_id: "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
            },
            product_reference: "kernel-source-rt-4.12.14-14.28.1.noarch",
            relates_to_product_reference: "SUSE Real Time Module 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-rt-4.12.14-14.28.1.x86_64 as component of SUSE Real Time Module 15 SP1",
               product_id: "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
            },
            product_reference: "kernel-syms-rt-4.12.14-14.28.1.x86_64",
            relates_to_product_reference: "SUSE Real Time Module 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ocfs2-kmp-rt-4.12.14-14.28.1.x86_64 as component of SUSE Real Time Module 15 SP1",
               product_id: "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            },
            product_reference: "ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            relates_to_product_reference: "SUSE Real Time Module 15 SP1",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2018-1000199",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-1000199",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-1000199",
               url: "https://www.suse.com/security/cve/CVE-2018-1000199",
            },
            {
               category: "external",
               summary: "SUSE Bug 1089895 for CVE-2018-1000199",
               url: "https://bugzilla.suse.com/1089895",
            },
            {
               category: "external",
               summary: "SUSE Bug 1090036 for CVE-2018-1000199",
               url: "https://bugzilla.suse.com/1090036",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "important",
            },
         ],
         title: "CVE-2018-1000199",
      },
      {
         cve: "CVE-2019-19462",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-19462",
            },
         ],
         notes: [
            {
               category: "general",
               text: "relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-19462",
               url: "https://www.suse.com/security/cve/CVE-2019-19462",
            },
            {
               category: "external",
               summary: "SUSE Bug 1158265 for CVE-2019-19462",
               url: "https://bugzilla.suse.com/1158265",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "low",
            },
         ],
         title: "CVE-2019-19462",
      },
      {
         cve: "CVE-2019-20806",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-20806",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in the Linux kernel before 5.2. There is a NULL pointer dereference in tw5864_handle_frame() in drivers/media/pci/tw5864/tw5864-video.c, which may cause denial of service, aka CID-2e7682ebfc75.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-20806",
               url: "https://www.suse.com/security/cve/CVE-2019-20806",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172199 for CVE-2019-20806",
               url: "https://bugzilla.suse.com/1172199",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 2.9,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "low",
            },
         ],
         title: "CVE-2019-20806",
      },
      {
         cve: "CVE-2019-20810",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-20810",
            },
         ],
         notes: [
            {
               category: "general",
               text: "go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call snd_card_free for a failure path, which causes a memory leak, aka CID-9453264ef586.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-20810",
               url: "https://www.suse.com/security/cve/CVE-2019-20810",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172458 for CVE-2019-20810",
               url: "https://bugzilla.suse.com/1172458",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "low",
            },
         ],
         title: "CVE-2019-20810",
      },
      {
         cve: "CVE-2019-20812",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-20812",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in the Linux kernel before 5.4.7. The prb_calc_retire_blk_tmo() function in net/packet/af_packet.c can result in a denial of service (CPU consumption and soft lockup) in a certain failure case involving TPACKET_V3, aka CID-b43d1f9f7067.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-20812",
               url: "https://www.suse.com/security/cve/CVE-2019-20812",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172453 for CVE-2019-20812",
               url: "https://bugzilla.suse.com/1172453",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-20812",
      },
      {
         cve: "CVE-2019-20908",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-20908",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. Incorrect access permissions for the efivar_ssdt ACPI variable could be used by attackers to bypass lockdown or secure boot restrictions, aka CID-1957a85b0032.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-20908",
               url: "https://www.suse.com/security/cve/CVE-2019-20908",
            },
            {
               category: "external",
               summary: "SUSE Bug 1173567 for CVE-2019-20908",
               url: "https://bugzilla.suse.com/1173567",
            },
            {
               category: "external",
               summary: "SUSE Bug 1174187 for CVE-2019-20908",
               url: "https://bugzilla.suse.com/1174187",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "important",
            },
         ],
         title: "CVE-2019-20908",
      },
      {
         cve: "CVE-2019-9455",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-9455",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Android kernel in the video driver there is a kernel pointer leak due to a WARN_ON statement. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-9455",
               url: "https://www.suse.com/security/cve/CVE-2019-9455",
            },
            {
               category: "external",
               summary: "SUSE Bug 1170345 for CVE-2019-9455",
               url: "https://bugzilla.suse.com/1170345",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-9455",
      },
      {
         cve: "CVE-2020-0305",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-0305",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153467744",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-0305",
               url: "https://www.suse.com/security/cve/CVE-2020-0305",
            },
            {
               category: "external",
               summary: "SUSE Bug 1174462 for CVE-2020-0305",
               url: "https://bugzilla.suse.com/1174462",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-0305",
      },
      {
         cve: "CVE-2020-0543",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-0543",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-0543",
               url: "https://www.suse.com/security/cve/CVE-2020-0543",
            },
            {
               category: "external",
               summary: "SUSE Bug 1154824 for CVE-2020-0543",
               url: "https://bugzilla.suse.com/1154824",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172205 for CVE-2020-0543",
               url: "https://bugzilla.suse.com/1172205",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172206 for CVE-2020-0543",
               url: "https://bugzilla.suse.com/1172206",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172207 for CVE-2020-0543",
               url: "https://bugzilla.suse.com/1172207",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172770 for CVE-2020-0543",
               url: "https://bugzilla.suse.com/1172770",
            },
            {
               category: "external",
               summary: "SUSE Bug 1178658 for CVE-2020-0543",
               url: "https://bugzilla.suse.com/1178658",
            },
            {
               category: "external",
               summary: "SUSE Bug 1201877 for CVE-2020-0543",
               url: "https://bugzilla.suse.com/1201877",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-0543",
      },
      {
         cve: "CVE-2020-10135",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10135",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may allow an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent attacker could impersonate a Bluetooth BR/EDR master or slave to pair with a previously paired remote device to successfully complete the authentication procedure without knowing the link key.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10135",
               url: "https://www.suse.com/security/cve/CVE-2020-10135",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171988 for CVE-2020-10135",
               url: "https://bugzilla.suse.com/1171988",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-10135",
      },
      {
         cve: "CVE-2020-10690",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10690",
            },
         ],
         notes: [
            {
               category: "general",
               text: "There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed, it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10690",
               url: "https://www.suse.com/security/cve/CVE-2020-10690",
            },
            {
               category: "external",
               summary: "SUSE Bug 1170056 for CVE-2020-10690",
               url: "https://bugzilla.suse.com/1170056",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-10690",
      },
      {
         cve: "CVE-2020-10711",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10711",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine. While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine, it sets the security attribute to indicate that the category bitmap is present, even if it has not been allocated. This issue leads to a NULL pointer dereference issue while importing the same category bitmap into SELinux. This flaw allows a remote network user to crash the system kernel, resulting in a denial of service.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10711",
               url: "https://www.suse.com/security/cve/CVE-2020-10711",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171191 for CVE-2020-10711",
               url: "https://bugzilla.suse.com/1171191",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-10711",
      },
      {
         cve: "CVE-2020-10720",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10720",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in the Linux kernel's implementation of GRO in versions before 5.2. This flaw allows an attacker with local access to crash the system.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10720",
               url: "https://www.suse.com/security/cve/CVE-2020-10720",
            },
            {
               category: "external",
               summary: "SUSE Bug 1170778 for CVE-2020-10720",
               url: "https://bugzilla.suse.com/1170778",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.8,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-10720",
      },
      {
         cve: "CVE-2020-10732",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10732",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10732",
               url: "https://www.suse.com/security/cve/CVE-2020-10732",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171220 for CVE-2020-10732",
               url: "https://bugzilla.suse.com/1171220",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "low",
            },
         ],
         title: "CVE-2020-10732",
      },
      {
         cve: "CVE-2020-10751",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10751",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages within the skb with the granted permission without further processing.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10751",
               url: "https://www.suse.com/security/cve/CVE-2020-10751",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171189 for CVE-2020-10751",
               url: "https://bugzilla.suse.com/1171189",
            },
            {
               category: "external",
               summary: "SUSE Bug 1174963 for CVE-2020-10751",
               url: "https://bugzilla.suse.com/1174963",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-10751",
      },
      {
         cve: "CVE-2020-10757",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10757",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10757",
               url: "https://www.suse.com/security/cve/CVE-2020-10757",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159281 for CVE-2020-10757",
               url: "https://bugzilla.suse.com/1159281",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172317 for CVE-2020-10757",
               url: "https://bugzilla.suse.com/1172317",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172437 for CVE-2020-10757",
               url: "https://bugzilla.suse.com/1172437",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.4,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "important",
            },
         ],
         title: "CVE-2020-10757",
      },
      {
         cve: "CVE-2020-10766",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10766",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per task/process conditional STIPB switching was added on top of the existing SSBD switching. The highest threat from this vulnerability is to confidentiality.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10766",
               url: "https://www.suse.com/security/cve/CVE-2020-10766",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159281 for CVE-2020-10766",
               url: "https://bugzilla.suse.com/1159281",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172781 for CVE-2020-10766",
               url: "https://bugzilla.suse.com/1172781",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.6,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-10766",
      },
      {
         cve: "CVE-2020-10767",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10767",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB (Indirect Branch Prediction Barrier). The IBPB mitigation will be disabled when STIBP is not available or when the Enhanced Indirect Branch Restricted Speculation (IBRS) is available. This flaw allows a local attacker to perform a Spectre V2 style attack when this configuration is active. The highest threat from this vulnerability is to confidentiality.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10767",
               url: "https://www.suse.com/security/cve/CVE-2020-10767",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159281 for CVE-2020-10767",
               url: "https://bugzilla.suse.com/1159281",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172782 for CVE-2020-10767",
               url: "https://bugzilla.suse.com/1172782",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-10767",
      },
      {
         cve: "CVE-2020-10768",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10768",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as being 'force disabled' when it is not and opens the system to Spectre v2 attacks. The highest threat from this vulnerability is to confidentiality.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10768",
               url: "https://www.suse.com/security/cve/CVE-2020-10768",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159281 for CVE-2020-10768",
               url: "https://bugzilla.suse.com/1159281",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172783 for CVE-2020-10768",
               url: "https://bugzilla.suse.com/1172783",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-10768",
      },
      {
         cve: "CVE-2020-10769",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10769",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A buffer over-read flaw was found in RH kernel versions before 5.0 in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. When a payload longer than 4 bytes, and is not following 4-byte alignment boundary guidelines, it causes a buffer over-read threat, leading to a system crash. This flaw allows a local attacker with user privileges to cause a denial of service.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10769",
               url: "https://www.suse.com/security/cve/CVE-2020-10769",
            },
            {
               category: "external",
               summary: "SUSE Bug 1173265 for CVE-2020-10769",
               url: "https://bugzilla.suse.com/1173265",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-10769",
      },
      {
         cve: "CVE-2020-10773",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10773",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A stack information leak flaw was found in s390/s390x in the Linux kernel's memory manager functionality, where it incorrectly writes to the /proc/sys/vm/cmm_timeout file. This flaw allows a local user to see the kernel data.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10773",
               url: "https://www.suse.com/security/cve/CVE-2020-10773",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172999 for CVE-2020-10773",
               url: "https://bugzilla.suse.com/1172999",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 2.5,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "low",
            },
         ],
         title: "CVE-2020-10773",
      },
      {
         cve: "CVE-2020-10781",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10781",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device. With this vulnerability, continually reading the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes, possibly making the system inoperable.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10781",
               url: "https://www.suse.com/security/cve/CVE-2020-10781",
            },
            {
               category: "external",
               summary: "SUSE Bug 1173074 for CVE-2020-10781",
               url: "https://bugzilla.suse.com/1173074",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-10781",
      },
      {
         cve: "CVE-2020-11669",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-11669",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in the Linux kernel before 5.2 on the powerpc platform. arch/powerpc/kernel/idle_book3s.S does not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR, aka CID-53a712bae5dd.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-11669",
               url: "https://www.suse.com/security/cve/CVE-2020-11669",
            },
            {
               category: "external",
               summary: "SUSE Bug 1169390 for CVE-2020-11669",
               url: "https://bugzilla.suse.com/1169390",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-11669",
      },
      {
         cve: "CVE-2020-12114",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-12114",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x before 5.3 allows local users to cause a denial of service (panic) by corrupting a mountpoint reference counter.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-12114",
               url: "https://www.suse.com/security/cve/CVE-2020-12114",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171098 for CVE-2020-12114",
               url: "https://bugzilla.suse.com/1171098",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-12114",
      },
      {
         cve: "CVE-2020-12464",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-12464",
            },
         ],
         notes: [
            {
               category: "general",
               text: "usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-12464",
               url: "https://www.suse.com/security/cve/CVE-2020-12464",
            },
            {
               category: "external",
               summary: "SUSE Bug 1170901 for CVE-2020-12464",
               url: "https://bugzilla.suse.com/1170901",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 1.8,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "low",
            },
         ],
         title: "CVE-2020-12464",
      },
      {
         cve: "CVE-2020-12652",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-12652",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a \"double fetch\" vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states \"The security impact of this bug is not as bad as it could have been because these operations are all privileged and root already has enormous destructive power.\"",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-12652",
               url: "https://www.suse.com/security/cve/CVE-2020-12652",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171218 for CVE-2020-12652",
               url: "https://bugzilla.suse.com/1171218",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-12652",
      },
      {
         cve: "CVE-2020-12653",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-12653",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-12653",
               url: "https://www.suse.com/security/cve/CVE-2020-12653",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159281 for CVE-2020-12653",
               url: "https://bugzilla.suse.com/1159281",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171195 for CVE-2020-12653",
               url: "https://bugzilla.suse.com/1171195",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171254 for CVE-2020-12653",
               url: "https://bugzilla.suse.com/1171254",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "important",
            },
         ],
         title: "CVE-2020-12653",
      },
      {
         cve: "CVE-2020-12654",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-12654",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was found in Linux kernel before 5.5.4. mwifiex_ret_wmm_get_status() in drivers/net/wireless/marvell/mwifiex/wmm.c allows a remote AP to trigger a heap-based buffer overflow because of an incorrect memcpy, aka CID-3a9b153c5591.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-12654",
               url: "https://www.suse.com/security/cve/CVE-2020-12654",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159281 for CVE-2020-12654",
               url: "https://bugzilla.suse.com/1159281",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171202 for CVE-2020-12654",
               url: "https://bugzilla.suse.com/1171202",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171252 for CVE-2020-12654",
               url: "https://bugzilla.suse.com/1171252",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "important",
            },
         ],
         title: "CVE-2020-12654",
      },
      {
         cve: "CVE-2020-12655",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-12655",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in xfs_agf_verify in fs/xfs/libxfs/xfs_alloc.c in the Linux kernel through 5.6.10. Attackers may trigger a sync of excessive duration via an XFS v5 image with crafted metadata, aka CID-d0c7feaf8767.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-12655",
               url: "https://www.suse.com/security/cve/CVE-2020-12655",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171217 for CVE-2020-12655",
               url: "https://bugzilla.suse.com/1171217",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 2.8,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "low",
            },
         ],
         title: "CVE-2020-12655",
      },
      {
         cve: "CVE-2020-12656",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-12656",
            },
         ],
         notes: [
            {
               category: "general",
               text: "** DISPUTED ** gss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation in the Linux kernel through 5.6.10 lacks certain domain_release calls, leading to a memory leak. Note: This was disputed with the assertion that the issue does not grant any access not already available. It is a problem that on unloading a specific kernel module some memory is leaked, but loading kernel modules is a privileged operation. A user could also write a kernel module to consume any amount of memory they like and load that replicating the effect of this bug.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-12656",
               url: "https://www.suse.com/security/cve/CVE-2020-12656",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171219 for CVE-2020-12656",
               url: "https://bugzilla.suse.com/1171219",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 2.9,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "low",
            },
         ],
         title: "CVE-2020-12656",
      },
      {
         cve: "CVE-2020-12657",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-12657",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in the Linux kernel before 5.6.5. There is a use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-12657",
               url: "https://www.suse.com/security/cve/CVE-2020-12657",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171205 for CVE-2020-12657",
               url: "https://bugzilla.suse.com/1171205",
            },
            {
               category: "external",
               summary: "SUSE Bug 1201585 for CVE-2020-12657",
               url: "https://bugzilla.suse.com/1201585",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-12657",
      },
      {
         cve: "CVE-2020-12659",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-12659",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-12659",
               url: "https://www.suse.com/security/cve/CVE-2020-12659",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171214 for CVE-2020-12659",
               url: "https://bugzilla.suse.com/1171214",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-12659",
      },
      {
         cve: "CVE-2020-12769",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-12769",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one, aka CID-19b61392c5a8.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-12769",
               url: "https://www.suse.com/security/cve/CVE-2020-12769",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171983 for CVE-2020-12769",
               url: "https://bugzilla.suse.com/1171983",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "low",
            },
         ],
         title: "CVE-2020-12769",
      },
      {
         cve: "CVE-2020-12771",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-12771",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-12771",
               url: "https://www.suse.com/security/cve/CVE-2020-12771",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171732 for CVE-2020-12771",
               url: "https://bugzilla.suse.com/1171732",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-12771",
      },
      {
         cve: "CVE-2020-12888",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-12888",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-12888",
               url: "https://www.suse.com/security/cve/CVE-2020-12888",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159281 for CVE-2020-12888",
               url: "https://bugzilla.suse.com/1159281",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171868 for CVE-2020-12888",
               url: "https://bugzilla.suse.com/1171868",
            },
            {
               category: "external",
               summary: "SUSE Bug 1176979 for CVE-2020-12888",
               url: "https://bugzilla.suse.com/1176979",
            },
            {
               category: "external",
               summary: "SUSE Bug 1179612 for CVE-2020-12888",
               url: "https://bugzilla.suse.com/1179612",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-12888",
      },
      {
         cve: "CVE-2020-13143",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-13143",
            },
         ],
         notes: [
            {
               category: "general",
               text: "gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\\0' value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-13143",
               url: "https://www.suse.com/security/cve/CVE-2020-13143",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171982 for CVE-2020-13143",
               url: "https://bugzilla.suse.com/1171982",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "low",
            },
         ],
         title: "CVE-2020-13143",
      },
      {
         cve: "CVE-2020-13974",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-13974",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if k_ascii is called several times in a row, aka CID-b86dab054059. NOTE: Members in the community argue that the integer overflow does not lead to a security issue in this case.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-13974",
               url: "https://www.suse.com/security/cve/CVE-2020-13974",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172775 for CVE-2020-13974",
               url: "https://bugzilla.suse.com/1172775",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.2,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-13974",
      },
      {
         cve: "CVE-2020-14416",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-14416",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-14416",
               url: "https://www.suse.com/security/cve/CVE-2020-14416",
            },
            {
               category: "external",
               summary: "SUSE Bug 1162002 for CVE-2020-14416",
               url: "https://bugzilla.suse.com/1162002",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-14416",
      },
      {
         cve: "CVE-2020-15393",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-15393",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel 4.4 through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebeb8db770.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-15393",
               url: "https://www.suse.com/security/cve/CVE-2020-15393",
            },
            {
               category: "external",
               summary: "SUSE Bug 1173514 for CVE-2020-15393",
               url: "https://bugzilla.suse.com/1173514",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-15393",
      },
      {
         cve: "CVE-2020-15780",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-15780",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
               "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
               "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-15780",
               url: "https://www.suse.com/security/cve/CVE-2020-15780",
            },
            {
               category: "external",
               summary: "SUSE Bug 1173573 for CVE-2020-15780",
               url: "https://bugzilla.suse.com/1173573",
            },
            {
               category: "external",
               summary: "SUSE Bug 1174186 for CVE-2020-15780",
               url: "https://bugzilla.suse.com/1174186",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Real Time Module 15 SP1:cluster-md-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:dlm-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:gfs2-kmp-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-devel-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-base-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-rt_debug-devel-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:kernel-source-rt-4.12.14-14.28.1.noarch",
                  "SUSE Real Time Module 15 SP1:kernel-syms-rt-4.12.14-14.28.1.x86_64",
                  "SUSE Real Time Module 15 SP1:ocfs2-kmp-rt-4.12.14-14.28.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-09-04T06:06:02Z",
               details: "important",
            },
         ],
         title: "CVE-2020-15780",
      },
   ],
}