<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for the Linux Kernel</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2020:14442-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2020-08-03T14:46:47Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2020-08-03T14:46:47Z</InitialReleaseDate>
    <CurrentReleaseDate>2020-08-03T14:46:47Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for the Linux Kernel</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-10773: Fixed a memory leak on s390/s390x, in the cmm_timeout_hander in file arch/s390/mm/cmm.c (bnc#1172999).
- CVE-2020-14416: Fixed a race condition in tty-&gt;disc_data handling in the slip and slcan line discipline could lead to a use-after-free. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c (bnc#1162002).
- CVE-2020-13974: Fixed a integer overflow in drivers/tty/vt/keyboard.c, if k_ascii is called several times in a row (bnc#1172775).
- CVE-2020-10732: A flaw was found in the implementation of Userspace core dumps. This flaw allowed an attacker with a local account to crash a trivial program and exfiltrate private kernel data (bnc#1171220).
- CVE-2020-12656: Fixed a memory leak in gss_mech_free in the rpcsec_gss_krb5 implementation, caused by a lack of certain domain_release calls (bnc#1171219).
- CVE-2020-0305: Fixed a possible use-after-free due to a race condition incdev_get of char_dev.c. This could lead to local escalation of privilege. User interaction is not needed for exploitation (bnc#1174462).
- CVE-2020-10769: A buffer over-read flaw was found in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. This flaw allowed a local attacker with user privileges to cause a denial of service (bnc#1173265).
- CVE-2020-12652: The __mptctl_ioctl function in drivers/message/fusion/mptctl.c allowed local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a 'double fetch' vulnerability (bnc#1171218).
- CVE-2019-5108: Fixed a denial-of-service vulnerability in the wifi stack. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed (bnc#1159912).

The following non-security bugs were fixed:

- Fix gcc-discovered error in zeroing a struct (bnc#680814)
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">slessp4-kernel-source-14442,slexsp3-kernel-source-14442</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/</URL>
      <Description>Link for SUSE-SU-2020:14442-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2020-August/007210.html</URL>
      <Description>E-Mail link for SUSE-SU-2020:14442-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1159912</URL>
      <Description>SUSE Bug 1159912</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1159913</URL>
      <Description>SUSE Bug 1159913</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1162002</URL>
      <Description>SUSE Bug 1162002</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1171218</URL>
      <Description>SUSE Bug 1171218</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1171219</URL>
      <Description>SUSE Bug 1171219</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1171220</URL>
      <Description>SUSE Bug 1171220</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1172775</URL>
      <Description>SUSE Bug 1172775</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1172999</URL>
      <Description>SUSE Bug 1172999</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1173265</URL>
      <Description>SUSE Bug 1173265</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1174462</URL>
      <Description>SUSE Bug 1174462</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1174543</URL>
      <Description>SUSE Bug 1174543</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-5108/</URL>
      <Description>SUSE CVE CVE-2019-5108 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-0305/</URL>
      <Description>SUSE CVE CVE-2020-0305 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-10732/</URL>
      <Description>SUSE CVE CVE-2020-10732 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-10769/</URL>
      <Description>SUSE CVE CVE-2020-10769 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-10773/</URL>
      <Description>SUSE CVE CVE-2020-10773 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-12652/</URL>
      <Description>SUSE CVE CVE-2020-12652 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-12656/</URL>
      <Description>SUSE CVE CVE-2020-12656 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-13974/</URL>
      <Description>SUSE CVE CVE-2020-13974 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-14416/</URL>
      <Description>SUSE CVE CVE-2020-14416 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 11 SP4-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS" CPE="cpe:/o:suse:suse_sles:11:sp4">SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="kernel-bigmem-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-bigmem-3.0.101-108.117.1">kernel-bigmem-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-bigmem-base-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-bigmem-base-3.0.101-108.117.1">kernel-bigmem-base-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-bigmem-devel-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-bigmem-devel-3.0.101-108.117.1">kernel-bigmem-devel-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-default-3.0.101-108.117.1">kernel-default-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-base-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-default-base-3.0.101-108.117.1">kernel-default-base-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-devel-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-default-devel-3.0.101-108.117.1">kernel-default-devel-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-man-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-default-man-3.0.101-108.117.1">kernel-default-man-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ec2-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-ec2-3.0.101-108.117.1">kernel-ec2-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ec2-base-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-ec2-base-3.0.101-108.117.1">kernel-ec2-base-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ec2-devel-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-ec2-devel-3.0.101-108.117.1">kernel-ec2-devel-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-pae-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-pae-3.0.101-108.117.1">kernel-pae-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-pae-base-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-pae-base-3.0.101-108.117.1">kernel-pae-base-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-pae-devel-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-pae-devel-3.0.101-108.117.1">kernel-pae-devel-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ppc64-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-ppc64-3.0.101-108.117.1">kernel-ppc64-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ppc64-base-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-ppc64-base-3.0.101-108.117.1">kernel-ppc64-base-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ppc64-devel-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-ppc64-devel-3.0.101-108.117.1">kernel-ppc64-devel-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-source-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-source-3.0.101-108.117.1">kernel-source-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-syms-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-syms-3.0.101-108.117.1">kernel-syms-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-trace-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-trace-3.0.101-108.117.1">kernel-trace-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-trace-base-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-trace-base-3.0.101-108.117.1">kernel-trace-base-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-trace-devel-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-trace-devel-3.0.101-108.117.1">kernel-trace-devel-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-xen-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-xen-3.0.101-108.117.1">kernel-xen-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-xen-base-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-xen-base-3.0.101-108.117.1">kernel-xen-base-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-xen-devel-3.0.101-108.117.1">
      <FullProductName ProductID="kernel-xen-devel-3.0.101-108.117.1">kernel-xen-devel-3.0.101-108.117.1</FullProductName>
    </Branch>
    <Relationship ProductReference="kernel-bigmem-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.117.1">kernel-bigmem-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-bigmem-base-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.117.1">kernel-bigmem-base-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-bigmem-devel-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.117.1">kernel-bigmem-devel-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.117.1">kernel-default-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.117.1">kernel-default-base-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.117.1">kernel-default-devel-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-man-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.117.1">kernel-default-man-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.117.1">kernel-ec2-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-base-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.117.1">kernel-ec2-base-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-devel-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.117.1">kernel-ec2-devel-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pae-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.117.1">kernel-pae-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pae-base-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.117.1">kernel-pae-base-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pae-devel-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.117.1">kernel-pae-devel-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ppc64-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.117.1">kernel-ppc64-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ppc64-base-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.117.1">kernel-ppc64-base-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ppc64-devel-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.117.1">kernel-ppc64-devel-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.117.1">kernel-source-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.117.1">kernel-syms-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-trace-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.117.1">kernel-trace-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-trace-base-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.117.1">kernel-trace-base-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-trace-devel-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.117.1">kernel-trace-devel-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.117.1">kernel-xen-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-base-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.117.1">kernel-xen-base-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-devel-3.0.101-108.117.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.117.1">kernel-xen-devel-3.0.101-108.117.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to different denial-of-service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby APs of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.</Note>
    </Notes>
    <CVE>CVE-2019-5108</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.117.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>3.3</BaseScoreV2>
        <VectorV2>AV:A/AC:L/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.4</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-5108.html</URL>
        <Description>CVE-2019-5108</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1159912</URL>
        <Description>SUSE Bug 1159912</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1159913</URL>
        <Description>SUSE Bug 1159913</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153467744</Note>
    </Notes>
    <CVE>CVE-2020-0305</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.117.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.4</BaseScoreV2>
        <VectorV2>AV:L/AC:M/Au:N/C:P/I:P/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.4</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-0305.html</URL>
        <Description>CVE-2020-0305</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1174462</URL>
        <Description>SUSE Bug 1174462</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data.</Note>
    </Notes>
    <CVE>CVE-2020-10732</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.117.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>3.6</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:P/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>3.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-10732.html</URL>
        <Description>CVE-2020-10732</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1171220</URL>
        <Description>SUSE Bug 1171220</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A buffer over-read flaw was found in RH kernel versions before 5.0 in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. When a payload longer than 4 bytes, and is not following 4-byte alignment boundary guidelines, it causes a buffer over-read threat, leading to a system crash. This flaw allows a local attacker with user privileges to cause a denial of service.</Note>
    </Notes>
    <CVE>CVE-2020-10769</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.117.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-10769.html</URL>
        <Description>CVE-2020-10769</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1173265</URL>
        <Description>SUSE Bug 1173265</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A stack information leak flaw was found in s390/s390x in the Linux kernel’s memory manager functionality, where it incorrectly writes to the /proc/sys/vm/cmm_timeout file. This flaw allows a local user to see the kernel data.</Note>
    </Notes>
    <CVE>CVE-2020-10773</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.117.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:P/I:N/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>2.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-10773.html</URL>
        <Description>CVE-2020-10773</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1172999</URL>
        <Description>SUSE Bug 1172999</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a "double fetch" vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states "The security impact of this bug is not as bad as it could have been because these operations are all privileged and root already has enormous destructive power."</Note>
    </Notes>
    <CVE>CVE-2020-12652</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.117.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.7</BaseScoreV2>
        <VectorV2>AV:L/AC:M/Au:N/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.4</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-12652.html</URL>
        <Description>CVE-2020-12652</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1171218</URL>
        <Description>SUSE Bug 1171218</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">** DISPUTED ** gss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation in the Linux kernel through 5.6.10 lacks certain domain_release calls, leading to a memory leak. Note: This was disputed with the assertion that the issue does not grant any access not already available. It is a problem that on unloading a specific kernel module some memory is leaked, but loading kernel modules is a privileged operation. A user could also write a kernel module to consume any amount of memory they like and load that replicating the effect of this bug.</Note>
    </Notes>
    <CVE>CVE-2020-12656</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.117.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>2.9</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-12656.html</URL>
        <Description>CVE-2020-12656</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1171219</URL>
        <Description>SUSE Bug 1171219</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if k_ascii is called several times in a row, aka CID-b86dab054059. NOTE: Members in the community argue that the integer overflow does not lead to a security issue in this case.</Note>
    </Notes>
    <CVE>CVE-2020-13974</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.117.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>7.2</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:C/I:C/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.2</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-13974.html</URL>
        <Description>CVE-2020-13974</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1172775</URL>
        <Description>SUSE Bug 1172775</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel before 5.4.16, a race condition in tty-&gt;disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c.</Note>
    </Notes>
    <CVE>CVE-2020-14416</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.117.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.117.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.7</BaseScoreV2>
        <VectorV2>AV:L/AC:M/Au:N/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.4</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2020/suse-su-202014442-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-14416.html</URL>
        <Description>CVE-2020-14416</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1162002</URL>
        <Description>SUSE Bug 1162002</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
