SUSE-SU-2018:1761-1: important: Security update for the Linux Kernel
sle-security-updates at lists.suse.com
sle-security-updates at lists.suse.com
Wed Jun 20 07:09:00 MDT 2018
SUSE Security Update: Security update for the Linux Kernel
______________________________________________________________________________
Announcement ID: SUSE-SU-2018:1761-1
Rating: important
References: #1038553 #1046610 #1079152 #1082962 #1083382
#1083900 #1087007 #1087012 #1087082 #1087086
#1087095 #1092813 #1092904 #1094033 #1094353
#1094823 #1096140 #1096242 #1096281 #1096480
#1096728 #1097356
Cross-References: CVE-2017-13305 CVE-2018-1000204 CVE-2018-1092
CVE-2018-1093 CVE-2018-1094 CVE-2018-1130
CVE-2018-3665 CVE-2018-5803 CVE-2018-5848
CVE-2018-7492
Affected Products:
SUSE Linux Enterprise Server for SAP 12-SP1
SUSE Linux Enterprise Server 12-SP1-LTSS
SUSE Linux Enterprise Module for Public Cloud 12
______________________________________________________________________________
An update that solves 10 vulnerabilities and has 12 fixes
is now available.
Description:
The SUSE Linux Enterprise 12 SP1 LTSS kernel was updated to receive
various security and bugfixes.
The following security bugs were fixed:
- CVE-2018-3665: Prevent disclosure of FPU registers (including XMM and
AVX registers) between processes. These registers might contain
encryption keys when doing SSE accelerated AES enc/decryption
(bsc#1087086)
- CVE-2018-5848: In the function wmi_set_ie(), the length validation code
did not handle unsigned integer overflow properly. As a result, a large
value of the 'ie_len' argument could have caused a buffer overflow
(bnc#1097356)
- CVE-2018-1000204: Prevent infoleak caused by incorrect handling of the
SG_IO ioctl (bsc#1096728)
- CVE-2017-13305: Prevent information disclosure vulnerability in
encrypted-keys (bsc#1094353)
- CVE-2018-1094: The ext4_fill_super function did not always initialize
the crc32c checksum driver, which allowed attackers to cause a denial of
service (ext4_xattr_inode_hash NULL pointer dereference and system
crash) via a crafted ext4 image (bsc#1087007).
- CVE-2018-1093: The ext4_valid_block_bitmap function allowed attackers to
cause a denial of service (out-of-bounds read and system crash) via a
crafted ext4 image because balloc.c and ialloc.c do not validate bitmap
block numbers (bsc#1087095).
- CVE-2018-1092: The ext4_iget function mishandled the case of a root
directory with a zero i_links_count, which allowed attackers to cause a
denial of service (ext4_process_freed_data NULL pointer dereference and
OOPS) via a crafted ext4 image (bsc#1087012).
- CVE-2018-1130: NULL pointer dereference in dccp_write_xmit() function
that allowed a local user to cause a denial of service by a number of
certain crafted system calls (bsc#1092904)
- CVE-2018-5803: Prevent error in the "_sctp_make_chunk()" function when
handling SCTP packets length that could have been exploited to cause a
kernel crash (bnc#1083900)
- CVE-2018-7492: Prevent NULL pointer dereference in the net/rds/rdma.c
__rds_rdma_map() function that allowed local attackers to cause a system
panic and a denial-of-service, related to RDS_GET_MR and
RDS_GET_MR_FOR_DEST (bsc#1082962)
The following non-security bugs were fixed:
- Btrfs: fix unexpected balance crash due to BUG_ON (bsc#1038553).
- Fix excessive newline in /proc/*/status (bsc#1094823).
- KVM: x86: Sync back MSR_IA32_SPEC_CTRL to VCPU data structure
(bsc#1096242, bsc#1096281).
- dm thin metadata: call precommit before saving the roots (bsc#1083382).
- dm thin: fix inability to discard blocks when in out-of-data-space mode
(bsc#1083382).
- dm thin: fix missing out-of-data-space to write mode transition if
blocks are released (bsc#1083382).
- dm thin: restore requested 'error_if_no_space' setting on OODS to WRITE
transition (bsc#1083382).
- dm: fix various targets to dm_register_target after module __init
resources created (bsc#1083382).
- kABI: work around BPF SSBD removal (bsc#1087082).
- kgraft/bnx2fc: Do not block kGraft in bnx2fc_l2_rcv kthread
(bsc#1094033).
- mm, page_alloc: do not break __GFP_THISNODE by zonelist reset
(bsc#1079152).
- usbip: usbip_host: fix NULL-ptr deref and use-after-free errors
(bsc#1096480).
- usbip: usbip_host: fix bad unlock balance during stub_probe()
(bsc#1096480).
- x86/boot: Fix early command-line parsing when matching at end
(bsc#1096281).
- x86/boot: Fix early command-line parsing when partial word matches
(bsc#1096281).
- x86/bugs: spec_ctrl must be cleared from cpu_caps_set when being
disabled (bsc#1096140).
- x86/kaiser: export symbol kaiser_set_shadow_pgd() (bsc#1092813)
- xen-netfront: fix req_prod check to avoid RX hang when index wraps
(bsc#1046610).
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- SUSE Linux Enterprise Server for SAP 12-SP1:
zypper in -t patch SUSE-SLE-SAP-12-SP1-2018-1183=1
- SUSE Linux Enterprise Server 12-SP1-LTSS:
zypper in -t patch SUSE-SLE-SERVER-12-SP1-2018-1183=1
- SUSE Linux Enterprise Module for Public Cloud 12:
zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2018-1183=1
Package List:
- SUSE Linux Enterprise Server for SAP 12-SP1 (ppc64le x86_64):
kernel-default-3.12.74-60.64.96.1
kernel-default-base-3.12.74-60.64.96.1
kernel-default-base-debuginfo-3.12.74-60.64.96.1
kernel-default-debuginfo-3.12.74-60.64.96.1
kernel-default-debugsource-3.12.74-60.64.96.1
kernel-default-devel-3.12.74-60.64.96.1
kernel-syms-3.12.74-60.64.96.1
- SUSE Linux Enterprise Server for SAP 12-SP1 (noarch):
kernel-devel-3.12.74-60.64.96.1
kernel-macros-3.12.74-60.64.96.1
kernel-source-3.12.74-60.64.96.1
- SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64):
kernel-xen-3.12.74-60.64.96.1
kernel-xen-base-3.12.74-60.64.96.1
kernel-xen-base-debuginfo-3.12.74-60.64.96.1
kernel-xen-debuginfo-3.12.74-60.64.96.1
kernel-xen-debugsource-3.12.74-60.64.96.1
kernel-xen-devel-3.12.74-60.64.96.1
kgraft-patch-3_12_74-60_64_96-default-1-2.3.1
kgraft-patch-3_12_74-60_64_96-xen-1-2.3.1
- SUSE Linux Enterprise Server 12-SP1-LTSS (ppc64le s390x x86_64):
kernel-default-3.12.74-60.64.96.1
kernel-default-base-3.12.74-60.64.96.1
kernel-default-base-debuginfo-3.12.74-60.64.96.1
kernel-default-debuginfo-3.12.74-60.64.96.1
kernel-default-debugsource-3.12.74-60.64.96.1
kernel-default-devel-3.12.74-60.64.96.1
kernel-syms-3.12.74-60.64.96.1
- SUSE Linux Enterprise Server 12-SP1-LTSS (noarch):
kernel-devel-3.12.74-60.64.96.1
kernel-macros-3.12.74-60.64.96.1
kernel-source-3.12.74-60.64.96.1
- SUSE Linux Enterprise Server 12-SP1-LTSS (x86_64):
kernel-xen-3.12.74-60.64.96.1
kernel-xen-base-3.12.74-60.64.96.1
kernel-xen-base-debuginfo-3.12.74-60.64.96.1
kernel-xen-debuginfo-3.12.74-60.64.96.1
kernel-xen-debugsource-3.12.74-60.64.96.1
kernel-xen-devel-3.12.74-60.64.96.1
kgraft-patch-3_12_74-60_64_96-default-1-2.3.1
kgraft-patch-3_12_74-60_64_96-xen-1-2.3.1
- SUSE Linux Enterprise Server 12-SP1-LTSS (s390x):
kernel-default-man-3.12.74-60.64.96.1
- SUSE Linux Enterprise Module for Public Cloud 12 (x86_64):
kernel-ec2-3.12.74-60.64.96.1
kernel-ec2-debuginfo-3.12.74-60.64.96.1
kernel-ec2-debugsource-3.12.74-60.64.96.1
kernel-ec2-devel-3.12.74-60.64.96.1
kernel-ec2-extra-3.12.74-60.64.96.1
kernel-ec2-extra-debuginfo-3.12.74-60.64.96.1
References:
https://www.suse.com/security/cve/CVE-2017-13305.html
https://www.suse.com/security/cve/CVE-2018-1000204.html
https://www.suse.com/security/cve/CVE-2018-1092.html
https://www.suse.com/security/cve/CVE-2018-1093.html
https://www.suse.com/security/cve/CVE-2018-1094.html
https://www.suse.com/security/cve/CVE-2018-1130.html
https://www.suse.com/security/cve/CVE-2018-3665.html
https://www.suse.com/security/cve/CVE-2018-5803.html
https://www.suse.com/security/cve/CVE-2018-5848.html
https://www.suse.com/security/cve/CVE-2018-7492.html
https://bugzilla.suse.com/1038553
https://bugzilla.suse.com/1046610
https://bugzilla.suse.com/1079152
https://bugzilla.suse.com/1082962
https://bugzilla.suse.com/1083382
https://bugzilla.suse.com/1083900
https://bugzilla.suse.com/1087007
https://bugzilla.suse.com/1087012
https://bugzilla.suse.com/1087082
https://bugzilla.suse.com/1087086
https://bugzilla.suse.com/1087095
https://bugzilla.suse.com/1092813
https://bugzilla.suse.com/1092904
https://bugzilla.suse.com/1094033
https://bugzilla.suse.com/1094353
https://bugzilla.suse.com/1094823
https://bugzilla.suse.com/1096140
https://bugzilla.suse.com/1096242
https://bugzilla.suse.com/1096281
https://bugzilla.suse.com/1096480
https://bugzilla.suse.com/1096728
https://bugzilla.suse.com/1097356
More information about the sle-security-updates
mailing list