SUSE-SU-2018:2051-1
SUSE-SU-2018:2051-1 · Security update for the Linux Kernel
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
Diese Seite zeigt ausgewählte Angaben aus den Quellen. Die vollständige Beschreibung und betroffene Versionen finden Sie in den verlinkten Sicherheitshinweisen.
The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.140 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-13053: The alarm_timer_nsleep function had an integer overflow via a large relative timeout because ktime_add_safe was not used (bnc#1099924) - CVE-2018-9385: Prevent overread of the 'driver_override' buffer (bsc#1100491) - CVE-2018-13405: The inode_init_owner function allowed local users to create files with an unintended group ownership allowing attackers to escalate privileges by making a plain file executable and SGID (bnc#1100416) - CVE-2018-13406: An integer overflow in the uvesafb_setcmap function could have result in local attackers being able to crash the kernel or potentially elevate privileges because kmalloc_array is not used (bnc#1100418) The following non-security bugs were fixed: - 1wire: family module autoload fails because of upper/lower case mismatch (bnc#1012382). - ALSA: hda - Clean up ALC299 init code (bsc#1099810). - ALSA: hda - Enable power_save_node for CX20722 (bsc#1099810). - ALSA: hda - Fix a wrong FIXUP for alc289 on Dell machines (bsc#1099810). - ALSA: hda - Fix incorrect usage of IS_REACHABLE() (bsc#1099810). - ALSA: hda - Fix pincfg at resume on Lenovo T470 dock (bsc#1099810). - ALSA: hda - Handle kzalloc() failure in snd_hda_attach_pcm_stream() (bnc#1012382). - ALSA: hda - Use acpi_dev_present() (bsc#1099810). - ALSA: hda - add a new condition to check if it is thinkpad (bsc#1099810). - ALSA: hda - silence uninitialized variable warning in activate_amp_in() (bsc#1099810). - ALSA: hda/patch_sigmatel: Add AmigaOne X1000 pinconfigs (bsc#1099810). - ALSA: hda/realtek - Add a quirk for FSC ESPRIMO U9210 (bsc#1099810). - ALSA: hda/realtek - Add headset mode support for Dell laptop (bsc#1099810). - ALSA: hda/realtek - Add support headset mode for DELL WYSE (bsc#1099810). - ALSA: hda/realtek - Clevo P950ER ALC1220 Fixup (bsc#1099810). - ALSA: hda/realtek - Enable Thinkpad Dock device for ALC298 platform (bsc#1099810). - ALSA: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (bsc#1099810). - ALSA: hda/realtek - Fix Dell headset Mic can't record (bsc#1099810). - ALSA: hda/realtek - Fix pop noise on Lenovo P50 and co (bsc#1099810). - ALSA: hda/realtek - Fix the problem of two front mics on more machines (bsc#1099810). - ALSA: hda/realtek - Fixup for HP x360 laptops with BandO speakers (bsc#1099810). - ALSA: hda/realtek - Fixup mute led on HP Spectre x360 (bsc#1099810). - ALSA: hda/realtek - Make dock sound work on ThinkPad L570 (bsc#1099810). - ALSA: hda/realtek - Refactor alc269_fixup_hp_mute_led_mic*() (bsc#1099810). - ALSA: hda/realtek - Reorder ALC269 ASUS quirk entries (bsc#1099810). - ALSA: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (bsc#1099810). - ALSA: hda/realtek - Update ALC255 depop optimize (bsc#1099810). - ALSA: hda/realtek - adjust the location of one mic (bsc#1099810). - ALSA: hda/realtek - change the location for one of two front mics (bsc#1099810). - ALSA: hda/realtek - set PINCFG_HEADSET_MIC to parse_flags (bsc#1099810). - ALSA: hda/realtek - update ALC215 depop optimize (bsc#1099810). - ALSA: hda/realtek - update ALC225 depop optimize (bsc#1099810). - ALSA: hda/realtek: Fix mic and headset jack sense on Asus X705UD (bsc#1099810). - ALSA: hda/realtek: Limit mic boost on T480 (bsc#1099810). - ALSA: hda: Fix forget to free resource in error handling code path in hda_codec_driver_probe (bsc#1099810). - ALSA: hda: add dock and led support for HP EliteBook 830 G5 (bsc#1099810). - ALSA: hda: add dock and led support for HP ProBook 640 G4 (bsc#1099810). - ALSA: hda: fix some klockwork scan warnings (bsc#1099810). - ARM: 8764/1: kgdb: fix NUMREGBYTES so that gdb_regs[] is the correct size (bnc#1012382). - ARM: dts: imx6q: Use correct SDMA script for SPI5 core (bnc#1012382). - ASoC: cirrus: i2s: Fix LRCLK configuration (bnc#1012382). - ASoC: cirrus: i2s: Fix {TX|RX}LinCtrlData setup (bnc#1012382). - ASoC: dapm: delete dapm_kcontrol_data paths list before freeing it (bnc#1012382). - Bluetooth: Fix connection if directed advertising and privacy is used (bnc#1012382). - Bluetooth: hci_qca: Avoid missing rampatch failure with userspace fw loader (bnc#1012382). - Btrfs: fix clone vs chattr NODATASUM race (bnc#1012382). - Btrfs: fix unexpected cow in run_delalloc_nocow (bnc#1012382). - Btrfs: make raid6 rebuild retry more (bnc#1012382). - Correct the arguments to verbose() (bsc#1098425) - HID: debug: check length before copy_to_user() (bnc#1012382). - HID: hiddev: fix potential Spectre v1 (bnc#1012382). - HID: i2c-hid: Fix 'incomplete report' noise (bnc#1012382). - Hang/soft lockup in d_invalidate with simultaneous calls (bsc#1094248, bsc@1097140). - IB/qib: Fix DMA api warning with debug kernel (bnc#1012382). - Input: elan_i2c - add ELAN0618 (Lenovo v330 15IKB) ACPI ID (bnc#1012382). - Input: elan_i2c_smbus - fix more potential stack buffer overflows (bnc#1012382). - Input: elantech - enable middle button of touchpads on ThinkPad P52 (bnc#1012382). - Input: elantech - fix V4 report decoding for module with middle key (bnc#1012382). - MIPS: BCM47XX: Enable 74K Core ExternalSync for PCIe erratum (bnc#1012382). - MIPS: io: Add barrier after register read in inX() (bnc#1012382). - NFSv4: Fix possible 1-byte stack overflow in nfs_idmap_read_and_verify_message (bnc#1012382). - PCI: pciehp: Clear Presence Detect and Data Link Layer Status Changed on resume (bnc#1012382). - RDMA/mlx4: Discard unknown SQP work requests (bnc#1012382). - Refresh with upstream commit:62290a5c194b since the typo fix has been merged in upstream. (bsc#1085185) - Remove broken patches for dac9063 watchdog (bsc#1100843) - Remove sorted section marker This branch contains a small sorted section with an old format that fails the current checker. Updating the section and scripts to the new format might make merges with other branches more difficult. Instead, simply remove the section marker. - Revert 'Btrfs: fix scrub to repair raid6 corruption' (bnc#1012382). - Revert 'kvm: nVMX: Enforce cpl=0 for VMX instructions (bsc#1099183).' This turned out to be superfluous for 4.4.x kernels. - Revert 'scsi: lpfc: Fix 16gb hbas failing cq create (bsc#1089525).' This reverts commit b054499f7615e2ffa7571ac0d05c7d5c9a8c0327. - UBIFS: Fix potential integer overflow in allocation (bnc#1012382). - USB: serial: cp210x: add CESINEL device ids (bnc#1012382). - USB: serial: cp210x: add Silicon Labs IDs for Windows Update (bnc#1012382). - Update patches.fixes/nvme-expand-nvmf_check_if_ready-checks.patch (bsc#1098527). - ath10k: fix rfc1042 header retrieval in QCA4019 with eth decap mode (bnc#1012382). - atm: zatm: fix memcmp casting (bnc#1012382). - backlight: as3711_bl: Fix Device Tree node lookup (bnc#1012382). - backlight: max8925_bl: Fix Device Tree node lookup (bnc#1012382). - backlight: tps65217_bl: Fix Device Tree node lookup (bnc#1012382). - bcache: Add __printf annotation to __bch_check_keys() (bsc#1064232). - bcache: Annotate switch fall-through (bsc#1064232). - bcache: Fix a compiler warning in bcache_device_init() (bsc#1064232). - bcache: Fix indentation (bsc#1064232). - bcache: Fix kernel-doc warnings (bsc#1064232). - bcache: Fix, improve efficiency of closure_sync() (bsc#1076110). - bcache: Reduce the number of sparse complaints about lock imbalances (bsc#1064232). - bcache: Remove an unused variable (bsc#1064232). - bcache: Suppress more warnings about set-but-not-used variables (bsc#1064232). - bcache: Use PTR_ERR_OR_ZERO() (bsc#1076110). - bcache: add CACHE_SET_IO_DISABLE to struct cache_set flags (bsc#1064232). - bcache: add backing_request_endio() for bi_end_io (bsc#1064232). - bcache: add io_disable to struct cached_dev (bsc#1064232). - bcache: add journal statistic (bsc#1076110). - bcache: add stop_when_cache_set_failed option to backing device (bsc#1064232). - bcache: add wait_for_kthread_stop() in bch_allocator_thread() (bsc#1064232). - bcache: closures: move c
Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
kernel-default SUSE:Linux Enterprise Desktop 12 SP3
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.4.140-94.42.1
Auf 4.4.140-94.42.1 aktualisieren
kernel-source SUSE:Linux Enterprise Desktop 12 SP3
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.4.140-94.42.1
Auf 4.4.140-94.42.1 aktualisieren
kernel-syms SUSE:Linux Enterprise Desktop 12 SP3
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.4.140-94.42.1
Auf 4.4.140-94.42.1 aktualisieren
kernel-default SUSE:Linux Enterprise High Availability Extension 12 SP3
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.4.140-94.42.1
Auf 4.4.140-94.42.1 aktualisieren
kgraft-patch-sle12-sp3_update_15 SUSE:Linux Enterprise Live Patching 12 SP3
- Betroffene Versionsbereiche
- ECOSYSTEM: < 1-4.3.1
Auf 1-4.3.1 aktualisieren
kernel-docs SUSE:Linux Enterprise Software Development Kit 12 SP3
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.4.140-94.42.1
Auf 4.4.140-94.42.1 aktualisieren
kernel-obs-build SUSE:Linux Enterprise Software Development Kit 12 SP3
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.4.140-94.42.1
Auf 4.4.140-94.42.1 aktualisieren
kernel-default SUSE:Linux Enterprise Server 12 SP3
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.4.140-94.42.1
Auf 4.4.140-94.42.1 aktualisieren
kernel-source SUSE:Linux Enterprise Server 12 SP3
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.4.140-94.42.1
Auf 4.4.140-94.42.1 aktualisieren
kernel-syms SUSE:Linux Enterprise Server 12 SP3
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.4.140-94.42.1
Auf 4.4.140-94.42.1 aktualisieren
kernel-default SUSE:Linux Enterprise Server for SAP Applications 12 SP3
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.4.140-94.42.1
Auf 4.4.140-94.42.1 aktualisieren
kernel-source SUSE:Linux Enterprise Server for SAP Applications 12 SP3
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.4.140-94.42.1
Auf 4.4.140-94.42.1 aktualisieren
kernel-syms SUSE:Linux Enterprise Server for SAP Applications 12 SP3
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.4.140-94.42.1
Auf 4.4.140-94.42.1 aktualisieren
kernel-default SUSE:Linux Enterprise Workstation Extension 12 SP3
- Betroffene Versionsbereiche
- ECOSYSTEM: < 4.4.140-94.42.1
Auf 4.4.140-94.42.1 aktualisieren
Originalquellen
- https://www.suse.com/support/update/announcement/2018/suse-su-20182051-1/
- https://bugzilla.suse.com/1012382
- https://bugzilla.suse.com/1064232
- https://bugzilla.suse.com/1075876
- https://bugzilla.suse.com/1076110
- https://bugzilla.suse.com/1085185
- https://bugzilla.suse.com/1085657
- https://bugzilla.suse.com/1089525
- https://bugzilla.suse.com/1090435
- https://bugzilla.suse.com/1090888
- https://bugzilla.suse.com/1091171
- https://bugzilla.suse.com/1092207
- https://bugzilla.suse.com/1094244
- https://bugzilla.suse.com/1094248
- https://bugzilla.suse.com/1094643
- https://bugzilla.suse.com/1095453
- https://bugzilla.suse.com/1096790
- https://bugzilla.suse.com/1097034
- https://bugzilla.suse.com/1097140
- https://bugzilla.suse.com/1097492
- https://bugzilla.suse.com/1097501
- https://bugzilla.suse.com/1097551
- https://bugzilla.suse.com/1097808
- https://osv.dev/vulnerability/SUSE-SU-2018:2051-1