SUSE-SU-2018:2222-1

SUSE-SU-2018:2222-1 · Security update for the Linux Kernel

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.

The SUSE Linux Enterprise 15 kernel-azure was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-5390 aka 'SegmentSmack': A remote attacker even with relatively low bandwidth could have caused lots of CPU usage by triggering the worst case scenario during IP and/or TCP fragment reassembly (bsc#1102340) - CVE-2017-18344: The timer_create syscall implementation didn't properly validate input, which could have lead to out-of-bounds access. This allowed userspace applications to read arbitrary kernel memory in some setups. (bsc#1102851) - CVE-2018-13406: An integer overflow in the uvesafb_setcmap function could have result in local attackers being able to crash the kernel or potentially elevate privileges because kmalloc_array is not used (bnc#1100418) - CVE-2018-13053: The alarm_timer_nsleep function had an integer overflow via a large relative timeout because ktime_add_safe was not used (bnc#1099924) - CVE-2018-13405: The inode_init_owner function allowed local users to create files with an unintended group ownership allowing attackers to escalate privileges by making a plain file executable and SGID (bnc#1100416) - CVE-2017-5753: Systems with microprocessors utilizing speculative execution and branch prediction may have allowed unauthorized disclosure of information to an attacker with local user access via a side-channel analysis (bsc#1068032) - CVE-2018-1118: Linux kernel vhost did not properly initialize memory in messages passed between virtual guests and the host operating system. This could have allowed local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file (bsc#1092472) The following non-security bugs were fixed: - 1wire: family module autoload fails because of upper/lower case mismatch (bsc#1051510) - 8139too: Use disable_irq_nosync() in rtl8139_poll_controller() (networking-stable-18_05_15) - acpi / LPSS: Add missing prv_offset setting for byt/cht PWM devices (bsc#1051510) - acpi / processor: Finish making acpi_processor_ppc_has_changed() void (bsc#1051510) - acpi / watchdog: properly initialize resources (bsc#1051510) - acpi, APEI, EINJ: Subtract any matching Register Region from Trigger resources (bsc#1051510) - acpi, nfit: Fix scrub idle detection (bsc#1094119) - acpi/nfit: fix cmd_rc for acpi_nfit_ctl to always return a value (bsc#1051510) - acpi: Add helper for deactivating memory region (bsc#1100132) - ahci: Disable LPM on Lenovo 50 series laptops with a too old BIOS (bsc#1051510) - alsa: hda - Handle pm failure during hotplug (bsc#1051510) - alsa: hda/ca0132 - use ARRAY_SIZE (bsc#1051510) - alsa: hda/ca0132: Delete pointless assignments to struct auto_pin_cfg fields (bsc#1051510) - alsa: hda/ca0132: Delete redundant UNSOL event requests (bsc#1051510) - alsa: hda/ca0132: Do not test for QUIRK_NONE (bsc#1051510) - alsa: hda/ca0132: Fix DMic data rate for Alienware M17x R4 (bsc#1051510) - alsa: hda/ca0132: Restore PCM Analog Mic-In2 (bsc#1051510) - alsa: hda/ca0132: Restore behavior of QUIRK_ALIENWARE (bsc#1051510) - alsa: hda/ca0132: make array ca0132_alt_chmaps static (bsc#1051510) - alsa: hda/realtek - Add Panasonic CF-SZ6 headset jack quirk (bsc#1051510) - alsa: hda/realtek - Add a quirk for FSC ESPRIMO U9210 (bsc#1051510) - alsa: hda/realtek - Fix pop noise on Lenovo P50 and co (bsc#1051510) - alsa: hda/realtek - Fix the problem of two front mics on more machines (bsc#1051510) - alsa: hda/realtek - Yet another Clevo P950 quirk entry (bsc#1101143) - alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (bsc#1051510) - alsa: hda: add mute led support for HP ProBook 455 G5 (bsc#1051510) - alsa: rawmidi: Change resized buffers atomically (bsc#1051510) - alsa: seq: Fix UBSAN warning at SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT ioctl (bsc#1051510) - alsa: timer: Fix UBSAN warning at SNDRV_TIMER_IOCTL_NEXT_DEVICE ioctl (bsc#1051510) - alx: take rtnl before calling __alx_open from resume (bsc#1051510) - amd-xgbe: Add pre/post auto-negotiation phy hooks (networking-stable-18_04_26) - amd-xgbe: Improve KR auto-negotiation and training (networking-stable-18_04_26) - amd-xgbe: Only use the SFP supported transceiver signals (networking-stable-18_04_26) - amd-xgbe: Restore pci interrupt enablement setting on resume (networking-stable-18_03_07) - arch/*: Kconfig: fix documentation for NMI watchdog (bsc#1099918) - arm64: kpti: Use early_param for kpti= command-line option (bsc#1103220) - arm: amba: Do not read past the end of sysfs 'driver_override' buffer (CVE-2018-9385,bsc#1100491) - arm: module: fix modsign build error (bsc#1093666) - arp: fix arp_filter on l3slave devices (networking-stable-18_04_10) - asoc: cirrus: i2s: Fix LRCLK configuration (bsc#1051510) - asoc: cirrus: i2s: Fix {TX|RX}LinCtrlData setup (bsc#1051510) - asoc: cs35l35: Add use_single_rw to regmap config (bsc#1051510) - asoc: dapm: delete dapm_kcontrol_data paths list before freeing it (bsc#1051510) - asoc: mediatek: preallocate pages use platform device (bsc#1051510) - ath9k_htc: Add a sanity check in ath9k_htc_ampdu_action() (bsc#1051510) - atl1c: reserve min skb headroom (bsc#1051510) - audit: Fix wrong task in comparison of session ID (bsc#1051510) - audit: ensure that 'audit=1' actually enables audit for PID 1 (bsc#1051510) - audit: return on memory error to avoid null pointer dereference (bsc#1051510) - auxdisplay: fix broken menu (bsc#1051510) - auxdisplay: img-ascii-lcd: Only build on archs that have IOMEM (bsc#1051510) - auxdisplay: img-ascii-lcd: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE (bsc#1051510) - b44: Initialize 64-bit stats seqcount (bsc#1051510) - backlight: as3711_bl: Fix Device Tree node leaks (bsc#1051510) - backlight: as3711_bl: Fix Device Tree node lookup (bsc#1051510) - backlight: lm3630a: Bump REG_MAX value to 0x50 instead of 0x1F (bsc#1051510) - backlight: max8925_bl: Fix Device Tree node lookup (bsc#1051510) - backlight: tps65217_bl: Fix Device Tree node lookup (bsc#1051510) - batman-adv: Accept only filled wifi station info (bsc#1051510) - batman-adv: Always initialize fragment header priority (bsc#1051510) - batman-adv: Avoid race in TT TVLV allocator helper (bsc#1051510) - batman-adv: Avoid storing non-TT-sync flags on singular entries too (bsc#1051510) - batman-adv: Fix TT sync flags for intermediate TT responses (bsc#1051510) - batman-adv: Fix bat_ogm_iv best gw refcnt after netlink dump (bsc#1051510) - batman-adv: Fix bat_v best gw refcnt after netlink dump (bsc#1051510) - batman-adv: Fix check of retrieved orig_gw in batadv_v_gw_is_eligible (bsc#1051510) - batman-adv: Fix debugfs path for renamed hardif (bsc#1051510) - batman-adv: Fix debugfs path for renamed softif (bsc#1051510) - batman-adv: Fix internal interface indices types (bsc#1051510) - batman-adv: Fix lock for ogm cnt access in batadv_iv_ogm_calc_tq (bsc#1051510) - batman-adv: Fix multicast packet loss with a single WANT_ALL_IPV4/6 flag (bsc#1051510) - batman-adv: Fix netlink dumping of BLA backbones (bsc#1051510) - batman-adv: Fix netlink dumping of BLA claims (bsc#1051510) - batman-adv: Fix skbuff rcsum on packet reroute (bsc#1051510) - batman-adv: Ignore invalid batadv_iv_gw during netlink send (bsc#1051510) - batman-adv: Ignore invalid batadv_v_gw during netlink send (bsc#1051510) - batman-adv: Use default throughput value on cfg80211 error (bsc#1051510) - batman-adv: fix TT sync flag inconsistencies (bsc#1051510) - batman-adv: fix header size check in batadv_dbg_arp() (bsc#1051510) - batman-adv: fix multicast-via-unicast transmission with AP isolation (bsc#1051510) - batman-adv: fix packet checksum in receive path (bsc#1051510) - batman-adv: fix packet loss for broadcasted DHCP packets to a server (bsc#1051510) - batman-adv: invalidate checksum on fragment reassembly (bsc#1051510) - batman-adv: update data pointers after skb_cow() (bsc#1051510) - bfq: Re-enable auto-loading when built as a module (bsc#1099918) - blk-mq-debugfs: fix

Corrección disponible

Publicación

2018-08-06T17:26:20Z

Actualización

2026-02-04T03:00:00.758737Z

Pila tecnológica: system

Comprueba tu servidor →