SUSE-SU-2018:2539-1

SUSE-SU-2018:2539-1 · Security update for the Linux Kernel

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-15572: The spectre_v2_select_mitigation function in arch/x86/kernel/cpu/bugs.c did not always fill RSB upon a context switch, which made it easier for attackers to conduct userspace-userspace spectreRSB attacks (bnc#1102517 bnc#1105296). - CVE-2018-10902: It was found that the raw midi kernel driver did not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part of snd_rawmidi_ioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for privilege escalation (bnc#1105322). - CVE-2018-9363: A buffer overflow in bluetooth HID report processing could be used by malicious bluetooth devices to crash the kernel or potentially execute code (bnc#1105292). - CVE-2018-10853: A KVM guest userspace to guest kernel write was fixed, which could be used by guest users to crash the guest kernel (bnc#1097104). The following non-security bugs were fixed: - acpi / apei: Remove ghes_ioremap_area (bsc#1051510). - acpi / pci: Bail early in acpi_pci_add_bus() if there is no ACPI handle (bsc#1051510). - acpi / pm: save NVS memory for ASUS 1025C laptop (bsc#1051510). - affs_lookup(): close a race with affs_remove_link() (bsc#1105355). - alsa: cs5535audio: Fix invalid endian conversion (bsc#1051510). - alsa: hda: Correct Asrock B85M-ITX power_save blacklist entry (bsc#1051510). - alsa: hda - Sleep for 10ms after entering D3 on Conexant codecs (bsc#1051510). - alsa: hda - Turn CX8200 into D3 as well upon reboot (bsc#1051510). - alsa: memalloc: Do not exceed over the requested size (bsc#1051510). - alsa: snd-aoa: add of_node_put() in error path (bsc#1051510). - alsa: virmidi: Fix too long output trigger loop (bsc#1051510). - alsa: vx222: Fix invalid endian conversions (bsc#1051510). - alsa: vxpocket: Fix invalid endian conversions (bsc#1051510). - arm64: enable thunderx gpio driver - arm/asm/tlb.h: Fix build error implicit func declaration (bnc#1105467 Reduce IPIs and atomic ops with improved lazy TLB). - asoc: dpcm: do not merge format from invalid codec dai (bsc#1051510). - asoc: es7134: remove 64kHz rate from the supported rates (bsc#1051510). - asoc: Intel: cht_bsw_max98090: remove useless code, align with ChromeOS driver (bsc#1051510). - asoc: Intel: cht_bsw_max98090_ti: Fix jack initialization (bsc#1051510). - asoc: msm8916-wcd-digital: fix RX2 MIX1 and RX3 MIX1 (bsc#1051510). - asoc: rsnd: cmd: Add missing newline to debug message (bsc#1051510). - asoc: sirf: Fix potential NULL pointer dereference (bsc#1051510). - asoc: zte: Fix incorrect PCM format bit usages (bsc#1051510). - ata: Fix ZBC_OUT all bit handling (bsc#1051510). - ata: Fix ZBC_OUT command block check (bsc#1051510). - ath10k: prevent active scans on potential unusable channels (bsc#1051510). - atm: horizon: Fix irq release error (bsc#1105355). - atm: Preserve value of skb->truesize when accounting to vcc (networking-stable-18_07_19). - atm: zatm: fix memcmp casting (bsc#1105355). - atm: zatm: Fix potential Spectre v1 (networking-stable-18_07_19). - audit: allow not equal op for audit by executable (bsc#1051510). - audit: Fix extended comparison of GID/EGID (bsc#1051510). - be2net: gather debug info and reset adapter (only for Lancer) on a tx-timeout (bsc#1086288). - be2net: Update the driver version to 12.0.0.0 (bsc#1086288 ). - binfmt_elf: Respect error return from `regset->active' (bsc#1051510). - bluetooth: avoid killing an already killed socket (bsc#1051510). - bluetooth: hidp: buffer overflow in hidp_process_report (bsc#1051510). - bpf, ppc64: fix unexpected r0=0 exit path inside bpf_xadd (bsc#1083647). - brcmsmac: fix wrap around in conversion from constant to s16 (bsc#1051510). - clk: core: Potentially free connection id (bsc#1051510). - clk: imx6ul: fix missing of_node_put() (bsc#1051510). - clk: meson: gxbb: remove HHI_GEN_CLK_CTNL duplicate definition (bsc#1051510). - clk: mvebu: armada-38x: add support for 1866MHz variants (bsc#1105355). - clk: mvebu: armada-38x: add support for missing clocks (bsc#1105355). - clk: rockchip: fix clk_i2sout parent selection bits on rk3399 (bsc#1051510). - coresight: tpiu: Fix disabling timeouts (bsc#1051510). - cpufreq: CPPC: Do not set transition_latency (bsc#1101480). - cpufreq / CPPC: Set platform specific transition_delay_us (bsc#1101480). - cpufreq: CPPC: Use transition_delay_us depending transition_latency (bsc#1101480). - cpufreq: remove setting of policy->cpu in policy->cpus during init (bsc#1101480). - crypto: ablkcipher - fix crash flushing dcache in error path (bsc#1051510). - crypto: blkcipher - fix crash flushing dcache in error path (bsc#1051510). - crypto: ccp - Check for NULL PSP pointer at module unload (bsc#1051510). - crypto: ccp - Fix command completion detection race (bsc#1051510). - crypto: skcipher - fix aligning block size in skcipher_copy_iv() (bsc#1051510). - crypto: skcipher - fix crash flushing dcache in error path (bsc#1051510). - crypto: vmac - require a block cipher with 128-bit block size (bsc#1051510). - crypto: vmac - separate tfm and request context (bsc#1051510). - crypto: x86/sha256-mb - fix digest copy in sha256_mb_mgr_get_comp_job_avx2() (bsc#1051510). - cxgb4: Fix the condition to check if the card is T5 (bsc#1097585 bsc#1097586 bsc#1097587 bsc#1097588 bsc#1097583 bsc#1097584). - devicectree: bindings: fix location of leds common file (bsc#1051510). - dma-buf: remove redundant initialization of sg_table (bsc#1051510). - dmaengine: hsu: Support dmaengine_terminate_sync() (bsc#1051510). - dmaengine: idma64: Support dmaengine_terminate_sync() (bsc#1051510). - dmaengine: mv_xor_v2: kill the tasklets upon exit (bsc#1051510). - docs: zh_CN: fix location of oops-tracing.txt (bsc#1051510). - documentation: ip-sysctl.txt: document addr_gen_mode (bsc#1051510). - driver core: add __printf verification to __ata_ehi_pushv_desc (bsc#1051510). - drivers: hv: vmbus: do not mark HV_PCIE as perf_device (bsc#1051510). - drivers: hv: vmbus: Fix the offer_in_progress in vmbus_process_offer() (bsc#1051510). - drm/cirrus: Use drm_framebuffer_put to avoid kernel oops in clean-up (bsc#1101822). - drm/fb-helper: Fix typo on kerneldoc (bsc#1051510). - drm/i915/aml: Introducing Amber Lake platform (). - drm/i915/cfl: Add a new CFL PCI ID (). - drm/i915/gvt: Off by one in intel_vgpu_write_fence() (bsc#1051510). - drm/i915: Nuke the LVDS lid notifier (bsc#1051510). - drm/i915: Only show debug for state changes when banning (bsc#1051510). - drm/i915: Restore user forcewake domains across suspend (bsc#1100132). - drm/i915: Unmask user interrupts writes into HWSP on snb/ivb/vlv/hsw (bsc#1051510). - drm/i915/whl: Introducing Whiskey Lake platform (). - drm/panel: type promotion bug in s6e8aa0_read_mtp_id() (bsc#1051510). - drm/rockchip: lvds: add missing of_node_put (bsc#1051510). - edac: Add missing MEM_LRDDR4 entry in edac_mem_types[] (bsc#1103886). - edac, altera: Fix ARM64 build warning (bsc#1051510). - edac: Drop duplicated array of strings for memory type names (bsc#1103886). - edac: Fix memleak in module init error path (bsc#1051510). - edac, i7core: Fix memleaks and use-after-free on probe and remove (bsc#1051510). - edac, mv64x60: Fix an error handling path (bsc#1051510). - edac, octeon: Fix an uninitialized variable warning (bsc#1051510). - edac, sb_edac: Fix missing break in switch (bsc#1051510). - ext4: check for allocation block validity with block group locked (bsc#1104495). - ext4: fix false negatives *and* false positives in ext4_check_descriptors() (bsc#1103445). - ext4: fix inline data updates with checksums enabled (bsc#1104494). - extcon: Release locking when sending the notification of connector state (bsc#1051510). - Fix kABI breakage with libertas dev field addition (bsc#1051510). - Fix kABI breakage with removing field addition to power_supply (bsc#1051510). - gen

Corrección disponible

Publicación

2018-08-28T11:02:00Z

Actualización

2026-02-04T03:12:22.606095Z

Pila tecnológica: system

Comprueba tu servidor →