SUSE-SU-2019:2947-1

SUSE-SU-2019:2947-1 · Security update for the Linux Kernel

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.

The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional. The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in executable pages by splitting / merging huge pages into small pages as needed. More information can be found on https://www.suse.com/support/kb/doc/?id=7023735 - CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described 'Microarchitectural Data Sampling' attack. The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW). The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251 - CVE-2019-16995: Fix a memory leak in hsr_dev_finalize() if hsr_add_port failed to add a port, which may have caused denial of service (bsc#1152685). - CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150457). - CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903). - CVE-2019-17666: rtlwifi: Fix potential overflow in P2P code (bsc#1154372). - CVE-2019-16232: Fix a potential NULL pointer dereference in the Marwell libertas driver (bsc#1150465). - CVE-2019-16234: iwlwifi pcie driver did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150452). - CVE-2019-17133: cfg80211 wireless extension did not reject a long SSID IE, leading to a Buffer Overflow (bsc#1153158). - CVE-2019-17056: The AF_NFC network module did not enforce CAP_NET_RAW, which meant that unprivileged users could create a raw socket (bsc#1152788). The following non-security bugs were fixed: - 9p: avoid attaching writeback_fid on mmap with type PRIVATE (bsc#1051510). - acpi: cppc: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bsc#1051510). - acpi: cppc: do not require the _PSD method (bsc#1051510). - acpi: processor: do not print errors for processorIDs == 0xff (bsc#1051510). - act_mirred: Fix mirred_init_module error handling (bsc#1051510). - alsa: bebob: Fix prototype of helper function to return negative value (bsc#1051510). - alsa: firewire-motu: add support for MOTU 4pre (bsc#1111666). - alsa: hda/hdmi: Do not report spurious jack state changes (bsc#1051510). - alsa: hda/hdmi: remove redundant assignment to variable pcm_idx (bsc#1051510). - alsa: hda/realtek: Add support for ALC623 (bsc#1051510). - alsa: hda/realtek: Add support for ALC711 (bsc#1051510). - alsa: hda/realtek: Check beep whitelist before assigning in all codecs (bsc#1051510). - alsa: hda/realtek: Enable headset mic on Asus MJ401TA (bsc#1051510). - alsa: hda/realtek: Fix 2 front mics of codec 0x623 (bsc#1051510). - alsa: hda/realtek: Fix alienware headset mic (bsc#1051510). - alsa: hda/realtek: PCI quirk for Medion E4254 (bsc#1051510). - alsa: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360 (bsc#1051510). - alsa: hda/sigmatel: remove unused variable 'stac9200_core_init' (bsc#1051510). - alsa: hda: Add Elkhart Lake PCI ID (bsc#1051510). - alsa: hda: Add Tigerlake/Jasperlake PCI ID (bsc#1051510). - alsa: hda: Add a quirk model for fixing Huawei Matebook X right speaker (bsc#1051510). - alsa: hda: Add laptop imic fixup for ASUS M9V laptop (bsc#1051510). - alsa: hda: Add support of Zhaoxin controller (bsc#1051510). - alsa: hda: Apply AMD controller workaround for Raven platform (bsc#1051510). - alsa: hda: Define a fallback_pin_fixup_tbl for alc269 family (bsc#1051510). - alsa: hda: Drop unsol event handler for Intel HDMI codecs (bsc#1051510). - alsa: hda: Expand pin_match function to match upcoming new tbls (bsc#1051510). - alsa: hda: Flush interrupts on disabling (bsc#1051510). - alsa: hda: Force runtime PM on Nvidia HDMI codecs (bsc#1051510). - alsa: hda: Inform too slow responses (bsc#1051510). - alsa: hda: Set fifo_size for both playback and capture streams (bsc#1051510). - alsa: hda: Show the fatal CORB/RIRB error more clearly (bsc#1051510). - alsa: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() (bsc#1051510). - alsa: line6: sizeof (byte) is always 1, use that fact (bsc#1051510). - alsa: timer: Fix mutex deadlock at releasing card (bsc#1051510). - alsa: usb-audio: Add DSD support for EVGA NU Audio (bsc#1051510). - alsa: usb-audio: Add DSD support for Gustard U16/X26 USB Interface (bsc#1051510). - alsa: usb-audio: Add Hiby device family to quirks for native DSD support (bsc#1051510). - alsa: usb-audio: Add Pioneer DDJ-SX3 PCM quirck (bsc#1051510). - alsa: usb-audio: Clean up check_input_term() (bsc#1051510). - alsa: usb-audio: DSD auto-detection for Playback Designs (bsc#1051510). - alsa: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1051510). - alsa: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1111666). - alsa: usb-audio: Fix copy&paste error in the validator (bsc#1111666). - alsa: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk() (bsc#1051510). - alsa: usb-audio: More validations of descriptor units (bsc#1051510). - alsa: usb-audio: Remove superfluous bLength checks (bsc#1051510). - alsa: usb-audio: Simplify parse_audio_unit() (bsc#1051510). - alsa: usb-audio: Skip bSynchAddress endpoint check if it is invalid (bsc#1051510). - alsa: usb-audio: Unify audioformat release code (bsc#1051510). - alsa: usb-audio: Unify the release of usb_mixer_elem_info objects (bsc#1051510). - alsa: usb-audio: Update DSD support quirks for Oppo and Rotel (bsc#1051510). - alsa: usb-audio: fix PCM device order (bsc#1051510). - alsa: usb-audio: remove some dead code (bsc#1051510). - appletalk: enforce CAP_NET_RAW for raw sockets (bsc#1051510). - arcnet: provide a buffer big enough to actually receive packets (networking-stable-19_09_30). - asoc: Define a set of DAPM pre/post-up events (bsc#1051510). - asoc: dmaengine: Make the pcm->name equal to pcm->id if the name is not set (bsc#1051510). - asoc: intel: Fix use of potentially uninitialized variable (bsc#1051510). - asoc: intel: nhlt: Fix debug print format (bsc#1051510). - asoc: rockchip: i2s: Fix RPM imbalance (bsc#1051510). - asoc: rsnd: Reinitialize bit clock inversion flag for every format setting (bsc#1051510). - asoc: sgtl5000: Fix charge pump source assignment (bsc#1051510). - auxdisplay: panel: need to delete scan_timer when misc_register fails in panel_attach (bsc#1051510). - ax25: enforce CAP_NET_RAW for raw sockets (bsc#1051510). - blk-wbt: abstract out end IO completion handler (bsc#1135873). - blk-wbt: fix has-sleeper queueing check (bsc#1135873). - blk-wbt: improve waking of tasks (bsc#1135873). - blk-wbt: move disable check into get_limit() (bsc#1135873). - blk-wbt: use wq_has_sleeper() for wq active check (bsc#1135873). - block: add io timeout to sysfs (bsc#1148410). - block: add io timeout to sysfs (bsc#1148410). - block: do not show io_timeout if driver has no timeout handler (bsc#1148410). - block: do not show io_timeout if driver has no timeout handler (bsc#1148410). - bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices (bsc#1051510). - bnx2x: Fix VF's VLAN reconfiguration in reload (bsc#1086323 ). - bnxt_en: Add PCI IDs for 57500 series NPAR devices (bsc#1153607). - bpf: fix use after free in prog symbol exposure (bsc#1083647). - brcmfmac: sdio: Disable auto-tuning around commands expected to fail (bsc#1111666). - brcmfmac: sdio: Do not tune while the card is off (bsc#

Correctif disponible

Publication

2019-11-12T18:08:00Z

Mise à jour

2026-02-04T02:39:30.926807Z

Pile logicielle: system

Vérifiez votre serveur →