SUSE-SU-2018:2538-1

SUSE-SU-2018:2538-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-15572: The spectre_v2_select_mitigation function in arch/x86/kernel/cpu/bugs.c did not always fill RSB upon a context switch, which made it easier for attackers to conduct userspace-userspace spectreRSB attacks (bnc#1102517 bnc#1105296). - CVE-2018-10902: It was found that the raw midi kernel driver did not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part of snd_rawmidi_ioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for privilege escalation (bnc#1105322). - CVE-2018-9363: A buffer overflow in bluetooth HID report processing could be used by malicious bluetooth devices to crash the kernel or potentially execute code (bnc#1105292). - CVE-2018-10853: A KVM guest userspace to guest kernel write was fixed, which could be used by guest users to crash the guest kernel (bnc#1097104). The following non-security bugs were fixed: - acpi / apei: Remove ghes_ioremap_area (bsc#1051510). - acpi / pci: Bail early in acpi_pci_add_bus() if there is no ACPI handle (bsc#1051510). - acpi / pm: save NVS memory for ASUS 1025C laptop (bsc#1051510). - affs_lookup(): close a race with affs_remove_link() (bsc#1105355). - alsa: cs5535audio: Fix invalid endian conversion (bsc#1051510). - alsa: hda: Correct Asrock B85M-ITX power_save blacklist entry (bsc#1051510). - alsa: hda - Sleep for 10ms after entering D3 on Conexant codecs (bsc#1051510). - alsa: hda - Turn CX8200 into D3 as well upon reboot (bsc#1051510). - alsa: memalloc: Do not exceed over the requested size (bsc#1051510). - alsa: snd-aoa: add of_node_put() in error path (bsc#1051510). - alsa: virmidi: Fix too long output trigger loop (bsc#1051510). - alsa: vx222: Fix invalid endian conversions (bsc#1051510). - alsa: vxpocket: Fix invalid endian conversions (bsc#1051510). - arm64: enable thunderx gpio driver - arm/asm/tlb.h: Fix build error implicit func declaration (bnc#1105467 Reduce IPIs and atomic ops with improved lazy TLB). - asoc: dpcm: do not merge format from invalid codec dai (bsc#1051510). - asoc: es7134: remove 64kHz rate from the supported rates (bsc#1051510). - asoc: Intel: cht_bsw_max98090: remove useless code, align with ChromeOS driver (bsc#1051510). - asoc: Intel: cht_bsw_max98090_ti: Fix jack initialization (bsc#1051510). - asoc: msm8916-wcd-digital: fix RX2 MIX1 and RX3 MIX1 (bsc#1051510). - asoc: rsnd: cmd: Add missing newline to debug message (bsc#1051510). - asoc: sirf: Fix potential NULL pointer dereference (bsc#1051510). - asoc: zte: Fix incorrect PCM format bit usages (bsc#1051510). - ata: Fix ZBC_OUT all bit handling (bsc#1051510). - ata: Fix ZBC_OUT command block check (bsc#1051510). - ath10k: prevent active scans on potential unusable channels (bsc#1051510). - atm: horizon: Fix irq release error (bsc#1105355). - atm: Preserve value of skb->truesize when accounting to vcc (networking-stable-18_07_19). - atm: zatm: fix memcmp casting (bsc#1105355). - atm: zatm: Fix potential Spectre v1 (networking-stable-18_07_19). - audit: allow not equal op for audit by executable (bsc#1051510). - audit: Fix extended comparison of GID/EGID (bsc#1051510). - be2net: gather debug info and reset adapter (only for Lancer) on a tx-timeout (bsc#1086288). - be2net: Update the driver version to 12.0.0.0 (bsc#1086288 ). - binfmt_elf: Respect error return from `regset->active' (bsc#1051510). - bluetooth: avoid killing an already killed socket (bsc#1051510). - bluetooth: hidp: buffer overflow in hidp_process_report (bsc#1051510). - bpf, ppc64: fix unexpected r0=0 exit path inside bpf_xadd (bsc#1083647). - brcmsmac: fix wrap around in conversion from constant to s16 (bsc#1051510). - clk: core: Potentially free connection id (bsc#1051510). - clk: imx6ul: fix missing of_node_put() (bsc#1051510). - clk: meson: gxbb: remove HHI_GEN_CLK_CTNL duplicate definition (bsc#1051510). - clk: mvebu: armada-38x: add support for 1866MHz variants (bsc#1105355). - clk: mvebu: armada-38x: add support for missing clocks (bsc#1105355). - clk: rockchip: fix clk_i2sout parent selection bits on rk3399 (bsc#1051510). - coresight: tpiu: Fix disabling timeouts (bsc#1051510). - cpufreq: CPPC: Do not set transition_latency (bsc#1101480). - cpufreq / CPPC: Set platform specific transition_delay_us (bsc#1101480). - cpufreq: CPPC: Use transition_delay_us depending transition_latency (bsc#1101480). - cpufreq: remove setting of policy->cpu in policy->cpus during init (bsc#1101480). - crypto: ablkcipher - fix crash flushing dcache in error path (bsc#1051510). - crypto: blkcipher - fix crash flushing dcache in error path (bsc#1051510). - crypto: ccp - Check for NULL PSP pointer at module unload (bsc#1051510). - crypto: ccp - Fix command completion detection race (bsc#1051510). - crypto: skcipher - fix aligning block size in skcipher_copy_iv() (bsc#1051510). - crypto: skcipher - fix crash flushing dcache in error path (bsc#1051510). - crypto: vmac - require a block cipher with 128-bit block size (bsc#1051510). - crypto: vmac - separate tfm and request context (bsc#1051510). - crypto: x86/sha256-mb - fix digest copy in sha256_mb_mgr_get_comp_job_avx2() (bsc#1051510). - cxgb4: Fix the condition to check if the card is T5 (bsc#1097585 bsc#1097586 bsc#1097587 bsc#1097588 bsc#1097583 bsc#1097584). - devicectree: bindings: fix location of leds common file (bsc#1051510). - dma-buf: remove redundant initialization of sg_table (bsc#1051510). - dmaengine: hsu: Support dmaengine_terminate_sync() (bsc#1051510). - dmaengine: idma64: Support dmaengine_terminate_sync() (bsc#1051510). - dmaengine: mv_xor_v2: kill the tasklets upon exit (bsc#1051510). - docs: zh_CN: fix location of oops-tracing.txt (bsc#1051510). - documentation: ip-sysctl.txt: document addr_gen_mode (bsc#1051510). - driver core: add __printf verification to __ata_ehi_pushv_desc (bsc#1051510). - drivers: hv: vmbus: do not mark HV_PCIE as perf_device (bsc#1051510). - drivers: hv: vmbus: Fix the offer_in_progress in vmbus_process_offer() (bsc#1051510). - drm/cirrus: Use drm_framebuffer_put to avoid kernel oops in clean-up (bsc#1101822). - drm/fb-helper: Fix typo on kerneldoc (bsc#1051510). - drm/i915/aml: Introducing Amber Lake platform (). - drm/i915/cfl: Add a new CFL PCI ID (). - drm/i915/gvt: Off by one in intel_vgpu_write_fence() (bsc#1051510). - drm/i915: Nuke the LVDS lid notifier (bsc#1051510). - drm/i915: Only show debug for state changes when banning (bsc#1051510). - drm/i915: Restore user forcewake domains across suspend (bsc#1100132). - drm/i915: Unmask user interrupts writes into HWSP on snb/ivb/vlv/hsw (bsc#1051510). - drm/i915/whl: Introducing Whiskey Lake platform (). - drm/panel: type promotion bug in s6e8aa0_read_mtp_id() (bsc#1051510). - drm/rockchip: lvds: add missing of_node_put (bsc#1051510). - edac: Add missing MEM_LRDDR4 entry in edac_mem_types[] (bsc#1103886). - edac, altera: Fix ARM64 build warning (bsc#1051510). - edac: Drop duplicated array of strings for memory type names (bsc#1103886). - edac: Fix memleak in module init error path (bsc#1051510). - edac, i7core: Fix memleaks and use-after-free on probe and remove (bsc#1051510). - edac, mv64x60: Fix an error handling path (bsc#1051510). - edac, octeon: Fix an uninitialized variable warning (bsc#1051510). - edac, sb_edac: Fix missing break in switch (bsc#1051510). - ext4: check for allocation block validity with block group locked (bsc#1104495). - ext4: fix false negatives *and* false positives in ext4_check_descriptors() (bsc#1103445). - ext4: fix inline data updates with checksums enabled (bsc#1104494). - extcon: Release locking when sending the notification of connector state (bsc#1051510). - Fix kABI breakage with libertas dev field addition (bsc#1051510). - Fix kABI breakage with removing field addition to power_supply (bsc#1051510). - gen

Есть исправление

Опубликовано

2018-08-28T11:01:55Z

Обновлено

2025-05-02T04:07:25.519428Z

Стек: system

Проверьте свой сервер →