Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:1849-1 Final 1 1 2018-06-29T08:37:49Z current 2018-06-29T08:37:49Z 2018-06-29T08:37:49Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 11 SP3 LTSS kernel was updated to receive various security and bugfixes. The following security bug was fixed: - CVE-2018-3665: Prevent disclosure of FPU registers (including XMM and AVX registers) between processes. These registers might contain encryption keys when doing SSE accelerated AES enc/decryption (bsc#1087086) The following non-security bugs were fixed: - KVM: x86: Sync back MSR_IA32_SPEC_CTRL to VCPU data structure (bsc#1096242, bsc#1096281). - Xen counterparts of eager FPU implementation. - x86/boot: Fix early command-line parsing when partial word matches (bsc#1096140). - x86/bugs: spec_ctrl must be cleared from cpu_caps_set when being disabled (bsc#1096140). - xen/x86/CPU: Check speculation control CPUID bit (bsc#1068032). - xen/x86/CPU: Sync CPU feature flags late (bsc#1075994 bsc#1075091). - xen/x86/cpu: Factor out application of forced CPU caps (bsc#1075994 bsc#1075091). - xen/x86/cpu: Fix bootup crashes by sanitizing the argument of the 'clearcpuid=' command-line option (bsc#1065600). - xen/x86/entry/64: Do not use IST entry for #BP stack (bsc#1087088). - xen/x86/entry: Use IBRS on entry to kernel space (bsc#1068032). - xen/x86/idle: Toggle IBRS when going idle (bsc#1068032). - xen/x86/kaiser: Move feature detection up (bsc#1068032). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sleposp3-kernel-default-13684,slessp3-kernel-default-13684,slexsp3-kernel-default-13684 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20181849-1/ Link for SUSE-SU-2018:1849-1 https://lists.suse.com/pipermail/sle-security-updates/2018-June/004232.html E-Mail link for SUSE-SU-2018:1849-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1065600 SUSE Bug 1065600 https://bugzilla.suse.com/1068032 SUSE Bug 1068032 https://bugzilla.suse.com/1075091 SUSE Bug 1075091 https://bugzilla.suse.com/1075994 SUSE Bug 1075994 https://bugzilla.suse.com/1087086 SUSE Bug 1087086 https://bugzilla.suse.com/1087088 SUSE Bug 1087088 https://bugzilla.suse.com/1096140 SUSE Bug 1096140 https://bugzilla.suse.com/1096242 SUSE Bug 1096242 https://bugzilla.suse.com/1096281 SUSE Bug 1096281 https://www.suse.com/security/cve/CVE-2018-3665/ SUSE CVE CVE-2018-3665 page SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS kernel-default-3.0.101-0.47.106.35.1 kernel-default-base-3.0.101-0.47.106.35.1 kernel-default-devel-3.0.101-0.47.106.35.1 kernel-ec2-3.0.101-0.47.106.35.1 kernel-ec2-base-3.0.101-0.47.106.35.1 kernel-ec2-devel-3.0.101-0.47.106.35.1 kernel-pae-3.0.101-0.47.106.35.1 kernel-pae-base-3.0.101-0.47.106.35.1 kernel-pae-devel-3.0.101-0.47.106.35.1 kernel-source-3.0.101-0.47.106.35.1 kernel-syms-3.0.101-0.47.106.35.1 kernel-trace-3.0.101-0.47.106.35.1 kernel-trace-base-3.0.101-0.47.106.35.1 kernel-trace-devel-3.0.101-0.47.106.35.1 kernel-xen-3.0.101-0.47.106.35.1 kernel-xen-base-3.0.101-0.47.106.35.1 kernel-xen-devel-3.0.101-0.47.106.35.1 kernel-bigsmp-3.0.101-0.47.106.35.1 kernel-bigsmp-base-3.0.101-0.47.106.35.1 kernel-bigsmp-devel-3.0.101-0.47.106.35.1 kernel-default-man-3.0.101-0.47.106.35.1 kernel-default-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 kernel-default-base-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 kernel-default-devel-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 kernel-ec2-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 kernel-ec2-base-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 kernel-ec2-devel-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 kernel-pae-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 kernel-pae-base-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 kernel-pae-devel-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 kernel-source-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 kernel-syms-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 kernel-trace-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 kernel-trace-base-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 kernel-trace-devel-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 kernel-xen-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 kernel-xen-base-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 kernel-xen-devel-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 kernel-bigsmp-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kernel-bigsmp-base-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kernel-bigsmp-devel-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kernel-default-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kernel-default-base-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kernel-default-devel-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kernel-default-man-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kernel-ec2-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kernel-ec2-base-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kernel-ec2-devel-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kernel-pae-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kernel-pae-base-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kernel-pae-devel-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kernel-source-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kernel-syms-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kernel-trace-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kernel-trace-base-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kernel-trace-devel-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kernel-xen-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kernel-xen-base-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kernel-xen-devel-3.0.101-0.47.106.35.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel. CVE-2018-3665 SUSE Linux Enterprise Point of Sale 11 SP3:kernel-default-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Point of Sale 11 SP3:kernel-default-base-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Point of Sale 11 SP3:kernel-default-devel-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Point of Sale 11 SP3:kernel-ec2-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Point of Sale 11 SP3:kernel-ec2-base-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Point of Sale 11 SP3:kernel-ec2-devel-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Point of Sale 11 SP3:kernel-pae-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Point of Sale 11 SP3:kernel-pae-base-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Point of Sale 11 SP3:kernel-pae-devel-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Point of Sale 11 SP3:kernel-source-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Point of Sale 11 SP3:kernel-syms-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Point of Sale 11 SP3:kernel-trace-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Point of Sale 11 SP3:kernel-trace-base-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Point of Sale 11 SP3:kernel-trace-devel-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Point of Sale 11 SP3:kernel-xen-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Point of Sale 11 SP3:kernel-xen-base-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Point of Sale 11 SP3:kernel-xen-devel-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-bigsmp-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-bigsmp-base-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-bigsmp-devel-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-default-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-default-base-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-default-devel-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-default-man-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-ec2-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-ec2-base-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-ec2-devel-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-pae-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-pae-base-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-pae-devel-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-source-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-syms-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-trace-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-trace-base-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-trace-devel-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-xen-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-xen-base-3.0.101-0.47.106.35.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kernel-xen-devel-3.0.101-0.47.106.35.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181849-1/ https://www.suse.com/security/cve/CVE-2018-3665.html CVE-2018-3665 https://bugzilla.suse.com/1087078 SUSE Bug 1087078 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1087086 SUSE Bug 1087086 https://bugzilla.suse.com/1090338 SUSE Bug 1090338 https://bugzilla.suse.com/1095241 SUSE Bug 1095241 https://bugzilla.suse.com/1095242 SUSE Bug 1095242 https://bugzilla.suse.com/1096740 SUSE Bug 1096740 https://bugzilla.suse.com/1100091 SUSE Bug 1100091 https://bugzilla.suse.com/1100555 SUSE Bug 1100555 https://bugzilla.suse.com/1178658 SUSE Bug 1178658