Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:2344-1 Final 1 1 2018-08-16T07:06:02Z current 2018-08-16T07:06:02Z 2018-08-16T07:06:02Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-3620: Local attackers on baremetal systems could use speculative code patterns on hyperthreaded processors to read data present in the L1 Datacache used by other hyperthreads on the same CPU core, potentially leaking sensitive data. (bnc#1087081). - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present in the L1 Datacache used by other hyperthreads on the same CPU core, potentially leaking sensitive data, even from other virtual machines or the host system. (bnc#1089343). - CVE-2018-5390 aka 'SegmentSmack': The Linux Kernel can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service (bnc#1102340). - CVE-2018-5391 aka 'FragmentSmack': A flaw in the IP packet reassembly could be used by remote attackers to consume lots of CPU time (bnc#1103097). - CVE-2018-14734: drivers/infiniband/core/ucma.c allowed ucma_leave_multicast to access a certain data structure after a cleanup step in ucma_process_join, which allowed attackers to cause a denial of service (use-after-free) (bnc#1103119). - CVE-2017-18344: The timer_create syscall implementation in kernel/time/posix-timers.c didn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID/timers is read). This allowed userspace applications to read arbitrary kernel memory (on a kernel built with CONFIG_POSIX_TIMERS and CONFIG_CHECKPOINT_RESTORE) (bnc#1102851 bnc#1103580). - CVE-2018-9385: When printing the 'driver_override' option from with-in the amba driver, a very long line could expose one additional uninitialized byte (bnc#1100491). - CVE-2018-13053: The alarm_timer_nsleep function in kernel/time/alarmtimer.c had an integer overflow via a large relative timeout because ktime_add_safe is not used (bnc#1099924). - CVE-2018-13405: The inode_init_owner function in fs/inode.c allowed local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID (bnc#1100416). - CVE-2018-13406: An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c could result in local attackers being able to crash the kernel or potentially elevate privileges because kmalloc_array is not used (bnc#1098016 1100418). - CVE-2018-5814: Multiple race condition errors when handling probe, disconnect, and rebind operations could be exploited to trigger a use-after-free condition or a NULL pointer dereference by sending multiple USB over IP packets (bnc#1096480). The following non-security bugs were fixed: - Add support for 5,25,50, and 100G to 802.3ad bonding driver (bsc#1096978) - bcache: add backing_request_endio() for bi_end_io (bsc#1064232). - bcache: add CACHE_SET_IO_DISABLE to struct cache_set flags (bsc#1064232). - bcache: add io_disable to struct cached_dev (bsc#1064232). - bcache: add journal statistic (bsc#1076110). - bcache: Add __printf annotation to __bch_check_keys() (bsc#1064232). - bcache: add stop_when_cache_set_failed option to backing device (bsc#1064232). - bcache: add wait_for_kthread_stop() in bch_allocator_thread() (bsc#1064232). - bcache: Annotate switch fall-through (bsc#1064232). - bcache: closures: move control bits one bit right (bsc#1076110). - bcache: correct flash only vols (check all uuids) (bsc#1064232). - bcache: count backing device I/O error for writeback I/O (bsc#1064232). - bcache: do not attach backing with duplicate UUID (bsc#1076110). - bcache: Fix a compiler warning in bcache_device_init() (bsc#1064232). - bcache: fix cached_dev->count usage for bch_cache_set_error() (bsc#1064232). - bcache: fix crashes in duplicate cache device register (bsc#1076110). - bcache: fix error return value in memory shrink (bsc#1064232). - bcache: fix for allocator and register thread race (bsc#1076110). - bcache: fix for data collapse after re-attaching an attached device (bsc#1076110). - bcache: fix high CPU occupancy during journal (bsc#1076110). - bcache: Fix, improve efficiency of closure_sync() (bsc#1076110). - bcache: fix inaccurate io state for detached bcache devices (bsc#1064232). - bcache: fix incorrect sysfs output value of strip size (bsc#1064232). - bcache: Fix indentation (bsc#1064232). - bcache: fix kcrashes with fio in RAID5 backend dev (bsc#1076110). - bcache: Fix kernel-doc warnings (bsc#1064232). - bcache: fix misleading error message in bch_count_io_errors() (bsc#1064232). - bcache: fix using of loop variable in memory shrink (bsc#1064232). - bcache: fix writeback target calc on large devices (bsc#1076110). - bcache: fix wrong return value in bch_debug_init() (bsc#1076110). - bcache: mark closure_sync() __sched (bsc#1076110). - bcache: move closure debug file into debug directory (bsc#1064232). - bcache: properly set task state in bch_writeback_thread() (bsc#1064232). - bcache: quit dc->writeback_thread when BCACHE_DEV_DETACHING is set (bsc#1064232). - bcache: reduce cache_set devices iteration by devices_max_used (bsc#1064232). - bcache: Reduce the number of sparse complaints about lock imbalances (bsc#1064232). - bcache: Remove an unused variable (bsc#1064232). - bcache: ret IOERR when read meets metadata error (bsc#1076110). - bcache: return 0 from bch_debug_init() if CONFIG_DEBUG_FS=n (bsc#1064232). - bcache: return attach error when no cache set exist (bsc#1076110). - bcache: segregate flash only volume write streams (bsc#1076110). - bcache: set CACHE_SET_IO_DISABLE in bch_cached_dev_error() (bsc#1064232). - bcache: set dc->io_disable to true in conditional_stop_bcache_device() (bsc#1064232). - bcache: set error_limit correctly (bsc#1064232). - bcache: set writeback_rate_update_seconds in range [1, 60] seconds (bsc#1064232). - bcache: stop bcache device when backing device is offline (bsc#1064232). - bcache: stop dc->writeback_rate_update properly (bsc#1064232). - bcache: stop writeback thread after detaching (bsc#1076110). - bcache: store disk name in struct cache and struct cached_dev (bsc#1064232). - bcache: Suppress more warnings about set-but-not-used variables (bsc#1064232). - bcache: use pr_info() to inform duplicated CACHE_SET_IO_DISABLE set (bsc#1064232). - bcache: Use PTR_ERR_OR_ZERO() (bsc#1076110). - bpf: properly enforce index mask to prevent out-of-bounds speculation (bsc#1098425). - cifs: Check for timeout on Negotiate stage (bsc#1091171). - cifs: fix bad/NULL ptr dereferencing in SMB2_sess_setup() (bsc#1090123). - cpu/hotplug: Add sysfs state interface (bsc#1089343). - cpu/hotplug: Provide knobs to control SMT (bsc#1089343). - cpu/hotplug: Split do_cpu_down() (bsc#1089343). - ext4: fix unsupported feature message formatting (bsc#1098435). - Hang/soft lockup in d_invalidate with simultaneous calls (bsc#1094248, bsc@1097140). - ixgbe: fix possible race in reset subtask (bsc#1101557). - ixgbe: Refactor queue disable logic to take completion time into account (bsc#1101557). - ixgbe: Reorder Tx/Rx shutdown to reduce time needed to stop device (bsc#1101557). - ixgbe: use atomic bitwise operations when handling reset requests (bsc#1101557). - kabi/severities: add PASS to drivers/md/bcache/*, no one uses bcache kernel module. - procfs: add tunable for fd/fdinfo dentry retention (bsc#1086652). - sched/sysctl: Check user input value of sysctl_sched_time_avg (bsc#1100089). - signals: avoid unnecessary taking of sighand->siglock (bsc#1096130). - x86/CPU/AMD: Do not check CPUID max ext level before parsing SMP info (bsc#1089343). - x86/cpu/AMD: Evaluate smp_num_siblings early (bsc#1089343). - x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (bsc#1089343). Update config files. - x86/cpu/AMD: Remove the pointless detect_ht() call (bsc#1089343). - x86/cpu/common: Provide detect_ht_early() (bsc#1089343). - x86/cpu/intel: Evaluate smp_num_siblings early (bsc#1089343). - x86/cpu: Remove the pointless CPU printout (bsc#1089343). - x86/cpu/topology: Provide detect_extended_topology_early() (bsc#1089343). - x86/mm: Simplify p[g4um]d_page() macros (1087081). - x86/pti: do not report XenPV as vulnerable (bsc#1097551). - x86/smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (bsc#1089343). - x86/smp: Provide topology_is_primary_thread() (bsc#1089343). - x86/topology: Add topology_max_smt_threads() (bsc#1089343). - x86/topology: Provide topology_smt_supported() (bsc#1089343). - xen/grant-table: log the lack of grants (bnc#1085042). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-OpenStack-Cloud-7-2018-1603,SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2018-1603,SUSE-SLE-HA-12-SP2-2018-1603,SUSE-SLE-SAP-12-SP2-2018-1603,SUSE-SLE-SERVER-12-SP2-2018-1603,SUSE-Storage-4-2018-1603 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20182344-1/ Link for SUSE-SU-2018:2344-1 https://lists.suse.com/pipermail/sle-security-updates/2018-August/004427.html E-Mail link for SUSE-SU-2018:2344-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1064232 SUSE Bug 1064232 https://bugzilla.suse.com/1076110 SUSE Bug 1076110 https://bugzilla.suse.com/1083635 SUSE Bug 1083635 https://bugzilla.suse.com/1085042 SUSE Bug 1085042 https://bugzilla.suse.com/1086652 SUSE Bug 1086652 https://bugzilla.suse.com/1087081 SUSE Bug 1087081 https://bugzilla.suse.com/1089343 SUSE Bug 1089343 https://bugzilla.suse.com/1090123 SUSE Bug 1090123 https://bugzilla.suse.com/1091171 SUSE Bug 1091171 https://bugzilla.suse.com/1094248 SUSE Bug 1094248 https://bugzilla.suse.com/1096130 SUSE Bug 1096130 https://bugzilla.suse.com/1096480 SUSE Bug 1096480 https://bugzilla.suse.com/1096978 SUSE Bug 1096978 https://bugzilla.suse.com/1097140 SUSE Bug 1097140 https://bugzilla.suse.com/1097551 SUSE Bug 1097551 https://bugzilla.suse.com/1098016 SUSE Bug 1098016 https://bugzilla.suse.com/1098425 SUSE Bug 1098425 https://bugzilla.suse.com/1098435 SUSE Bug 1098435 https://bugzilla.suse.com/1099924 SUSE Bug 1099924 https://bugzilla.suse.com/1100089 SUSE Bug 1100089 https://bugzilla.suse.com/1100416 SUSE Bug 1100416 https://bugzilla.suse.com/1100418 SUSE Bug 1100418 https://bugzilla.suse.com/1100491 SUSE Bug 1100491 https://bugzilla.suse.com/1101557 SUSE Bug 1101557 https://bugzilla.suse.com/1102340 SUSE Bug 1102340 https://bugzilla.suse.com/1102851 SUSE Bug 1102851 https://bugzilla.suse.com/1103097 SUSE Bug 1103097 https://bugzilla.suse.com/1103119 SUSE Bug 1103119 https://bugzilla.suse.com/1103580 SUSE Bug 1103580 https://www.suse.com/security/cve/CVE-2017-18344/ SUSE CVE CVE-2017-18344 page https://www.suse.com/security/cve/CVE-2018-13053/ SUSE CVE CVE-2018-13053 page https://www.suse.com/security/cve/CVE-2018-13405/ SUSE CVE CVE-2018-13405 page https://www.suse.com/security/cve/CVE-2018-13406/ SUSE CVE CVE-2018-13406 page https://www.suse.com/security/cve/CVE-2018-14734/ SUSE CVE CVE-2018-14734 page https://www.suse.com/security/cve/CVE-2018-3620/ SUSE CVE CVE-2018-3620 page https://www.suse.com/security/cve/CVE-2018-3646/ SUSE CVE CVE-2018-3646 page https://www.suse.com/security/cve/CVE-2018-5390/ SUSE CVE CVE-2018-5390 page https://www.suse.com/security/cve/CVE-2018-5391/ SUSE CVE CVE-2018-5391 page https://www.suse.com/security/cve/CVE-2018-5814/ SUSE CVE CVE-2018-5814 page https://www.suse.com/security/cve/CVE-2018-9385/ SUSE CVE CVE-2018-9385 page SUSE Enterprise Storage 4 SUSE Linux Enterprise High Availability Extension 12 SP2 SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE OpenStack Cloud 7 kernel-default-4.4.121-92.92.1 kernel-default-base-4.4.121-92.92.1 kernel-default-devel-4.4.121-92.92.1 kernel-default-man-4.4.121-92.92.1 kernel-devel-4.4.121-92.92.1 kernel-macros-4.4.121-92.92.1 kernel-source-4.4.121-92.92.1 kernel-syms-4.4.121-92.92.1 kgraft-patch-4_4_121-92_92-default-1-3.7.1 lttng-modules-2.7.1-9.4.1 lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 cluster-md-kmp-default-4.4.121-92.92.1 cluster-network-kmp-default-4.4.121-92.92.1 dlm-kmp-default-4.4.121-92.92.1 gfs2-kmp-default-4.4.121-92.92.1 ocfs2-kmp-default-4.4.121-92.92.1 kernel-default-4.4.121-92.92.1 as a component of SUSE Enterprise Storage 4 kernel-default-base-4.4.121-92.92.1 as a component of SUSE Enterprise Storage 4 kernel-default-devel-4.4.121-92.92.1 as a component of SUSE Enterprise Storage 4 kernel-devel-4.4.121-92.92.1 as a component of SUSE Enterprise Storage 4 kernel-macros-4.4.121-92.92.1 as a component of SUSE Enterprise Storage 4 kernel-source-4.4.121-92.92.1 as a component of SUSE Enterprise Storage 4 kernel-syms-4.4.121-92.92.1 as a component of SUSE Enterprise Storage 4 kgraft-patch-4_4_121-92_92-default-1-3.7.1 as a component of SUSE Enterprise Storage 4 lttng-modules-2.7.1-9.4.1 as a component of SUSE Enterprise Storage 4 lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 as a component of SUSE Enterprise Storage 4 cluster-md-kmp-default-4.4.121-92.92.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 cluster-network-kmp-default-4.4.121-92.92.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 dlm-kmp-default-4.4.121-92.92.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 gfs2-kmp-default-4.4.121-92.92.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 ocfs2-kmp-default-4.4.121-92.92.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 kernel-default-4.4.121-92.92.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-base-4.4.121-92.92.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-devel-4.4.121-92.92.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-man-4.4.121-92.92.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-devel-4.4.121-92.92.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-macros-4.4.121-92.92.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-source-4.4.121-92.92.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-syms-4.4.121-92.92.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kgraft-patch-4_4_121-92_92-default-1-3.7.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS lttng-modules-2.7.1-9.4.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-4.4.121-92.92.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-default-base-4.4.121-92.92.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-default-devel-4.4.121-92.92.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-devel-4.4.121-92.92.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-macros-4.4.121-92.92.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-source-4.4.121-92.92.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-syms-4.4.121-92.92.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kgraft-patch-4_4_121-92_92-default-1-3.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 lttng-modules-2.7.1-9.4.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-default-4.4.121-92.92.1 as a component of SUSE OpenStack Cloud 7 kernel-default-base-4.4.121-92.92.1 as a component of SUSE OpenStack Cloud 7 kernel-default-devel-4.4.121-92.92.1 as a component of SUSE OpenStack Cloud 7 kernel-default-man-4.4.121-92.92.1 as a component of SUSE OpenStack Cloud 7 kernel-devel-4.4.121-92.92.1 as a component of SUSE OpenStack Cloud 7 kernel-macros-4.4.121-92.92.1 as a component of SUSE OpenStack Cloud 7 kernel-source-4.4.121-92.92.1 as a component of SUSE OpenStack Cloud 7 kernel-syms-4.4.121-92.92.1 as a component of SUSE OpenStack Cloud 7 kgraft-patch-4_4_121-92_92-default-1-3.7.1 as a component of SUSE OpenStack Cloud 7 lttng-modules-2.7.1-9.4.1 as a component of SUSE OpenStack Cloud 7 lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 as a component of SUSE OpenStack Cloud 7 The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID/timers is read). This allows userspace applications to read arbitrary kernel memory (on a kernel built with CONFIG_POSIX_TIMERS and CONFIG_CHECKPOINT_RESTORE). CVE-2017-18344 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.92.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Enterprise Storage 4:lttng-modules-2.7.1-9.4.1 SUSE Enterprise Storage 4:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE OpenStack Cloud 7:lttng-modules-2.7.1-9.4.1 SUSE OpenStack Cloud 7:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182344-1/ https://www.suse.com/security/cve/CVE-2017-18344.html CVE-2017-18344 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1102851 SUSE Bug 1102851 https://bugzilla.suse.com/1103203 SUSE Bug 1103203 https://bugzilla.suse.com/1103580 SUSE Bug 1103580 https://bugzilla.suse.com/1215674 SUSE Bug 1215674 The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow via a large relative timeout because ktime_add_safe is not used. CVE-2018-13053 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.92.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Enterprise Storage 4:lttng-modules-2.7.1-9.4.1 SUSE Enterprise Storage 4:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE OpenStack Cloud 7:lttng-modules-2.7.1-9.4.1 SUSE OpenStack Cloud 7:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182344-1/ https://www.suse.com/security/cve/CVE-2018-13053.html CVE-2018-13053 https://bugzilla.suse.com/1099924 SUSE Bug 1099924 https://bugzilla.suse.com/1115893 SUSE Bug 1115893 The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID. CVE-2018-13405 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.92.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Enterprise Storage 4:lttng-modules-2.7.1-9.4.1 SUSE Enterprise Storage 4:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE OpenStack Cloud 7:lttng-modules-2.7.1-9.4.1 SUSE OpenStack Cloud 7:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182344-1/ https://www.suse.com/security/cve/CVE-2018-13405.html CVE-2018-13405 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1100416 SUSE Bug 1100416 https://bugzilla.suse.com/1129735 SUSE Bug 1129735 https://bugzilla.suse.com/1195161 SUSE Bug 1195161 https://bugzilla.suse.com/1198702 SUSE Bug 1198702 An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local attackers being able to crash the kernel or potentially elevate privileges because kmalloc_array is not used. CVE-2018-13406 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.92.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Enterprise Storage 4:lttng-modules-2.7.1-9.4.1 SUSE Enterprise Storage 4:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE OpenStack Cloud 7:lttng-modules-2.7.1-9.4.1 SUSE OpenStack Cloud 7:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182344-1/ https://www.suse.com/security/cve/CVE-2018-13406.html CVE-2018-13406 https://bugzilla.suse.com/1098016 SUSE Bug 1098016 https://bugzilla.suse.com/1100418 SUSE Bug 1100418 https://bugzilla.suse.com/1115893 SUSE Bug 1115893 drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to access a certain data structure after a cleanup step in ucma_process_join, which allows attackers to cause a denial of service (use-after-free). CVE-2018-14734 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.92.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Enterprise Storage 4:lttng-modules-2.7.1-9.4.1 SUSE Enterprise Storage 4:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE OpenStack Cloud 7:lttng-modules-2.7.1-9.4.1 SUSE OpenStack Cloud 7:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182344-1/ https://www.suse.com/security/cve/CVE-2018-14734.html CVE-2018-14734 https://bugzilla.suse.com/1103119 SUSE Bug 1103119 https://bugzilla.suse.com/1131390 SUSE Bug 1131390 Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis. CVE-2018-3620 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.92.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Enterprise Storage 4:lttng-modules-2.7.1-9.4.1 SUSE Enterprise Storage 4:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE OpenStack Cloud 7:lttng-modules-2.7.1-9.4.1 SUSE OpenStack Cloud 7:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182344-1/ https://www.suse.com/security/cve/CVE-2018-3620.html CVE-2018-3620 https://bugzilla.suse.com/1087078 SUSE Bug 1087078 https://bugzilla.suse.com/1087081 SUSE Bug 1087081 https://bugzilla.suse.com/1089343 SUSE Bug 1089343 https://bugzilla.suse.com/1090340 SUSE Bug 1090340 https://bugzilla.suse.com/1091107 SUSE Bug 1091107 https://bugzilla.suse.com/1099306 SUSE Bug 1099306 https://bugzilla.suse.com/1104894 SUSE Bug 1104894 https://bugzilla.suse.com/1136865 SUSE Bug 1136865 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis. CVE-2018-3646 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.92.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Enterprise Storage 4:lttng-modules-2.7.1-9.4.1 SUSE Enterprise Storage 4:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE OpenStack Cloud 7:lttng-modules-2.7.1-9.4.1 SUSE OpenStack Cloud 7:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182344-1/ https://www.suse.com/security/cve/CVE-2018-3646.html CVE-2018-3646 https://bugzilla.suse.com/1087078 SUSE Bug 1087078 https://bugzilla.suse.com/1087081 SUSE Bug 1087081 https://bugzilla.suse.com/1089343 SUSE Bug 1089343 https://bugzilla.suse.com/1091107 SUSE Bug 1091107 https://bugzilla.suse.com/1099306 SUSE Bug 1099306 https://bugzilla.suse.com/1104365 SUSE Bug 1104365 https://bugzilla.suse.com/1104894 SUSE Bug 1104894 https://bugzilla.suse.com/1106548 SUSE Bug 1106548 https://bugzilla.suse.com/1113534 SUSE Bug 1113534 https://bugzilla.suse.com/1136865 SUSE Bug 1136865 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service. CVE-2018-5390 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.92.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Enterprise Storage 4:lttng-modules-2.7.1-9.4.1 SUSE Enterprise Storage 4:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE OpenStack Cloud 7:lttng-modules-2.7.1-9.4.1 SUSE OpenStack Cloud 7:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182344-1/ https://www.suse.com/security/cve/CVE-2018-5390.html CVE-2018-5390 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1102340 SUSE Bug 1102340 https://bugzilla.suse.com/1102682 SUSE Bug 1102682 https://bugzilla.suse.com/1103097 SUSE Bug 1103097 https://bugzilla.suse.com/1103098 SUSE Bug 1103098 https://bugzilla.suse.com/1156434 SUSE Bug 1156434 The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size. CVE-2018-5391 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.92.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Enterprise Storage 4:lttng-modules-2.7.1-9.4.1 SUSE Enterprise Storage 4:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE OpenStack Cloud 7:lttng-modules-2.7.1-9.4.1 SUSE OpenStack Cloud 7:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182344-1/ https://www.suse.com/security/cve/CVE-2018-5391.html CVE-2018-5391 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1102340 SUSE Bug 1102340 https://bugzilla.suse.com/1103097 SUSE Bug 1103097 https://bugzilla.suse.com/1103098 SUSE Bug 1103098 https://bugzilla.suse.com/1108654 SUSE Bug 1108654 https://bugzilla.suse.com/1114071 SUSE Bug 1114071 https://bugzilla.suse.com/1121102 SUSE Bug 1121102 https://bugzilla.suse.com/1134140 SUSE Bug 1134140 https://bugzilla.suse.com/1181460 SUSE Bug 1181460 In the Linux Kernel before version 4.16.11, 4.14.43, 4.9.102, and 4.4.133, multiple race condition errors when handling probe, disconnect, and rebind operations can be exploited to trigger a use-after-free condition or a NULL pointer dereference by sending multiple USB over IP packets. CVE-2018-5814 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.92.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Enterprise Storage 4:lttng-modules-2.7.1-9.4.1 SUSE Enterprise Storage 4:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE OpenStack Cloud 7:lttng-modules-2.7.1-9.4.1 SUSE OpenStack Cloud 7:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182344-1/ https://www.suse.com/security/cve/CVE-2018-5814.html CVE-2018-5814 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1096480 SUSE Bug 1096480 https://bugzilla.suse.com/1133319 SUSE Bug 1133319 In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74128061 References: Upstream kernel. CVE-2018-9385 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.92.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.92.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Enterprise Storage 4:lttng-modules-2.7.1-9.4.1 SUSE Enterprise Storage 4:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server 12 SP2-LTSS:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.92.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-2.7.1-9.4.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.92.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_92-default-1-3.7.1 SUSE OpenStack Cloud 7:lttng-modules-2.7.1-9.4.1 SUSE OpenStack Cloud 7:lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182344-1/ https://www.suse.com/security/cve/CVE-2018-9385.html CVE-2018-9385 https://bugzilla.suse.com/1100491 SUSE Bug 1100491