Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:1823-1 Final 1 1 2019-07-12T05:36:56Z current 2019-07-12T05:36:56Z 2019-07-12T05:36:56Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 12 SP 2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-10638: In the Linux kernel, a device could be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic was sent to multiple destination IP addresses, it was possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may be conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses. (bnc#1140575) - CVE-2019-10639: The Linux kernel allowed Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. Specifically, it was possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic was sent to multiple destination IP addresses, it was possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). This key contains enough bits from a kernel address (of a static variable) so when the key was extracted (via enumeration), the offset of the kernel image is exposed. This attack can be carried out remotely, by the attacker forcing the target device to send UDP or ICMP (or certain other) traffic to attacker-controlled IP addresses. Forcing a server to send UDP traffic is trivial if the server is a DNS server. ICMP traffic is trivial if the server answers ICMP Echo requests (ping). For client targets, if the target visited the attacker's web page, then WebRTC or gQUIC could be used to force UDP traffic to attacker-controlled IP addresses. NOTE: this attack against KASLR became viable because IP ID generation was changed to have a dependency on an address associated with a network namespace. (bnc#) - CVE-2019-10126: A flaw was found in the Linux kernel that might lead to memory corruption in the marvell mwifiex driver. (bnc#1136935) - CVE-2018-20836: An issue was discovered in the Linux kernel There was a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free. (bnc#1134395) - CVE-2019-11599: The coredump implementation in the Linux kernel did not use locking or other mechanisms to prevent vma layout or vma flags changes while it ran, which allowed local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c. (bnc#1133738) - CVE-2019-12614: An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel There was an unchecked kstrdup of prop-name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). (bnc#) - CVE-2019-12818: An issue was discovered in the Linux kernel The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c may return NULL. If the caller did not check for this, it will trigger a NULL pointer dereference. This will cause denial of service. This affects nfc_llcp_build_gb in net/nfc/llcp_core.c. (bnc#1137194) - CVE-2019-12819: An issue was discovered in the Linux kernel The function __mdiobus_register() in drivers/net/phy/mdio_bus.c called put_device(), which would trigger a fixed_mdio_bus_init use-after-free. This would cause a denial of service. (bnc#1138291) - CVE-2019-12456 a double-fetch bug in _ctl_ioctl_main() could allow local users to create a denial of service (bsc#1136922). - CVE-2019-12380: An issue was discovered in the efi subsystem in the Linux kernel phys_efi_set_virtual_address_map in arch/x86/platform/efi/efi.c and efi_call_phys_prolog in arch/x86/platform/efi/efi_64.c mishandle memory allocation failures. NOTE: This id is disputed as not being an issue because All the code touched by the referenced commit runs only at boot, before any user processes are started. Therefore, there is no possibility for an unprivileged user to control it. (bnc#) - CVE-2019-11487: The Linux kernel allowed page-_refcount reference count to overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests. (bnc#1133190) The following non-security bugs were fixed: - Drop multiversion(kernel) from the KMP template (bsc#1127155). - Revert 'KMPs: obsolete older KMPs of the same flavour (bsc#1127155, bsc#1109137).' This reverts commit 4cc83da426b53d47f1fde9328112364eab1e9a19. - sched/fair: Avoid divide by zero when rebalancing domains (bsc#1096254). - x86/cpu: Unify CPU family, model, stepping calculation (bsc#1134701). - x86/entry/64/compat: Fix stack switching for XEN PV (bsc#1108382). - x86/microcode/AMD: Fix initrd loading with CONFIG_RANDOMIZE_MEMORY=y (bsc#1134701). - x86/microcode/AMD: Fix load of builtin microcode with randomized memory (bsc#1134701). - x86/microcode/AMD: Reload proper initrd start address (bsc#1134701). - x86/microcode/amd: Hand down the CPU family (bsc#1134701). - x86/microcode/amd: Move private inlines to .c and mark local functions static (bsc#1134701). - x86/microcode/intel: Drop stashed AP patch pointer optimization (bsc#1134701). - x86/microcode/intel: Fix allocation size of struct ucode_patch (bsc#1134701). - x86/microcode/intel: Fix initrd loading with CONFIG_RANDOMIZE_MEMORY=y (bsc#1134701). - x86/microcode/intel: Remove intel_lib.c (bsc#1134701). - x86/microcode/intel: Remove unused arg of get_matching_model_microcode() (bsc#1134701). - x86/microcode/intel: Rename load_microcode_early() to find_microcode_patch() (bsc#1134701). - x86/microcode/intel: Rename local variables of type struct mc_saved_data (bsc#1134701). - x86/microcode/intel: Rename mc_intel variable to mc (bsc#1134701). - x86/microcode/intel: Rename mc_saved_in_initrd (bsc#1134701). - x86/microcode/intel: Simplify generic_load_microcode() (bsc#1134701). - x86/microcode/intel: Unexport save_mc_for_early() (bsc#1134701). - x86/microcode/intel: Use correct buffer size for saving microcode data (bsc#1134701). - x86/microcode: Collect CPU info on resume (bsc#1134701). - x86/microcode: Export the microcode cache linked list (bsc#1134701). - x86/microcode: Fix loading precedence (bsc#1134701). - x86/microcode: Get rid of find_cpio_data()'s dummy offset arg (bsc#1134701). - x86/microcode: Issue the debug printk on resume only on success (bsc#1134701). - x86/microcode: Rework microcode loading (bsc#1134701). - x86/microcode: Run the AP-loading routine only on the application processors (bsc#1134701). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2019-1823,SUSE-OpenStack-Cloud-7-2019-1823,SUSE-SLE-SAP-12-SP2-2019-1823,SUSE-SLE-SERVER-12-SP2-2019-1823,SUSE-SLE-SERVER-12-SP2-BCL-2019-1823,SUSE-Storage-4-2019-1823 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20191823-1/ Link for SUSE-SU-2019:1823-1 https://lists.suse.com/pipermail/sle-security-updates/2019-July/005694.html E-Mail link for SUSE-SU-2019:1823-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1096254 SUSE Bug 1096254 https://bugzilla.suse.com/1108382 SUSE Bug 1108382 https://bugzilla.suse.com/1109137 SUSE Bug 1109137 https://bugzilla.suse.com/1127155 SUSE Bug 1127155 https://bugzilla.suse.com/1133190 SUSE Bug 1133190 https://bugzilla.suse.com/1133738 SUSE Bug 1133738 https://bugzilla.suse.com/1134395 SUSE Bug 1134395 https://bugzilla.suse.com/1134701 SUSE Bug 1134701 https://bugzilla.suse.com/1136922 SUSE Bug 1136922 https://bugzilla.suse.com/1136935 SUSE Bug 1136935 https://bugzilla.suse.com/1137194 SUSE Bug 1137194 https://bugzilla.suse.com/1138291 SUSE Bug 1138291 https://bugzilla.suse.com/1140575 SUSE Bug 1140575 https://www.suse.com/security/cve/CVE-2018-20836/ SUSE CVE CVE-2018-20836 page https://www.suse.com/security/cve/CVE-2019-10126/ SUSE CVE CVE-2019-10126 page https://www.suse.com/security/cve/CVE-2019-10638/ SUSE CVE CVE-2019-10638 page https://www.suse.com/security/cve/CVE-2019-10639/ SUSE CVE CVE-2019-10639 page https://www.suse.com/security/cve/CVE-2019-11487/ SUSE CVE CVE-2019-11487 page https://www.suse.com/security/cve/CVE-2019-11599/ SUSE CVE CVE-2019-11599 page https://www.suse.com/security/cve/CVE-2019-12380/ SUSE CVE CVE-2019-12380 page https://www.suse.com/security/cve/CVE-2019-12456/ SUSE CVE CVE-2019-12456 page https://www.suse.com/security/cve/CVE-2019-12614/ SUSE CVE CVE-2019-12614 page https://www.suse.com/security/cve/CVE-2019-12818/ SUSE CVE CVE-2019-12818 page https://www.suse.com/security/cve/CVE-2019-12819/ SUSE CVE CVE-2019-12819 page SUSE Enterprise Storage 4 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE OpenStack Cloud 7 cluster-md-kmp-debug-4.4.121-92.117.1 cluster-md-kmp-default-4.4.121-92.117.1 cluster-md-kmp-vanilla-4.4.121-92.117.1 cluster-network-kmp-debug-4.4.121-92.117.1 cluster-network-kmp-default-4.4.121-92.117.1 cluster-network-kmp-vanilla-4.4.121-92.117.1 dlm-kmp-debug-4.4.121-92.117.1 dlm-kmp-default-4.4.121-92.117.1 dlm-kmp-vanilla-4.4.121-92.117.1 gfs2-kmp-debug-4.4.121-92.117.1 gfs2-kmp-default-4.4.121-92.117.1 gfs2-kmp-vanilla-4.4.121-92.117.1 kernel-debug-4.4.121-92.117.1 kernel-debug-base-4.4.121-92.117.1 kernel-debug-devel-4.4.121-92.117.1 kernel-debug-extra-4.4.121-92.117.1 kernel-debug-kgraft-4.4.121-92.117.1 kernel-default-4.4.121-92.117.1 kernel-default-base-4.4.121-92.117.1 kernel-default-devel-4.4.121-92.117.1 kernel-default-extra-4.4.121-92.117.1 kernel-default-kgraft-4.4.121-92.117.1 kernel-default-man-4.4.121-92.117.1 kernel-devel-4.4.121-92.117.1 kernel-docs-4.4.121-92.117.1 kernel-docs-html-4.4.121-92.117.1 kernel-docs-pdf-4.4.121-92.117.1 kernel-macros-4.4.121-92.117.1 kernel-obs-build-4.4.121-92.117.1 kernel-obs-qa-4.4.121-92.117.1 kernel-source-4.4.121-92.117.1 kernel-source-vanilla-4.4.121-92.117.1 kernel-syms-4.4.121-92.117.1 kernel-vanilla-4.4.121-92.117.1 kernel-vanilla-base-4.4.121-92.117.1 kernel-vanilla-devel-4.4.121-92.117.1 kernel-zfcpdump-4.4.121-92.117.1 kgraft-patch-4_4_121-92_117-default-1-3.3.1 ocfs2-kmp-debug-4.4.121-92.117.1 ocfs2-kmp-default-4.4.121-92.117.1 ocfs2-kmp-vanilla-4.4.121-92.117.1 kernel-default-4.4.121-92.117.1 as a component of SUSE Enterprise Storage 4 kernel-default-base-4.4.121-92.117.1 as a component of SUSE Enterprise Storage 4 kernel-default-devel-4.4.121-92.117.1 as a component of SUSE Enterprise Storage 4 kernel-devel-4.4.121-92.117.1 as a component of SUSE Enterprise Storage 4 kernel-macros-4.4.121-92.117.1 as a component of SUSE Enterprise Storage 4 kernel-source-4.4.121-92.117.1 as a component of SUSE Enterprise Storage 4 kernel-syms-4.4.121-92.117.1 as a component of SUSE Enterprise Storage 4 kgraft-patch-4_4_121-92_117-default-1-3.3.1 as a component of SUSE Enterprise Storage 4 kernel-default-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-base-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-devel-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-devel-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-macros-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-source-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-syms-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-base-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-devel-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-man-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-devel-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-macros-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-source-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-syms-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kgraft-patch-4_4_121-92_117-default-1-3.3.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-default-base-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-default-devel-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-devel-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-macros-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-source-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-syms-4.4.121-92.117.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kgraft-patch-4_4_121-92_117-default-1-3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-default-4.4.121-92.117.1 as a component of SUSE OpenStack Cloud 7 kernel-default-base-4.4.121-92.117.1 as a component of SUSE OpenStack Cloud 7 kernel-default-devel-4.4.121-92.117.1 as a component of SUSE OpenStack Cloud 7 kernel-default-man-4.4.121-92.117.1 as a component of SUSE OpenStack Cloud 7 kernel-devel-4.4.121-92.117.1 as a component of SUSE OpenStack Cloud 7 kernel-macros-4.4.121-92.117.1 as a component of SUSE OpenStack Cloud 7 kernel-source-4.4.121-92.117.1 as a component of SUSE OpenStack Cloud 7 kernel-syms-4.4.121-92.117.1 as a component of SUSE OpenStack Cloud 7 kgraft-patch-4_4_121-92_117-default-1-3.3.1 as a component of SUSE OpenStack Cloud 7 An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free. CVE-2018-20836 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.117.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_117-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191823-1/ https://www.suse.com/security/cve/CVE-2018-20836.html CVE-2018-20836 https://bugzilla.suse.com/1134395 SUSE Bug 1134395 A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corruption and possibly other consequences. CVE-2019-10126 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.117.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_117-default-1-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191823-1/ https://www.suse.com/security/cve/CVE-2019-10126.html CVE-2019-10126 https://bugzilla.suse.com/1136935 SUSE Bug 1136935 https://bugzilla.suse.com/1137944 SUSE Bug 1137944 https://bugzilla.suse.com/1142129 SUSE Bug 1142129 https://bugzilla.suse.com/1156330 SUSE Bug 1156330 In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may be conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses. CVE-2019-10638 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.117.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_117-default-1-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191823-1/ https://www.suse.com/security/cve/CVE-2019-10638.html CVE-2019-10638 https://bugzilla.suse.com/1140575 SUSE Bug 1140575 https://bugzilla.suse.com/1140577 SUSE Bug 1140577 https://bugzilla.suse.com/1142129 SUSE Bug 1142129 The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. Specifically, it is possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). This key contains enough bits from a kernel address (of a static variable) so when the key is extracted (via enumeration), the offset of the kernel image is exposed. This attack can be carried out remotely, by the attacker forcing the target device to send UDP or ICMP (or certain other) traffic to attacker-controlled IP addresses. Forcing a server to send UDP traffic is trivial if the server is a DNS server. ICMP traffic is trivial if the server answers ICMP Echo requests (ping). For client targets, if the target visits the attacker's web page, then WebRTC or gQUIC can be used to force UDP traffic to attacker-controlled IP addresses. NOTE: this attack against KASLR became viable in 4.1 because IP ID generation was changed to have a dependency on an address associated with a network namespace. CVE-2019-10639 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.117.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_117-default-1-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191823-1/ https://www.suse.com/security/cve/CVE-2019-10639.html CVE-2019-10639 https://bugzilla.suse.com/1140577 SUSE Bug 1140577 The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests. CVE-2019-11487 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.117.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_117-default-1-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191823-1/ https://www.suse.com/security/cve/CVE-2019-11487.html CVE-2019-11487 https://bugzilla.suse.com/1133190 SUSE Bug 1133190 https://bugzilla.suse.com/1133191 SUSE Bug 1133191 The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c. CVE-2019-11599 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.117.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_117-default-1-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191823-1/ https://www.suse.com/security/cve/CVE-2019-11599.html CVE-2019-11599 https://bugzilla.suse.com/1131645 SUSE Bug 1131645 https://bugzilla.suse.com/1133738 SUSE Bug 1133738 https://bugzilla.suse.com/1157905 SUSE Bug 1157905 **DISPUTED** An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. phys_efi_set_virtual_address_map in arch/x86/platform/efi/efi.c and efi_call_phys_prolog in arch/x86/platform/efi/efi_64.c mishandle memory allocation failures. NOTE: This id is disputed as not being an issue because “All the code touched by the referenced commit runs only at boot, before any user processes are started. Therefore, there is no possibility for an unprivileged user to control it.”. CVE-2019-12380 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.117.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_117-default-1-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191823-1/ https://www.suse.com/security/cve/CVE-2019-12380.html CVE-2019-12380 https://bugzilla.suse.com/1136598 SUSE Bug 1136598 https://bugzilla.suse.com/1155298 SUSE Bug 1155298 ** DISPUTED ** An issue was discovered in the MPT3COMMAND case in _ctl_ioctl_main in drivers/scsi/mpt3sas/mpt3sas_ctl.c in the Linux kernel through 5.1.5. It allows local users to cause a denial of service or possibly have unspecified other impact by changing the value of ioc_number between two kernel reads of that value, aka a "double fetch" vulnerability. NOTE: a third party reports that this is unexploitable because the doubly fetched value is not used. CVE-2019-12456 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.117.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_117-default-1-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191823-1/ https://www.suse.com/security/cve/CVE-2019-12456.html CVE-2019-12456 https://bugzilla.suse.com/1136922 SUSE Bug 1136922 https://bugzilla.suse.com/1136993 SUSE Bug 1136993 An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup of prop->name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). CVE-2019-12614 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.117.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_117-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191823-1/ https://www.suse.com/security/cve/CVE-2019-12614.html CVE-2019-12614 https://bugzilla.suse.com/1137194 SUSE Bug 1137194 An issue was discovered in the Linux kernel before 4.20.15. The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c may return NULL. If the caller does not check for this, it will trigger a NULL pointer dereference. This will cause denial of service. This affects nfc_llcp_build_gb in net/nfc/llcp_core.c. CVE-2019-12818 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.117.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_117-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191823-1/ https://www.suse.com/security/cve/CVE-2019-12818.html CVE-2019-12818 https://bugzilla.suse.com/1138293 SUSE Bug 1138293 An issue was discovered in the Linux kernel before 5.0. The function __mdiobus_register() in drivers/net/phy/mdio_bus.c calls put_device(), which will trigger a fixed_mdio_bus_init use-after-free. This will cause a denial of service. CVE-2019-12819 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.117.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.117.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.117.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_117-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.117.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_117-default-1-3.3.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191823-1/ https://www.suse.com/security/cve/CVE-2019-12819.html CVE-2019-12819 https://bugzilla.suse.com/1138291 SUSE Bug 1138291