Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:1870-1 Final 1 1 2019-07-17T12:57:10Z current 2019-07-17T12:57:10Z 2019-07-17T12:57:10Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 12 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-5390 aka 'SegmentSmack': A remote attacker even with relatively low bandwidth could have caused lots of CPU usage by triggering the worst case scenario during IP and/or TCP fragment reassembly (bsc#1102340) - CVE-2018-7191: In the tun subsystem in the Linux kernel, dev_get_valid_name was not called before register_netdevice. This allowed local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. (bnc#1135603) - CVE-2018-20836: A race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, could have lead to a use-after-free. (bnc#1134395) - CVE-2019-12614: An unchecked kstrdup might have allowed an attacker to cause denial of service (a NULL pointer dereference and system crash). (bnc#1137194) - CVE-2019-12818: The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c may have returned NULL. If the caller did not check for this, it would trigger a NULL pointer dereference. This would cause denial of service. (bnc#1138293) - CVE-2019-12456: An issue in the MPT3COMMAND case in _ctl_ioctl_main() allowed local users to cause a denial of service or possibly have unspecified other impact by changing the value of ioc_number between two kernel reads of that value, aka a 'double fetch' vulnerability. (bsc#1136922) - CVE-2019-11487: An attacker could have triggered use-after-free via page reference count overflow on slow filesystems with at least of 140 GiB of RAM available. (bnc#1133190) The following non-security bugs were fixed: - fuse: Don't access pipe->buffers without pipe_lock() (Prerequisity for CVE-2019-11487, bsc#1133190). - fuse: call pipe_buf_release() under pipe lock (Prerequisity for CVE-2019-11487, bsc#1133190). - mm: /proc/pid/maps: Check permissions when opening proc pid maps (bsc#1130159). - pipe: add pipe_buf_get() helper (Prerequisity for CVE-2019-11487, bsc#1133190). - tcp: refine memory limit test in tcp_fragment() after CVE-2019-11478 fix (bsc#1139751). - x86/bugs: do not default to IBRS even on SKL (bsc#1112824). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2019-1870,SUSE-SLE-Module-Public-Cloud-12-2019-1870,SUSE-SLE-SAP-12-SP1-2019-1870,SUSE-SLE-SERVER-12-SP1-2019-1870 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20191870-1/ Link for SUSE-SU-2019:1870-1 https://lists.suse.com/pipermail/sle-security-updates/2019-July/005724.html E-Mail link for SUSE-SU-2019:1870-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1102340 SUSE Bug 1102340 https://bugzilla.suse.com/1112824 SUSE Bug 1112824 https://bugzilla.suse.com/1130159 SUSE Bug 1130159 https://bugzilla.suse.com/1133190 SUSE Bug 1133190 https://bugzilla.suse.com/1134395 SUSE Bug 1134395 https://bugzilla.suse.com/1135603 SUSE Bug 1135603 https://bugzilla.suse.com/1136922 SUSE Bug 1136922 https://bugzilla.suse.com/1137194 SUSE Bug 1137194 https://bugzilla.suse.com/1138293 SUSE Bug 1138293 https://bugzilla.suse.com/1139751 SUSE Bug 1139751 https://www.suse.com/security/cve/CVE-2018-20836/ SUSE CVE CVE-2018-20836 page https://www.suse.com/security/cve/CVE-2018-5390/ SUSE CVE CVE-2018-5390 page https://www.suse.com/security/cve/CVE-2018-7191/ SUSE CVE CVE-2018-7191 page https://www.suse.com/security/cve/CVE-2019-11487/ SUSE CVE CVE-2019-11487 page https://www.suse.com/security/cve/CVE-2019-12456/ SUSE CVE CVE-2019-12456 page https://www.suse.com/security/cve/CVE-2019-12614/ SUSE CVE CVE-2019-12614 page https://www.suse.com/security/cve/CVE-2019-12818/ SUSE CVE CVE-2019-12818 page SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP1 kernel-debug-3.12.74-60.64.118.1 kernel-debug-base-3.12.74-60.64.118.1 kernel-debug-devel-3.12.74-60.64.118.1 kernel-debug-extra-3.12.74-60.64.118.1 kernel-default-3.12.74-60.64.118.1 kernel-default-base-3.12.74-60.64.118.1 kernel-default-devel-3.12.74-60.64.118.1 kernel-default-extra-3.12.74-60.64.118.1 kernel-default-man-3.12.74-60.64.118.1 kernel-devel-3.12.74-60.64.118.1 kernel-docs-3.12.74-60.64.118.1 kernel-ec2-3.12.74-60.64.118.1 kernel-ec2-base-3.12.74-60.64.118.1 kernel-ec2-devel-3.12.74-60.64.118.1 kernel-ec2-extra-3.12.74-60.64.118.1 kernel-macros-3.12.74-60.64.118.1 kernel-obs-build-3.12.74-60.64.118.1 kernel-obs-qa-3.12.74-60.64.118.1 kernel-source-3.12.74-60.64.118.1 kernel-source-vanilla-3.12.74-60.64.118.1 kernel-syms-3.12.74-60.64.118.1 kernel-vanilla-3.12.74-60.64.118.1 kernel-vanilla-devel-3.12.74-60.64.118.1 kernel-xen-3.12.74-60.64.118.1 kernel-xen-base-3.12.74-60.64.118.1 kernel-xen-devel-3.12.74-60.64.118.1 kernel-xen-extra-3.12.74-60.64.118.1 kernel-zfcpdump-3.12.74-60.64.118.1 kgraft-patch-3_12_74-60_64_118-default-1-2.3.1 kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1 kernel-ec2-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Module for Public Cloud 12 kernel-ec2-devel-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Module for Public Cloud 12 kernel-ec2-extra-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Module for Public Cloud 12 kernel-default-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-default-base-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-default-devel-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-default-man-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-devel-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-macros-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-source-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-syms-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-xen-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-xen-base-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-xen-devel-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_118-default-1-2.3.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-default-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kernel-default-base-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kernel-default-devel-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kernel-devel-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kernel-macros-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kernel-source-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kernel-syms-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kernel-xen-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kernel-xen-base-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kernel-xen-devel-3.12.74-60.64.118.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kgraft-patch-3_12_74-60_64_118-default-1-2.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free. CVE-2018-20836 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191870-1/ https://www.suse.com/security/cve/CVE-2018-20836.html CVE-2018-20836 https://bugzilla.suse.com/1134395 SUSE Bug 1134395 Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service. CVE-2018-5390 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191870-1/ https://www.suse.com/security/cve/CVE-2018-5390.html CVE-2018-5390 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1102340 SUSE Bug 1102340 https://bugzilla.suse.com/1102682 SUSE Bug 1102682 https://bugzilla.suse.com/1103097 SUSE Bug 1103097 https://bugzilla.suse.com/1103098 SUSE Bug 1103098 https://bugzilla.suse.com/1156434 SUSE Bug 1156434 In the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before register_netdevice. This allows local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. This is similar to CVE-2013-4343. CVE-2018-7191 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191870-1/ https://www.suse.com/security/cve/CVE-2018-7191.html CVE-2018-7191 https://bugzilla.suse.com/1135603 SUSE Bug 1135603 The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests. CVE-2019-11487 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191870-1/ https://www.suse.com/security/cve/CVE-2019-11487.html CVE-2019-11487 https://bugzilla.suse.com/1133190 SUSE Bug 1133190 https://bugzilla.suse.com/1133191 SUSE Bug 1133191 ** DISPUTED ** An issue was discovered in the MPT3COMMAND case in _ctl_ioctl_main in drivers/scsi/mpt3sas/mpt3sas_ctl.c in the Linux kernel through 5.1.5. It allows local users to cause a denial of service or possibly have unspecified other impact by changing the value of ioc_number between two kernel reads of that value, aka a "double fetch" vulnerability. NOTE: a third party reports that this is unexploitable because the doubly fetched value is not used. CVE-2019-12456 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191870-1/ https://www.suse.com/security/cve/CVE-2019-12456.html CVE-2019-12456 https://bugzilla.suse.com/1136922 SUSE Bug 1136922 https://bugzilla.suse.com/1136993 SUSE Bug 1136993 An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup of prop->name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). CVE-2019-12614 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191870-1/ https://www.suse.com/security/cve/CVE-2019-12614.html CVE-2019-12614 https://bugzilla.suse.com/1137194 SUSE Bug 1137194 An issue was discovered in the Linux kernel before 4.20.15. The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c may return NULL. If the caller does not check for this, it will trigger a NULL pointer dereference. This will cause denial of service. This affects nfc_llcp_build_gb in net/nfc/llcp_core.c. CVE-2019-12818 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.118.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.118.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-default-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_118-xen-1-2.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191870-1/ https://www.suse.com/security/cve/CVE-2019-12818.html CVE-2019-12818 https://bugzilla.suse.com/1138293 SUSE Bug 1138293