{"affected":[{"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.85.1","kernel-default-base":"4.4.121-92.85.1","kernel-default-devel":"4.4.121-92.85.1","kernel-devel":"4.4.121-92.85.1","kernel-macros":"4.4.121-92.85.1","kernel-source":"4.4.121-92.85.1","kernel-syms":"4.4.121-92.85.1","kgraft-patch-4_4_121-92_85-default":"1-3.5.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","name":"kernel-default","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.4.121-92.85.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.85.1","kernel-default-base":"4.4.121-92.85.1","kernel-default-devel":"4.4.121-92.85.1","kernel-devel":"4.4.121-92.85.1","kernel-macros":"4.4.121-92.85.1","kernel-source":"4.4.121-92.85.1","kernel-syms":"4.4.121-92.85.1","kgraft-patch-4_4_121-92_85-default":"1-3.5.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","name":"kernel-source","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.4.121-92.85.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.85.1","kernel-default-base":"4.4.121-92.85.1","kernel-default-devel":"4.4.121-92.85.1","kernel-devel":"4.4.121-92.85.1","kernel-macros":"4.4.121-92.85.1","kernel-source":"4.4.121-92.85.1","kernel-syms":"4.4.121-92.85.1","kgraft-patch-4_4_121-92_85-default":"1-3.5.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","name":"kernel-syms","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.4.121-92.85.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-default":"4.4.121-92.85.1","kernel-default-base":"4.4.121-92.85.1","kernel-default-devel":"4.4.121-92.85.1","kernel-devel":"4.4.121-92.85.1","kernel-macros":"4.4.121-92.85.1","kernel-source":"4.4.121-92.85.1","kernel-syms":"4.4.121-92.85.1","kgraft-patch-4_4_121-92_85-default":"1-3.5.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","name":"kgraft-patch-SLE12-SP2_Update_23","purl":"pkg:rpm/suse/kgraft-patch-SLE12-SP2_Update_23&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1-3.5.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"\nThe SUSE Linux Enterprise 12 SP2 LTSS kernel was updated receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2018-5848: In the function wmi_set_ie(), the length validation code did\n  not handle unsigned integer overflow properly. As a result, a large value of\n  the 'ie_len' argument could have caused a buffer overflow (bnc#1097356)\n- CVE-2018-1000204: Prevent infoleak caused by incorrect handling of the SG_IO\n  ioctl (bsc#1096728).\n- CVE-2017-18249: The add_free_nid function did not properly track an allocated\n  nid, which allowed local users to cause a denial of service (race condition) or\n  possibly have unspecified other impact via concurrent threads (bnc#1087036)\n- CVE-2018-3665: Prevent disclosure of FPU registers (including XMM and AVX\n  registers) between processes. These registers might contain encryption keys\n  when doing SSE accelerated AES enc/decryption (bsc#1087086)\n- CVE-2017-18241: Prevent a NULL pointer dereference by using a noflush_merge\n  option that triggers a NULL value for a flush_cmd_control data structure\n  (bnc#1086400)\n- CVE-2017-13305: Prevent information disclosure vulnerability in\n  encrypted-keys (bsc#1094353).\n- CVE-2018-1093: The ext4_valid_block_bitmap function allowed attackers to\n  cause a denial of service (out-of-bounds read and system crash) via a crafted\n  ext4 image because balloc.c and ialloc.c did not validate bitmap block numbers\n  (bsc#1087095).\n- CVE-2018-1094: The ext4_fill_super function did not always initialize the\n  crc32c checksum driver, which allowed attackers to cause a denial of service\n  (ext4_xattr_inode_hash NULL pointer dereference and system crash) via a crafted\n  ext4 image (bsc#1087007).\n- CVE-2018-1092: The ext4_iget function mishandled the case of a root directory\n  with a zero i_links_count, which allowed attackers to cause a denial of service\n  (ext4_process_freed_data NULL pointer dereference and OOPS) via a crafted ext4\n  image (bsc#1087012).\n- CVE-2018-1130: NULL pointer dereference in dccp_write_xmit() function that\n  allowed a local user to cause a denial of service by a number of certain\n  crafted system calls (bsc#1092904).\n- CVE-2018-1065: The netfilter subsystem mishandled the case of a rule blob\n  that contains a jump but lacks a user-defined chain, which allowed local users\n  to cause a denial of service (NULL pointer dereference) by leveraging the\n  CAP_NET_RAW or CAP_NET_ADMIN capability (bsc#1083650).\n- CVE-2018-5803: Prevent error in the '_sctp_make_chunk()' function when\n  handling SCTP packets length that could have been exploited to cause a kernel\n  crash (bnc#1083900).\n- CVE-2018-7492: Prevent NULL pointer dereference in the net/rds/rdma.c\n  __rds_rdma_map() function that allowed local attackers to cause a system panic\n  and a denial-of-service, related to RDS_GET_MR and RDS_GET_MR_FOR_DEST\n  (bsc#1082962).\n- CVE-2018-1000199: Prevent vulnerability in modify_user_hw_breakpoint() that\n  could have caused a crash and possibly memory corruption (bsc#1089895).\n\nThe following non-security bugs were fixed:\n\n- ALSA: timer: Fix pause event notification (bsc#973378).\n- Fix excessive newline in /proc/*/status (bsc#1094823).\n- Fix the patch content (bsc#1085185)\n- KVM: x86: Sync back MSR_IA32_SPEC_CTRL to VCPU data structure (bsc#1096242, bsc#1096281).\n- Revert 'bs-upload-kernel: do not set %opensuse_bs' This reverts commit e89e2b8cbef05df6c874ba70af3cb4c57f82a821.\n- ipv6: add mtu lock check in __ip6_rt_update_pmtu (bsc#1092552).\n- ipv6: omit traffic class when calculating flow hash (bsc#1095042).\n- kgraft/bnx2fc: Do not block kGraft in bnx2fc_l2_rcv kthread (bsc#1094033).\n- mm, page_alloc: do not break __GFP_THISNODE by zonelist reset (bsc#1079152, VM Functionality).\n- x86/boot: Fix early command-line parsing when partial word matches (bsc#1096140).\n- x86/bugs: IBRS: make runtime disabling fully dynamic (bsc#1096281).\n- x86/bugs: Respect retpoline command line option (bsc#1068032).\n- x86/bugs: correctly force-disable IBRS on !SKL systems (bsc#1092497).\n- x86/bugs: spec_ctrl must be cleared from cpu_caps_set when being disabled (bsc#1096140).\n- x86/kaiser: export symbol kaiser_set_shadow_pgd() (bsc#1092813)\n- xfs: convert XFS_AGFL_SIZE to a helper function (bsc#1090955, bsc#1090534).\n- xfs: detect agfl count corruption and reset agfl (bsc#1090955, bsc#1090534).\n- xfs: do not log/recover swapext extent owner changes for deleted inodes (bsc#1090955).\n","id":"SUSE-SU-2018:1855-2","modified":"2018-10-18T12:47:06Z","published":"2018-10-18T12:47:06Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181855-2/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1068032"},{"type":"REPORT","url":"https://bugzilla.suse.com/1079152"},{"type":"REPORT","url":"https://bugzilla.suse.com/1082962"},{"type":"REPORT","url":"https://bugzilla.suse.com/1083650"},{"type":"REPORT","url":"https://bugzilla.suse.com/1083900"},{"type":"REPORT","url":"https://bugzilla.suse.com/1085185"},{"type":"REPORT","url":"https://bugzilla.suse.com/1086400"},{"type":"REPORT","url":"https://bugzilla.suse.com/1087007"},{"type":"REPORT","url":"https://bugzilla.suse.com/1087012"},{"type":"REPORT","url":"https://bugzilla.suse.com/1087036"},{"type":"REPORT","url":"https://bugzilla.suse.com/1087086"},{"type":"REPORT","url":"https://bugzilla.suse.com/1087095"},{"type":"REPORT","url":"https://bugzilla.suse.com/1089895"},{"type":"REPORT","url":"https://bugzilla.suse.com/1090534"},{"type":"REPORT","url":"https://bugzilla.suse.com/1090955"},{"type":"REPORT","url":"https://bugzilla.suse.com/1092497"},{"type":"REPORT","url":"https://bugzilla.suse.com/1092552"},{"type":"REPORT","url":"https://bugzilla.suse.com/1092813"},{"type":"REPORT","url":"https://bugzilla.suse.com/1092904"},{"type":"REPORT","url":"https://bugzilla.suse.com/1094033"},{"type":"REPORT","url":"https://bugzilla.suse.com/1094353"},{"type":"REPORT","url":"https://bugzilla.suse.com/1094823"},{"type":"REPORT","url":"https://bugzilla.suse.com/1095042"},{"type":"REPORT","url":"https://bugzilla.suse.com/1096140"},{"type":"REPORT","url":"https://bugzilla.suse.com/1096242"},{"type":"REPORT","url":"https://bugzilla.suse.com/1096281"},{"type":"REPORT","url":"https://bugzilla.suse.com/1096728"},{"type":"REPORT","url":"https://bugzilla.suse.com/1097356"},{"type":"REPORT","url":"https://bugzilla.suse.com/973378"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-13305"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-18241"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-18249"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-1000199"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-1000204"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-1065"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-1092"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-1093"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-1094"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-1130"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-3665"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-5803"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-5848"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-7492"}],"related":["CVE-2017-13305","CVE-2017-18241","CVE-2017-18249","CVE-2018-1000199","CVE-2018-1000204","CVE-2018-1065","CVE-2018-1092","CVE-2018-1093","CVE-2018-1094","CVE-2018-1130","CVE-2018-3665","CVE-2018-5803","CVE-2018-5848","CVE-2018-7492"],"summary":"Security update for the Linux Kernel","upstream":["CVE-2017-13305","CVE-2017-18241","CVE-2017-18249","CVE-2018-1000199","CVE-2018-1000204","CVE-2018-1065","CVE-2018-1092","CVE-2018-1093","CVE-2018-1094","CVE-2018-1130","CVE-2018-3665","CVE-2018-5803","CVE-2018-5848","CVE-2018-7492"]}