Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:0828-1 Final 1 1 2019-04-01T09:28:05Z current 2019-04-01T09:28:05Z 2019-04-01T09:28:05Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-2024: A use-after-free when disconnecting a source was fixed which could lead to crashes. bnc#1129179). - CVE-2019-9213: expand_downwards in mm/mmap.c lacked a check for the mmap minimum address, which made it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task (bnc#1128166). - CVE-2018-14633: A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI initiator is processed. (bnc#1107829). - CVE-2019-7221: The KVM implementation in the Linux kernel had a Use-after-Free (bnc#1124732). - CVE-2019-7222: The KVM implementation in the Linux kernel had an Information Leak (bnc#1124735). - CVE-2019-6974: kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandled reference counting because of a race condition, which led to a use-after-free (bnc#1124728). The following non-security bugs were fixed: - copy_mount_string: Limit string length to PATH_MAX (bsc#1082943). - enic: add wq clean up budget (bsc#1075697, bsc#1120691. bsc#1102959). - ibmvscsi: Fix empty event pool access during host removal (bsc#1119019). - ipv4: ipv6: Adjust the frag mem limit after truesize has been changed (bsc#1110286). - kmps: obsolete older KMPs of the same flavour (bsc#1127155, bsc#1109137). - netfilter: ipv6: Adjust the frag mem limit after truesize has been changed (bsc#1110286). - perf/x86: Add sysfs entry to freeze counters on SMI (bsc#1121805). - perf/x86/intel: Delay memory deallocation until x86_pmu_dead_cpu() (bsc#1121805). - perf/x86/intel: Do not enable freeze-on-smi for PerfMon V1 (bsc#1121805). - perf/x86/intel: Fix memory corruption (bsc#1121805). - perf/x86/intel: Generalize dynamic constraint creation (bsc#1121805). - perf/x86/intel: Implement support for TSX Force Abort (bsc#1121805). - perf/x86/intel: Make cpuc allocations consistent (bsc#1121805). - pseries/energy: Use OF accessor function to read ibm,drc-indexes (bsc#1129080). - restore cond_resched() in shrink_dcache_parent() (bsc#1098599, bsc#1105402, bsc#1127758). - rps: flow_dissector: Fix uninitialized flow_keys used in __skb_get_hash possibly (bsc#1108145). - scsi: megaraid_sas: Send SYNCHRONIZE_CACHE for VD to firmware (bsc#1121698). - scsi: sym53c8xx: fix NULL pointer dereference panic in sym_int_sir() (bsc#1125315). - x86: Add TSX Force Abort CPUID/MSR (bsc#1121805). - x86: respect memory size limiting via mem= parameter (bsc#1117645). - x86/spectre_v2: Do not check microcode versions when running under hypervisors (bsc#1122821). - x86/xen: dont add memory above max allowed allocation (bsc#1117645). - xen-netfront: Fix hang on device removal (bnc#1012382). - xfrm: use complete IPv6 addresses for hash (bsc#1109330). - xfs: remove filestream item xfs_inode reference (bsc#1127961). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2019-828,SUSE-OpenStack-Cloud-7-2019-828,SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2019-828,SUSE-SLE-HA-12-SP2-2019-828,SUSE-SLE-SAP-12-SP2-2019-828,SUSE-SLE-SERVER-12-SP2-2019-828,SUSE-SLE-SERVER-12-SP2-BCL-2019-828,SUSE-Storage-4-2019-828 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20190828-1/ Link for SUSE-SU-2019:0828-1 https://lists.suse.com/pipermail/sle-security-updates/2019-April/005273.html E-Mail link for SUSE-SU-2019:0828-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1012382 SUSE Bug 1012382 https://bugzilla.suse.com/1075697 SUSE Bug 1075697 https://bugzilla.suse.com/1082943 SUSE Bug 1082943 https://bugzilla.suse.com/1098599 SUSE Bug 1098599 https://bugzilla.suse.com/1102959 SUSE Bug 1102959 https://bugzilla.suse.com/1105402 SUSE Bug 1105402 https://bugzilla.suse.com/1107829 SUSE Bug 1107829 https://bugzilla.suse.com/1108145 SUSE Bug 1108145 https://bugzilla.suse.com/1109137 SUSE Bug 1109137 https://bugzilla.suse.com/1109330 SUSE Bug 1109330 https://bugzilla.suse.com/1110286 SUSE Bug 1110286 https://bugzilla.suse.com/1117645 SUSE Bug 1117645 https://bugzilla.suse.com/1119019 SUSE Bug 1119019 https://bugzilla.suse.com/1120691 SUSE Bug 1120691 https://bugzilla.suse.com/1121698 SUSE Bug 1121698 https://bugzilla.suse.com/1121805 SUSE Bug 1121805 https://bugzilla.suse.com/1122821 SUSE Bug 1122821 https://bugzilla.suse.com/1124728 SUSE Bug 1124728 https://bugzilla.suse.com/1124732 SUSE Bug 1124732 https://bugzilla.suse.com/1124735 SUSE Bug 1124735 https://bugzilla.suse.com/1125315 SUSE Bug 1125315 https://bugzilla.suse.com/1127155 SUSE Bug 1127155 https://bugzilla.suse.com/1127758 SUSE Bug 1127758 https://bugzilla.suse.com/1127961 SUSE Bug 1127961 https://bugzilla.suse.com/1128166 SUSE Bug 1128166 https://bugzilla.suse.com/1129080 SUSE Bug 1129080 https://bugzilla.suse.com/1129179 SUSE Bug 1129179 https://www.suse.com/security/cve/CVE-2018-14633/ SUSE CVE CVE-2018-14633 page https://www.suse.com/security/cve/CVE-2019-2024/ SUSE CVE CVE-2019-2024 page https://www.suse.com/security/cve/CVE-2019-6974/ SUSE CVE CVE-2019-6974 page https://www.suse.com/security/cve/CVE-2019-7221/ SUSE CVE CVE-2019-7221 page https://www.suse.com/security/cve/CVE-2019-7222/ SUSE CVE CVE-2019-7222 page https://www.suse.com/security/cve/CVE-2019-9213/ SUSE CVE CVE-2019-9213 page SUSE Enterprise Storage 4 SUSE Linux Enterprise High Availability Extension 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE OpenStack Cloud 7 cluster-md-kmp-debug-4.4.121-92.104.1 cluster-md-kmp-default-4.4.121-92.104.1 cluster-md-kmp-vanilla-4.4.121-92.104.1 cluster-network-kmp-debug-4.4.121-92.104.1 cluster-network-kmp-default-4.4.121-92.104.1 cluster-network-kmp-vanilla-4.4.121-92.104.1 dlm-kmp-debug-4.4.121-92.104.1 dlm-kmp-default-4.4.121-92.104.1 dlm-kmp-vanilla-4.4.121-92.104.1 gfs2-kmp-debug-4.4.121-92.104.1 gfs2-kmp-default-4.4.121-92.104.1 gfs2-kmp-vanilla-4.4.121-92.104.1 kernel-debug-4.4.121-92.104.1 kernel-debug-base-4.4.121-92.104.1 kernel-debug-devel-4.4.121-92.104.1 kernel-debug-extra-4.4.121-92.104.1 kernel-debug-kgraft-4.4.121-92.104.1 kernel-default-4.4.121-92.104.1 kernel-default-base-4.4.121-92.104.1 kernel-default-devel-4.4.121-92.104.1 kernel-default-extra-4.4.121-92.104.1 kernel-default-kgraft-4.4.121-92.104.1 kernel-default-man-4.4.121-92.104.1 kernel-devel-4.4.121-92.104.1 kernel-docs-4.4.121-92.104.1 kernel-docs-html-4.4.121-92.104.1 kernel-docs-pdf-4.4.121-92.104.1 kernel-macros-4.4.121-92.104.1 kernel-obs-build-4.4.121-92.104.1 kernel-obs-qa-4.4.121-92.104.1 kernel-source-4.4.121-92.104.1 kernel-source-vanilla-4.4.121-92.104.1 kernel-syms-4.4.121-92.104.1 kernel-vanilla-4.4.121-92.104.1 kernel-vanilla-base-4.4.121-92.104.1 kernel-vanilla-devel-4.4.121-92.104.1 kernel-zfcpdump-4.4.121-92.104.1 kgraft-patch-4_4_121-92_104-default-1-3.3.1 ocfs2-kmp-debug-4.4.121-92.104.1 ocfs2-kmp-default-4.4.121-92.104.1 ocfs2-kmp-vanilla-4.4.121-92.104.1 kernel-default-4.4.121-92.104.1 as a component of SUSE Enterprise Storage 4 kernel-default-base-4.4.121-92.104.1 as a component of SUSE Enterprise Storage 4 kernel-default-devel-4.4.121-92.104.1 as a component of SUSE Enterprise Storage 4 kernel-devel-4.4.121-92.104.1 as a component of SUSE Enterprise Storage 4 kernel-macros-4.4.121-92.104.1 as a component of SUSE Enterprise Storage 4 kernel-source-4.4.121-92.104.1 as a component of SUSE Enterprise Storage 4 kernel-syms-4.4.121-92.104.1 as a component of SUSE Enterprise Storage 4 kgraft-patch-4_4_121-92_104-default-1-3.3.1 as a component of SUSE Enterprise Storage 4 cluster-md-kmp-default-4.4.121-92.104.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 cluster-network-kmp-default-4.4.121-92.104.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 dlm-kmp-default-4.4.121-92.104.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 gfs2-kmp-default-4.4.121-92.104.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 ocfs2-kmp-default-4.4.121-92.104.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 kernel-default-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-base-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-devel-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-devel-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-macros-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-source-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-syms-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-base-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-devel-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-man-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-devel-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-macros-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-source-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-syms-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kgraft-patch-4_4_121-92_104-default-1-3.3.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-default-base-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-default-devel-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-devel-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-macros-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-source-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-syms-4.4.121-92.104.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kgraft-patch-4_4_121-92_104-default-1-3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-default-4.4.121-92.104.1 as a component of SUSE OpenStack Cloud 7 kernel-default-base-4.4.121-92.104.1 as a component of SUSE OpenStack Cloud 7 kernel-default-devel-4.4.121-92.104.1 as a component of SUSE OpenStack Cloud 7 kernel-default-man-4.4.121-92.104.1 as a component of SUSE OpenStack Cloud 7 kernel-devel-4.4.121-92.104.1 as a component of SUSE OpenStack Cloud 7 kernel-macros-4.4.121-92.104.1 as a component of SUSE OpenStack Cloud 7 kernel-source-4.4.121-92.104.1 as a component of SUSE OpenStack Cloud 7 kernel-syms-4.4.121-92.104.1 as a component of SUSE OpenStack Cloud 7 kgraft-patch-4_4_121-92_104-default-1-3.3.1 as a component of SUSE OpenStack Cloud 7 A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI initiator is processed. An unauthenticated remote attacker can cause a stack buffer overflow and smash up to 17 bytes of the stack. The attack requires the iSCSI target to be enabled on the victim host. Depending on how the target's code was built (i.e. depending on a compiler, compile flags and hardware architecture) an attack may lead to a system crash and thus to a denial-of-service or possibly to a non-authorized access to data exported by an iSCSI target. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is highly unlikely. Kernel versions 4.18.x, 4.14.x and 3.10.x are believed to be vulnerable. CVE-2018-14633 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.104.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_104-default-1-3.3.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_104-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_104-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_104-default-1-3.3.1 moderate 8.3 AV:N/AC:M/Au:N/C:P/I:P/A:C 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190828-1/ https://www.suse.com/security/cve/CVE-2018-14633.html CVE-2018-14633 https://bugzilla.suse.com/1107829 SUSE Bug 1107829 https://bugzilla.suse.com/1107832 SUSE Bug 1107832 In em28xx_unregister_dvb of em28xx-dvb.c, there is a possible use after free issue. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111761954References: Upstream kernel CVE-2019-2024 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.104.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_104-default-1-3.3.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_104-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_104-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_104-default-1-3.3.1 moderate 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190828-1/ https://www.suse.com/security/cve/CVE-2019-2024.html CVE-2019-2024 https://bugzilla.suse.com/1129179 SUSE Bug 1129179 In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free. CVE-2019-6974 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.104.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_104-default-1-3.3.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_104-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_104-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_104-default-1-3.3.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.8 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190828-1/ https://www.suse.com/security/cve/CVE-2019-6974.html CVE-2019-6974 https://bugzilla.suse.com/1124728 SUSE Bug 1124728 https://bugzilla.suse.com/1124729 SUSE Bug 1124729 The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free. CVE-2019-7221 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.104.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_104-default-1-3.3.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_104-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_104-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_104-default-1-3.3.1 moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P 7.5 CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190828-1/ https://www.suse.com/security/cve/CVE-2019-7221.html CVE-2019-7221 https://bugzilla.suse.com/1124732 SUSE Bug 1124732 https://bugzilla.suse.com/1124734 SUSE Bug 1124734 The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak. CVE-2019-7222 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.104.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_104-default-1-3.3.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_104-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_104-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_104-default-1-3.3.1 low 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N 2.8 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190828-1/ https://www.suse.com/security/cve/CVE-2019-7222.html CVE-2019-7222 https://bugzilla.suse.com/1124735 SUSE Bug 1124735 In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task. CVE-2019-9213 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.104.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.104.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_104-default-1-3.3.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.104.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_104-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_104-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.104.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_104-default-1-3.3.1 moderate 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190828-1/ https://www.suse.com/security/cve/CVE-2019-9213.html CVE-2019-9213 https://bugzilla.suse.com/1128166 SUSE Bug 1128166 https://bugzilla.suse.com/1128378 SUSE Bug 1128378 https://bugzilla.suse.com/1129016 SUSE Bug 1129016