Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:2262-1 Final 1 1 2019-09-02T07:05:01Z current 2019-09-02T07:05:01Z 2019-09-02T07:05:01Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 12 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-1125: Enable Spectre v1 swapgs mitigations (bsc#1139358). - CVE-2018-20855: An issue was discovered in create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace (bsc#1143045). - CVE-2019-14284: The drivers/block/floppy.c allowed a denial of service by setup_format_params division-by-zero. Two consecutive ioctls can trigger the bug: the first one should set the drive geometry with .sect and .rate values that make F_SECT_PER_TRACK be zero. Next, the floppy format operation should be called. It can be triggered by an unprivileged local user even when a floppy disk has not been inserted. NOTE: QEMU creates the floppy device by default (bsc#1143189). - CVE-2019-14283: The function set_geometry in drivers/block/floppy.c did not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It can be triggered by an unprivileged local user when a floppy disk has been inserted. NOTE: QEMU creates the floppy device by default (bsc#1143191). - CVE-2019-11810: A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This causes a Denial of Service, related to a use-after-free (bsc#1134399). - CVE-2019-13648: In the Linux kernel on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c (bnc#1142254). - CVE-2019-13631: In parse_hid_report_descriptor in drivers/input/tablet/gtco.c, a malicious USB device can send an HID report that triggers an out-of-bounds write during generation of debugging messages (bsc#1142023). The following non-security bugs were fixed: - bcache: Revert 'bcache: fix high CPU occupancy during journal' (bsc#1140652, bsc#1144288). - bcache: Revert 'bcache: free heap cache_set->flush_btree in bch_journal_free' (bsc#1140652, bsc#1144288). - bcache: add reclaimed_journal_buckets to struct cache_set (bsc#1140652, bsc#1144288). - bcache: fix race in btree_flush_write() (bsc#1140652, bsc#1144288). - bcache: fix stack corruption by PRECEDING_KEY() (bsc#1130972, bsc#1144257). - bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached (bsc#1130972, bsc#1144273). - bcache: performance improvement for btree_flush_write() (bsc#1140652, bsc#1144288). - bcache: remove retry_flush_write from struct cache_set (bsc#1140652, bsc#1144288). - mm: check VMA flags to avoid invalid PROT_NONE NUMA balancing (bsc#1142098). - powerpc/watchpoint: Restore NV GPRs while returning from exception (bsc#1140945, bsc#1141401, bsc#1141402, bsc#1141452, bsc#1141453, bsc#1141454). - xen-netfront: use napi_complete() correctly to prevent Rx stalling (bsc#1138744). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2019-2262,SUSE-SLE-Module-Public-Cloud-12-2019-2262,SUSE-SLE-SAP-12-SP1-2019-2262,SUSE-SLE-SERVER-12-SP1-2019-2262 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20192262-1/ Link for SUSE-SU-2019:2262-1 https://lists.suse.com/pipermail/sle-security-updates/2019-September/005864.html E-Mail link for SUSE-SU-2019:2262-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1130972 SUSE Bug 1130972 https://bugzilla.suse.com/1134399 SUSE Bug 1134399 https://bugzilla.suse.com/1138744 SUSE Bug 1138744 https://bugzilla.suse.com/1139358 SUSE Bug 1139358 https://bugzilla.suse.com/1140652 SUSE Bug 1140652 https://bugzilla.suse.com/1140945 SUSE Bug 1140945 https://bugzilla.suse.com/1141401 SUSE Bug 1141401 https://bugzilla.suse.com/1141402 SUSE Bug 1141402 https://bugzilla.suse.com/1141452 SUSE Bug 1141452 https://bugzilla.suse.com/1141453 SUSE Bug 1141453 https://bugzilla.suse.com/1141454 SUSE Bug 1141454 https://bugzilla.suse.com/1142023 SUSE Bug 1142023 https://bugzilla.suse.com/1142098 SUSE Bug 1142098 https://bugzilla.suse.com/1142254 SUSE Bug 1142254 https://bugzilla.suse.com/1143045 SUSE Bug 1143045 https://bugzilla.suse.com/1143189 SUSE Bug 1143189 https://bugzilla.suse.com/1143191 SUSE Bug 1143191 https://bugzilla.suse.com/1144257 SUSE Bug 1144257 https://bugzilla.suse.com/1144273 SUSE Bug 1144273 https://bugzilla.suse.com/1144288 SUSE Bug 1144288 https://www.suse.com/security/cve/CVE-2018-20855/ SUSE CVE CVE-2018-20855 page https://www.suse.com/security/cve/CVE-2019-1125/ SUSE CVE CVE-2019-1125 page https://www.suse.com/security/cve/CVE-2019-11810/ SUSE CVE CVE-2019-11810 page https://www.suse.com/security/cve/CVE-2019-13631/ SUSE CVE CVE-2019-13631 page https://www.suse.com/security/cve/CVE-2019-13648/ SUSE CVE CVE-2019-13648 page https://www.suse.com/security/cve/CVE-2019-14283/ SUSE CVE CVE-2019-14283 page https://www.suse.com/security/cve/CVE-2019-14284/ SUSE CVE CVE-2019-14284 page SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP1 kernel-debug-3.12.74-60.64.121.1 kernel-debug-base-3.12.74-60.64.121.1 kernel-debug-devel-3.12.74-60.64.121.1 kernel-debug-extra-3.12.74-60.64.121.1 kernel-default-3.12.74-60.64.121.1 kernel-default-base-3.12.74-60.64.121.1 kernel-default-devel-3.12.74-60.64.121.1 kernel-default-extra-3.12.74-60.64.121.1 kernel-default-man-3.12.74-60.64.121.1 kernel-devel-3.12.74-60.64.121.1 kernel-docs-3.12.74-60.64.121.1 kernel-ec2-3.12.74-60.64.121.1 kernel-ec2-base-3.12.74-60.64.121.1 kernel-ec2-devel-3.12.74-60.64.121.1 kernel-ec2-extra-3.12.74-60.64.121.1 kernel-macros-3.12.74-60.64.121.1 kernel-obs-build-3.12.74-60.64.121.1 kernel-obs-qa-3.12.74-60.64.121.1 kernel-source-3.12.74-60.64.121.1 kernel-source-vanilla-3.12.74-60.64.121.1 kernel-syms-3.12.74-60.64.121.1 kernel-vanilla-3.12.74-60.64.121.1 kernel-vanilla-devel-3.12.74-60.64.121.1 kernel-xen-3.12.74-60.64.121.1 kernel-xen-base-3.12.74-60.64.121.1 kernel-xen-devel-3.12.74-60.64.121.1 kernel-xen-extra-3.12.74-60.64.121.1 kernel-zfcpdump-3.12.74-60.64.121.1 kgraft-patch-3_12_74-60_64_121-default-1-2.3.1 kgraft-patch-3_12_74-60_64_121-xen-1-2.3.1 kernel-ec2-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Module for Public Cloud 12 kernel-ec2-devel-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Module for Public Cloud 12 kernel-ec2-extra-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Module for Public Cloud 12 kernel-default-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-default-base-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-default-devel-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-default-man-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-devel-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-macros-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-source-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-syms-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-xen-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-xen-base-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-xen-devel-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_121-default-1-2.3.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_121-xen-1-2.3.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kernel-default-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kernel-default-base-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kernel-default-devel-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kernel-devel-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kernel-macros-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kernel-source-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kernel-syms-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kernel-xen-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kernel-xen-base-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kernel-xen-devel-3.12.74-60.64.121.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kgraft-patch-3_12_74-60_64_121-default-1-2.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 kgraft-patch-3_12_74-60_64_121-xen-1-2.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 An issue was discovered in the Linux kernel before 4.18.7. In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace. CVE-2018-20855 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.121.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_121-default-1-2.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_121-xen-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_121-default-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_121-xen-1-2.3.1 low 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192262-1/ https://www.suse.com/security/cve/CVE-2018-20855.html CVE-2018-20855 https://bugzilla.suse.com/1143045 SUSE Bug 1143045 unknown CVE-2019-1125 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.121.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_121-default-1-2.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_121-xen-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_121-default-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_121-xen-1-2.3.1 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192262-1/ https://www.suse.com/security/cve/CVE-2019-1125.html CVE-2019-1125 https://bugzilla.suse.com/1139358 SUSE Bug 1139358 An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This causes a Denial of Service, related to a use-after-free. CVE-2019-11810 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.121.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_121-default-1-2.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_121-xen-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_121-default-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_121-xen-1-2.3.1 low 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192262-1/ https://www.suse.com/security/cve/CVE-2019-11810.html CVE-2019-11810 https://bugzilla.suse.com/1134399 SUSE Bug 1134399 In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1, a malicious USB device can send an HID report that triggers an out-of-bounds write during generation of debugging messages. CVE-2019-13631 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.121.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_121-default-1-2.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_121-xen-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_121-default-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_121-xen-1-2.3.1 moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192262-1/ https://www.suse.com/security/cve/CVE-2019-13631.html CVE-2019-13631 https://bugzilla.suse.com/1142023 SUSE Bug 1142023 In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c. CVE-2019-13648 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.121.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_121-default-1-2.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_121-xen-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_121-default-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_121-xen-1-2.3.1 low 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192262-1/ https://www.suse.com/security/cve/CVE-2019-13648.html CVE-2019-13648 https://bugzilla.suse.com/1142254 SUSE Bug 1142254 https://bugzilla.suse.com/1142265 SUSE Bug 1142265 In the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It can be triggered by an unprivileged local user when a floppy disk has been inserted. NOTE: QEMU creates the floppy device by default. CVE-2019-14283 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.121.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_121-default-1-2.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_121-xen-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_121-default-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_121-xen-1-2.3.1 moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192262-1/ https://www.suse.com/security/cve/CVE-2019-14283.html CVE-2019-14283 https://bugzilla.suse.com/1143191 SUSE Bug 1143191 In the Linux kernel before 5.2.3, drivers/block/floppy.c allows a denial of service by setup_format_params division-by-zero. Two consecutive ioctls can trigger the bug: the first one should set the drive geometry with .sect and .rate values that make F_SECT_PER_TRACK be zero. Next, the floppy format operation should be called. It can be triggered by an unprivileged local user even when a floppy disk has not been inserted. NOTE: QEMU creates the floppy device by default. CVE-2019-14284 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.74-60.64.121.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-macros-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-source-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-syms-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-xen-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_121-default-1-2.3.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_121-xen-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-macros-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-source-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-syms-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-base-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-xen-devel-3.12.74-60.64.121.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_121-default-1-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_74-60_64_121-xen-1-2.3.1 moderate 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192262-1/ https://www.suse.com/security/cve/CVE-2019-14284.html CVE-2019-14284 https://bugzilla.suse.com/1143189 SUSE Bug 1143189 https://bugzilla.suse.com/1143191 SUSE Bug 1143191