openSUSE Security Update : the Linux Kernel (openSUSE-2019-893)

high Nessus Plugin ID 123366


New! Plugin Severity Now Using CVSS v3

The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.


The remote openSUSE host is missing a security update.


The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed :

- CVE-2018-18710: An information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and CVE-2018-16658 (bnc#1113751).

- CVE-2018-18445: Faulty computation of numeric bounds in the BPF verifier permitted out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandled 32-bit right shifts (bnc#1112372).

- CVE-2018-18386: drivers/tty/n_tty.c allowed local attackers (who are able to access pseudo terminals) to hang/block further usage of any pseudo terminal devices due to an EXTPROC versus ICANON confusion in TIOCINQ (bnc#1094825).

- CVE-2017-18224: fs/ocfs2/aops.c omitted use of a semaphore and consequently has a race condition for access to the extent tree during read operations in DIRECT mode, which allowed local users to cause a denial of service (BUG) by modifying a certain e_cpos field (bnc#1084831).

- CVE-2017-16533: The usbhid_parse function in drivers/hid/usbhid/hid-core.c allowed local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1066674).

The following non-security bugs were fixed :

- acpi / processor: Fix the return value of acpi_processor_ids_walk() (bsc#1051510).

- aio: fix io_destroy(2) vs. lookup_ioctx() race (git-fixes).

- alsa: hda: Add 2 more models to the power_save blacklist (bsc#1051510).

- alsa: hda - Add mic quirk for the Lenovo G50-30 (17aa:3905) (bsc#1051510).

- alsa: hda - Add quirk for ASUS G751 laptop (bsc#1051510).

- alsa: hda - Fix headphone pin config for ASUS G751 (bsc#1051510).

- alsa: hda: fix unused variable warning (bsc#1051510).

- alsa: hda/realtek - Fix the problem of the front MIC on the Lenovo M715 (bsc#1051510).

- alsa: usb-audio: update quirk for B&W PX to remove microphone (bsc#1051510).

- apparmor: Check buffer bounds when mapping permissions mask (git-fixes).

- ASoC: intel: skylake: Add missing break in skl_tplg_get_token() (bsc#1051510).

- ASoC: Intel: Skylake: Reset the controller in probe (bsc#1051510).

- ASoC: rsnd: adg: care clock-frequency size (bsc#1051510).

- ASoC: rsnd: do not fallback to PIO mode when
-EPROBE_DEFER (bsc#1051510).

- ASoC: rt5514: Fix the issue of the delay volume applied again (bsc#1051510).

- ASoC: sigmadsp: safeload should not have lower byte limit (bsc#1051510).

- ASoC: wm8804: Add ACPI support (bsc#1051510).

- ath10k: fix kernel panic issue during pci probe (bsc#1051510).

- ath10k: fix scan crash due to incorrect length calculation (bsc#1051510).

- ath10k: fix use-after-free in ath10k_wmi_cmd_send_nowait (bsc#1051510).

- batman-adv: Avoid probe ELP information leak (bsc#1051510).

- batman-adv: fix backbone_gw refcount on queue_work() failure (bsc#1051510).

- batman-adv: fix hardif_neigh refcount on queue_work() failure (bsc#1051510).

- bdi: Fix another oops in wb_workfn() (bsc#1112746).

- bdi: Preserve kabi when adding cgwb_release_mutex (bsc#1112746).

- blkdev_report_zones_ioctl(): Use vmalloc() to allocate large buffers (bsc#1111819).

- blk-mq: I/O and timer unplugs are inverted in blktrace (bsc#1112713).

- block, bfq: fix wrong init of saved start time for weight raising (bsc#1112708).

- block: bfq: swap puts in bfqg_and_blkg_put (bsc#1112712).

- block: bvec_nr_vecs() returns value for wrong slab (bsc#1111834).

- bpf/verifier: disallow pointer subtraction (bsc#1083647).

- btrfs: Enhance btrfs_trim_fs function to handle error better (Dependency for bsc#1113667).

- btrfs: Ensure btrfs_trim_fs can trim the whole filesystem (bsc#1113667).

- btrfs: fix file data corruption after cloning a range and fsync (bsc#1111901).

- btrfs: fix missing error return in btrfs_drop_snapshot (Git-fixes bsc#1109919).

- btrfs: fix mount failure after fsync due to hard link recreation (bsc#1103543).

- btrfs: handle errors while updating refcounts in update_ref_for_cow (Git-fixes bsc#1109915).

- btrfs: send, fix invalid access to commit roots due to concurrent snapshotting (bsc#1111904).

- cdc-acm: fix race between reset and control messaging (bsc#1051510).

- ceph: avoid a use-after-free in ceph_destroy_options() (bsc#1111983).

- cifs: check for STATUS_USER_SESSION_DELETED (bsc#1112902).

- cifs: fix memory leak in SMB2_open() (bsc#1112894).

- cifs: Fix use after free of a mid_q_entry (bsc#1112903).

- clk: x86: add 'ether_clk' alias for Bay Trail / Cherry Trail (bsc#1051510).

- clk: x86: Stop marking clocks as CLK_IS_CRITICAL (bsc#1051510).

- clocksource/drivers/ti-32k: Add CLOCK_SOURCE_SUSPEND_NONSTOP flag for non-am43 SoCs (bsc#1051510).

- clocksource/drivers/timer-atmel-pit: Properly handle error cases (bsc#1051510).

- coda: fix 'kernel memory exposure attempt' in fsync (bsc#1051510).

- crypto: caam - fix implicit casts in endianness helpers (bsc#1051510).

- crypto: chelsio - Fix memory corruption in DMA Mapped buffers (bsc#1051510).

- crypto: lrw - Fix out-of bounds access on counter overflow (bsc#1051510).

- crypto: tcrypt - fix ghash-generic speed test (bsc#1051510).

- dax: Fix deadlock in dax_lock_mapping_entry() (bsc#1109951).

- debugobjects: Make stack check warning more informative (bsc#1051510).

- documentation/l1tf: Fix small spelling typo (bsc#1051510).

- drm/amdgpu: Fix SDMA HQD destroy error on gfx_v7 (bsc#1051510).

- drm/amdgpu: Fix vce work queue was not cancelled when suspend (bsc#1106110)

- drm/amdgpu/powerplay: fix missing break in switch statements (bsc#1113722)

- drm/edid: VSDB yCBCr420 Deep Color mode bit definitions (bsc#1051510).

- drm/hisilicon: hibmc: Do not carry error code in HiBMC framebuffer (bsc#1113722)

- drm/hisilicon: hibmc: Do not overwrite fb helper surface depth (bsc#1113722)

- drm/i915/audio: Hook up component bindings even if displays are (bsc#1113722)

- drm/i915/dp: Link train Fallback on eDP only if fallback link BW can fit panel's native mode (bsc#1051510).

- drm/i915/gen9+: Fix initial readout for Y tiled framebuffers (bsc#1113722)

- drm/i915/glk: Add Quirk for GLK NUC HDMI port issues (bsc#1051510).

- drm/i915: Restore vblank interrupts earlier (bsc#1051510).

- drm: mali-dp: Call drm_crtc_vblank_reset on device init (bsc#1051510).

- drm/mediatek: fix OF sibling-node lookup (bsc#1106110)

- drm/msm: fix OF child-node lookup (bsc#1106110)

- drm/nouveau: Do not disable polling in fallback mode (bsc#1103356).

- drm/sti: do not remove the drm_bridge that was never added (bsc#1100132)

- drm/sun4i: Fix an ulong overflow in the dotclock driver (bsc#1106110)

- drm/virtio: fix bounds check in virtio_gpu_cmd_get_capset() (bsc#1113722)

- e1000: check on netif_running() before calling e1000_up() (bsc#1051510).

- e1000: ensure to free old tx/rx rings in set_ringparam() (bsc#1051510).

- eeprom: at24: change nvmem stride to 1 (bsc#1051510).

- eeprom: at24: check at24_read/write arguments (bsc#1051510).

- eeprom: at24: correctly set the size for at24mac402 (bsc#1051510).

- enic: do not call enic_change_mtu in enic_probe (bsc#1051510).

- enic: handle mtu change for vf properly (bsc#1051510).

- enic: initialize enic->rfs_h.lock in enic_probe (bsc#1051510).

- ethtool: fix a privilege escalation bug (bsc#1076830).

- ext2, dax: set ext2_dax_aops for dax files (bsc#1112554).

- ext4: avoid arithemetic overflow that can trigger a BUG (bsc#1112736).

- ext4: avoid divide by zero fault when deleting corrupted inline directories (bsc#1112735).

- ext4: check for NUL characters in extended attribute's name (bsc#1112732).

- ext4: check to make sure the rename(2)'s destination is not freed (bsc#1112734).

- ext4: do not mark mmp buffer head dirty (bsc#1112743).

- ext4: fix online resize's handling of a too-small final block group (bsc#1112739).

- ext4: fix online resizing for bigalloc file systems with a 1k block size (bsc#1112740).

- ext4: fix spectre gadget in ext4_mb_regular_allocator() (bsc#1112733).

- ext4: recalucate superblock checksum after updating free blocks/inodes (bsc#1112738).

- ext4: reset error code in ext4_find_entry in fallback (bsc#1112731).

- ext4: show test_dummy_encryption mount option in /proc/mounts (bsc#1112741).

- fbdev/omapfb: fix omapfb_memory_read infoleak (bsc#1051510).

- fs/quota: Fix spectre gadget in do_quotactl (bsc#1112745).

- hfsplus: do not return 0 when fill_super() failed (bsc#1051510).

- hfsplus: stop workqueue when fill_super() failed (bsc#1051510).

- hfs: prevent crash on exit from failed search (bsc#1051510).

- hid: hid-sensor-hub: Force logical minimum to 1 for power and report state (bsc#1051510).

- hid: quirks: fix support for Apple Magic Keyboards (bsc#1051510).

- hid: sensor-hub: Restore fixup for Lenovo ThinkPad Helix 2 sensor hub report (bsc#1051510).

- hv: avoid crash in vmbus sysfs files (bnc#1108377).

- hv_netvsc: fix schedule in RCU context ().

- hwrng: core - document the quality field (bsc#1051510).

- hypfs_kill_super(): deal with failed allocations (bsc#1051510).

- i2c: i2c-scmi: fix for i2c_smbus_write_block_data (bsc#1051510).

- i2c: rcar: cleanup DMA for all kinds of failure (bsc#1051510).

- iio: adc: at91: fix acking DRDY irq on simple conversions (bsc#1051510).

- iio: adc: at91: fix wrong channel number in triggered buffer mode (bsc#1051510).

- iio: adc: imx25-gcq: Fix leak of device_node in mx25_gcq_setup_cfgs() (bsc#1051510).

- input: atakbd - fix Atari CapsLock behaviour (bsc#1051510).

- input: atakbd - fix Atari keymap (bsc#1051510).

- intel_th: pci: Add Ice Lake PCH support (bsc#1051510).

- iommu/arm-smmu: Error out only if not enough context interrupts (bsc#1106237).

- iommu/vt-d: Add definitions for PFSID (bsc#1106237).

- iommu/vt-d: Fix dev iotlb pfsid use (bsc#1106237).

- iommu/vt-d: Fix scatterlist offset handling (bsc#1106237).

- iwlwifi: dbg: do not crash if the firmware crashes in the middle of a debug dump (bsc#1051510).

- iwlwifi: mvm: Allow TKIP for AP mode (bsc#1051510).

- iwlwifi: mvm: check for n_profiles validity in EWRD ACPI (bsc#1051510).

- iwlwifi: mvm: clear HW_RESTART_REQUESTED when stopping the interface (bsc#1051510).

- iwlwifi: mvm: open BA session only when sta is authorized (bsc#1051510).

- iwlwifi: mvm: send BCAST management frames to the right station (bsc#1051510).

- iwlwifi: pcie: gen2: build A-MSDU only for GSO (bsc#1051510).

- iwlwifi: pcie gen2: check iwl_pcie_gen2_set_tb() return value (bsc#1051510).

- jbd2: fix use after free in jbd2_log_do_checkpoint() (bsc#1113257).

- kABI: Hide get_msr_feature() in kvm_x86_ops (bsc#1106240).

- Kbuild: fix # escaping in .cmd files for future Make (git-fixes).

- kernfs: update comment about kernfs_path() return value (bsc#1051510).

- kprobes/x86: Fix %p uses in error messages (bsc#1110006).

- ksm: fix unlocked iteration over vmas in cmp_and_merge_page() (VM Functionality bsc#1111806).

- kvm: Make VM ioctl do valloc for some archs (bsc#1111506).

- kvm: SVM: Add MSR-based feature support for serializing LFENCE (bsc#1106240).

- kvm: VMX: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (bsc#1106240).

- kvm: VMX: Tell the nested hypervisor to skip L1D flush on vmentry (bsc#1106240).

- kvm: x86: Add a framework for supporting MSR-based features (bsc#1106240).

- kvm: x86: define SVM/VMX specific kvm_arch_[alloc|free]_vm (bsc#1111506).

- kvm: X86: Introduce kvm_get_msr_feature() (bsc#1106240).

- kvm/x86: kABI fix for vm_alloc/vm_free changes (bsc#1111506).

- kvm: x86: Set highest physical address bits in non-present/reserved SPTEs (bsc#1106240).

- libertas: call into generic suspend code before turning off power (bsc#1051510).

- libnvdimm, dimm: Maximize label transfer size (bsc#1111921, bsc#1113408, bsc#1113972).

- libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7 (bsc#1111921, bsc#1113408, bsc#1113972).

- libnvdimm, label: Fix sparse warning (bsc#1111921, bsc#1113408, bsc#1113972).

- lib/ubsan: add type mismatch handler for new GCC/Clang (bsc#1051510).

- lib/ubsan.c: s/missaligned/misaligned/ (bsc#1051510).

- loop: add recursion validation to LOOP_CHANGE_FD (bsc#1112711).

- loop: do not call into filesystem while holding lo_ctl_mutex (bsc#1112710).

- loop: fix LOOP_GET_STATUS lock imbalance (bsc#1113284).

- mac80211: minstrel: fix using short preamble CCK rates on HT clients (bsc#1051510).

- mach64: detect the dot clock divider correctly on sparc (bsc#1051510).

- media: af9035: prevent buffer overflow on write (bsc#1051510).

- media: cx231xx: fix potential sign-extension overflow on large shift (bsc#1051510).

- media: dvb: fix compat ioctl translation (bsc#1051510).

- media: em28xx: fix input name for Terratec AV 350 (bsc#1051510).

- media: em28xx: use a default format if TRY_FMT fails (bsc#1051510).

- media: pci: cx23885: handle adding to list failure (bsc#1051510).

- media: tvp5150: avoid going past array on v4l2_querymenu() (bsc#1051510).

- media: tvp5150: fix switch exit in set control handler (bsc#1051510).

- media: tvp5150: fix width alignment during set_selection() (bsc#1051510).

- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment (bsc#1051510).

- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD (bsc#1051510).

- media: vsp1: Fix YCbCr planar formats pitch calculation (bsc#1051510).

- mfd: arizona: Correct calling of runtime_put_sync (bsc#1051510).

- mmc: block: avoid multiblock reads for the last sector in SPI mode (bsc#1051510).

- mm: fix BUG_ON() in vmf_insert_pfn_pud() from VM_MIXEDMAP removal (bsc#1111841).

- mm/migrate: Use spin_trylock() while resetting rate limit ().

- mm: /proc/pid/pagemap: hide swap entries from unprivileged users (Git-fixes bsc#1109907).

- move changes without Git-commit out of sorted section

- nfc: nfcmrvl_uart: fix OF child-node lookup (bsc#1051510).

- nfs: Avoid quadratic search when freeing delegations (bsc#1084760).

- nvdimm: Clarify comment in sizeof_namespace_index (bsc#1111921, bsc#1113408, bsc#1113972).

- nvdimm: Remove empty if statement (bsc#1111921, bsc#1113408, bsc#1113972).

- nvdimm: Sanity check labeloff (bsc#1111921, bsc#1113408, bsc#1113972).

- nvdimm: Split label init out from the logic for getting config data (bsc#1111921, bsc#1113408, bsc#1113972).

- nvdimm: Use namespace index data to reduce number of label reads needed (bsc#1111921, bsc#1113408, bsc#1113972).

- of: add helper to lookup compatible child node (bsc#1106110)

- orangefs: fix deadlock; do not write i_size in read_iter (bsc#1051510).

- orangefs: initialize op on loop restart in orangefs_devreq_read (bsc#1051510).

- orangefs_kill_sb(): deal with allocation failures (bsc#1051510).

- orangefs: use list_for_each_entry_safe in purge_waiting_ops (bsc#1051510).

- ovl: fix format of setxattr debug (git-fixes).

- ovl: Sync upper dirty data when syncing overlayfs (git-fixes).

- pci/ASPM: Fix link_state teardown on device removal (bsc#1051510).

- pci: hv: Do not wait forever on a device that has disappeared (bsc#1109806).

- pci: Reprogram bridge prefetch registers on resume (bsc#1051510).

- powerpc/mm/hugetlb: initialize the pagetable cache correctly for hugetlb (bsc#1091800).

- powerpc/powernv/ioda2: Reduce upper limit for DMA window size (bsc#1055120).

- powerpc/pseries: Fix build break for SPLPAR=n and CPU hotplug (bsc#1079524, git-fixes).

- powerpc/pseries: Fix CONFIG_NUMA=n build (bsc#1067906, git-fixes).

- powerpc/pseries: Fix 'OF: ERROR: Bad of_node_put() on /cpus' during DLPAR (bsc#1113295).

- powerpc: pseries: remove dlpar_attach_node dependency on full path (bsc#1113295).

- powerpc/rtas: Fix a potential race between CPU-Offline & Migration (bsc#1111870).

- printk: drop in_nmi check from printk_safe_flush_on_panic() (bsc#1112170).

- printk/tracing: Do not trace printk_nmi_enter() (bsc#1112208).

- proc: restrict kernel stack dumps to root (git-fixes).
blacklist.conf :

- qmi_wwan: Added support for Gemalto's Cinterion ALASxx WWAN interface (bsc#1051510).

- qrtr: add MODULE_ALIAS macro to smd (bsc#1051510).

- r8169: Clear RTL_FLAG_TASK_*_PENDING when clearing RTL_FLAG_TASK_ENABLED (bsc#1051510).

- random: rate limit unseeded randomness warnings (git-fixes).

- rculist: add list_for_each_entry_from_rcu() (bsc#1084760).

- rculist: Improve documentation for list_for_each_entry_from_rcu() (bsc#1084760).

- reiserfs: add check to detect corrupted directory entry (bsc#1109818).

- reiserfs: do not panic on bad directory entries (bsc#1109818).

- scsi: core: Allow state transitions from OFFLINE to BLOCKED (bsc#1112246).

- scsi: ipr: Eliminate duplicate barriers ().

- scsi: ipr: fix incorrect indentation of assignment statement ().

- scsi: ipr: Use dma_pool_zalloc() ().

- scsi: libfc: check fc_frame_payload_get() return value for null (bsc#1104731).

- scsi: libfc: retry PRLI if we cannot analyse the payload (bsc#1104731).

- scsi: qla2xxx: Fix memory leak for allocating abort IOCB (bsc#1111830).

- scsi: target: prefer dbroot of /etc/target over /var/target (bsc#1111928).

- serial: 8250: Fix clearing FIFOs in RS485 mode again (bsc#1051510).

- series.conf: moved some Xen patches to the sorted region xen/blkfront: correct purging of persistent grants (bnc#1112514).

- signal: Properly deliver SIGSEGV from x86 uprobes (bsc#1110006).

- smb2: fix missing files in root share directory listing (bsc#1112907).

- smb3: fill in statfs fsid and correct namelen (bsc#1112905).

- smb3: fix reset of bytes read and written stats (bsc#1112906).

- smb3: on reconnect set PreviousSessionId field (bsc#1112899).

- sock_diag: fix use-after-free read in __sk_free (bsc#1051510).

- soc/tegra: pmc: Fix child-node lookup (bsc#1051510).

- sound: do not call skl_init_chip() to reset intel skl soc (bsc#1051510).

- sound: enable interrupt after dma buffer initialization (bsc#1051510).

- spi/bcm63xx-hsspi: keep pll clk enabled (bsc#1051510).

- spi: bcm-qspi: switch back to reading flash using smaller chunks (bsc#1051510).

- spi: sh-msiof: fix deferred probing (bsc#1051510).

- squashfs: more metadata hardening (bsc#1051510).

- staging: comedi: ni_mio_common: protect register write overflow (bsc#1051510).

- stm: Potential read overflow in stm_char_policy_set_ioctl() (bsc#1051510).

- switchtec: Fix Spectre v1 vulnerability (bsc#1051510).

- sysfs: Do not return POSIX ACL xattrs via listxattr (git-fixes).

- target: log Data-Out timeouts as errors (bsc#1095805).

- target: log NOP ping timeouts as errors (bsc#1095805).

- target: split out helper for cxn timeout error stashing (bsc#1095805).

- target: stash sess_err_stats on Data-Out timeout (bsc#1095805).

- target: use ISCSI_IQN_LEN in iscsi_target_stat (bsc#1095805).

- team: Forbid enslaving team device to itself (bsc#1051510).

- tools build: fix # escaping in .cmd files for future Make (git-fixes).

- tools/vm/page-types.c: fix 'defined but not used' warning (bsc#1051510).

- tools/vm/slabinfo.c: fix sign-compare warning (bsc#1051510).

- tracing: Add barrier to trace_printk() buffer nesting modification (bsc#1112219).

- tty: fix data race between tty_init_dev and flush of buf (bnc#1105428).

- tty: Hold tty_ldisc_lock() during tty_reopen() (bnc#1105428).

- tty/ldsem: Add lockdep asserts for ldisc_sem (bnc#1105428).

- tty/ldsem: Convert to regular lockdep annotations (bnc#1105428).

- tty/ldsem: Decrement wait_readers on timeouted down_read() (bnc#1105428).

- tty/ldsem: Wake up readers after timed out down_write() (bnc#1105428).

- tty: Simplify tty->count math in tty_reopen() (bnc#1105428).

- usb: chipidea: Prevent unbalanced IRQ disable (bsc#1051510).

- usb: gadget: fotg210-udc: Fix memory leak of fotg210->ep[i] (bsc#1051510).

- usb: gadget: fsl_udc_core: check allocation return value and cleanup on failure (bsc#1051510).

- usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation (bsc#1051510).

- usbip: tools: fix atoi() on non-null terminated string (bsc#1051510).

- usb: remove LPM management from usb_driver_claim_interface() (bsc#1051510).

- usb: serial: cypress_m8: fix interrupt-out transfer length (bsc#1051510).

- usb: serial: simple: add Motorola Tetra MTP6550 id (bsc#1051510).

- usb: xhci-mtk: resume USB3 roothub first (bsc#1051510).

- usb: yurex: Check for truncation in yurex_read() (bsc#1051510).

- userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (bsc#1109739).

- Use upstream version of pci-hyperv patch (35a88a1)

- vmbus: do not return values for uninitalized channels (bsc#1051510).

- vti4: Do not count header length twice on tunnel setup (bsc#1051510).

- vti6: fix PMTU caching and reporting on xmit (bsc#1051510).

- vti6: remove !skb->ignore_df check from vti6_xmit() (bsc#1051510).

- Workaround for mysterious NVMe breakage with i915 CFL (bsc#1111040).

- x86/acpi: Prevent X2APIC id 0xffffffff from being accounted (bsc#1110006).

- x86/boot/KASLR: Work around firmware bugs by excluding EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR's choice (bnc#1112878).

- x86/boot: Move EISA setup to a separate file (bsc#1110006).

- x86/cpufeature: Add User-Mode Instruction Prevention definitions (bsc#1110006).

- x86/cpufeatures: Add Intel Total Memory Encryption cpufeature (bsc#1110006).

- x86/eisa: Add missing include (bsc#1110006).

- x86/EISA: Do not probe EISA bus for Xen PV guests (bsc#1110006).

- x86/fpu: Remove second definition of fpu in
__fpu__restore_sig() (bsc#1110006).

- x86/kasan: Panic if there is not enough memory to boot (bsc#1110006).

- x86/MCE: Fix stack out-of-bounds write in mce-inject.c:
Flags_read() (bsc#1110006).

- x86/paravirt: Fix some warning messages (bnc#1065600).

- x86/percpu: Fix this_cpu_read() (bsc#1110006).

- x86/speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (bsc#1105536).

- x86/time: Correct the attribute on jiffies' definition (bsc#1110006).

- xen/gntdev: avoid out of bounds access in case of partial gntdev_mmap() (bnc#1065600).

- xen: Remove unnecessary BUG_ON from __unbind_from_irq() (bnc#1065600).

- xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent (bnc#1065600).

- xfrm: use complete IPv6 addresses for hash (bsc#1109330).

- xfs: do not fail when converting shortform attr to long form during ATTR_REPLACE (bsc#1105025).

- xhci: Add missing CAS workaround for Intel Sunrise Point xHCI (bsc#1051510).

- xhci: Do not print a warning when setting link state for disabled ports (bsc#1051510).


Update the affected the Linux Kernel packages.

See Also

Plugin Details

Severity: High

ID: 123366

File Name: openSUSE-2019-893.nasl

Version: 1.4

Type: local

Agent: unix

Published: 3/27/2019

Updated: 1/19/2021

Dependencies: ssh_get_info.nasl

Risk Information


Risk Factor: Medium

Score: 5.9


Risk Factor: High

Base Score: 7.2

Temporal Score: 5.3

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C


Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:2.3:o:novell:opensuse:15.0:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-debug:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-default:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-source:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-syms:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-vanilla:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-debug-base:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-default-base:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-debug-base-debuginfo:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-debug-debuginfo:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-debug-debugsource:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-debug-devel:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-debug-devel-debuginfo:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-default-base-debuginfo:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-default-debuginfo:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-default-debugsource:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-default-devel:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-default-devel-debuginfo:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-devel:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-source-vanilla:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-vanilla-debuginfo:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-vanilla-debugsource:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-vanilla-devel:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-vanilla-devel-debuginfo:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-macros:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-obs-build:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-obs-build-debugsource:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-obs-qa:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-docs-html:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-kvmsmall:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-kvmsmall-base:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-kvmsmall-base-debuginfo:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-kvmsmall-debuginfo:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-kvmsmall-debugsource:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-kvmsmall-devel:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-vanilla-base:*:*:*:*:*:*:*, p-cpe:2.3:a:novell:opensuse:kernel-vanilla-base-debuginfo:*:*:*:*:*:*:*

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 3/23/2019

Vulnerability Publication Date: 11/4/2017

Reference Information

CVE: CVE-2018-16658, CVE-2018-10940, CVE-2017-16533, CVE-2017-18224, CVE-2018-18386, CVE-2018-18445, CVE-2018-18710