openSUSE Security Update : kernel (openSUSE-SU-2012:1330-1)

High Nessus Plugin ID 74778

New! Vulnerability Priority Rating (VPR)

Tenable calculates a dynamic VPR for every vulnerability. VPR combines vulnerability information with threat intelligence and machine learning algorithms to predict which vulnerabilities are most likely to be exploited in attacks. Read more about what VPR is and how it's different from CVSS.

VPR Score: 3.6


The remote openSUSE host is missing a security update.


This kernel update to 3.4.11 fixes various bugs and security issues.

The changes up to 3.4.11 contain both security and bugfixes and are not explicitly listed here.

Following security issues were fixed: CVE-2012-3520: Force passing credentials, otherwise local services could be fooled to assume requests coming from root.

CVE-2012-3412: Do not allow extreme TSO parameters in the sfc driver and tcp stack.

Following non-security bugs were fixed :

- nbd: clear waiting_queue on shutdown (bnc#778630).

- NFS: avoid warning from nfs_drop_nlink (bnc#780624).

- net: do not disable sg for packets requiring no checksum (bnc#774859).

- sfc: Fix maximum number of TSO segments and minimum TX queue size (bnc#774523 CVE-2012-3412).

- net: Allow driver to limit number of GSO segments per skb (bnc#774523 CVE-2012-3412).

- drm/nouveau: fix booting with plymouth + dumb support (bnc#771392).

- memcg: warn on deeper hierarchies with use_hierarchy==0 (bnc#781134).

- Linux 3.4.11.

- Update config files.

- Refresh patches.suse/scsi-error-test-unit-ready-timeout.

- Btrfs: fix tree log remove space corner case (bnc#779432)

- irq_remap: disable IRQ remapping if any IOAPIC lacks an IOMMU.

- Linux 3.4.10.

- Linux 3.4.9.

- kABI: protect struct irq_desc.

- Linux 3.4.8.

- kABI: sdhci, remove inclusion.

- reiserfs: fix deadlock with nfs racing on create/lookup (bnc#762693).

- Properly update Xen patches to 3.4.7.

- Refresh other Xen patches (bnc#772831).

- config: enable various ARM errata workarounds to improve stability

- Import kabi files for 12.2

- rpm/ Build the KOTD against 12.2

- ASoC: omap: Add missing modules aliases to get sound working on omap devices.

- Update config files to fix build

- rt2800: add chipset revision RT5390R support (bnc#772566).

- reiserfs: fix deadlocks with quotas

- ACPI, APEI: Fixup common access width firmware bug (bnc#765230).

- i2c/busses: Fix build error if CONFIG_I2C_DESIGNWARE_PLATFORM=y and CONFIG_I2C_DESIGN.

- Update ARM configs to match kernel 3.4.7

- Update ARM omap2plus config to match kernel 3.4.7 and add Smartreflex support (auto voltage)

- ALSA: hda - Fix mute-LED GPIO initialization for IDT codecs (bnc#772923).

- ALSA: hda - Fix polarity of mute LED on HP Mini 210 (bnc#772923).

- Linux 3.4.7.

- Refresh patches.suse/dm-raid45-26-Nov-2009.patch.

- Enable RTL8150 for omap2plus Generic USB Network device that also works fine on ARM, so enable it


- Drivers: hv: Cleanup the guest ID computation.

- hyperv: Add a check for ring_size value.

- hyperv: Add error handling to rndis_filter_device_add().

- Drivers: hv: Change the hex constant to a decimal constant.

- hyperv: Add support for setting MAC from within guests.

- net/hyperv: Use wait_event on outstanding sends during device removal.


- Refresh patches.suse/SUSE-bootsplash. Fix wrong vfree() (bnc#773406)


Update the affected kernel packages.

See Also

Plugin Details

Severity: High

ID: 74778

File Name: openSUSE-2012-700.nasl

Version: 1.3

Type: local

Agent: unix

Published: 2014/06/13

Updated: 2020/06/04

Dependencies: 12634

Risk Information

Risk Factor: High

VPR Score: 3.6

CVSS v2.0

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:kernel-debug, p-cpe:/a:novell:opensuse:kernel-debug-base, p-cpe:/a:novell:opensuse:kernel-debug-base-debuginfo, p-cpe:/a:novell:opensuse:kernel-debug-debuginfo, p-cpe:/a:novell:opensuse:kernel-debug-debugsource, p-cpe:/a:novell:opensuse:kernel-debug-devel, p-cpe:/a:novell:opensuse:kernel-debug-devel-debuginfo, p-cpe:/a:novell:opensuse:kernel-default, p-cpe:/a:novell:opensuse:kernel-default-base, p-cpe:/a:novell:opensuse:kernel-default-base-debuginfo, p-cpe:/a:novell:opensuse:kernel-default-debuginfo, p-cpe:/a:novell:opensuse:kernel-default-debugsource, p-cpe:/a:novell:opensuse:kernel-default-devel, p-cpe:/a:novell:opensuse:kernel-default-devel-debuginfo, p-cpe:/a:novell:opensuse:kernel-desktop, p-cpe:/a:novell:opensuse:kernel-desktop-base, p-cpe:/a:novell:opensuse:kernel-desktop-base-debuginfo, p-cpe:/a:novell:opensuse:kernel-desktop-debuginfo, p-cpe:/a:novell:opensuse:kernel-desktop-debugsource, p-cpe:/a:novell:opensuse:kernel-desktop-devel, p-cpe:/a:novell:opensuse:kernel-desktop-devel-debuginfo, p-cpe:/a:novell:opensuse:kernel-devel, p-cpe:/a:novell:opensuse:kernel-ec2, p-cpe:/a:novell:opensuse:kernel-ec2-base, p-cpe:/a:novell:opensuse:kernel-ec2-base-debuginfo, p-cpe:/a:novell:opensuse:kernel-ec2-debuginfo, p-cpe:/a:novell:opensuse:kernel-ec2-debugsource, p-cpe:/a:novell:opensuse:kernel-ec2-devel, p-cpe:/a:novell:opensuse:kernel-ec2-devel-debuginfo, p-cpe:/a:novell:opensuse:kernel-ec2-extra, p-cpe:/a:novell:opensuse:kernel-ec2-extra-debuginfo, p-cpe:/a:novell:opensuse:kernel-pae, p-cpe:/a:novell:opensuse:kernel-pae-base, p-cpe:/a:novell:opensuse:kernel-pae-base-debuginfo, p-cpe:/a:novell:opensuse:kernel-pae-debuginfo, p-cpe:/a:novell:opensuse:kernel-pae-debugsource, p-cpe:/a:novell:opensuse:kernel-pae-devel, p-cpe:/a:novell:opensuse:kernel-pae-devel-debuginfo, p-cpe:/a:novell:opensuse:kernel-source, p-cpe:/a:novell:opensuse:kernel-source-vanilla, p-cpe:/a:novell:opensuse:kernel-syms, p-cpe:/a:novell:opensuse:kernel-trace, p-cpe:/a:novell:opensuse:kernel-trace-base, p-cpe:/a:novell:opensuse:kernel-trace-base-debuginfo, p-cpe:/a:novell:opensuse:kernel-trace-debuginfo, p-cpe:/a:novell:opensuse:kernel-trace-debugsource, p-cpe:/a:novell:opensuse:kernel-trace-devel, p-cpe:/a:novell:opensuse:kernel-trace-devel-debuginfo, p-cpe:/a:novell:opensuse:kernel-vanilla, p-cpe:/a:novell:opensuse:kernel-vanilla-debuginfo, p-cpe:/a:novell:opensuse:kernel-vanilla-debugsource, p-cpe:/a:novell:opensuse:kernel-vanilla-devel, p-cpe:/a:novell:opensuse:kernel-vanilla-devel-debuginfo, p-cpe:/a:novell:opensuse:kernel-xen, p-cpe:/a:novell:opensuse:kernel-xen-base, p-cpe:/a:novell:opensuse:kernel-xen-base-debuginfo, p-cpe:/a:novell:opensuse:kernel-xen-debuginfo, p-cpe:/a:novell:opensuse:kernel-xen-debugsource, p-cpe:/a:novell:opensuse:kernel-xen-devel, p-cpe:/a:novell:opensuse:kernel-xen-devel-debuginfo, cpe:/o:novell:opensuse:12.2

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Patch Publication Date: 2012/10/05

Reference Information

CVE: CVE-2012-3412, CVE-2012-3520