{"id": "CVE-2018-10882", "bulletinFamily": "NVD", "title": "CVE-2018-10882", "description": "A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound write in in fs/jbd2/transaction.c code, a denial of service, and a system crash by unmounting a crafted ext4 filesystem image.", "published": "2018-07-27T14:29:01", "modified": "2018-10-31T06:30:49", "cvss": {"score": 4.9, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-10882", "reporter": "NVD", "references": ["https://bugzilla.kernel.org/show_bug.cgi?id=200069", "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html", "https://access.redhat.com/errata/RHSA-2018:2948", "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c37e9e013469521d9adb932d17a1795c139b36db", "https://usn.ubuntu.com/3753-2/", "https://usn.ubuntu.com/3753-1/", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10882"], "cvelist": ["CVE-2018-10882"], "type": "cve", "lastseen": "2018-11-01T10:49:01", "history": [{"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~", "cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~", "cpe:/o:debian:debian_linux:8.0", "cpe:/o:linux:linux_kernel:-"], "cvelist": ["CVE-2018-10882"], "cvss": {"score": 4.9, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}, "description": "A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound write in in fs/jbd2/transaction.c code, a denial of service, and a system crash by unmounting a crafted ext4 filesystem image.", "edition": 3, "enchantments": {"score": {"modified": "2018-09-22T23:31:58", "value": 2.1, "vector": "NONE"}}, "hash": "4e1296fd14d0a03a4005fb840ce9c1e1ddc32a16a188d213bbcaeea88fc46fe7", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "8f3e27ba318efb32c84dc7183bb142e5", "key": "cpe"}, {"hash": "c36607b3fc386fa1d8446a7411d76c46", "key": "references"}, {"hash": "75acff42350108f057c8aa83b657d0ee", "key": "cvss"}, {"hash": "d8a5d723795a71702860dff0e5104bc9", "key": "href"}, {"hash": "7bca48ea2462d7d5c26a3c1a06c0e161", "key": "description"}, {"hash": "f7c1b1697cb9e916ba26e95b7761e882", "key": "cvelist"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "782c1167a47f045af91edfdd6c89e970", "key": "published"}, {"hash": "0ba48736faa3310dd6d70cefda9a028a", "key": "modified"}, {"hash": "01e39314dd4a8b3d2f4a5850bc0d218a", "key": "title"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-10882", "id": "CVE-2018-10882", "lastseen": "2018-09-22T23:31:58", "modified": "2018-09-20T14:54:44", "objectVersion": "1.3", "published": "2018-07-27T14:29:01", "references": ["https://bugzilla.kernel.org/show_bug.cgi?id=200069", "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html", "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c37e9e013469521d9adb932d17a1795c139b36db", "https://usn.ubuntu.com/3753-2/", "https://usn.ubuntu.com/3753-1/", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10882"], "reporter": "NVD", "scanner": [], "title": "CVE-2018-10882", "type": "cve", "viewCount": 2}, "differentElements": ["references", "modified"], "edition": 3, "lastseen": "2018-09-22T23:31:58"}, {"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": [], "cvelist": ["CVE-2018-10882"], "cvss": {"score": 0.0, "vector": "NONE"}, "description": "A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound write in in fs/jbd2/transaction.c code, a denial of service, and a system crash by unmounting a crafted ext4 filesystem image.", "edition": 2, "enchantments": {"score": {"modified": "2018-08-25T10:51:49", "value": 2.1, "vector": "NONE"}}, "hash": "0cd097a8013c25b8dba53833c4eeb021596157c67a4ce1ff71e1aedc801e25d6", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "c36607b3fc386fa1d8446a7411d76c46", "key": "references"}, {"hash": "d8a5d723795a71702860dff0e5104bc9", "key": "href"}, {"hash": "7bca48ea2462d7d5c26a3c1a06c0e161", "key": "description"}, {"hash": "f7c1b1697cb9e916ba26e95b7761e882", "key": "cvelist"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "782c1167a47f045af91edfdd6c89e970", "key": "published"}, {"hash": "3b123c8d17cc6c6fe30cf825a3092d5b", "key": "modified"}, {"hash": "01e39314dd4a8b3d2f4a5850bc0d218a", "key": "title"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "8cd4821cb504d25572038ed182587d85", "key": "cvss"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-10882", "id": "CVE-2018-10882", "lastseen": "2018-08-25T10:51:49", "modified": "2018-08-24T06:29:04", "objectVersion": "1.3", "published": "2018-07-27T14:29:01", "references": ["https://bugzilla.kernel.org/show_bug.cgi?id=200069", "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html", "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c37e9e013469521d9adb932d17a1795c139b36db", "https://usn.ubuntu.com/3753-2/", "https://usn.ubuntu.com/3753-1/", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10882"], "reporter": "NVD", "scanner": [], "title": "CVE-2018-10882", "type": "cve", "viewCount": 2}, "differentElements": ["cvss", "modified", "cpe"], "edition": 2, "lastseen": "2018-08-25T10:51:49"}, {"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": [], "cvelist": ["CVE-2018-10882"], "cvss": {"score": 0.0, "vector": "NONE"}, "description": "A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound write in in fs/jbd2/transaction.c code, a denial of service, and a system crash by unmounting a crafted ext4 filesystem image.", "edition": 1, "enchantments": {"score": {"modified": "2018-07-30T13:52:00", "value": 2.1, "vector": "NONE"}}, "hash": "deed57aedd61902037a933820080bd1d8d5090f42d57fe809fca39b9b3be55c2", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "d8a5d723795a71702860dff0e5104bc9", "key": "href"}, {"hash": "7bca48ea2462d7d5c26a3c1a06c0e161", "key": "description"}, {"hash": "f7c1b1697cb9e916ba26e95b7761e882", "key": "cvelist"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "782c1167a47f045af91edfdd6c89e970", "key": "published"}, {"hash": "01e39314dd4a8b3d2f4a5850bc0d218a", "key": "title"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "8cd4821cb504d25572038ed182587d85", "key": "cvss"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "59af1ff6ed52df2c7d9aa68b55130ceb", "key": "references"}, {"hash": "f3d081ef7c7eb4c5044fb1aeecf812a7", "key": "modified"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-10882", "id": "CVE-2018-10882", "lastseen": "2018-07-30T13:52:00", "modified": "2018-07-28T21:29:04", "objectVersion": "1.3", "published": "2018-07-27T14:29:01", "references": ["https://bugzilla.kernel.org/show_bug.cgi?id=200069", "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html", "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c37e9e013469521d9adb932d17a1795c139b36db", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10882"], "reporter": "NVD", "scanner": [], "title": "CVE-2018-10882", "type": "cve", "viewCount": 1}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2018-07-30T13:52:00"}], "edition": 4, "hashmap": [{"key": "assessment", "hash": "6d3f4796275bb54c21a33b82f399cc6d"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "8f3e27ba318efb32c84dc7183bb142e5"}, {"key": "cvelist", "hash": "f7c1b1697cb9e916ba26e95b7761e882"}, {"key": "cvss", "hash": "75acff42350108f057c8aa83b657d0ee"}, {"key": "description", "hash": "7bca48ea2462d7d5c26a3c1a06c0e161"}, {"key": "href", "hash": "d8a5d723795a71702860dff0e5104bc9"}, {"key": "modified", "hash": "f4db2d57cd8b2f8ee1d5e5820567e676"}, {"key": "published", "hash": "782c1167a47f045af91edfdd6c89e970"}, {"key": "references", "hash": "cf1e7b0331ea97a18040f60038845198"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "title", "hash": "01e39314dd4a8b3d2f4a5850bc0d218a"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "5d1d5cfb5a3e8f7d3ac8c22af68074b3e63ac629b8aacaea874c68ca3b5fdd25", "viewCount": 2, "enchantments": {"score": {"value": 2.1, "vector": "NONE", "modified": "2018-11-01T10:49:01"}, "vulnersScore": 2.1}, "objectVersion": "1.3", "cpe": ["cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~", "cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~", "cpe:/o:debian:debian_linux:8.0", "cpe:/o:linux:linux_kernel:-"], "assessment": {"href": "", "name": "", "system": ""}, "scanner": []}

{"ubuntu": [{"lastseen": "2018-09-05T20:19:19", "references": ["https://people.canonical.com/~ubuntu-security/cve/CVE-2018-10881", "https://people.canonical.com/~ubuntu-security/cve/CVE-2018-10877", "https://people.canonical.com/~ubuntu-security/cve/CVE-2018-12233", "https://people.canonical.com/~ubuntu-security/cve/CVE-2017-13168", "https://people.canonical.com/~ubuntu-security/cve/CVE-2018-10878", "https://people.canonical.com/~ubuntu-security/cve/CVE-2018-13406", "https://people.canonical.com/~ubuntu-security/cve/CVE-2018-10879", "https://people.canonical.com/~ubuntu-security/cve/CVE-2018-10882", "https://people.canonical.com/~ubuntu-security/cve/CVE-2018-13405", "https://people.canonical.com/~ubuntu-security/cve/CVE-2018-13094", "https://people.canonical.com/~ubuntu-security/cve/CVE-2018-10876"], "affectedPackage": [{"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "4.4.0-1066.76", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-4.4.0-1066-aws", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "any", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-powerpc-e500mc - 4.4.0.134.140", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "any", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-raspi2 - 4.4.0.1095.95", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "4.4.0-1099.104", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-4.4.0-1099-snapdragon", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "any", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-kvm - 4.4.0.1032.31", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "any", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-powerpc64-smp - 4.4.0.134.140", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "4.4.0-134.160", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-4.4.0-134-powerpc64-emb", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "any", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-aws - 4.4.0.1066.68", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "any", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-generic - 4.4.0.134.140", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "any", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-snapdragon - 4.4.0.1099.91", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "4.4.0-134.160", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-4.4.0-134-powerpc-smp", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "4.4.0-134.160", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-4.4.0-134-lowlatency", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "any", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-powerpc64-emb - 4.4.0.134.140", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "any", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-lowlatency - 4.4.0.134.140", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "4.4.0-1032.38", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-4.4.0-1032-kvm", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "4.4.0-1095.103", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-4.4.0-1095-raspi2", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "4.4.0-134.160", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-4.4.0-134-generic", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "any", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-powerpc-smp - 4.4.0.134.140", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "4.4.0-134.160", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-4.4.0-134-powerpc-e500mc", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "4.4.0-134.160", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-4.4.0-134-generic-lpae", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "4.4.0-134.160", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-4.4.0-134-powerpc64-smp", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "16.04", "packageVersion": "any", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-generic-lpae - 4.4.0.134.140", "operator": "lt"}], "description": "It was discovered that the generic SCSI driver in the Linux kernel did not properly enforce permissions on kernel memory access. A local attacker could use this to expose sensitive information or possibly elevate privileges. (CVE-2017-13168)\n\nWen Xu discovered that a use-after-free vulnerability existed in the ext4 filesystem implementation in the Linux kernel. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-10876, CVE-2018-10879)\n\nWen Xu discovered that a buffer overflow existed in the ext4 filesystem implementation in the Linux kernel. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-10877)\n\nWen Xu discovered that an out-of-bounds write vulnerability existed in the ext4 filesystem implementation in the Linux kernel. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-10878, CVE-2018-10882)\n\nWen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly keep meta-data information consistent in some situations. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash). (CVE-2018-10881)\n\nShankara Pailoor discovered that the JFS filesystem implementation in the Linux kernel contained a buffer overflow when handling extended attributes. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-12233)\n\nWen Xu discovered that the XFS filesystem implementation in the Linux kernel did not properly handle an error condition with a corrupted xfs image. An attacker could use this to construct a malicious xfs image that, when mounted, could cause a denial of service (system crash). (CVE-2018-13094)\n\nIt was discovered that the Linux kernel did not properly handle setgid file creation when performed by a non-member of the group. A local attacker could use this to gain elevated privileges. (CVE-2018-13405)\n\nSilvio Cesare discovered that the generic VESA frame buffer driver in the Linux kernel contained an integer overflow. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-13406)", "edition": 1, "reporter": "Ubuntu", "published": "2018-08-24T00:00:00", "title": "Linux kernel vulnerabilities", "type": "ubuntu", "enchantments": {"score": {"modified": "2018-09-05T20:19:19", "vector": "NONE", "value": 7.2}}, "bulletinFamily": "unix", "cvelist": ["CVE-2018-10882", "CVE-2018-10877", "CVE-2018-10878", "CVE-2018-13405", "CVE-2018-13406", "CVE-2018-10881", "CVE-2018-12233", "CVE-2017-13168", "CVE-2018-10876", "CVE-2018-10879", "CVE-2018-13094"], "modified": "2018-08-24T00:00:00", "id": "USN-3753-1", "href": "https://usn.ubuntu.com/3753-1/", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-09-07T02:19:00", "references": ["https://people.canonical.com/~ubuntu-security/cve/CVE-2018-10881", "https://people.canonical.com/~ubuntu-security/cve/CVE-2018-10877", "https://people.canonical.com/~ubuntu-security/cve/CVE-2018-12233", "https://usn.ubuntu.com/usn/usn-3753-1", "https://people.canonical.com/~ubuntu-security/cve/CVE-2017-13168", "https://people.canonical.com/~ubuntu-security/cve/CVE-2018-10878", "https://people.canonical.com/~ubuntu-security/cve/CVE-2018-13406", "https://people.canonical.com/~ubuntu-security/cve/CVE-2018-10879", "https://people.canonical.com/~ubuntu-security/cve/CVE-2018-10882", "https://people.canonical.com/~ubuntu-security/cve/CVE-2018-13405", "https://people.canonical.com/~ubuntu-security/cve/CVE-2018-13094", "https://people.canonical.com/~ubuntu-security/cve/CVE-2018-10876"], "affectedPackage": [{"OS": "Ubuntu", "OSVersion": "14.04", "packageVersion": "any", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-aws - 4.4.0.1028.28", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "14.04", "packageVersion": "any", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-powerpc-e500mc-lts-xenial - 4.4.0.134.114", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "14.04", "packageVersion": "4.4.0-134.160~14.04.1", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-4.4.0-134-powerpc64-emb", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "14.04", "packageVersion": "any", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-powerpc64-smp-lts-xenial - 4.4.0.134.114", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "14.04", "packageVersion": "any", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-powerpc-smp-lts-xenial - 4.4.0.134.114", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "14.04", "packageVersion": "4.4.0-134.160~14.04.1", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-4.4.0-134-generic", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "14.04", "packageVersion": "4.4.0-134.160~14.04.1", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-4.4.0-134-powerpc-e500mc", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "14.04", "packageVersion": "4.4.0-134.160~14.04.1", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-4.4.0-134-generic-lpae", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "14.04", "packageVersion": "any", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-generic-lts-xenial - 4.4.0.134.114", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "14.04", "packageVersion": "4.4.0-1028.31", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-4.4.0-1028-aws", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "14.04", "packageVersion": "4.4.0-134.160~14.04.1", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-4.4.0-134-powerpc64-smp", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "14.04", "packageVersion": "4.4.0-134.160~14.04.1", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-4.4.0-134-lowlatency", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "14.04", "packageVersion": "any", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-powerpc64-emb-lts-xenial - 4.4.0.134.114", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "14.04", "packageVersion": "any", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-lowlatency-lts-xenial - 4.4.0.134.114", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "14.04", "packageVersion": "4.4.0-134.160~14.04.1", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-4.4.0-134-powerpc-smp", "operator": "lt"}, {"OS": "Ubuntu", "OSVersion": "14.04", "packageVersion": "any", "arch": "noarch", "packageFilename": "UNKNOWN", "packageName": "linux-image-generic-lpae-lts-xenial - 4.4.0.134.114", "operator": "lt"}], "description": "USN-3753-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS.\n\nIt was discovered that the generic SCSI driver in the Linux kernel did not properly enforce permissions on kernel memory access. A local attacker could use this to expose sensitive information or possibly elevate privileges. (CVE-2017-13168)\n\nWen Xu discovered that a use-after-free vulnerability existed in the ext4 filesystem implementation in the Linux kernel. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-10876, CVE-2018-10879)\n\nWen Xu discovered that a buffer overflow existed in the ext4 filesystem implementation in the Linux kernel. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-10877)\n\nWen Xu discovered that an out-of-bounds write vulnerability existed in the ext4 filesystem implementation in the Linux kernel. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-10878, CVE-2018-10882)\n\nWen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly keep meta-data information consistent in some situations. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash). (CVE-2018-10881)\n\nShankara Pailoor discovered that the JFS filesystem implementation in the Linux kernel contained a buffer overflow when handling extended attributes. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-12233)\n\nWen Xu discovered that the XFS filesystem implementation in the Linux kernel did not properly handle an error condition with a corrupted xfs image. An attacker could use this to construct a malicious xfs image that, when mounted, could cause a denial of service (system crash). (CVE-2018-13094)\n\nIt was discovered that the Linux kernel did not properly handle setgid file creation when performed by a non-member of the group. A local attacker could use this to gain elevated privileges. (CVE-2018-13405)\n\nSilvio Cesare discovered that the generic VESA frame buffer driver in the Linux kernel contained an integer overflow. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-13406)", "edition": 1, "reporter": "Ubuntu", "published": "2018-08-24T00:00:00", "title": "Linux kernel (Xenial HWE) vulnerabilities", "type": "ubuntu", "enchantments": {"score": {"modified": "2018-09-07T02:19:00", "vector": "NONE", "value": 7.2}}, "bulletinFamily": "unix", "cvelist": ["CVE-2018-10882", "CVE-2018-10877", "CVE-2018-10878", "CVE-2018-13405", "CVE-2018-13406", "CVE-2018-10881", "CVE-2018-12233", "CVE-2017-13168", "CVE-2018-10876", "CVE-2018-10879", "CVE-2018-13094"], "modified": "2018-08-24T00:00:00", "id": "USN-3753-2", "href": "https://usn.ubuntu.com/3753-2/", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "openvas": [{"lastseen": "2018-11-19T12:55:04", "references": ["3753-2", "http://www.ubuntu.com/usn/usn-3753-2/"], "pluginID": "1361412562310843626", "description": "The remote host is missing an update for the ", "edition": 8, "reporter": "Copyright (C) 2018 Greenbone Networks GmbH", "published": "2018-08-25T00:00:00", "title": "Ubuntu Update for linux-aws USN-3753-2", "type": "openvas", "enchantments": {"score": {"modified": "2018-11-19T12:55:04", "vector": "NONE", "value": 7.2}}, "naslFamily": "Ubuntu Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-10882", "CVE-2018-10877", "CVE-2018-10878", "CVE-2018-13405", "CVE-2018-13406", "CVE-2018-10881", "CVE-2018-12233", "CVE-2017-13168", "CVE-2018-10876", "CVE-2018-10879", "CVE-2018-13094"], "modified": "2018-11-16T00:00:00", "id": "OPENVAS:1361412562310843626", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310843626", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_ubuntu_USN_3753_2.nasl 12381 2018-11-16 11:16:30Z cfischer $\n#\n# Ubuntu Update for linux-aws USN-3753-2\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.843626\");\n script_version(\"$Revision: 12381 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-11-16 12:16:30 +0100 (Fri, 16 Nov 2018) $\");\n script_tag(name:\"creation_date\", value:\"2018-08-25 06:46:31 +0200 (Sat, 25 Aug 2018)\");\n script_cve_id(\"CVE-2017-13168\", \"CVE-2018-10876\", \"CVE-2018-10879\", \"CVE-2018-10877\", \"CVE-2018-10878\", \"CVE-2018-10882\", \"CVE-2018-10881\", \"CVE-2018-12233\", \"CVE-2018-13094\", \"CVE-2018-13405\", \"CVE-2018-13406\");\n script_tag(name:\"cvss_base\", value:\"7.2\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Ubuntu Update for linux-aws USN-3753-2\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'linux-aws'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"insight\", value:\"USN-3753-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04\nLTS. This update provides the corresponding updates for the Linux\nHardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu\n14.04 LTS.\n\nIt was discovered that the generic SCSI driver in the Linux kernel did not\nproperly enforce permissions on kernel memory access. A local attacker\ncould use this to expose sensitive information or possibly elevate\nprivileges. (CVE-2017-13168)\n\nWen Xu discovered that a use-after-free vulnerability existed in the ext4\nfilesystem implementation in the Linux kernel. An attacker could use this\nto construct a malicious ext4 image that, when mounted, could cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2018-10876, CVE-2018-10879)\n\nWen Xu discovered that a buffer overflow existed in the ext4 filesystem\nimplementation in the Linux kernel. An attacker could use this to construct\na malicious ext4 image that, when mounted, could cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2018-10877)\n\nWen Xu discovered that an out-of-bounds write vulnerability existed in the\next4 filesystem implementation in the Linux kernel. An attacker could use\nthis to construct a malicious ext4 image that, when mounted, could cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2018-10878, CVE-2018-10882)\n\nWen Xu discovered that the ext4 filesystem implementation in the Linux\nkernel did not properly keep meta-data information consistent in some\nsituations. An attacker could use this to construct a malicious ext4 image\nthat, when mounted, could cause a denial of service (system crash).\n(CVE-2018-10881)\n\nShankara Pailoor discovered that the JFS filesystem implementation in the\nLinux kernel contained a buffer overflow when handling extended attributes.\nA local attacker could use this to cause a denial of service (system crash)\nor possibly execute arbitrary code. (CVE-2018-12233)\n\nWen Xu discovered that the XFS filesystem implementation in the Linux\nkernel did not properly handle an error condition with a corrupted xfs\nimage. An attacker could use this to construct a malicious xfs image that,\nwhen mounted, could cause a denial of service (system crash).\n(CVE-2018-13094)\n\nIt was discovered that the Linux kernel did not properly handle setgid file\ncreation when performed by a non-member of the group. A local attacker\ncould use this to gain elevated privileges. (CVE-2018-13405)\n\nSilvio Cesare discovered that the generic VESA frame buffer driver in the\nLinux kernel contained an integer overflow. A local attacker could use this\nto cause a denial of service (system crash) or possibly execute arbitrary\ncode. (CVE-2018-13406)\");\n script_tag(name:\"affected\", value:\"linux-aws on Ubuntu 14.04 LTS\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"USN\", value:\"3753-2\");\n script_xref(name:\"URL\", value:\"http://www.ubuntu.com/usn/usn-3753-2/\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Ubuntu Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/ubuntu_linux\", \"ssh/login/packages\", re:\"ssh/login/release=UBUNTU14\\.04 LTS\");\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nrelease = dpkg_get_ssh_release();\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"UBUNTU14.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-1028-aws\", ver:\"4.4.0-1028.31\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-134-generic\", ver:\"4.4.0-134.160~14.04.1\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-134-generic-lpae\", ver:\"4.4.0-134.160~14.04.1\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-134-lowlatency\", ver:\"4.4.0-134.160~14.04.1\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-134-powerpc-e500mc\", ver:\"4.4.0-134.160~14.04.1\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-134-powerpc-smp\", ver:\"4.4.0-134.160~14.04.1\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-134-powerpc64-emb\", ver:\"4.4.0-134.160~14.04.1\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-134-powerpc64-smp\", ver:\"4.4.0-134.160~14.04.1\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-aws\", ver:\"4.4.0.1028.28\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-generic-lpae-lts-xenial\", ver:\"4.4.0.134.114\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-generic-lts-xenial\", ver:\"4.4.0.134.114\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-lowlatency-lts-xenial\", ver:\"4.4.0.134.114\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-powerpc-e500mc-lts-xenial\", ver:\"4.4.0.134.114\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-powerpc-smp-lts-xenial\", ver:\"4.4.0.134.114\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-powerpc64-emb-lts-xenial\", ver:\"4.4.0.134.114\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-powerpc64-smp-lts-xenial\", ver:\"4.4.0.134.114\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-11-19T12:55:29", "references": ["http://www.ubuntu.com/usn/usn-3753-1/", "3753-1"], "pluginID": "1361412562310843627", "description": "The remote host is missing an update for the ", "edition": 8, "reporter": "Copyright (C) 2018 Greenbone Networks GmbH", "published": "2018-08-25T00:00:00", "title": "Ubuntu Update for linux USN-3753-1", "type": "openvas", "enchantments": {"score": {"modified": "2018-11-19T12:55:29", "vector": "NONE", "value": 7.2}}, "naslFamily": "Ubuntu Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-10882", "CVE-2018-10877", "CVE-2018-10878", "CVE-2018-13405", "CVE-2018-13406", "CVE-2018-10881", "CVE-2018-12233", "CVE-2017-13168", "CVE-2018-10876", "CVE-2018-10879", "CVE-2018-13094"], "modified": "2018-11-16T00:00:00", "id": "OPENVAS:1361412562310843627", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310843627", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_ubuntu_USN_3753_1.nasl 12381 2018-11-16 11:16:30Z cfischer $\n#\n# Ubuntu Update for linux USN-3753-1\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.843627\");\n script_version(\"$Revision: 12381 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-11-16 12:16:30 +0100 (Fri, 16 Nov 2018) $\");\n script_tag(name:\"creation_date\", value:\"2018-08-25 06:47:37 +0200 (Sat, 25 Aug 2018)\");\n script_cve_id(\"CVE-2017-13168\", \"CVE-2018-10876\", \"CVE-2018-10879\", \"CVE-2018-10877\", \"CVE-2018-10878\", \"CVE-2018-10882\", \"CVE-2018-10881\", \"CVE-2018-12233\", \"CVE-2018-13094\", \"CVE-2018-13405\", \"CVE-2018-13406\");\n script_tag(name:\"cvss_base\", value:\"7.2\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Ubuntu Update for linux USN-3753-1\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'linux'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"insight\", value:\"It was discovered that the generic SCSI driver in the Linux kernel did not\nproperly enforce permissions on kernel memory access. A local attacker\ncould use this to expose sensitive information or possibly elevate\nprivileges. (CVE-2017-13168)\n\nWen Xu discovered that a use-after-free vulnerability existed in the ext4\nfilesystem implementation in the Linux kernel. An attacker could use this\nto construct a malicious ext4 image that, when mounted, could cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2018-10876, CVE-2018-10879)\n\nWen Xu discovered that a buffer overflow existed in the ext4 filesystem\nimplementation in the Linux kernel. An attacker could use this to construct\na malicious ext4 image that, when mounted, could cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2018-10877)\n\nWen Xu discovered that an out-of-bounds write vulnerability existed in the\next4 filesystem implementation in the Linux kernel. An attacker could use\nthis to construct a malicious ext4 image that, when mounted, could cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2018-10878, CVE-2018-10882)\n\nWen Xu discovered that the ext4 filesystem implementation in the Linux\nkernel did not properly keep meta-data information consistent in some\nsituations. An attacker could use this to construct a malicious ext4 image\nthat, when mounted, could cause a denial of service (system crash).\n(CVE-2018-10881)\n\nShankara Pailoor discovered that the JFS filesystem implementation in the\nLinux kernel contained a buffer overflow when handling extended attributes.\nA local attacker could use this to cause a denial of service (system crash)\nor possibly execute arbitrary code. (CVE-2018-12233)\n\nWen Xu discovered that the XFS filesystem implementation in the Linux\nkernel did not properly handle an error condition with a corrupted xfs\nimage. An attacker could use this to construct a malicious xfs image that,\nwhen mounted, could cause a denial of service (system crash).\n(CVE-2018-13094)\n\nIt was discovered that the Linux kernel did not properly handle setgid file\ncreation when performed by a non-member of the group. A local attacker\ncould use this to gain elevated privileges. (CVE-2018-13405)\n\nSilvio Cesare discovered that the generic VESA frame buffer driver in the\nLinux kernel contained an integer overflow. A local attacker could use this\nto cause a denial of service (system crash) or possibly execute arbitrary\ncode. (CVE-2018-13406)\");\n script_tag(name:\"affected\", value:\"linux on Ubuntu 16.04 LTS\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"USN\", value:\"3753-1\");\n script_xref(name:\"URL\", value:\"http://www.ubuntu.com/usn/usn-3753-1/\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Ubuntu Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/ubuntu_linux\", \"ssh/login/packages\", re:\"ssh/login/release=UBUNTU16\\.04 LTS\");\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nrelease = dpkg_get_ssh_release();\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"UBUNTU16.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-1032-kvm\", ver:\"4.4.0-1032.38\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-1066-aws\", ver:\"4.4.0-1066.76\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-1095-raspi2\", ver:\"4.4.0-1095.103\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-1099-snapdragon\", ver:\"4.4.0-1099.104\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-134-generic\", ver:\"4.4.0-134.160\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-134-generic-lpae\", ver:\"4.4.0-134.160\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-134-lowlatency\", ver:\"4.4.0-134.160\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-134-powerpc-e500mc\", ver:\"4.4.0-134.160\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-134-powerpc-smp\", ver:\"4.4.0-134.160\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-134-powerpc64-emb\", ver:\"4.4.0-134.160\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-134-powerpc64-smp\", ver:\"4.4.0-134.160\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-aws\", ver:\"4.4.0.1066.68\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-generic\", ver:\"4.4.0.134.140\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-generic-lpae\", ver:\"4.4.0.134.140\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-kvm\", ver:\"4.4.0.1032.31\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-lowlatency\", ver:\"4.4.0.134.140\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-powerpc-e500mc\", ver:\"4.4.0.134.140\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-powerpc-smp\", ver:\"4.4.0.134.140\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-powerpc64-emb\", ver:\"4.4.0.134.140\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-powerpc64-smp\", ver:\"4.4.0.134.140\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-raspi2\", ver:\"4.4.0.1095.95\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-snapdragon\", ver:\"4.4.0.1099.91\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-11-23T15:03:22", "references": ["2018:2407_1", "http://lists.opensuse.org/opensuse-security-announce/2018-08/msg00064.html"], "pluginID": "1361412562310851952", "description": "The remote host is missing an update for the ", "edition": 5, "reporter": "Copyright (C) 2018 Greenbone Networks GmbH", "published": "2018-10-26T00:00:00", "title": "SuSE Update for the openSUSE-SU-2018:2407-1 (the)", "type": "openvas", "enchantments": {"score": {"modified": "2018-11-23T15:03:22", "vector": "NONE", "value": 7.5}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-10882", "CVE-2018-10877", "CVE-2018-10880", "CVE-2018-10878", "CVE-2018-10853", "CVE-2018-10881", "CVE-2018-3646", "CVE-2018-5391", "CVE-2018-3620", "CVE-2018-10883", "CVE-2018-10876", "CVE-2018-10879"], "modified": "2018-11-23T00:00:00", "id": "OPENVAS:1361412562310851952", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310851952", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_suse_2018_2407_1.nasl 12496 2018-11-23 03:21:34Z ckuersteiner $\n#\n# SuSE Update for the openSUSE-SU-2018:2407-1 (the)\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.851952\");\n script_version(\"$Revision: 12496 $\");\n script_cve_id(\"CVE-2018-10853\", \"CVE-2018-10876\", \"CVE-2018-10877\", \"CVE-2018-10878\", \"CVE-2018-10879\", \"CVE-2018-10880\", \"CVE-2018-10881\", \"CVE-2018-10882\", \"CVE-2018-10883\", \"CVE-2018-3620\", \"CVE-2018-3646\", \"CVE-2018-5391\");\n script_tag(name:\"cvss_base\", value:\"7.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:N/I:N/A:C\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-11-23 04:21:34 +0100 (Fri, 23 Nov 2018) $\");\n script_tag(name:\"creation_date\", value:\"2018-10-26 06:21:47 +0200 (Fri, 26 Oct 2018)\");\n script_name(\"SuSE Update for the openSUSE-SU-2018:2407-1 (the)\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"SuSE Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/suse\", \"ssh/login/rpms\", re:\"ssh/login/release=openSUSELeap15\\.0\");\n\n script_xref(name:\"openSUSE-SU\", value:\"2018:2407_1\");\n script_xref(name:\"URL\", value:\"http://lists.opensuse.org/opensuse-security-announce/2018-08/msg00064.html\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'the'\n package(s) announced via the openSUSE-SU-2018:2407_1 advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"The openSUSE Leap 15.0 kernel was updated to receive various security and\n bugfixes.\n\n The following security bugs were fixed:\n\n - CVE-2018-10853: A flaw was found in KVM in which certain instructions\n such as sgdt/sidt call segmented_write_std doesn't propagate access\n correctly. As such, during userspace induced exception, the guest can\n incorrectly assume that the exception happened in the kernel and panic\n (bnc#1097104).\n\n - CVE-2018-10876: A flaw was found in the ext4 filesystem code. A\n use-after-free is possible in ext4_ext_remove_space() function when\n mounting and operating a crafted ext4 image. (bnc#1099811)\n\n - CVE-2018-10877: Linux kernel ext4 filesystem is vulnerable to an\n out-of-bound access in the ext4_ext_drop_refs() function when operating\n on a crafted ext4 filesystem image. (bnc#1099846)\n\n - CVE-2018-10878: A flaw was found in the ext4 filesystem. A local user\n can cause an out-of-bounds write and a denial of service or unspecified\n other impact is possible by mounting and operating a crafted ext4\n filesystem image. (bnc#1099813)\n\n - CVE-2018-10879: A flaw was found in the ext4 filesystem. A local user\n can cause a use-after-free in ext4_xattr_set_entry function and a denial\n of service or unspecified other impact may occur by renaming a file in a\n crafted ext4 filesystem image. (bnc#1099844)\n\n - CVE-2018-10880: Linux kernel is vulnerable to a stack-out-of-bounds\n write in the ext4 filesystem code when mounting and writing to a crafted\n ext4 image in ext4_update_inline_data(). An attacker could use this to\n cause a system crash and a denial of service. (bnc#1099845)\n\n - CVE-2018-10881: A flaw was found in the ext4 filesystem. A local user\n can cause an out-of-bound access in ext4_get_group_info function, a\n denial of service, and a system crash by mounting and operating on a\n crafted ext4 filesystem image. (bnc#1099864)\n\n - CVE-2018-10882: A flaw was found in the ext4 filesystem. A local user\n can cause an out-of-bound write in in fs/jbd2/transaction.c code, a\n denial of service, and a system crash by unmounting a crafted ext4\n filesystem image. (bnc#1099849)\n\n - CVE-2018-10883: A flaw was found in the ext4 filesystem. A local user\n can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a\n denial of service, and a system crash by mounting and operating on a\n crafted ext4 filesystem image. (bnc#1099863)\n\n - CVE-2018-3620: Systems with microprocessors utilizing speculative\n execution and address translations may allow unauthorized disclosure of\n information residing in the L1 data cache to an attacker with local user\n access ...\n\n Description truncated, please see the referenced URL(s) for more information.\");\n\n script_tag(name:\"affected\", value:\"the on openSUSE Leap 15.0.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"openSUSELeap15.0\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel-debug\", rpm:\"kernel-debug~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-debug-base\", rpm:\"kernel-debug-base~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-debug-base-debuginfo\", rpm:\"kernel-debug-base-debuginfo~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-debug-debuginfo\", rpm:\"kernel-debug-debuginfo~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-debug-debugsource\", rpm:\"kernel-debug-debugsource~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-debug-devel\", rpm:\"kernel-debug-devel~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-debug-devel-debuginfo\", rpm:\"kernel-debug-devel-debuginfo~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-default\", rpm:\"kernel-default~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-default-base\", rpm:\"kernel-default-base~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-default-base-debuginfo\", rpm:\"kernel-default-base-debuginfo~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-default-debuginfo\", rpm:\"kernel-default-debuginfo~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-default-debugsource\", rpm:\"kernel-default-debugsource~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-default-devel\", rpm:\"kernel-default-devel~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-default-devel-debuginfo\", rpm:\"kernel-default-devel-debuginfo~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-kvmsmall\", rpm:\"kernel-kvmsmall~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-kvmsmall-base\", rpm:\"kernel-kvmsmall-base~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-kvmsmall-base-debuginfo\", rpm:\"kernel-kvmsmall-base-debuginfo~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-kvmsmall-debuginfo\", rpm:\"kernel-kvmsmall-debuginfo~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-kvmsmall-debugsource\", rpm:\"kernel-kvmsmall-debugsource~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-kvmsmall-devel\", rpm:\"kernel-kvmsmall-devel~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-kvmsmall-devel-debuginfo\", rpm:\"kernel-kvmsmall-devel-debuginfo~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-obs-build\", rpm:\"kernel-obs-build~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-obs-build-debugsource\", rpm:\"kernel-obs-build-debugsource~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-obs-qa\", rpm:\"kernel-obs-qa~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-syms\", rpm:\"kernel-syms~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-vanilla\", rpm:\"kernel-vanilla~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-vanilla-base\", rpm:\"kernel-vanilla-base~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-vanilla-base-debuginfo\", rpm:\"kernel-vanilla-base-debuginfo~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-vanilla-debuginfo\", rpm:\"kernel-vanilla-debuginfo~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-vanilla-debugsource\", rpm:\"kernel-vanilla-debugsource~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-vanilla-devel\", rpm:\"kernel-vanilla-devel~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-vanilla-devel-debuginfo\", rpm:\"kernel-vanilla-devel-debuginfo~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-devel\", rpm:\"kernel-devel~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-docs\", rpm:\"kernel-docs~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-docs-html\", rpm:\"kernel-docs-html~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-macros\", rpm:\"kernel-macros~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-source\", rpm:\"kernel-source~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-source-vanilla\", rpm:\"kernel-source-vanilla~4.12.14~lp150.12.16.1\", rls:\"openSUSELeap15.0\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.8, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2018-11-23T15:03:33", "references": ["2018:2404_1", "http://lists.opensuse.org/opensuse-security-announce/2018-08/msg00061.html"], "pluginID": "1361412562310851863", "description": "The remote host is missing an update for the ", "edition": 10, "reporter": "Copyright (C) 2018 Greenbone Networks GmbH", "published": "2018-08-18T00:00:00", "title": "SuSE Update for the openSUSE-SU-2018:2404-1 (the)", "type": "openvas", "enchantments": {"score": {"modified": "2018-11-23T15:03:33", "vector": "NONE", "value": 9.3}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-10882", "CVE-2018-10877", "CVE-2018-10880", "CVE-2018-10878", "CVE-2018-10881", "CVE-2018-14734", "CVE-2018-3646", "CVE-2018-5391", "CVE-2018-3620", "CVE-2018-10883", "CVE-2017-18344", "CVE-2018-5390", "CVE-2018-10876", "CVE-2018-10879"], "modified": "2018-11-23T00:00:00", "id": "OPENVAS:1361412562310851863", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310851863", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_suse_2018_2404_1.nasl 12497 2018-11-23 08:28:21Z cfischer $\n#\n# SuSE Update for the openSUSE-SU-2018:2404-1 (the)\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.851863\");\n script_version(\"$Revision: 12497 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-11-23 09:28:21 +0100 (Fri, 23 Nov 2018) $\");\n script_tag(name:\"creation_date\", value:\"2018-08-18 06:33:45 +0200 (Sat, 18 Aug 2018)\");\n script_cve_id(\"CVE-2017-18344\", \"CVE-2018-10876\", \"CVE-2018-10877\", \"CVE-2018-10878\", \"CVE-2018-10879\", \"CVE-2018-10880\", \"CVE-2018-10881\", \"CVE-2018-10882\", \"CVE-2018-10883\", \"CVE-2018-14734\", \"CVE-2018-3620\", \"CVE-2018-3646\", \"CVE-2018-5390\", \"CVE-2018-5391\");\n script_tag(name:\"cvss_base\", value:\"7.8\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:N/I:N/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"SuSE Update for the openSUSE-SU-2018:2404-1 (the)\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'the'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"insight\", value:\"The openSUSE Leap 42.3 kernel was updated to 4.4.143 to receive various\n security and bugfixes.\n\n The following security bugs were fixed:\n\n - CVE-2017-18344: The timer_create syscall implementation in\n kernel/time/posix-timers.c didn't properly validate the\n sigevent- sigev_notify field, which leads to out-of-bounds access in the\n show_timer function (called when /proc/$PID/timers is read). This\n allowed userspace applications to read arbitrary kernel memory (on a\n kernel built with CONFIG_POSIX_TIMERS and CONFIG_CHECKPOINT_RESTORE)\n (bnc#1102851 bnc#1103580).\n\n - CVE-2018-10876: A flaw was found in Linux kernel in the ext4 filesystem\n code. A use-after-free is possible in ext4_ext_remove_space() function\n when mounting and operating a crafted ext4 image. (bnc#1099811)\n\n - CVE-2018-10877: Linux kernel ext4 filesystem is vulnerable to an\n out-of-bound access in the ext4_ext_drop_refs() function when operating\n on a crafted ext4 filesystem image. (bnc#1099846)\n\n - CVE-2018-10878: A flaw was found in the ext4 filesystem. A local user\n can cause an out-of-bounds write and a denial of service or unspecified\n other impact is possible by mounting and operating a crafted ext4\n filesystem image. (bnc#1099813)\n\n - CVE-2018-10879: A flaw was found in the ext4 filesystem. A local user\n can cause a use-after-free in ext4_xattr_set_entry function and a denial\n of service or unspecified other impact may occur by renaming a file in a\n crafted ext4 filesystem image. (bnc#1099844)\n\n - CVE-2018-10880: Linux kernel is vulnerable to a stack-out-of-bounds\n write in the ext4 filesystem code when mounting and writing to a crafted\n ext4 image in ext4_update_inline_data(). An attacker could use this to\n cause a system crash and a denial of service. (bnc#1099845)\n\n - CVE-2018-10881: A flaw was found in the ext4 filesystem. A local user\n can cause an out-of-bound access in ext4_get_group_info function, a\n denial of service, and a system crash by mounting and operating on a\n crafted ext4 filesystem image. (bnc#1099864)\n\n - CVE-2018-10882: A flaw was found in the ext4 filesystem. A local user\n can cause an out-of-bound write in in fs/jbd2/transaction.c code, a\n denial of service, and a system crash by unmounting a crafted ext4\n filesystem image. (bnc#1099849)\n\n - CVE-2018-10883: A flaw was found in the ext4 filesystem. A local user\n can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a\n denial of service, and a system crash by mounting and operating on a\n crafted ext4 filesystem image. (bnc#1099863)\n\n - CVE-2018-14734: drivers/infiniband/core/ucma.c allowed\n ucma_leave_ ...\n\n Description truncated, please see the referenced URL(s) for more information.\");\n script_tag(name:\"affected\", value:\"the on openSUSE Leap 42.3\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"openSUSE-SU\", value:\"2018:2404_1\");\n script_xref(name:\"URL\", value:\"http://lists.opensuse.org/opensuse-security-announce/2018-08/msg00061.html\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"SuSE Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/suse\", \"ssh/login/rpms\", re:\"ssh/login/release=openSUSELeap42\\.3\");\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\nres = \"\";\n\nif(release == \"openSUSELeap42.3\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel-debug\", rpm:\"kernel-debug~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-debug-base\", rpm:\"kernel-debug-base~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-debug-base-debuginfo\", rpm:\"kernel-debug-base-debuginfo~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-debug-debuginfo\", rpm:\"kernel-debug-debuginfo~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-debug-debugsource\", rpm:\"kernel-debug-debugsource~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-debug-devel\", rpm:\"kernel-debug-devel~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-debug-devel-debuginfo\", rpm:\"kernel-debug-devel-debuginfo~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-default\", rpm:\"kernel-default~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-default-base\", rpm:\"kernel-default-base~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-default-base-debuginfo\", rpm:\"kernel-default-base-debuginfo~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-default-debuginfo\", rpm:\"kernel-default-debuginfo~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-default-debugsource\", rpm:\"kernel-default-debugsource~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-default-devel\", rpm:\"kernel-default-devel~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-obs-build\", rpm:\"kernel-obs-build~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-obs-build-debugsource\", rpm:\"kernel-obs-build-debugsource~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-obs-qa\", rpm:\"kernel-obs-qa~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-syms\", rpm:\"kernel-syms~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-vanilla\", rpm:\"kernel-vanilla~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-vanilla-base\", rpm:\"kernel-vanilla-base~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-vanilla-base-debuginfo\", rpm:\"kernel-vanilla-base-debuginfo~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-vanilla-debuginfo\", rpm:\"kernel-vanilla-debuginfo~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-vanilla-debugsource\", rpm:\"kernel-vanilla-debugsource~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-vanilla-devel\", rpm:\"kernel-vanilla-devel~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-devel\", rpm:\"kernel-devel~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-docs\", rpm:\"kernel-docs~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-docs-html\", rpm:\"kernel-docs-html~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-docs-pdf\", rpm:\"kernel-docs-pdf~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-macros\", rpm:\"kernel-macros~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-source\", rpm:\"kernel-source~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"kernel-source-vanilla\", rpm:\"kernel-source-vanilla~4.4.143~65.1\", rls:\"openSUSELeap42.3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}", "cvss": {"score": 7.8, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}], "cloudfoundry": [{"lastseen": "2018-09-11T21:26:18", "references": [], "description": "# \n\n# Severity\n\nMedium\n\n# Vendor\n\nCanonical Ubuntu\n\n# Versions Affected\n\n * Canonical Ubuntu 14.04\n\n# Description\n\nUSN-3753-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS.\n\nIt was discovered that the generic SCSI driver in the Linux kernel did not properly enforce permissions on kernel memory access. A local attacker could use this to expose sensitive information or possibly elevate privileges. (CVE-2017-13168)\n\nWen Xu discovered that a use-after-free vulnerability existed in the ext4 filesystem implementation in the Linux kernel. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-10876, CVE-2018-10879)\n\nWen Xu discovered that a buffer overflow existed in the ext4 filesystem implementation in the Linux kernel. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-10877)\n\nWen Xu discovered that an out-of-bounds write vulnerability existed in the ext4 filesystem implementation in the Linux kernel. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-10878, CVE-2018-10882)\n\nWen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly keep meta-data information consistent in some situations. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash). (CVE-2018-10881)\n\nShankara Pailoor discovered that the JFS filesystem implementation in the Linux kernel contained a buffer overflow when handling extended attributes. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-12233)\n\nWen Xu discovered that the XFS filesystem implementation in the Linux kernel did not properly handle an error condition with a corrupted xfs image. An attacker could use this to construct a malicious xfs image that, when mounted, could cause a denial of service (system crash). (CVE-2018-13094)\n\nIt was discovered that the Linux kernel did not properly handle setgid file creation when performed by a non-member of the group. A local attacker could use this to gain elevated privileges. (CVE-2018-13405)\n\nSilvio Cesare discovered that the generic VESA frame buffer driver in the Linux kernel contained an integer overflow. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-13406)\n\n# Affected Cloud Foundry Products and Versions\n\n_Severity is medium unless otherwise noted._\n\n * Cloud Foundry BOSH trusty-stemcells are vulnerable, including: \n * 3363.x versions prior to 3363.74\n * 3421.x versions prior to 3421.81\n * 3445.x versions prior to 3445.66\n * 3468.x versions prior to 3468.67\n * 3541.x versions prior to 3541.46\n * 3586.x versions prior to 3586.40\n * All other stemcells not listed.\n\n# Mitigation\n\nOSS users are strongly encouraged to follow one of the mitigations below:\n\n * The Cloud Foundry project recommends upgrading the following BOSH trusty-stemcells: \n * Upgrade 3363.x versions to 3363.74\n * Upgrade 3421.x versions to 3421.81\n * Upgrade 3445.x versions to 3445.66\n * Upgrade 3468.x versions to 3468.67\n * Upgrade 3541.x versions to 3541.46\n * Upgrade 3586.x versions to 3586.40\n * All other stemcells should be upgraded to the latest version available on [bosh.io](<https://bosh.io/stemcells/#ubuntu-trusty>).\n\n# References\n\n * [USN-3753-2](<https://usn.ubuntu.com/3753-2>)\n * [CVE-2017-13168](<https://people.canonical.com/~ubuntu-security/cve/CVE-2017-13168>)\n * [CVE-2018-10876](<https://people.canonical.com/~ubuntu-security/cve/CVE-2018-10876>)\n * [CVE-2018-10877](<https://people.canonical.com/~ubuntu-security/cve/CVE-2018-10877>)\n * [CVE-2018-10878](<https://people.canonical.com/~ubuntu-security/cve/CVE-2018-10878>)\n * [CVE-2018-10879](<https://people.canonical.com/~ubuntu-security/cve/CVE-2018-10879>)\n * [CVE-2018-10881](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10881>)\n * [CVE-2018-10882](<https://people.canonical.com/~ubuntu-security/cve/CVE-2018-10882>)\n * [CVE-2018-12233](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12233>)\n * [CVE-2018-13094](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13094>)\n * [CVE-2018-13405](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13405>)\n * [CVE-2018-13406](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13406>)\n", "edition": 1, "reporter": "Cloud Foundry", "published": "2018-09-11T00:00:00", "title": "USN-3753-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry", "type": "cloudfoundry", "enchantments": {"score": {"modified": "2018-09-11T21:26:18", "vector": "NONE", "value": 7.2}}, "bulletinFamily": "software", "affectedSoftware": [], "cvelist": ["CVE-2018-10882", "CVE-2018-10877", "CVE-2018-10878", "CVE-2018-13405", "CVE-2018-13406", "CVE-2018-10881", "CVE-2018-12233", "CVE-2017-13168", "CVE-2018-10876", "CVE-2018-10879", "CVE-2018-13094"], "modified": "2018-09-11T00:00:00", "id": "CFOUNDRY:CD984900F2B581632FB9816EFFC5EA33", "href": "https://www.cloudfoundry.org/blog/usn-3753-2/", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "nessus": [{"lastseen": "2018-12-02T15:34:45", "references": ["https://usn.ubuntu.com/3753-1/"], "pluginID": "112111", "description": "It was discovered that the generic SCSI driver in the Linux kernel did not properly enforce permissions on kernel memory access. A local attacker could use this to expose sensitive information or possibly elevate privileges. (CVE-2017-13168)\n\nWen Xu discovered that a use-after-free vulnerability existed in the ext4 filesystem implementation in the Linux kernel. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-10876, CVE-2018-10879)\n\nWen Xu discovered that a buffer overflow existed in the ext4 filesystem implementation in the Linux kernel. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-10877)\n\nWen Xu discovered that an out-of-bounds write vulnerability existed in the ext4 filesystem implementation in the Linux kernel. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-10878, CVE-2018-10882)\n\nWen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly keep meta-data information consistent in some situations. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash). (CVE-2018-10881)\n\nShankara Pailoor discovered that the JFS filesystem implementation in the Linux kernel contained a buffer overflow when handling extended attributes. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.\n(CVE-2018-12233)\n\nWen Xu discovered that the XFS filesystem implementation in the Linux kernel did not properly handle an error condition with a corrupted xfs image. An attacker could use this to construct a malicious xfs image that, when mounted, could cause a denial of service (system crash).\n(CVE-2018-13094)\n\nIt was discovered that the Linux kernel did not properly handle setgid file creation when performed by a non-member of the group. A local attacker could use this to gain elevated privileges. (CVE-2018-13405)\n\nSilvio Cesare discovered that the generic VESA frame buffer driver in the Linux kernel contained an integer overflow. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-13406).\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "edition": 5, "reporter": "Tenable", "published": "2018-08-24T00:00:00", "title": "Ubuntu 16.04 LTS : linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities (USN-3753-1)", "type": "nessus", "enchantments": {"score": {"modified": "2018-12-02T15:34:45", "vector": "NONE", "value": 7.2}}, "naslFamily": "Ubuntu Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-10882", "CVE-2018-10877", "CVE-2018-10878", "CVE-2018-13405", "CVE-2018-13406", "CVE-2018-10881", "CVE-2018-12233", "CVE-2017-13168", "CVE-2018-10876", "CVE-2018-10879", "CVE-2018-13094"], "modified": "2018-12-01T00:00:00", "cpe": ["p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-kvm", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-aws", "p-cpe:/a:canonical:ubuntu_linux:linux-image-kvm", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-lowlatency", "p-cpe:/a:canonical:ubuntu_linux:linux-image-generic-lpae", "p-cpe:/a:canonical:ubuntu_linux:linux-image-raspi2", "cpe:/o:canonical:ubuntu_linux:16.04", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-generic-lpae", "p-cpe:/a:canonical:ubuntu_linux:linux-image-snapdragon", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-raspi2", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-snapdragon", "p-cpe:/a:canonical:ubuntu_linux:linux-image-lowlatency", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-generic", "p-cpe:/a:canonical:ubuntu_linux:linux-image-aws", "p-cpe:/a:canonical:ubuntu_linux:linux-image-generic"], "id": "UBUNTU_USN-3753-1.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=112111", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Ubuntu Security Notice USN-3753-1. The text \n# itself is copyright (C) Canonical, Inc. See \n# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered \n# trademark of Canonical, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(112111);\n script_version(\"1.3\");\n script_cvs_date(\"Date: 2018/12/01 15:12:42\");\n\n script_cve_id(\"CVE-2017-13168\", \"CVE-2018-10876\", \"CVE-2018-10877\", \"CVE-2018-10878\", \"CVE-2018-10879\", \"CVE-2018-10881\", \"CVE-2018-10882\", \"CVE-2018-12233\", \"CVE-2018-13094\", \"CVE-2018-13405\", \"CVE-2018-13406\");\n script_xref(name:\"USN\", value:\"3753-1\");\n\n script_name(english:\"Ubuntu 16.04 LTS : linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities (USN-3753-1)\");\n script_summary(english:\"Checks dpkg output for updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Ubuntu host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"It was discovered that the generic SCSI driver in the Linux kernel did\nnot properly enforce permissions on kernel memory access. A local\nattacker could use this to expose sensitive information or possibly\nelevate privileges. (CVE-2017-13168)\n\nWen Xu discovered that a use-after-free vulnerability existed in the\next4 filesystem implementation in the Linux kernel. An attacker could\nuse this to construct a malicious ext4 image that, when mounted, could\ncause a denial of service (system crash) or possibly execute arbitrary\ncode. (CVE-2018-10876, CVE-2018-10879)\n\nWen Xu discovered that a buffer overflow existed in the ext4\nfilesystem implementation in the Linux kernel. An attacker could use\nthis to construct a malicious ext4 image that, when mounted, could\ncause a denial of service (system crash) or possibly execute arbitrary\ncode. (CVE-2018-10877)\n\nWen Xu discovered that an out-of-bounds write vulnerability existed in\nthe ext4 filesystem implementation in the Linux kernel. An attacker\ncould use this to construct a malicious ext4 image that, when mounted,\ncould cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2018-10878, CVE-2018-10882)\n\nWen Xu discovered that the ext4 filesystem implementation in the Linux\nkernel did not properly keep meta-data information consistent in some\nsituations. An attacker could use this to construct a malicious ext4\nimage that, when mounted, could cause a denial of service (system\ncrash). (CVE-2018-10881)\n\nShankara Pailoor discovered that the JFS filesystem implementation in\nthe Linux kernel contained a buffer overflow when handling extended\nattributes. A local attacker could use this to cause a denial of\nservice (system crash) or possibly execute arbitrary code.\n(CVE-2018-12233)\n\nWen Xu discovered that the XFS filesystem implementation in the Linux\nkernel did not properly handle an error condition with a corrupted xfs\nimage. An attacker could use this to construct a malicious xfs image\nthat, when mounted, could cause a denial of service (system crash).\n(CVE-2018-13094)\n\nIt was discovered that the Linux kernel did not properly handle setgid\nfile creation when performed by a non-member of the group. A local\nattacker could use this to gain elevated privileges. (CVE-2018-13405)\n\nSilvio Cesare discovered that the generic VESA frame buffer driver in\nthe Linux kernel contained an integer overflow. A local attacker could\nuse this to cause a denial of service (system crash) or possibly\nexecute arbitrary code. (CVE-2018-13406).\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://usn.ubuntu.com/3753-1/\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-aws\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-generic\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-generic-lpae\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-kvm\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-lowlatency\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-raspi2\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-snapdragon\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-aws\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-generic\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-generic-lpae\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-kvm\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-lowlatency\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-raspi2\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-snapdragon\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:16.04\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/08/24\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/08/24\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"Ubuntu Security Notice (C) 2018 Canonical, Inc. / NASL script (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Ubuntu Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/cpu\", \"Host/Ubuntu\", \"Host/Ubuntu/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"ubuntu.inc\");\ninclude(\"misc_func.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Ubuntu/release\");\nif ( isnull(release) ) audit(AUDIT_OS_NOT, \"Ubuntu\");\nrelease = chomp(release);\nif (! ereg(pattern:\"^(16\\.04)$\", string:release)) audit(AUDIT_OS_NOT, \"Ubuntu 16.04\", \"Ubuntu \" + release);\nif ( ! get_kb_item(\"Host/Debian/dpkg-l\") ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Ubuntu\", cpu);\n\nflag = 0;\n\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-4.4.0-1032-kvm\", pkgver:\"4.4.0-1032.38\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-4.4.0-1066-aws\", pkgver:\"4.4.0-1066.76\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-4.4.0-1095-raspi2\", pkgver:\"4.4.0-1095.103\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-4.4.0-1099-snapdragon\", pkgver:\"4.4.0-1099.104\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-4.4.0-134-generic\", pkgver:\"4.4.0-134.160\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-4.4.0-134-generic-lpae\", pkgver:\"4.4.0-134.160\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-4.4.0-134-lowlatency\", pkgver:\"4.4.0-134.160\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-aws\", pkgver:\"4.4.0.1066.68\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-generic\", pkgver:\"4.4.0.134.140\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-generic-lpae\", pkgver:\"4.4.0.134.140\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-kvm\", pkgver:\"4.4.0.1032.31\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-lowlatency\", pkgver:\"4.4.0.134.140\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-raspi2\", pkgver:\"4.4.0.1095.95\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-snapdragon\", pkgver:\"4.4.0.1099.91\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : ubuntu_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = ubuntu_pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"linux-image-4.4-aws / linux-image-4.4-generic / etc\");\n}\n", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-11-20T03:38:24", "references": ["https://bugzilla.opensuse.org/show_bug.cgi?id=1101900", "https://bugzilla.opensuse.org/show_bug.cgi?id=1086331", "https://bugzilla.opensuse.org/show_bug.cgi?id=1087081", "https://bugzilla.opensuse.org/show_bug.cgi?id=1103277", "https://bugzilla.opensuse.org/show_bug.cgi?id=1086317", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101847", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101853", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101902", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101890", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101837", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101903", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101841", "https://bugzilla.opensuse.org/show_bug.cgi?id=1103886", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101828", "https://bugzilla.opensuse.org/show_bug.cgi?id=1081917", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101872", "https://bugzilla.opensuse.org/show_bug.cgi?id=1099849", "https://bugzilla.opensuse.org/show_bug.cgi?id=1097104", "https://bugzilla.opensuse.org/show_bug.cgi?id=1103445", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101895", "https://bugzilla.opensuse.org/show_bug.cgi?id=1103363", "https://bugzilla.opensuse.org/show_bug.cgi?id=1104211", "https://bugzilla.opensuse.org/show_bug.cgi?id=1083647", "https://bugzilla.opensuse.org/show_bug.cgi?id=1099846", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101867", "https://bugzilla.opensuse.org/show_bug.cgi?id=1089343", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101883", "https://bugzilla.opensuse.org/show_bug.cgi?id=1099811", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101843", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101887", "https://bugzilla.opensuse.org/show_bug.cgi?id=1100132", "https://bugzilla.opensuse.org/show_bug.cgi?id=1104494", "https://bugzilla.opensuse.org/show_bug.cgi?id=1104353", "https://bugzilla.opensuse.org/show_bug.cgi?id=1099845", "https://bugzilla.opensuse.org/show_bug.cgi?id=1086315", "https://bugzilla.opensuse.org/show_bug.cgi?id=1104427", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101874", "https://bugzilla.opensuse.org/show_bug.cgi?id=1099844", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101832", "https://bugzilla.opensuse.org/show_bug.cgi?id=1090888", "https://bugzilla.opensuse.org/show_bug.cgi?id=1097808", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101882", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101839", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101833", "https://bugzilla.opensuse.org/show_bug.cgi?id=1103269", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101845", "https://bugzilla.opensuse.org/show_bug.cgi?id=1065600", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101116", "https://bugzilla.opensuse.org/show_bug.cgi?id=1104495", "https://bugzilla.opensuse.org/show_bug.cgi?id=1104708", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101885", "https://bugzilla.opensuse.org/show_bug.cgi?id=1086314", "https://bugzilla.opensuse.org/show_bug.cgi?id=1103097", "https://bugzilla.opensuse.org/show_bug.cgi?id=1104365", "https://bugzilla.opensuse.org/show_bug.cgi?id=1099863", "https://bugzilla.opensuse.org/show_bug.cgi?id=1097577", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101844", "https://bugzilla.opensuse.org/show_bug.cgi?id=1086906", "https://bugzilla.opensuse.org/show_bug.cgi?id=1099864", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101893", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101891", "https://bugzilla.opensuse.org/show_bug.cgi?id=1099813", "https://bugzilla.opensuse.org/show_bug.cgi?id=1086327", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101875", "https://bugzilla.opensuse.org/show_bug.cgi?id=1104777", "https://bugzilla.opensuse.org/show_bug.cgi?id=1102340", "https://bugzilla.opensuse.org/show_bug.cgi?id=1087092", "https://bugzilla.opensuse.org/show_bug.cgi?id=1086288", "https://bugzilla.opensuse.org/show_bug.cgi?id=1104319", "https://bugzilla.opensuse.org/show_bug.cgi?id=1104066", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101896", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101852"], "pluginID": "111812", "description": "The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed :\n\n - CVE-2018-10853: A flaw was found in KVM in which certain instructions such as sgdt/sidt call segmented_write_std doesn't propagate access correctly. As such, during userspace induced exception, the guest can incorrectly assume that the exception happened in the kernel and panic (bnc#1097104).\n\n - CVE-2018-10876: A flaw was found in the ext4 filesystem code. A use-after-free is possible in ext4_ext_remove_space() function when mounting and operating a crafted ext4 image. (bnc#1099811)\n\n - CVE-2018-10877: Linux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4_ext_drop_refs() function when operating on a crafted ext4 filesystem image. (bnc#1099846)\n\n - CVE-2018-10878: A flaw was found in the ext4 filesystem.\n A local user can cause an out-of-bounds write and a denial of service or unspecified other impact is possible by mounting and operating a crafted ext4 filesystem image. (bnc#1099813)\n\n - CVE-2018-10879: A flaw was found in the ext4 filesystem.\n A local user can cause a use-after-free in ext4_xattr_set_entry function and a denial of service or unspecified other impact may occur by renaming a file in a crafted ext4 filesystem image. (bnc#1099844)\n\n - CVE-2018-10880: Linux kernel is vulnerable to a stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a crafted ext4 image in ext4_update_inline_data(). An attacker could use this to cause a system crash and a denial of service.\n (bnc#1099845)\n\n - CVE-2018-10881: A flaw was found in the ext4 filesystem.\n A local user can cause an out-of-bound access in ext4_get_group_info function, a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image. (bnc#1099864)\n\n - CVE-2018-10882: A flaw was found in the ext4 filesystem.\n A local user can cause an out-of-bound write in in fs/jbd2/transaction.c code, a denial of service, and a system crash by unmounting a crafted ext4 filesystem image. (bnc#1099849)\n\n - CVE-2018-10883: A flaw was found in the ext4 filesystem.\n A local user can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image. (bnc#1099863)\n\n - CVE-2018-3620: Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis (bnc#1087081).\n\n - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis (bnc#1089343 bnc#1104365).\n\n - CVE-2018-5391 aka 'FragmentSmack': A flaw in the IP packet reassembly could be used by remote attackers to consume lots of CPU time (bnc#1103097).\n\nThe following non-security bugs were fixed :\n\n - afs: Fix directory permissions check (bsc#1101828).\n\n - bdi: Move cgroup bdi_writeback to a dedicated low concurrency workqueue (bsc#1101867).\n\n - be2net: gather debug info and reset adapter (only for Lancer) on a tx-timeout (bsc#1086288).\n\n - be2net: Update the driver version to 12.0.0.0 (bsc#1086288 ).\n\n - befs_lookup(): use d_splice_alias() (bsc#1101844).\n\n - block: Fix transfer when chunk sectors exceeds max (bsc#1101874).\n\n - bpf, ppc64: fix unexpected r0=0 exit path inside bpf_xadd (bsc#1083647).\n\n - branch-check: fix long->int truncation when profiling branches (bsc#1101116,).\n\n - cdrom: do not call check_disk_change() inside cdrom_open() (bsc#1101872).\n\n - compiler.h: enable builtin overflow checkers and add fallback code (bsc#1101116,).\n\n - cpu/hotplug: Make bringup/teardown of smp threads symmetric (bsc#1089343).\n\n - cpu/hotplug: Provide knobs to control SMT (bsc#1089343).\n\n - cpu/hotplug: Split do_cpu_down() (bsc#1089343).\n\n - delayacct: fix crash in delayacct_blkio_end() after delayacct init failure (bsc#1104066).\n\n - dm: add writecache target (bsc#1101116,).\n\n - dm writecache: support optional offset for start of device (bsc#1101116,).\n\n - dm writecache: use 2-factor allocator arguments (bsc#1101116,).\n\n - EDAC: Add missing MEM_LRDDR4 entry in edac_mem_types[] (bsc#1103886).\n\n - EDAC: Drop duplicated array of strings for memory type names (bsc#1103886).\n\n - ext2: fix a block leak (bsc#1101875).\n\n - ext4: add more mount time checks of the superblock (bsc#1101900).\n\n - ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (bsc#1101896).\n\n - ext4: check for allocation block validity with block group locked (bsc#1104495).\n\n - ext4: check superblock mapped prior to committing (bsc#1101902).\n\n - ext4: do not update s_last_mounted of a frozen fs (bsc#1101841).\n\n - ext4: factor out helper ext4_sample_last_mounted() (bsc#1101841).\n\n - ext4: fix check to prevent initializing reserved inodes (bsc#1104319).\n\n - ext4: fix false negatives *and* false positives in ext4_check_descriptors() (bsc#1103445).\n\n - ext4: fix fencepost error in check for inode count overflow during resize (bsc#1101853).\n\n - ext4: fix inline data updates with checksums enabled (bsc#1104494).\n\n - ext4: include the illegal physical block in the bad map ext4_error msg (bsc#1101903).\n\n - ext4: report delalloc reserve as non-free in statfs for project quota (bsc#1101843).\n\n - ext4: update mtime in ext4_punch_hole even if no blocks are released (bsc#1101895).\n\n - f2fs: call unlock_new_inode() before d_instantiate() (bsc#1101837).\n\n - fix io_destroy()/aio_complete() race (bsc#1101852).\n\n - Force log to disk before reading the AGF during a fstrim (bsc#1101893).\n\n - fscache: Fix hanging wait on page discarded by writeback (bsc#1101885).\n\n - fs: clear writeback errors in inode_init_always (bsc#1101882).\n\n - fs: do not scan the inode cache before SB_BORN is set (bsc#1101883).\n\n - hns3: fix unused function warning (bsc#1104353).\n\n - hns3pf: do not check handle during mqprio offload (bsc#1104353 ).\n\n - hns3pf: fix hns3_del_tunnel_port() (bsc#1104353).\n\n - hns3pf: Fix some harmless copy and paste bugs (bsc#1104353 ).\n\n - hv_netvsc: Fix napi reschedule while receive completion is busy ().\n\n - hv/netvsc: Fix NULL dereference at single queue mode fallback (bsc#1104708).\n\n - hwmon: (asus_atk0110) Replace deprecated device register call (bsc#1103363).\n\n - IB/hns: Annotate iomem pointers correctly (bsc#1104427 ).\n\n - IB/hns: Avoid compile test under non 64bit environments (bsc#1104427).\n\n - IB/hns: Declare local functions 'static' (bsc#1104427 ).\n\n - IB/hns: fix boolreturn.cocci warnings (bsc#1104427).\n\n - IB/hns: Fix for checkpatch.pl comment style warnings (bsc#1104427).\n\n - IB/hns: fix memory leak on ah on error return path (bsc#1104427 ).\n\n - IB/hns: fix returnvar.cocci warnings (bsc#1104427).\n\n - IB/hns: fix semicolon.cocci warnings (bsc#1104427).\n\n - IB/hns: Fix the bug of polling cq failed for loopback Qps (bsc#1104427). Refresh patches.suse/0001-IB-hns-checking-for-IS_ERR-instead-of- NULL.patch.\n\n - IB/hns: Fix the bug with modifying the MAC address without removing the driver (bsc#1104427).\n\n - IB/hns: Fix the bug with rdma operation (bsc#1104427 ).\n\n - IB/hns: Fix the bug with wild pointer when destroy rc qp (bsc#1104427).\n\n - IB/hns: include linux/interrupt.h (bsc#1104427).\n\n - IB/hns: Support compile test for hns RoCE driver (bsc#1104427 ).\n\n - IB/hns: Use zeroing memory allocator instead of allocator/memset (bsc#1104427).\n\n - isofs: fix potential memory leak in mount option parsing (bsc#1101887).\n\n - jump_label: Fix concurrent static_key_enable/disable() (bsc#1089343).\n\n - jump_label: Provide hotplug context variants (bsc#1089343).\n\n - jump_label: Reorder hotplug lock and jump_label_lock (bsc#1089343).\n\n - kabi/severities: Allow kABI changes for kvm/x86 (except for kvm_x86_ops)\n\n - kabi/severities: ignore qla2xxx as all symbols are internal\n\n - kabi/severities: ignore x86_kvm_ops; lttng-modules would have to be adjusted in case they depend on this particular change\n\n - kabi/severities: Relax kvm_vcpu_* kABI breakage\n\n - media: rc: oops in ir_timer_keyup after device unplug (bsc#1090888).\n\n - mm: fix __gup_device_huge vs unmap (bsc#1101839).\n\n - net: hns3: Add a check for client instance init state (bsc#1104353).\n\n - net: hns3: add a mask initialization for mac_vlan table (bsc#1104353).\n\n - net: hns3: Add *Asserting Reset* mailbox message & handling in VF (bsc#1104353).\n\n - net: hns3: add Asym Pause support to phy default features (bsc#1104353).\n\n - net: hns3: Add dcb netlink interface for the support of DCB feature (bsc#1104353).\n\n - net: hns3: Add DCB support when interacting with network stack (bsc#1104353).\n\n - net: hns3: Add ethtool interface for vlan filter (bsc#1104353 ).\n\n - net: hns3: add ethtool_ops.get_channels support for VF (bsc#1104353).\n\n - net: hns3: add ethtool_ops.get_coalesce support to PF (bsc#1104353).\n\n - net: hns3: add ethtool_ops.set_coalesce support to PF (bsc#1104353).\n\n - net: hns3: add ethtool -p support for fiber port (bsc#1104353 ).\n\n - net: hns3: add ethtool related offload command (bsc#1104353 ).\n\n - net: hns3: Add Ethtool support to HNS3 driver (bsc#1104353 ).\n\n - net: hns3: add existence checking before adding unicast mac address (bsc#1104353).\n\n - net: hns3: add existence check when remove old uc mac address (bsc#1104353).\n\n - net: hns3: add feature check when feature changed (bsc#1104353 ).\n\n - net: hns3: add get_link support to VF (bsc#1104353).\n\n - net: hns3: add get/set_coalesce support to VF (bsc#1104353 ).\n\n - net: hns3: add handling vlan tag offload in bd (bsc#1104353 ).\n\n - net: hns3: Add hclge_dcb module for the support of DCB feature (bsc#1104353).\n\n - net: hns3: Add HNS3 Acceleration Engine & Compatibility Layer Support (bsc#1104353).\n\n - net: hns3: Add HNS3 driver to kernel build framework & MAINTAINERS (bsc#1104353).\n\n - net: hns3: Add hns3_get_handle macro in hns3 driver (bsc#1104353 ).\n\n - net: hns3: Add HNS3 IMP(Integrated Mgmt Proc) Cmd Interface Support (bsc#1104353).\n\n - net: hns3: Add HNS3 VF driver to kernel build framework (bsc#1104353).\n\n - net: hns3: Add HNS3 VF HCL(Hardware Compatibility Layer) Support (bsc#1104353).\n\n - net: hns3: Add HNS3 VF IMP(Integrated Management Proc) cmd interface (bsc#1104353).\n\n - net: hns3: add int_gl_idx setup for TX and RX queues (bsc#1104353).\n\n - net: hns3: add int_gl_idx setup for VF (bsc#1104353 ).\n\n - net: hns3: Add mac loopback selftest support in hns3 driver (bsc#1104353).\n\n - net: hns3: Add mailbox interrupt handling to PF driver (bsc#1104353).\n\n - net: hns3: Add mailbox support to PF driver (bsc#1104353 ).\n\n - net: hns3: Add mailbox support to VF driver (bsc#1104353 ).\n\n - net: hns3: add manager table initialization for hardware (bsc#1104353).\n\n - net: hns3: Add MDIO support to HNS3 Ethernet driver for hip08 SoC (bsc#1104353).\n\n - net: hns3: Add missing break in misc_irq_handle (bsc#1104353 ).\n\n - net: hns3: Add more packet size statisctics (bsc#1104353 ).\n\n - net: hns3: add MTU initialization for hardware (bsc#1104353 ).\n\n - net: hns3: add net status led support for fiber port (bsc#1104353).\n\n - net: hns3: add nic_client check when initialize roce base information (bsc#1104353).\n\n - net: hns3: add querying speed and duplex support to VF (bsc#1104353).\n\n - net: hns3: Add repeat address checking for setting mac address (bsc#1104353).\n\n - net: hns3: Add reset interface implementation in client (bsc#1104353).\n\n - net: hns3: Add reset process in hclge_main (bsc#1104353 ).\n\n - net: hns3: Add reset service task for handling reset requests (bsc#1104353).\n\n - net: hns3: add result checking for VF when modify unicast mac address (bsc#1104353).\n\n - net: hns3: Add some interface for the support of DCB feature (bsc#1104353).\n\n - net: hns3: Adds support for led locate command for copper port (bsc#1104353).\n\n - net: hns3: Add STRP_TAGP field support for hardware revision 0x21 (bsc#1104353).\n\n - net: hns3: Add support for dynamically buffer reallocation (bsc#1104353).\n\n - net: hns3: add support for ETHTOOL_GRXFH (bsc#1104353 ).\n\n - net: hns3: add support for get_regs (bsc#1104353).\n\n - net: hns3: Add support for IFF_ALLMULTI flag (bsc#1104353 ).\n\n - net: hns3: Add support for misc interrupt (bsc#1104353 ).\n\n - net: hns3: add support for nway_reset (bsc#1104353).\n\n - net: hns3: Add support for PFC setting in TM module (bsc#1104353 ).\n\n - net: hns3: Add support for port shaper setting in TM module (bsc#1104353).\n\n - net: hns3: add support for querying advertised pause frame by ethtool ethx (bsc#1104353).\n\n - net: hns3: add support for querying pfc puase packets statistic (bsc#1104353).\n\n - net: hns3: add support for set_link_ksettings (bsc#1104353 ).\n\n - net: hns3: add support for set_pauseparam (bsc#1104353 ).\n\n - net: hns3: add support for set_ringparam (bsc#1104353 ).\n\n - net: hns3: add support for set_rxnfc (bsc#1104353).\n\n - net: hns3: Add support for tx_accept_tag2 and tx_accept_untag2 config (bsc#1104353).\n\n - net: hns3: add support for VF driver inner interface hclgevf_ops.get_tqps_and_rss_info (bsc#1104353).\n\n - net: hns3: Add support of hardware rx-vlan-offload to HNS3 VF driver (bsc#1104353).\n\n - net: hns3: Add support of HNS3 Ethernet Driver for hip08 SoC (bsc#1104353).\n\n - net: hns3: Add support of .sriov_configure in HNS3 driver (bsc#1104353).\n\n - net: hns3: Add support of the HNAE3 framework (bsc#1104353 ).\n\n - net: hns3: Add support of TX Scheduler & Shaper to HNS3 driver (bsc#1104353).\n\n - net: hns3: Add support to change MTU in HNS3 hardware (bsc#1104353).\n\n - net: hns3: Add support to enable TX/RX promisc mode for H/W rev(0x21) (bsc#1104353).\n\n - net: hns3: add support to modify tqps number (bsc#1104353 ).\n\n - net: hns3: add support to query tqps number (bsc#1104353 ).\n\n - net: hns3: Add support to re-initialize the hclge device (bsc#1104353).\n\n - net: hns3: Add support to request VF Reset to PF (bsc#1104353 ).\n\n - net: hns3: Add support to reset the enet/ring mgmt layer (bsc#1104353).\n\n - net: hns3: add support to update flow control settings after autoneg (bsc#1104353).\n\n - net: hns3: Add tc-based TM support for sriov enabled port (bsc#1104353).\n\n - net: hns3: Add timeout process in hns3_enet (bsc#1104353 ).\n\n - net: hns3: Add VF Reset device state and its handling (bsc#1104353).\n\n - net: hns3: Add VF Reset Service Task to support event handling (bsc#1104353).\n\n - net: hns3: add vlan offload config command (bsc#1104353 ).\n\n - net: hns3: change GL update rate (bsc#1104353).\n\n - net: hns3: Change PF to add ring-vect binding & resetQ to mailbox (bsc#1104353).\n\n - net: hns3: Change return type of hnae3_register_ae_algo (bsc#1104353).\n\n - net: hns3: Change return type of hnae3_register_ae_dev (bsc#1104353).\n\n - net: hns3: Change return value in hnae3_register_client (bsc#1104353).\n\n - net: hns3: Changes required in PF mailbox to support VF reset (bsc#1104353).\n\n - net: hns3: Changes to make enet watchdog timeout func common for PF/VF (bsc#1104353).\n\n - net: hns3: Changes to support ARQ(Asynchronous Receive Queue) (bsc#1104353).\n\n - net: hns3: change the returned tqp number by ethtool -x (bsc#1104353).\n\n - net: hns3: change the time interval of int_gl calculating (bsc#1104353).\n\n - net: hns3: change the unit of GL value macro (bsc#1104353 ).\n\n - net: hns3: change TM sched mode to TC-based mode when SRIOV enabled (bsc#1104353).\n\n - net: hns3: check for NULL function pointer in hns3_nic_set_features (bsc#1104353).\n\n - net: hns3: Cleanup for endian issue in hns3 driver (bsc#1104353 ).\n\n - net: hns3: Cleanup for non-static function in hns3 driver (bsc#1104353).\n\n - net: hns3: Cleanup for ROCE capability flag in ae_dev (bsc#1104353).\n\n - net: hns3: Cleanup for shifting true in hns3 driver (bsc#1104353 ).\n\n - net: hns3: Cleanup for struct that used to send cmd to firmware (bsc#1104353).\n\n - net: hns3: Cleanup indentation for Kconfig in the the hisilicon folder (bsc#1104353).\n\n - net: hns3: cleanup mac auto-negotiation state query (bsc#1104353 ).\n\n - net: hns3: cleanup mac auto-negotiation state query in hclge_update_speed_duplex (bsc#1104353).\n\n - net: hns3: cleanup of return values in hclge_init_client_instance() (bsc#1104353).\n\n - net: hns3: Clear TX/RX rings when stopping port & un-initializing client (bsc#1104353).\n\n - net: hns3: Consistently using GENMASK in hns3 driver (bsc#1104353).\n\n - net: hns3: converting spaces into tabs to avoid checkpatch.pl warning (bsc#1104353).\n\n - net: hns3: Disable VFs change rxvlan offload status (bsc#1104353 ).\n\n - net: hns3: Disable vf vlan filter when vf vlan table is full (bsc#1104353).\n\n - net: hns3: ensure media_type is uninitialized (bsc#1104353 ).\n\n - net: hns3: export pci table of hclge and hclgevf to userspace (bsc#1104353).\n\n - net: hns3: fix a bug about hns3_clean_tx_ring (bsc#1104353 ).\n\n - net: hns3: fix a bug for phy supported feature initialization (bsc#1104353).\n\n - net: hns3: fix a bug in hclge_uninit_client_instance (bsc#1104353).\n\n - net: hns3: fix a bug in hns3_driv_to_eth_caps (bsc#1104353 ).\n\n - net: hns3: fix a bug when alloc new buffer (bsc#1104353 ).\n\n - net: hns3: fix a bug when getting phy address from NCL_config file (bsc#1104353).\n\n - net: hns3: fix a dead loop in hclge_cmd_csq_clean (bsc#1104353 ).\n\n - net: hns3: fix a handful of spelling mistakes (bsc#1104353 ).\n\n - net: hns3: Fix a loop index error of tqp statistics query (bsc#1104353).\n\n - net: hns3: Fix a misuse to devm_free_irq (bsc#1104353 ).\n\n - net: hns3: Fix an error handling path in 'hclge_rss_init_hw()' (bsc#1104353).\n\n - net: hns3: Fix an error macro definition of HNS3_TQP_STAT (bsc#1104353).\n\n - net: hns3: Fix an error of total drop packet statistics (bsc#1104353).\n\n - net: hns3: Fix a response data read error of tqp statistics query (bsc#1104353).\n\n - net: hns3: fix endian issue when PF get mbx message flag (bsc#1104353).\n\n - net: hns3: fix error type definition of return value (bsc#1104353).\n\n - net: hns3: Fixes API to fetch ethernet header length with kernel default (bsc#1104353).\n\n - net: hns3: Fixes error reported by Kbuild and internal review (bsc#1104353).\n\n - net: hns3: Fixes initalization of RoCE handle and makes it conditional (bsc#1104353).\n\n - net: hns3: Fixes initialization of phy address from firmware (bsc#1104353).\n\n - net: hns3: Fixes kernel panic issue during rmmod hns3 driver (bsc#1104353).\n\n - net: hns3: Fixes ring-to-vector map-and-unmap command (bsc#1104353).\n\n - net: hns3: Fixes the back pressure setting when sriov is enabled (bsc#1104353).\n\n - net: hns3: Fixes the command used to unmap ring from vector (bsc#1104353).\n\n - net: hns3: Fixes the default VLAN-id of PF (bsc#1104353 ).\n\n - net: hns3: Fixes the error legs in hclge_init_ae_dev function (bsc#1104353).\n\n - net: hns3: Fixes the ether address copy with appropriate API (bsc#1104353).\n\n - net: hns3: Fixes the initialization of MAC address in hardware (bsc#1104353).\n\n - net: hns3: Fixes the init of the VALID BD info in the descriptor (bsc#1104353).\n\n - net: hns3: Fixes the missing PCI iounmap for various legs (bsc#1104353).\n\n - net: hns3: Fixes the missing u64_stats_fetch_begin_irq in 64-bit stats fetch (bsc#1104353).\n\n - net: hns3: Fixes the out of bounds access in hclge_map_tqp (bsc#1104353).\n\n - net: hns3: Fixes the premature exit of loop when matching clients (bsc#1104353).\n\n - net: hns3: fixes the ring index in hns3_fini_ring (bsc#1104353 ).\n\n - net: hns3: Fixes the state to indicate client-type initialization (bsc#1104353).\n\n - net: hns3: Fixes the static checker error warning in hns3_get_link_ksettings() (bsc#1104353).\n\n - net: hns3: Fixes the static check warning due to missing unsupp L3 proto check (bsc#1104353).\n\n - net: hns3: Fixes the wrong IS_ERR check on the returned phydev value (bsc#1104353).\n\n - net: hns3: fix for buffer overflow smatch warning (bsc#1104353 ).\n\n - net: hns3: fix for changing MTU (bsc#1104353).\n\n - net: hns3: fix for cleaning ring problem (bsc#1104353 ).\n\n - net: hns3: Fix for CMDQ and Misc. interrupt init order problem (bsc#1104353).\n\n - net: hns3: fix for coal configuation lost when setting the channel (bsc#1104353).\n\n - net: hns3: fix for coalesce configuration lost during reset (bsc#1104353).\n\n - net: hns3: Fix for deadlock problem occurring when unregistering ae_algo (bsc#1104353).\n\n - net: hns3: Fix for DEFAULT_DV when dev does not support DCB (bsc#1104353).\n\n - net: hns3: Fix for fiber link up problem (bsc#1104353 ).\n\n - net: hns3: fix for getting advertised_caps in hns3_get_link_ksettings (bsc#1104353).\n\n - net: hns3: fix for getting autoneg in hns3_get_link_ksettings (bsc#1104353).\n\n - net: hns3: fix for getting auto-negotiation state in hclge_get_autoneg (bsc#1104353).\n\n - net: hns3: fix for getting wrong link mode problem (bsc#1104353 ).\n\n - net: hns3: Fix for hclge_reset running repeatly problem (bsc#1104353).\n\n - net: hns3: Fix for hns3 module is loaded multiple times problem (bsc#1104353).\n\n - net: hns3: fix for ipv6 address loss problem after setting channels (bsc#1104353).\n\n - net: hns3: fix for loopback failure when vlan filter is enable (bsc#1104353).\n\n - net: hns3: fix for netdev not running problem after calling net_stop and net_open (bsc#1104353).\n\n - net: hns3: Fix for netdev not running problem after calling net_stop and net_open (bsc#1104353).\n\n - net: hns3: fix for not initializing VF rss_hash_key problem (bsc#1104353).\n\n - net: hns3: fix for not returning problem in get_link_ksettings when phy exists (bsc#1104353).\n\n - net: hns3: fix for not setting pause parameters (bsc#1104353 ).\n\n - net: hns3: Fix for not setting rx private buffer size to zero (bsc#1104353).\n\n - net: hns3: Fix for packet loss due wrong filter config in VLAN tbls (bsc#1104353).\n\n - net: hns3: fix for pause configuration lost during reset (bsc#1104353).\n\n - net: hns3: Fix for PF mailbox receving unknown message (bsc#1104353).\n\n - net: hns3: fix for phy_addr error in hclge_mac_mdio_config (bsc#1104353).\n\n - net: hns3: Fix for phy not link up problem after resetting (bsc#1104353).\n\n - net: hns3: Fix for pri to tc mapping in TM (bsc#1104353 ).\n\n - net: hns3: fix for returning wrong value problem in hns3_get_rss_indir_size (bsc#1104353).\n\n - net: hns3: fix for returning wrong value problem in hns3_get_rss_key_size (bsc#1104353).\n\n - net: hns3: fix for RSS configuration loss problem during reset (bsc#1104353).\n\n - net: hns3: Fix for rx priv buf allocation when DCB is not supported (bsc#1104353).\n\n - net: hns3: Fix for rx_priv_buf_alloc not setting rx shared buffer (bsc#1104353).\n\n - net: hns3: Fix for service_task not running problem after resetting (bsc#1104353).\n\n - net: hns3: Fix for setting mac address when resetting (bsc#1104353).\n\n - net: hns3: fix for setting MTU (bsc#1104353).\n\n - net: hns3: Fix for setting rss_size incorrectly (bsc#1104353 ).\n\n - net: hns3: Fix for the NULL pointer problem occurring when initializing ae_dev failed (bsc#1104353).\n\n - net: hns3: fix for the wrong shift problem in hns3_set_txbd_baseinfo (bsc#1104353).\n\n - net: hns3: fix for updating fc_mode_last_time (bsc#1104353 ).\n\n - net: hns3: fix for use-after-free when setting ring parameter (bsc#1104353).\n\n - net: hns3: Fix for VF mailbox cannot receiving PF response (bsc#1104353).\n\n - net: hns3: Fix for VF mailbox receiving unknown message (bsc#1104353).\n\n - net: hns3: fix for vlan table lost problem when resetting (bsc#1104353).\n\n - net: hns3: Fix for vxlan tx checksum bug (bsc#1104353 ).\n\n - net: hns3: Fix initialization when cmd is not supported (bsc#1104353).\n\n - net: hns3: fix length overflow when CONFIG_ARM64_64K_PAGES (bsc#1104353).\n\n - net: hns3: fix NULL pointer dereference before null check (bsc#1104353).\n\n - net: hns3: fix return value error of hclge_get_mac_vlan_cmd_status() (bsc#1104353).\n\n - net: hns3: fix rx path skb->truesize reporting bug (bsc#1104353 ).\n\n - net: hns3: Fix setting mac address error (bsc#1104353 ).\n\n - net: hns3: Fix spelling errors (bsc#1104353).\n\n - net: hns3: fix spelling mistake: 'capabilty' -> 'capability' (bsc#1104353).\n\n - net: hns3: fix the bug of hns3_set_txbd_baseinfo (bsc#1104353 ).\n\n - net: hns3: fix the bug when map buffer fail (bsc#1104353 ).\n\n - net: hns3: fix the bug when reuse command description in hclge_add_mac_vlan_tbl (bsc#1104353).\n\n - net: hns3: Fix the missing client list node initialization (bsc#1104353).\n\n - net: hns3: fix the ops check in hns3_get_rxnfc (bsc#1104353 ).\n\n - net: hns3: fix the queue id for tqp enable&&reset (bsc#1104353 ).\n\n - net: hns3: fix the ring count for ETHTOOL_GRXRINGS (bsc#1104353 ).\n\n - net: hns3: fix the TX/RX ring.queue_index in hns3_ring_get_cfg (bsc#1104353).\n\n - net: hns3: fix the VF queue reset flow error (bsc#1104353 ).\n\n - net: hns3: fix to correctly fetch l4 protocol outer header (bsc#1104353).\n\n - net: hns3: Fix to support autoneg only for port attached with phy (bsc#1104353).\n\n - net: hns3: Fix typo error for feild in hclge_tm (bsc#1104353 ).\n\n - net: hns3: free the ring_data structrue when change tqps (bsc#1104353).\n\n - net: hns3: get rss_size_max from configuration but not hardcode (bsc#1104353).\n\n - net: hns3: get vf count by pci_sriov_get_totalvfs (bsc#1104353 ).\n\n - net: hns3: hclge_inform_reset_assert_to_vf() can be static (bsc#1104353).\n\n - net: hns3: hns3:fix a bug about statistic counter in reset process (bsc#1104353).\n\n - net: hns3: hns3_get_channels() can be static (bsc#1104353 ).\n\n - net: hns3: Increase the default depth of bucket for TM shaper (bsc#1104353).\n\n - net: hns3: increase the max time for IMP handle command (bsc#1104353).\n\n - net: hns3: make local functions static (bsc#1104353 ).\n\n - net: hns3: Mask the packet statistics query when NIC is down (bsc#1104353).\n\n - net: hns3: Modify the update period of packet statistics (bsc#1104353).\n\n - net: hns3: never send command queue message to IMP when reset (bsc#1104353).\n\n - net: hns3: Optimize PF CMDQ interrupt switching process (bsc#1104353).\n\n - net: hns3: Optimize the PF's process of updating multicast MAC (bsc#1104353).\n\n - net: hns3: Optimize the VF's process of updating multicast MAC (bsc#1104353).\n\n - net: hns3: reallocate tx/rx buffer after changing mtu (bsc#1104353).\n\n - net: hns3: refactor GL update function (bsc#1104353 ).\n\n - net: hns3: refactor interrupt coalescing init function (bsc#1104353).\n\n - net: hns3: Refactor mac_init function (bsc#1104353).\n\n - net: hns3: Refactor of the reset interrupt handling logic (bsc#1104353).\n\n - net: hns3: Refactors the requested reset & pending reset handling code (bsc#1104353).\n\n - net: hns3: refactor the coalesce related struct (bsc#1104353 ).\n\n - net: hns3: refactor the get/put_vector function (bsc#1104353 ).\n\n - net: hns3: refactor the hclge_get/set_rss function (bsc#1104353 ).\n\n - net: hns3: refactor the hclge_get/set_rss_tuple function (bsc#1104353).\n\n - net: hns3: Refactor the initialization of command queue (bsc#1104353).\n\n - net: hns3: refactor the loopback related function (bsc#1104353 ).\n\n - net: hns3: Refactor the mapping of tqp to vport (bsc#1104353 ).\n\n - net: hns3: Refactor the skb receiving and transmitting function (bsc#1104353).\n\n - net: hns3: remove a couple of redundant assignments (bsc#1104353 ).\n\n - net: hns3: remove add/del_tunnel_udp in hns3_enet module (bsc#1104353).\n\n - net: hns3: Remove a useless member of struct hns3_stats (bsc#1104353).\n\n - net: hns3: Remove error log when getting pfc stats fails (bsc#1104353).\n\n - net: hns3: Remove packet statistics in the range of 8192~12287 (bsc#1104353).\n\n - net: hns3: remove redundant memset when alloc buffer (bsc#1104353).\n\n - net: hns3: remove redundant semicolon (bsc#1104353).\n\n - net: hns3: Remove repeat statistic of rx_errors (bsc#1104353 ).\n\n - net: hns3: Removes unnecessary check when clearing TX/RX rings (bsc#1104353).\n\n - net: hns3: remove TSO config command from VF driver (bsc#1104353 ).\n\n - net: hns3: remove unnecessary pci_set_drvdata() and devm_kfree() (bsc#1104353).\n\n - net: hns3: remove unused GL setup function (bsc#1104353 ).\n\n - net: hns3: remove unused hclgevf_cfg_func_mta_filter (bsc#1104353).\n\n - net: hns3: Remove unused led control code (bsc#1104353 ).\n\n - net: hns3: report the function type the same line with hns3_nic_get_stats64 (bsc#1104353).\n\n - net: hns3: set the cmdq out_vld bit to 0 after used (bsc#1104353 ).\n\n - net: hns3: set the max ring num when alloc netdev (bsc#1104353 ).\n\n - net: hns3: Setting for fc_mode and dcb enable flag in TM module (bsc#1104353).\n\n - net: hns3: Support for dynamically assigning tx buffer to TC (bsc#1104353).\n\n - net: hns3: Unified HNS3 {VF|PF} Ethernet Driver for hip08 SoC (bsc#1104353).\n\n - net: hns3: unify the pause params setup function (bsc#1104353 ).\n\n - net: hns3: Unify the strings display of packet statistics (bsc#1104353).\n\n - net: hns3: Updates MSI/MSI-X alloc/free APIs(depricated) to new APIs (bsc#1104353).\n\n - net: hns3: Updates RX packet info fetch in case of multi BD (bsc#1104353).\n\n - net: hns3: Use enums instead of magic number in hclge_is_special_opcode (bsc#1104353).\n\n - net: hns3: VF should get the real rss_size instead of rss_size_max (bsc#1104353).\n\n - net: lan78xx: Fix race in tx pending skb size calculation (bsc#1100132).\n\n - net: lan78xx: fix rx handling before first packet is send (bsc#1100132).\n\n - net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).\n\n - net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).\n\n - net-usb: add qmi_wwan if on lte modem wistron neweb d18q1 (bsc#1087092).\n\n - net: usb: asix: replace mii_nway_restart in resume path (bsc#1100132).\n\n - orangefs: report attributes_mask and attributes for statx (bsc#1101832).\n\n - orangefs: set i_size on new symlink (bsc#1101845).\n\n - overflow.h: Add allocation size calculation helpers (bsc#1101116,).\n\n - powerpc/64: Add GENERIC_CPU support for little endian ().\n\n - powerpc/fadump: handle crash memory ranges array index overflow (bsc#1103269).\n\n - powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD segements (bsc#1103269).\n\n - powerpc/pkeys: Deny read/write/execute by default (bsc#1097577).\n\n - powerpc/pkeys: Fix calculation of total pkeys (bsc#1097577).\n\n - powerpc/pkeys: Give all threads control of their key permissions (bsc#1097577).\n\n - powerpc/pkeys: key allocation/deallocation must not change pkey registers (bsc#1097577).\n\n - powerpc/pkeys: make protection key 0 less special (bsc#1097577).\n\n - powerpc/pkeys: Preallocate execute-only key (bsc#1097577).\n\n - powerpc/pkeys: Save the pkey registers before fork (bsc#1097577).\n\n - qed*: Add link change count value to ethtool statistics display.\n\n - qed: Add qed APIs for PHY module query (bsc#1086314 ).\n\n - qed: Add srq core support for RoCE and iWARP (bsc#1086314 ).\n\n - qede: Add driver callbacks for eeprom module query (bsc#1086314 ).\n\n - qedf: Add get_generic_tlv_data handler (bsc#1086317).\n\n - qedf: Add support for populating ethernet TLVs (bsc#1086317).\n\n - qed: fix spelling mistake 'successffuly' -> 'successfully' (bsc#1086314).\n\n - qedi: Add get_generic_tlv_data handler (bsc#1086315).\n\n - qedi: Add support for populating ethernet TLVs (bsc#1086315).\n\n - qed: Make some functions static (bsc#1086314).\n\n - qed: remove redundant functions qed_get_cm_pq_idx_rl (bsc#1086314).\n\n - qed: remove redundant functions qed_set_gft_event_id_cm_hdr (bsc#1086314).\n\n - qed: remove redundant pointer 'name' (bsc#1086314).\n\n - qed: use dma_zalloc_coherent instead of allocator/memset (bsc#1086314).\n\n - qed*: Utilize FW 8.37.2.0 (bsc#1086314).\n\n - rdma/hns: Add 64KB page size support for hip08 (bsc#1104427 ).\n\n - rdma/hns: Add command queue support for hip08 RoCE driver (bsc#1104427).\n\n - rdma/hns: Add CQ operations support for hip08 RoCE driver (bsc#1104427).\n\n - rdma/hns: Add detailed comments for mb() call (bsc#1104427 ).\n\n - rdma/hns: Add eq support of hip08 (bsc#1104427).\n\n - rdma/hns: Add gsi qp support for modifying qp in hip08 (bsc#1104427).\n\n - rdma/hns: Add mailbox's implementation for hip08 RoCE driver (bsc#1104427).\n\n - rdma/hns: Add modify CQ support for hip08 (bsc#1104427 ).\n\n - rdma/hns: Add names to function arguments in function pointers (bsc#1104427).\n\n - rdma/hns: Add profile support for hip08 driver (bsc#1104427 ).\n\n - rdma/hns: Add QP operations support for hip08 SoC (bsc#1104427 ).\n\n - rdma/hns: Add releasing resource operation in error branch (bsc#1104427).\n\n - rdma/hns: Add rereg mr support for hip08 (bsc#1104427 ).\n\n - rdma/hns: Add reset process for RoCE in hip08 (bsc#1104427 ).\n\n - rdma/hns: Add return operation when configured global param fail (bsc#1104427).\n\n - rdma/hns: Add rq inline data support for hip08 RoCE (bsc#1104427 ).\n\n - rdma/hns: Add rq inline flags judgement (bsc#1104427 ).\n\n - rdma/hns: Add sq_invld_flg field in QP context (bsc#1104427 ).\n\n - rdma/hns: Add support for processing send wr and receive wr (bsc#1104427).\n\n - rdma/hns: Add the interfaces to support multi hop addressing for the contexts in hip08 (bsc#1104427).\n\n - rdma/hns: Adjust the order of cleanup hem table (bsc#1104427 ).\n\n - rdma/hns: Assign dest_qp when deregistering mr (bsc#1104427 ).\n\n - rdma/hns: Assign the correct value for tx_cqn (bsc#1104427 ).\n\n - rdma/hns: Assign zero for pkey_index of wc in hip08 (bsc#1104427 ).\n\n - rdma/hns: Avoid NULL pointer exception (bsc#1104427 ).\n\n - rdma/hns: Bugfix for cq record db for kernel (bsc#1104427 ).\n\n - rdma/hns: Bugfix for init hem table (bsc#1104427).\n\n - rdma/hns: Bugfix for rq record db for kernel (bsc#1104427 ).\n\n - rdma/hns: Check return value of kzalloc (bsc#1104427 ).\n\n - rdma/hns: Configure BT BA and BT attribute for the contexts in hip08 (bsc#1104427).\n\n - rdma/hns: Configure fence attribute in hip08 RoCE (bsc#1104427 ).\n\n - rdma/hns: Configure mac&gid and user access region for hip08 RoCE driver (bsc#1104427).\n\n - rdma/hns: Configure sgid type for hip08 RoCE (bsc#1104427 ).\n\n - rdma/hns: Configure the MTPT in hip08 (bsc#1104427).\n\n - rdma/hns: Configure TRRL field in hip08 RoCE device (bsc#1104427 ).\n\n - rdma/hns: Create gsi qp in hip08 (bsc#1104427).\n\n - rdma/hns: Delete the unnecessary initializing enum to zero (bsc#1104427).\n\n - rdma/hns: Do not unregister a callback we didn't register (bsc#1104427).\n\n - rdma/hns: Drop local zgid in favor of core defined variable (bsc#1104427).\n\n - rdma/hns: Enable inner_pa_vld filed of mpt (bsc#1104427 ).\n\n - rdma/hns: Enable the cqe field of sqwqe of RC (bsc#1104427 ).\n\n - rdma/hns: ensure for-loop actually iterates and free's buffers (bsc#1104427).\n\n - rdma/hns: Fill sq wqe context of ud type in hip08 (bsc#1104427 ).\n\n - rdma/hns: Filter for zero length of sge in hip08 kernel mode (bsc#1104427).\n\n - rdma/hns: Fix a bug with modifying mac address (bsc#1104427 ).\n\n - rdma/hns: Fix a couple misspellings (bsc#1104427).\n\n - rdma/hns: Fix calltrace for sleeping in atomic (bsc#1104427 ).\n\n - rdma/hns: Fix cqn type and init resp (bsc#1104427).\n\n - rdma/hns: Fix cq record doorbell enable in kernel (bsc#1104427 ).\n\n - rdma/hns: Fix endian problems around imm_data and rkey (bsc#1104427).\n\n - rdma/hns: Fix inconsistent warning (bsc#1104427).\n\n - rdma/hns: Fix init resp when alloc ucontext (bsc#1104427 ).\n\n - rdma/hns: Fix misplaced call to hns_roce_cleanup_hem_table (bsc#1104427).\n\n - rdma/hns: Fix QP state judgement before receiving work requests (bsc#1104427).\n\n - rdma/hns: Fix QP state judgement before sending work requests (bsc#1104427).\n\n - rdma/hns: fix spelling mistake: 'Reseved' -> 'Reserved' (bsc#1104427).\n\n - rdma/hns: Fix the bug with NULL pointer (bsc#1104427 ).\n\n - rdma/hns: Fix the bug with rq sge (bsc#1104427).\n\n - rdma/hns: Fix the endian problem for hns (bsc#1104427 ).\n\n - rdma/hns: Fix the illegal memory operation when cross page (bsc#1104427).\n\n - rdma/hns: Fix the issue of IOVA not page continuous in hip08 (bsc#1104427).\n\n - rdma/hns: Fix the qp context state diagram (bsc#1104427 ).\n\n - rdma/hns: Generate gid type of RoCEv2 (bsc#1104427).\n\n - rdma/hns: Get rid of page operation after dma_alloc_coherent (bsc#1104427).\n\n - rdma/hns: Get rid of virt_to_page and vmap calls after dma_alloc_coherent (bsc#1104427).\n\n - rdma/hns: Implement the disassociate_ucontext API (bsc#1104427 ).\n\n - rdma/hns: Increase checking CMQ status timeout value (bsc#1104427).\n\n - rdma/hns: Initialize the PCI device for hip08 RoCE (bsc#1104427 ).\n\n - rdma/hns: Intercept illegal RDMA operation when use inline data (bsc#1104427).\n\n - rdma/hns: Load the RoCE dirver automatically (bsc#1104427 ).\n\n - rdma/hns: make various function static, fixes warnings (bsc#1104427).\n\n - rdma/hns: Modify assignment device variable to support both PCI device and platform device (bsc#1104427).\n\n - rdma/hns: Modify the usage of cmd_sn in hip08 (bsc#1104427 ).\n\n - rdma/hns: Modify the value with rd&dest_rd of qp_attr (bsc#1104427).\n\n - rdma/hns: Modify uar allocation algorithm to avoid bitmap exhaust (bsc#1104427).\n\n - rdma/hns: Move priv in order to add multiple hns_roce support (bsc#1104427).\n\n - rdma/hns: Move the location for initializing tmp_len (bsc#1104427).\n\n - rdma/hns: Not support qp transition from reset to reset for hip06 (bsc#1104427).\n\n - rdma/hns: Only assign dest_qp if IB_QP_DEST_QPN bit is set (bsc#1104427).\n\n - rdma/hns: Only assign dqpn if IB_QP_PATH_DEST_QPN bit is set (bsc#1104427).\n\n - rdma/hns: Only assign mtu if IB_QP_PATH_MTU bit is set (bsc#1104427).\n\n - rdma/hns: Refactor code for readability (bsc#1104427 ).\n\n - rdma/hns: Refactor eq code for hip06 (bsc#1104427).\n\n - rdma/hns: remove redundant assignment to variable j (bsc#1104427 ).\n\n - rdma/hns: Remove some unnecessary attr_mask judgement (bsc#1104427).\n\n - rdma/hns: Remove unnecessary operator (bsc#1104427).\n\n - rdma/hns: Remove unnecessary platform_get_resource() error check (bsc#1104427).\n\n - rdma/hns: Rename the idx field of db (bsc#1104427).\n\n - rdma/hns: Replace condition statement using hardware version information (bsc#1104427).\n\n - rdma/hns: Replace __raw_write*(cpu_to_le*()) with LE write*() (bsc#1104427).\n\n - rdma/hns: return 0 rather than return a garbage status value (bsc#1104427).\n\n - rdma/hns_roce: Do not check return value of zap_vma_ptes() (bsc#1104427).\n\n - rdma/hns: Set access flags of hip08 RoCE (bsc#1104427 ).\n\n - rdma/hns: Set desc_dma_addr for zero when free cmq desc (bsc#1104427).\n\n - rdma/hns: Set NULL for __internal_mr (bsc#1104427).\n\n - rdma/hns: Set rdma_ah_attr type for querying qp (bsc#1104427 ).\n\n - rdma/hns: Set se attribute of sqwqe in hip08 (bsc#1104427 ).\n\n - rdma/hns: Set sq_cur_sge_blk_addr field in QPC in hip08 (bsc#1104427).\n\n - rdma/hns: Set the guid for hip08 RoCE device (bsc#1104427 ).\n\n - rdma/hns: Set the owner field of SQWQE in hip08 RoCE (bsc#1104427).\n\n - rdma/hns: Split CQE from MTT in hip08 (bsc#1104427).\n\n - rdma/hns: Split hw v1 driver from hns roce driver (bsc#1104427 ).\n\n - rdma/hns: Submit bad wr (bsc#1104427).\n\n - rdma/hns: Support cq record doorbell for kernel space (bsc#1104427).\n\n - rdma/hns: Support cq record doorbell for the user space (bsc#1104427).\n\n - rdma/hns: Support multi hop addressing for PBL in hip08 (bsc#1104427).\n\n - rdma/hns: Support rq record doorbell for kernel space (bsc#1104427).\n\n - rdma/hns: Support rq record doorbell for the user space (bsc#1104427).\n\n - rdma/hns: Support WQE/CQE/PBL page size configurable feature in hip08 (bsc#1104427).\n\n - rdma/hns: Unify the calculation for hem index in hip08 (bsc#1104427).\n\n - rdma/hns: Update assignment method for owner field of send wqe (bsc#1104427).\n\n - rdma/hns: Update calculation of irrl_ba field for hip08 (bsc#1104427).\n\n - rdma/hns: Update convert function of endian format (bsc#1104427 ).\n\n - rdma/hns: Update the interfaces for MTT/CQE multi hop addressing in hip08 (bsc#1104427).\n\n - rdma/hns: Update the IRRL table chunk size in hip08 (bsc#1104427 ).\n\n - rdma/hns: Update the PD&CQE&MTT specification in hip08 (bsc#1104427).\n\n - rdma/hns: Update the usage of ack timeout in hip08 (bsc#1104427 ).\n\n - rdma/hns: Update the usage of sr_max and rr_max field (bsc#1104427).\n\n - rdma/hns: Update the verbs of polling for completion (bsc#1104427).\n\n - rdma/hns: Use free_pages function instead of free_page (bsc#1104427).\n\n - rdma/hns: Use structs to describe the uABI instead of opencoding (bsc#1104427).\n\n - rdma/qedr: Fix NULL pointer dereference when running over iWARP without RDMA-CM (bsc#1086314).\n\n - rdma/qedr: fix spelling mistake: 'adrresses' -> 'addresses' (bsc#1086314).\n\n - rdma/qedr: fix spelling mistake: 'failes' -> 'fails' (bsc#1086314).\n\n - reiserfs: fix buffer overflow with long warning messages (bsc#1101847).\n\n - reiserfs-fix-buffer-overflow-with-long-warning-messa.pat ch: Silence bogus compiler warning about unused result of strscpy().\n\n - s390/dasd: configurable IFCC handling (bsc#1097808).\n\n - sched/smt: Update sched_smt_present at runtime (bsc#1089343).\n\n - scsi: mpt3sas: Add an I/O barrier (bsc#1086906,).\n\n - scsi: mpt3sas: Added support for SAS Device Discovery Error Event (bsc#1086906,).\n\n - scsi: mpt3sas: Add PCI device ID for Andromeda (bsc#1086906,).\n\n - scsi: mpt3sas: Allow processing of events during driver unload (bsc#1086906,).\n\n - scsi: mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (bsc#1086906,).\n\n - scsi: mpt3sas: Bug fix for big endian systems (bsc#1086906,).\n\n - scsi: mpt3sas: Cache enclosure pages during enclosure add (bsc#1086906,).\n\n - scsi: mpt3sas: clarify mmio pointer types (bsc#1086906,).\n\n - scsi: mpt3sas: Configure reply post queue depth, DMA and sgl tablesize (bsc#1086906,).\n\n - scsi: mpt3sas: Do not abort I/Os issued to NVMe drives while processing Async Broadcast primitive event (bsc#1086906,).\n\n - scsi: mpt3sas: Do not access the structure after decrementing it's instance reference count (bsc#1086906,).\n\n - scsi: mpt3sas: Do not mark fw_event workqueue as WQ_MEM_RECLAIM (bsc#1086906,).\n\n - scsi: mpt3sas: Enhanced handling of Sense Buffer (bsc#1086906,).\n\n - scsi: mpt3sas: Fix, False timeout prints for ioctl and other internal commands during controller reset (bsc#1086906,).\n\n - scsi: mpt3sas: fix possible memory leak (bsc#1086906,).\n\n - scsi: mpt3sas: fix spelling mistake: 'disbale' -> 'disable' (bsc#1086906,).\n\n - scsi: mpt3sas: For NVME device, issue a protocol level reset (bsc#1086906,).\n\n - scsi: mpt3sas: Incorrect command status was set/marked as not used (bsc#1086906,).\n\n - scsi: mpt3sas: Increase event log buffer to support 24 port HBA's (bsc#1086906,).\n\n - scsi: mpt3sas: Introduce API to get BAR0 mapped buffer address (bsc#1086906,).\n\n - scsi: mpt3sas: Introduce Base function for cloning (bsc#1086906,).\n\n - scsi: mpt3sas: Introduce function to clone mpi reply (bsc#1086906,).\n\n - scsi: mpt3sas: Introduce function to clone mpi request (bsc#1086906,).\n\n - scsi: mpt3sas: Lockless access for chain buffers (bsc#1086906,).\n\n - scsi: mpt3sas: Optimize I/O memory consumption in driver (bsc#1086906,).\n\n - scsi: mpt3sas: Pre-allocate RDPQ Array at driver boot time (bsc#1086906,).\n\n - scsi: mpt3sas: Replace PCI pool old API (bsc#1081917). - Refresh patches.drivers/scsi-mpt3sas-SGL-to-PRP-Translation-for- I-Os-to-NVMe.patch.\n\n - scsi: mpt3sas: Report Firmware Package Version from HBA Driver (bsc#1086906,).\n\n - scsi: mpt3sas: Update driver version '25.100.00.00' (bsc#1086906,).\n\n - scsi: mpt3sas: Update driver version '26.100.00.00' (bsc#1086906,).\n\n - scsi: mpt3sas: Update MPI Headers (bsc#1086906,).\n\n - scsi: qedf: Add additional checks when restarting an rport due to ABTS timeout (bsc#1086317).\n\n - scsi: qedf: Add check for offload before flushing I/Os for target (bsc#1086317).\n\n - scsi: qedf: Add dcbx_not_wait module parameter so we won't wait for DCBX convergence to start discovery (bsc#1086317).\n\n - scsi: qedf: Add missing skb frees in error path (bsc#1086317).\n\n - scsi: qedf: Add more defensive checks for concurrent error conditions (bsc#1086317).\n\n - scsi: qedf: Add task id to kref_get_unless_zero() debug messages when flushing requests (bsc#1086317).\n\n - scsi: qedf: Check if link is already up when receiving a link up event from qed (bsc#1086317).\n\n - scsi: qedf: fix LTO-enabled build (bsc#1086317).\n\n - scsi: qedf: Fix VLAN display when printing sent FIP frames (bsc#1086317).\n\n - scsi: qedf: Honor default_prio module parameter even if DCBX does not converge (bsc#1086317).\n\n - scsi: qedf: Honor priority from DCBX FCoE App tag (bsc#1086317).\n\n - scsi: qedf: If qed fails to enable MSI-X fail PCI probe (bsc#1086317).\n\n - scsi: qedf: Improve firmware debug dump handling (bsc#1086317).\n\n - scsi: qedf: Increase the number of default FIP VLAN request retries to 60 (bsc#1086317).\n\n - scsi: qedf: Release RRQ reference correctly when RRQ command times out (bsc#1086317).\n\n - scsi: qedf: remove redundant initialization of 'fcport' (bsc#1086317).\n\n - scsi: qedf: Remove setting DCBX pending during soft context reset (bsc#1086317).\n\n - scsi: qedf: Return request as DID_NO_CONNECT if MSI-X is not enabled (bsc#1086317).\n\n - scsi: qedf: Sanity check FCoE/FIP priority value to make sure it's between 0 and 7 (bsc#1086317).\n\n - scsi: qedf: Send the driver state to MFW (bsc#1086317).\n\n - scsi: qedf: Set the UNLOADING flag when removing a vport (bsc#1086317).\n\n - scsi: qedf: Synchronize rport restarts when multiple ELS commands time out (bsc#1086317).\n\n - scsi: qedf: Update copyright for 2018 (bsc#1086317).\n\n - scsi: qedf: Update version number to 8.33.16.20 (bsc#1086317).\n\n - scsi: qedf: use correct strncpy() size (bsc#1086317).\n\n - scsi: qedi: fix building with LTO (bsc#1086315).\n\n - scsi: qedi: fix build regression (bsc#1086315).\n\n - scsi: qedi: Fix kernel crash during port toggle (bsc#1086315).\n\n - scsi: qedi: Send driver state to MFW (bsc#1086315).\n\n - scsi: qla2xxx: correctly shift host byte (bsc#1086327,).\n\n - scsi: qla2xxx: Correct setting of SAM_STAT_CHECK_CONDITION (bsc#1086327,).\n\n - scsi: qla2xxx: Fix crash on qla2x00_mailbox_command (bsc#1086327,).\n\n - scsi: qla2xxx: Fix Inquiry command being dropped in Target mode (bsc#1086327,).\n\n - scsi: qla2xxx: Fix race condition between iocb timeout and initialisation (bsc#1086327,).\n\n - scsi: qla2xxx: Fix Rport and session state getting out of sync (bsc#1086327,).\n\n - scsi: qla2xxx: Fix sending ADISC command for login (bsc#1086327,).\n\n - scsi: qla2xxx: Fix setting lower transfer speed if GPSC fails (bsc#1086327,).\n\n - scsi: qla2xxx: Fix TMF and Multi-Queue config (bsc#1086327,).\n\n - scsi: qla2xxx: Move GPSC and GFPNID out of session management (bsc#1086327,).\n\n - scsi: qla2xxx: Prevent relogin loop by removing stale code (bsc#1086327,).\n\n - scsi: qla2xxx: Reduce redundant ADISC command for RSCNs (bsc#1086327,).\n\n - scsi: qla2xxx: remove irq save in qla2x00_poll() (bsc#1086327,).\n\n - scsi: qla2xxx: Remove stale debug value for login_retry flag (bsc#1086327,).\n\n - scsi: qla2xxx: Update driver version to 10.00.00.07-k (bsc#1086327,).\n\n - scsi: qla2xxx: Use predefined get_datalen_for_atio() inline function (bsc#1086327,).\n\n - scsi: qla4xxx: Move an array from a .h into a .c file (bsc#1086331).\n\n - scsi: qla4xxx: Remove unused symbols (bsc#1086331).\n\n - scsi: qla4xxx: skip error recovery in case of register disconnect (bsc#1086331).\n\n - scsi: qla4xxx: Use dma_pool_zalloc() (bsc#1086331).\n\n - scsi: qla4xxx: Use zeroing allocator rather than allocator/memset (bsc#1086331).\n\n - selftests/powerpc: Fix core-pkey for default execute permission change (bsc#1097577).\n\n - selftests/powerpc: Fix ptrace-pkey for default execute permission change (bsc#1097577).\n\n - supported.conf: add drivers/md/dm-writecache\n\n - supported.conf: added hns3 modules\n\n - supported.conf: added hns-roce-hw-v1 and hns-roce-hw-v2\n\n - supported.conf: Enable HiSi v3 SAS adapter ()\n\n - tcp_rbd depends on BLK_DEV_RBD ().\n\n - typec: tcpm: fusb302: Resolve out of order messaging events (bsc#1087092).\n\n - udf: Detect incorrect directory size (bsc#1101891).\n\n - udf: Provide saner default for invalid uid / gid (bsc#1101890).\n\n - vfs: add the sb_start_intwrite_trylock() helper (bsc#1101841).\n\n - x86/apic: Ignore secondary threads if nosmt=force (bsc#1089343).\n\n - x86/CPU/AMD: Do not check CPUID max ext level before parsing SMP info (bsc#1089343).\n\n - x86/cpu/AMD: Evaluate smp_num_siblings early (bsc#1089343).\n\n - x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (bsc#1089343).\n\n - x86/cpu/AMD: Remove the pointless detect_ht() call (bsc#1089343).\n\n - x86/cpu/common: Provide detect_ht_early() (bsc#1089343).\n\n - x86/cpu/intel: Evaluate smp_num_siblings early (bsc#1089343).\n\n - x86/cpu: Remove the pointless CPU printout (bsc#1089343).\n\n - x86/cpu/topology: Provide detect_extended_topology_early() (bsc#1089343).\n\n - x86/KVM/VMX: Add module argument for L1TF mitigation.\n\n - x86/smp: Provide topology_is_primary_thread() (bsc#1089343).\n\n - x86/topology: Provide topology_smt_supported() (bsc#1089343).\n\n - x86/xen: init %gs very early to avoid page faults with stack protector (bnc#1104777).\n\n - xen-netback: fix input validation in xenvif_set_hash_mapping() (bnc#1103277).\n\n - xen/netfront: do not cache skb_shinfo() (bnc#1065600).\n\n - xfs: catch inode allocation state mismatch corruption (bsc#1104211).\n\n - xfs: prevent creating negative-sized file via INSERT_RANGE (bsc#1101833).", "edition": 10, "reporter": "Tenable", "published": "2018-08-17T00:00:00", "title": "openSUSE Security Update : the Linux Kernel (openSUSE-2018-886) (Foreshadow)", "type": "nessus", "enchantments": {"score": {"modified": "2018-11-20T03:38:24", "vector": "NONE", "value": 7.2}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-10882", "CVE-2018-10877", "CVE-2018-10880", "CVE-2018-10878", "CVE-2018-10853", "CVE-2018-10881", "CVE-2018-3646", "CVE-2018-5391", "CVE-2018-3620", "CVE-2018-10883", "CVE-2018-10876", "CVE-2018-10879"], "modified": "2018-11-19T00:00:00", "cpe": ["p-cpe:/a:novell:opensuse:kernel-source", "p-cpe:/a:novell:opensuse:kernel-source-vanilla", "p-cpe:/a:novell:opensuse:kernel-vanilla-debugsource", "p-cpe:/a:novell:opensuse:kernel-vanilla-base-debuginfo", "p-cpe:/a:novell:opensuse:kernel-debug-debuginfo", "p-cpe:/a:novell:opensuse:kernel-vanilla-debuginfo", "p-cpe:/a:novell:opensuse:kernel-default-debugsource", "p-cpe:/a:novell:opensuse:kernel-vanilla-devel-debuginfo", "cpe:/o:novell:opensuse:15.0", "p-cpe:/a:novell:opensuse:kernel-default-debuginfo", "p-cpe:/a:novell:opensuse:kernel-vanilla-base", "p-cpe:/a:novell:opensuse:kernel-kvmsmall", "p-cpe:/a:novell:opensuse:kernel-debug-devel-debuginfo", "p-cpe:/a:novell:opensuse:kernel-kvmsmall-devel-debuginfo", "p-cpe:/a:novell:opensuse:kernel-default-devel", "p-cpe:/a:novell:opensuse:kernel-devel", "p-cpe:/a:novell:opensuse:kernel-kvmsmall-devel", "p-cpe:/a:novell:opensuse:kernel-docs-html", "p-cpe:/a:novell:opensuse:kernel-obs-qa", "p-cpe:/a:novell:opensuse:kernel-kvmsmall-base", "p-cpe:/a:novell:opensuse:kernel-macros", "p-cpe:/a:novell:opensuse:kernel-syms", "p-cpe:/a:novell:opensuse:kernel-vanilla", "p-cpe:/a:novell:opensuse:kernel-kvmsmall-debugsource", "p-cpe:/a:novell:opensuse:kernel-vanilla-devel", "p-cpe:/a:novell:opensuse:kernel-debug-base", "p-cpe:/a:novell:opensuse:kernel-debug-debugsource", "p-cpe:/a:novell:opensuse:kernel-kvmsmall-base-debuginfo", "p-cpe:/a:novell:opensuse:kernel-default", "p-cpe:/a:novell:opensuse:kernel-debug-devel", "p-cpe:/a:novell:opensuse:kernel-kvmsmall-debuginfo", "p-cpe:/a:novell:opensuse:kernel-debug-base-debuginfo", "p-cpe:/a:novell:opensuse:kernel-debug", "p-cpe:/a:novell:opensuse:kernel-obs-build-debugsource", "p-cpe:/a:novell:opensuse:kernel-default-base", "p-cpe:/a:novell:opensuse:kernel-obs-build", "p-cpe:/a:novell:opensuse:kernel-default-base-debuginfo", "p-cpe:/a:novell:opensuse:kernel-default-devel-debuginfo"], "id": "OPENSUSE-2018-886.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=111812", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from openSUSE Security Update openSUSE-2018-886.\n#\n# The text description of this plugin is (C) SUSE LLC.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(111812);\n script_version(\"1.6\");\n script_cvs_date(\"Date: 2018/11/19 11:02:42\");\n\n script_cve_id(\"CVE-2018-10853\", \"CVE-2018-10876\", \"CVE-2018-10877\", \"CVE-2018-10878\", \"CVE-2018-10879\", \"CVE-2018-10880\", \"CVE-2018-10881\", \"CVE-2018-10882\", \"CVE-2018-10883\", \"CVE-2018-3620\", \"CVE-2018-3646\", \"CVE-2018-5391\");\n\n script_name(english:\"openSUSE Security Update : the Linux Kernel (openSUSE-2018-886) (Foreshadow)\");\n script_summary(english:\"Check for the openSUSE-2018-886 patch\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote openSUSE host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The openSUSE Leap 15.0 kernel was updated to receive various security\nand bugfixes.\n\nThe following security bugs were fixed :\n\n - CVE-2018-10853: A flaw was found in KVM in which certain\n instructions such as sgdt/sidt call segmented_write_std\n doesn't propagate access correctly. As such, during\n userspace induced exception, the guest can incorrectly\n assume that the exception happened in the kernel and\n panic (bnc#1097104).\n\n - CVE-2018-10876: A flaw was found in the ext4 filesystem\n code. A use-after-free is possible in\n ext4_ext_remove_space() function when mounting and\n operating a crafted ext4 image. (bnc#1099811)\n\n - CVE-2018-10877: Linux kernel ext4 filesystem is\n vulnerable to an out-of-bound access in the\n ext4_ext_drop_refs() function when operating on a\n crafted ext4 filesystem image. (bnc#1099846)\n\n - CVE-2018-10878: A flaw was found in the ext4 filesystem.\n A local user can cause an out-of-bounds write and a\n denial of service or unspecified other impact is\n possible by mounting and operating a crafted ext4\n filesystem image. (bnc#1099813)\n\n - CVE-2018-10879: A flaw was found in the ext4 filesystem.\n A local user can cause a use-after-free in\n ext4_xattr_set_entry function and a denial of service or\n unspecified other impact may occur by renaming a file in\n a crafted ext4 filesystem image. (bnc#1099844)\n\n - CVE-2018-10880: Linux kernel is vulnerable to a\n stack-out-of-bounds write in the ext4 filesystem code\n when mounting and writing to a crafted ext4 image in\n ext4_update_inline_data(). An attacker could use this to\n cause a system crash and a denial of service.\n (bnc#1099845)\n\n - CVE-2018-10881: A flaw was found in the ext4 filesystem.\n A local user can cause an out-of-bound access in\n ext4_get_group_info function, a denial of service, and a\n system crash by mounting and operating on a crafted ext4\n filesystem image. (bnc#1099864)\n\n - CVE-2018-10882: A flaw was found in the ext4 filesystem.\n A local user can cause an out-of-bound write in in\n fs/jbd2/transaction.c code, a denial of service, and a\n system crash by unmounting a crafted ext4 filesystem\n image. (bnc#1099849)\n\n - CVE-2018-10883: A flaw was found in the ext4 filesystem.\n A local user can cause an out-of-bounds write in\n jbd2_journal_dirty_metadata(), a denial of service, and\n a system crash by mounting and operating on a crafted\n ext4 filesystem image. (bnc#1099863)\n\n - CVE-2018-3620: Systems with microprocessors utilizing\n speculative execution and address translations may allow\n unauthorized disclosure of information residing in the\n L1 data cache to an attacker with local user access via\n a terminal page fault and a side-channel analysis\n (bnc#1087081).\n\n - CVE-2018-3646: Systems with microprocessors utilizing\n speculative execution and address translations may allow\n unauthorized disclosure of information residing in the\n L1 data cache to an attacker with local user access with\n guest OS privilege via a terminal page fault and a\n side-channel analysis (bnc#1089343 bnc#1104365).\n\n - CVE-2018-5391 aka 'FragmentSmack': A flaw in the IP\n packet reassembly could be used by remote attackers to\n consume lots of CPU time (bnc#1103097).\n\nThe following non-security bugs were fixed :\n\n - afs: Fix directory permissions check (bsc#1101828).\n\n - bdi: Move cgroup bdi_writeback to a dedicated low\n concurrency workqueue (bsc#1101867).\n\n - be2net: gather debug info and reset adapter (only for\n Lancer) on a tx-timeout (bsc#1086288).\n\n - be2net: Update the driver version to 12.0.0.0\n (bsc#1086288 ).\n\n - befs_lookup(): use d_splice_alias() (bsc#1101844).\n\n - block: Fix transfer when chunk sectors exceeds max\n (bsc#1101874).\n\n - bpf, ppc64: fix unexpected r0=0 exit path inside\n bpf_xadd (bsc#1083647).\n\n - branch-check: fix long->int truncation when profiling\n branches (bsc#1101116,).\n\n - cdrom: do not call check_disk_change() inside\n cdrom_open() (bsc#1101872).\n\n - compiler.h: enable builtin overflow checkers and add\n fallback code (bsc#1101116,).\n\n - cpu/hotplug: Make bringup/teardown of smp threads\n symmetric (bsc#1089343).\n\n - cpu/hotplug: Provide knobs to control SMT (bsc#1089343).\n\n - cpu/hotplug: Split do_cpu_down() (bsc#1089343).\n\n - delayacct: fix crash in delayacct_blkio_end() after\n delayacct init failure (bsc#1104066).\n\n - dm: add writecache target (bsc#1101116,).\n\n - dm writecache: support optional offset for start of\n device (bsc#1101116,).\n\n - dm writecache: use 2-factor allocator arguments\n (bsc#1101116,).\n\n - EDAC: Add missing MEM_LRDDR4 entry in edac_mem_types[]\n (bsc#1103886).\n\n - EDAC: Drop duplicated array of strings for memory type\n names (bsc#1103886).\n\n - ext2: fix a block leak (bsc#1101875).\n\n - ext4: add more mount time checks of the superblock\n (bsc#1101900).\n\n - ext4: bubble errors from ext4_find_inline_data_nolock()\n up to ext4_iget() (bsc#1101896).\n\n - ext4: check for allocation block validity with block\n group locked (bsc#1104495).\n\n - ext4: check superblock mapped prior to committing\n (bsc#1101902).\n\n - ext4: do not update s_last_mounted of a frozen fs\n (bsc#1101841).\n\n - ext4: factor out helper ext4_sample_last_mounted()\n (bsc#1101841).\n\n - ext4: fix check to prevent initializing reserved inodes\n (bsc#1104319).\n\n - ext4: fix false negatives *and* false positives in\n ext4_check_descriptors() (bsc#1103445).\n\n - ext4: fix fencepost error in check for inode count\n overflow during resize (bsc#1101853).\n\n - ext4: fix inline data updates with checksums enabled\n (bsc#1104494).\n\n - ext4: include the illegal physical block in the bad map\n ext4_error msg (bsc#1101903).\n\n - ext4: report delalloc reserve as non-free in statfs for\n project quota (bsc#1101843).\n\n - ext4: update mtime in ext4_punch_hole even if no blocks\n are released (bsc#1101895).\n\n - f2fs: call unlock_new_inode() before d_instantiate()\n (bsc#1101837).\n\n - fix io_destroy()/aio_complete() race (bsc#1101852).\n\n - Force log to disk before reading the AGF during a fstrim\n (bsc#1101893).\n\n - fscache: Fix hanging wait on page discarded by writeback\n (bsc#1101885).\n\n - fs: clear writeback errors in inode_init_always\n (bsc#1101882).\n\n - fs: do not scan the inode cache before SB_BORN is set\n (bsc#1101883).\n\n - hns3: fix unused function warning (bsc#1104353).\n\n - hns3pf: do not check handle during mqprio offload\n (bsc#1104353 ).\n\n - hns3pf: fix hns3_del_tunnel_port() (bsc#1104353).\n\n - hns3pf: Fix some harmless copy and paste bugs\n (bsc#1104353 ).\n\n - hv_netvsc: Fix napi reschedule while receive completion\n is busy ().\n\n - hv/netvsc: Fix NULL dereference at single queue mode\n fallback (bsc#1104708).\n\n - hwmon: (asus_atk0110) Replace deprecated device register\n call (bsc#1103363).\n\n - IB/hns: Annotate iomem pointers correctly (bsc#1104427\n ).\n\n - IB/hns: Avoid compile test under non 64bit environments\n (bsc#1104427).\n\n - IB/hns: Declare local functions 'static' (bsc#1104427 ).\n\n - IB/hns: fix boolreturn.cocci warnings (bsc#1104427).\n\n - IB/hns: Fix for checkpatch.pl comment style warnings\n (bsc#1104427).\n\n - IB/hns: fix memory leak on ah on error return path\n (bsc#1104427 ).\n\n - IB/hns: fix returnvar.cocci warnings (bsc#1104427).\n\n - IB/hns: fix semicolon.cocci warnings (bsc#1104427).\n\n - IB/hns: Fix the bug of polling cq failed for loopback\n Qps (bsc#1104427). Refresh\n patches.suse/0001-IB-hns-checking-for-IS_ERR-instead-of-\n NULL.patch.\n\n - IB/hns: Fix the bug with modifying the MAC address\n without removing the driver (bsc#1104427).\n\n - IB/hns: Fix the bug with rdma operation (bsc#1104427 ).\n\n - IB/hns: Fix the bug with wild pointer when destroy rc qp\n (bsc#1104427).\n\n - IB/hns: include linux/interrupt.h (bsc#1104427).\n\n - IB/hns: Support compile test for hns RoCE driver\n (bsc#1104427 ).\n\n - IB/hns: Use zeroing memory allocator instead of\n allocator/memset (bsc#1104427).\n\n - isofs: fix potential memory leak in mount option parsing\n (bsc#1101887).\n\n - jump_label: Fix concurrent static_key_enable/disable()\n (bsc#1089343).\n\n - jump_label: Provide hotplug context variants\n (bsc#1089343).\n\n - jump_label: Reorder hotplug lock and jump_label_lock\n (bsc#1089343).\n\n - kabi/severities: Allow kABI changes for kvm/x86 (except\n for kvm_x86_ops)\n\n - kabi/severities: ignore qla2xxx as all symbols are\n internal\n\n - kabi/severities: ignore x86_kvm_ops; lttng-modules would\n have to be adjusted in case they depend on this\n particular change\n\n - kabi/severities: Relax kvm_vcpu_* kABI breakage\n\n - media: rc: oops in ir_timer_keyup after device unplug\n (bsc#1090888).\n\n - mm: fix __gup_device_huge vs unmap (bsc#1101839).\n\n - net: hns3: Add a check for client instance init state\n (bsc#1104353).\n\n - net: hns3: add a mask initialization for mac_vlan table\n (bsc#1104353).\n\n - net: hns3: Add *Asserting Reset* mailbox message &\n handling in VF (bsc#1104353).\n\n - net: hns3: add Asym Pause support to phy default\n features (bsc#1104353).\n\n - net: hns3: Add dcb netlink interface for the support of\n DCB feature (bsc#1104353).\n\n - net: hns3: Add DCB support when interacting with network\n stack (bsc#1104353).\n\n - net: hns3: Add ethtool interface for vlan filter\n (bsc#1104353 ).\n\n - net: hns3: add ethtool_ops.get_channels support for VF\n (bsc#1104353).\n\n - net: hns3: add ethtool_ops.get_coalesce support to PF\n (bsc#1104353).\n\n - net: hns3: add ethtool_ops.set_coalesce support to PF\n (bsc#1104353).\n\n - net: hns3: add ethtool -p support for fiber port\n (bsc#1104353 ).\n\n - net: hns3: add ethtool related offload command\n (bsc#1104353 ).\n\n - net: hns3: Add Ethtool support to HNS3 driver\n (bsc#1104353 ).\n\n - net: hns3: add existence checking before adding unicast\n mac address (bsc#1104353).\n\n - net: hns3: add existence check when remove old uc mac\n address (bsc#1104353).\n\n - net: hns3: add feature check when feature changed\n (bsc#1104353 ).\n\n - net: hns3: add get_link support to VF (bsc#1104353).\n\n - net: hns3: add get/set_coalesce support to VF\n (bsc#1104353 ).\n\n - net: hns3: add handling vlan tag offload in bd\n (bsc#1104353 ).\n\n - net: hns3: Add hclge_dcb module for the support of DCB\n feature (bsc#1104353).\n\n - net: hns3: Add HNS3 Acceleration Engine & Compatibility\n Layer Support (bsc#1104353).\n\n - net: hns3: Add HNS3 driver to kernel build framework &\n MAINTAINERS (bsc#1104353).\n\n - net: hns3: Add hns3_get_handle macro in hns3 driver\n (bsc#1104353 ).\n\n - net: hns3: Add HNS3 IMP(Integrated Mgmt Proc) Cmd\n Interface Support (bsc#1104353).\n\n - net: hns3: Add HNS3 VF driver to kernel build framework\n (bsc#1104353).\n\n - net: hns3: Add HNS3 VF HCL(Hardware Compatibility Layer)\n Support (bsc#1104353).\n\n - net: hns3: Add HNS3 VF IMP(Integrated Management Proc)\n cmd interface (bsc#1104353).\n\n - net: hns3: add int_gl_idx setup for TX and RX queues\n (bsc#1104353).\n\n - net: hns3: add int_gl_idx setup for VF (bsc#1104353 ).\n\n - net: hns3: Add mac loopback selftest support in hns3\n driver (bsc#1104353).\n\n - net: hns3: Add mailbox interrupt handling to PF driver\n (bsc#1104353).\n\n - net: hns3: Add mailbox support to PF driver (bsc#1104353\n ).\n\n - net: hns3: Add mailbox support to VF driver (bsc#1104353\n ).\n\n - net: hns3: add manager table initialization for hardware\n (bsc#1104353).\n\n - net: hns3: Add MDIO support to HNS3 Ethernet driver for\n hip08 SoC (bsc#1104353).\n\n - net: hns3: Add missing break in misc_irq_handle\n (bsc#1104353 ).\n\n - net: hns3: Add more packet size statisctics (bsc#1104353\n ).\n\n - net: hns3: add MTU initialization for hardware\n (bsc#1104353 ).\n\n - net: hns3: add net status led support for fiber port\n (bsc#1104353).\n\n - net: hns3: add nic_client check when initialize roce\n base information (bsc#1104353).\n\n - net: hns3: add querying speed and duplex support to VF\n (bsc#1104353).\n\n - net: hns3: Add repeat address checking for setting mac\n address (bsc#1104353).\n\n - net: hns3: Add reset interface implementation in client\n (bsc#1104353).\n\n - net: hns3: Add reset process in hclge_main (bsc#1104353\n ).\n\n - net: hns3: Add reset service task for handling reset\n requests (bsc#1104353).\n\n - net: hns3: add result checking for VF when modify\n unicast mac address (bsc#1104353).\n\n - net: hns3: Add some interface for the support of DCB\n feature (bsc#1104353).\n\n - net: hns3: Adds support for led locate command for\n copper port (bsc#1104353).\n\n - net: hns3: Add STRP_TAGP field support for hardware\n revision 0x21 (bsc#1104353).\n\n - net: hns3: Add support for dynamically buffer\n reallocation (bsc#1104353).\n\n - net: hns3: add support for ETHTOOL_GRXFH (bsc#1104353 ).\n\n - net: hns3: add support for get_regs (bsc#1104353).\n\n - net: hns3: Add support for IFF_ALLMULTI flag\n (bsc#1104353 ).\n\n - net: hns3: Add support for misc interrupt (bsc#1104353\n ).\n\n - net: hns3: add support for nway_reset (bsc#1104353).\n\n - net: hns3: Add support for PFC setting in TM module\n (bsc#1104353 ).\n\n - net: hns3: Add support for port shaper setting in TM\n module (bsc#1104353).\n\n - net: hns3: add support for querying advertised pause\n frame by ethtool ethx (bsc#1104353).\n\n - net: hns3: add support for querying pfc puase packets\n statistic (bsc#1104353).\n\n - net: hns3: add support for set_link_ksettings\n (bsc#1104353 ).\n\n - net: hns3: add support for set_pauseparam (bsc#1104353\n ).\n\n - net: hns3: add support for set_ringparam (bsc#1104353 ).\n\n - net: hns3: add support for set_rxnfc (bsc#1104353).\n\n - net: hns3: Add support for tx_accept_tag2 and\n tx_accept_untag2 config (bsc#1104353).\n\n - net: hns3: add support for VF driver inner interface\n hclgevf_ops.get_tqps_and_rss_info (bsc#1104353).\n\n - net: hns3: Add support of hardware rx-vlan-offload to\n HNS3 VF driver (bsc#1104353).\n\n - net: hns3: Add support of HNS3 Ethernet Driver for hip08\n SoC (bsc#1104353).\n\n - net: hns3: Add support of .sriov_configure in HNS3\n driver (bsc#1104353).\n\n - net: hns3: Add support of the HNAE3 framework\n (bsc#1104353 ).\n\n - net: hns3: Add support of TX Scheduler & Shaper to HNS3\n driver (bsc#1104353).\n\n - net: hns3: Add support to change MTU in HNS3 hardware\n (bsc#1104353).\n\n - net: hns3: Add support to enable TX/RX promisc mode for\n H/W rev(0x21) (bsc#1104353).\n\n - net: hns3: add support to modify tqps number\n (bsc#1104353 ).\n\n - net: hns3: add support to query tqps number (bsc#1104353\n ).\n\n - net: hns3: Add support to re-initialize the hclge device\n (bsc#1104353).\n\n - net: hns3: Add support to request VF Reset to PF\n (bsc#1104353 ).\n\n - net: hns3: Add support to reset the enet/ring mgmt layer\n (bsc#1104353).\n\n - net: hns3: add support to update flow control settings\n after autoneg (bsc#1104353).\n\n - net: hns3: Add tc-based TM support for sriov enabled\n port (bsc#1104353).\n\n - net: hns3: Add timeout process in hns3_enet (bsc#1104353\n ).\n\n - net: hns3: Add VF Reset device state and its handling\n (bsc#1104353).\n\n - net: hns3: Add VF Reset Service Task to support event\n handling (bsc#1104353).\n\n - net: hns3: add vlan offload config command (bsc#1104353\n ).\n\n - net: hns3: change GL update rate (bsc#1104353).\n\n - net: hns3: Change PF to add ring-vect binding & resetQ\n to mailbox (bsc#1104353).\n\n - net: hns3: Change return type of hnae3_register_ae_algo\n (bsc#1104353).\n\n - net: hns3: Change return type of hnae3_register_ae_dev\n (bsc#1104353).\n\n - net: hns3: Change return value in hnae3_register_client\n (bsc#1104353).\n\n - net: hns3: Changes required in PF mailbox to support VF\n reset (bsc#1104353).\n\n - net: hns3: Changes to make enet watchdog timeout func\n common for PF/VF (bsc#1104353).\n\n - net: hns3: Changes to support ARQ(Asynchronous Receive\n Queue) (bsc#1104353).\n\n - net: hns3: change the returned tqp number by ethtool -x\n (bsc#1104353).\n\n - net: hns3: change the time interval of int_gl\n calculating (bsc#1104353).\n\n - net: hns3: change the unit of GL value macro\n (bsc#1104353 ).\n\n - net: hns3: change TM sched mode to TC-based mode when\n SRIOV enabled (bsc#1104353).\n\n - net: hns3: check for NULL function pointer in\n hns3_nic_set_features (bsc#1104353).\n\n - net: hns3: Cleanup for endian issue in hns3 driver\n (bsc#1104353 ).\n\n - net: hns3: Cleanup for non-static function in hns3\n driver (bsc#1104353).\n\n - net: hns3: Cleanup for ROCE capability flag in ae_dev\n (bsc#1104353).\n\n - net: hns3: Cleanup for shifting true in hns3 driver\n (bsc#1104353 ).\n\n - net: hns3: Cleanup for struct that used to send cmd to\n firmware (bsc#1104353).\n\n - net: hns3: Cleanup indentation for Kconfig in the the\n hisilicon folder (bsc#1104353).\n\n - net: hns3: cleanup mac auto-negotiation state query\n (bsc#1104353 ).\n\n - net: hns3: cleanup mac auto-negotiation state query in\n hclge_update_speed_duplex (bsc#1104353).\n\n - net: hns3: cleanup of return values in\n hclge_init_client_instance() (bsc#1104353).\n\n - net: hns3: Clear TX/RX rings when stopping port &\n un-initializing client (bsc#1104353).\n\n - net: hns3: Consistently using GENMASK in hns3 driver\n (bsc#1104353).\n\n - net: hns3: converting spaces into tabs to avoid\n checkpatch.pl warning (bsc#1104353).\n\n - net: hns3: Disable VFs change rxvlan offload status\n (bsc#1104353 ).\n\n - net: hns3: Disable vf vlan filter when vf vlan table is\n full (bsc#1104353).\n\n - net: hns3: ensure media_type is uninitialized\n (bsc#1104353 ).\n\n - net: hns3: export pci table of hclge and hclgevf to\n userspace (bsc#1104353).\n\n - net: hns3: fix a bug about hns3_clean_tx_ring\n (bsc#1104353 ).\n\n - net: hns3: fix a bug for phy supported feature\n initialization (bsc#1104353).\n\n - net: hns3: fix a bug in hclge_uninit_client_instance\n (bsc#1104353).\n\n - net: hns3: fix a bug in hns3_driv_to_eth_caps\n (bsc#1104353 ).\n\n - net: hns3: fix a bug when alloc new buffer (bsc#1104353\n ).\n\n - net: hns3: fix a bug when getting phy address from\n NCL_config file (bsc#1104353).\n\n - net: hns3: fix a dead loop in hclge_cmd_csq_clean\n (bsc#1104353 ).\n\n - net: hns3: fix a handful of spelling mistakes\n (bsc#1104353 ).\n\n - net: hns3: Fix a loop index error of tqp statistics\n query (bsc#1104353).\n\n - net: hns3: Fix a misuse to devm_free_irq (bsc#1104353 ).\n\n - net: hns3: Fix an error handling path in\n 'hclge_rss_init_hw()' (bsc#1104353).\n\n - net: hns3: Fix an error macro definition of\n HNS3_TQP_STAT (bsc#1104353).\n\n - net: hns3: Fix an error of total drop packet statistics\n (bsc#1104353).\n\n - net: hns3: Fix a response data read error of tqp\n statistics query (bsc#1104353).\n\n - net: hns3: fix endian issue when PF get mbx message flag\n (bsc#1104353).\n\n - net: hns3: fix error type definition of return value\n (bsc#1104353).\n\n - net: hns3: Fixes API to fetch ethernet header length\n with kernel default (bsc#1104353).\n\n - net: hns3: Fixes error reported by Kbuild and internal\n review (bsc#1104353).\n\n - net: hns3: Fixes initalization of RoCE handle and makes\n it conditional (bsc#1104353).\n\n - net: hns3: Fixes initialization of phy address from\n firmware (bsc#1104353).\n\n - net: hns3: Fixes kernel panic issue during rmmod hns3\n driver (bsc#1104353).\n\n - net: hns3: Fixes ring-to-vector map-and-unmap command\n (bsc#1104353).\n\n - net: hns3: Fixes the back pressure setting when sriov is\n enabled (bsc#1104353).\n\n - net: hns3: Fixes the command used to unmap ring from\n vector (bsc#1104353).\n\n - net: hns3: Fixes the default VLAN-id of PF (bsc#1104353\n ).\n\n - net: hns3: Fixes the error legs in hclge_init_ae_dev\n function (bsc#1104353).\n\n - net: hns3: Fixes the ether address copy with appropriate\n API (bsc#1104353).\n\n - net: hns3: Fixes the initialization of MAC address in\n hardware (bsc#1104353).\n\n - net: hns3: Fixes the init of the VALID BD info in the\n descriptor (bsc#1104353).\n\n - net: hns3: Fixes the missing PCI iounmap for various\n legs (bsc#1104353).\n\n - net: hns3: Fixes the missing u64_stats_fetch_begin_irq\n in 64-bit stats fetch (bsc#1104353).\n\n - net: hns3: Fixes the out of bounds access in\n hclge_map_tqp (bsc#1104353).\n\n - net: hns3: Fixes the premature exit of loop when\n matching clients (bsc#1104353).\n\n - net: hns3: fixes the ring index in hns3_fini_ring\n (bsc#1104353 ).\n\n - net: hns3: Fixes the state to indicate client-type\n initialization (bsc#1104353).\n\n - net: hns3: Fixes the static checker error warning in\n hns3_get_link_ksettings() (bsc#1104353).\n\n - net: hns3: Fixes the static check warning due to missing\n unsupp L3 proto check (bsc#1104353).\n\n - net: hns3: Fixes the wrong IS_ERR check on the returned\n phydev value (bsc#1104353).\n\n - net: hns3: fix for buffer overflow smatch warning\n (bsc#1104353 ).\n\n - net: hns3: fix for changing MTU (bsc#1104353).\n\n - net: hns3: fix for cleaning ring problem (bsc#1104353 ).\n\n - net: hns3: Fix for CMDQ and Misc. interrupt init order\n problem (bsc#1104353).\n\n - net: hns3: fix for coal configuation lost when setting\n the channel (bsc#1104353).\n\n - net: hns3: fix for coalesce configuration lost during\n reset (bsc#1104353).\n\n - net: hns3: Fix for deadlock problem occurring when\n unregistering ae_algo (bsc#1104353).\n\n - net: hns3: Fix for DEFAULT_DV when dev does not support\n DCB (bsc#1104353).\n\n - net: hns3: Fix for fiber link up problem (bsc#1104353 ).\n\n - net: hns3: fix for getting advertised_caps in\n hns3_get_link_ksettings (bsc#1104353).\n\n - net: hns3: fix for getting autoneg in\n hns3_get_link_ksettings (bsc#1104353).\n\n - net: hns3: fix for getting auto-negotiation state in\n hclge_get_autoneg (bsc#1104353).\n\n - net: hns3: fix for getting wrong link mode problem\n (bsc#1104353 ).\n\n - net: hns3: Fix for hclge_reset running repeatly problem\n (bsc#1104353).\n\n - net: hns3: Fix for hns3 module is loaded multiple times\n problem (bsc#1104353).\n\n - net: hns3: fix for ipv6 address loss problem after\n setting channels (bsc#1104353).\n\n - net: hns3: fix for loopback failure when vlan filter is\n enable (bsc#1104353).\n\n - net: hns3: fix for netdev not running problem after\n calling net_stop and net_open (bsc#1104353).\n\n - net: hns3: Fix for netdev not running problem after\n calling net_stop and net_open (bsc#1104353).\n\n - net: hns3: fix for not initializing VF rss_hash_key\n problem (bsc#1104353).\n\n - net: hns3: fix for not returning problem in\n get_link_ksettings when phy exists (bsc#1104353).\n\n - net: hns3: fix for not setting pause parameters\n (bsc#1104353 ).\n\n - net: hns3: Fix for not setting rx private buffer size to\n zero (bsc#1104353).\n\n - net: hns3: Fix for packet loss due wrong filter config\n in VLAN tbls (bsc#1104353).\n\n - net: hns3: fix for pause configuration lost during reset\n (bsc#1104353).\n\n - net: hns3: Fix for PF mailbox receving unknown message\n (bsc#1104353).\n\n - net: hns3: fix for phy_addr error in\n hclge_mac_mdio_config (bsc#1104353).\n\n - net: hns3: Fix for phy not link up problem after\n resetting (bsc#1104353).\n\n - net: hns3: Fix for pri to tc mapping in TM (bsc#1104353\n ).\n\n - net: hns3: fix for returning wrong value problem in\n hns3_get_rss_indir_size (bsc#1104353).\n\n - net: hns3: fix for returning wrong value problem in\n hns3_get_rss_key_size (bsc#1104353).\n\n - net: hns3: fix for RSS configuration loss problem during\n reset (bsc#1104353).\n\n - net: hns3: Fix for rx priv buf allocation when DCB is\n not supported (bsc#1104353).\n\n - net: hns3: Fix for rx_priv_buf_alloc not setting rx\n shared buffer (bsc#1104353).\n\n - net: hns3: Fix for service_task not running problem\n after resetting (bsc#1104353).\n\n - net: hns3: Fix for setting mac address when resetting\n (bsc#1104353).\n\n - net: hns3: fix for setting MTU (bsc#1104353).\n\n - net: hns3: Fix for setting rss_size incorrectly\n (bsc#1104353 ).\n\n - net: hns3: Fix for the NULL pointer problem occurring\n when initializing ae_dev failed (bsc#1104353).\n\n - net: hns3: fix for the wrong shift problem in\n hns3_set_txbd_baseinfo (bsc#1104353).\n\n - net: hns3: fix for updating fc_mode_last_time\n (bsc#1104353 ).\n\n - net: hns3: fix for use-after-free when setting ring\n parameter (bsc#1104353).\n\n - net: hns3: Fix for VF mailbox cannot receiving PF\n response (bsc#1104353).\n\n - net: hns3: Fix for VF mailbox receiving unknown message\n (bsc#1104353).\n\n - net: hns3: fix for vlan table lost problem when\n resetting (bsc#1104353).\n\n - net: hns3: Fix for vxlan tx checksum bug (bsc#1104353 ).\n\n - net: hns3: Fix initialization when cmd is not supported\n (bsc#1104353).\n\n - net: hns3: fix length overflow when\n CONFIG_ARM64_64K_PAGES (bsc#1104353).\n\n - net: hns3: fix NULL pointer dereference before null\n check (bsc#1104353).\n\n - net: hns3: fix return value error of\n hclge_get_mac_vlan_cmd_status() (bsc#1104353).\n\n - net: hns3: fix rx path skb->truesize reporting bug\n (bsc#1104353 ).\n\n - net: hns3: Fix setting mac address error (bsc#1104353 ).\n\n - net: hns3: Fix spelling errors (bsc#1104353).\n\n - net: hns3: fix spelling mistake: 'capabilty' ->\n 'capability' (bsc#1104353).\n\n - net: hns3: fix the bug of hns3_set_txbd_baseinfo\n (bsc#1104353 ).\n\n - net: hns3: fix the bug when map buffer fail (bsc#1104353\n ).\n\n - net: hns3: fix the bug when reuse command description in\n hclge_add_mac_vlan_tbl (bsc#1104353).\n\n - net: hns3: Fix the missing client list node\n initialization (bsc#1104353).\n\n - net: hns3: fix the ops check in hns3_get_rxnfc\n (bsc#1104353 ).\n\n - net: hns3: fix the queue id for tqp enable&&reset\n (bsc#1104353 ).\n\n - net: hns3: fix the ring count for ETHTOOL_GRXRINGS\n (bsc#1104353 ).\n\n - net: hns3: fix the TX/RX ring.queue_index in\n hns3_ring_get_cfg (bsc#1104353).\n\n - net: hns3: fix the VF queue reset flow error\n (bsc#1104353 ).\n\n - net: hns3: fix to correctly fetch l4 protocol outer\n header (bsc#1104353).\n\n - net: hns3: Fix to support autoneg only for port attached\n with phy (bsc#1104353).\n\n - net: hns3: Fix typo error for feild in hclge_tm\n (bsc#1104353 ).\n\n - net: hns3: free the ring_data structrue when change tqps\n (bsc#1104353).\n\n - net: hns3: get rss_size_max from configuration but not\n hardcode (bsc#1104353).\n\n - net: hns3: get vf count by pci_sriov_get_totalvfs\n (bsc#1104353 ).\n\n - net: hns3: hclge_inform_reset_assert_to_vf() can be\n static (bsc#1104353).\n\n - net: hns3: hns3:fix a bug about statistic counter in\n reset process (bsc#1104353).\n\n - net: hns3: hns3_get_channels() can be static\n (bsc#1104353 ).\n\n - net: hns3: Increase the default depth of bucket for TM\n shaper (bsc#1104353).\n\n - net: hns3: increase the max time for IMP handle command\n (bsc#1104353).\n\n - net: hns3: make local functions static (bsc#1104353 ).\n\n - net: hns3: Mask the packet statistics query when NIC is\n down (bsc#1104353).\n\n - net: hns3: Modify the update period of packet statistics\n (bsc#1104353).\n\n - net: hns3: never send command queue message to IMP when\n reset (bsc#1104353).\n\n - net: hns3: Optimize PF CMDQ interrupt switching process\n (bsc#1104353).\n\n - net: hns3: Optimize the PF's process of updating\n multicast MAC (bsc#1104353).\n\n - net: hns3: Optimize the VF's process of updating\n multicast MAC (bsc#1104353).\n\n - net: hns3: reallocate tx/rx buffer after changing mtu\n (bsc#1104353).\n\n - net: hns3: refactor GL update function (bsc#1104353 ).\n\n - net: hns3: refactor interrupt coalescing init function\n (bsc#1104353).\n\n - net: hns3: Refactor mac_init function (bsc#1104353).\n\n - net: hns3: Refactor of the reset interrupt handling\n logic (bsc#1104353).\n\n - net: hns3: Refactors the requested reset & pending reset\n handling code (bsc#1104353).\n\n - net: hns3: refactor the coalesce related struct\n (bsc#1104353 ).\n\n - net: hns3: refactor the get/put_vector function\n (bsc#1104353 ).\n\n - net: hns3: refactor the hclge_get/set_rss function\n (bsc#1104353 ).\n\n - net: hns3: refactor the hclge_get/set_rss_tuple function\n (bsc#1104353).\n\n - net: hns3: Refactor the initialization of command queue\n (bsc#1104353).\n\n - net: hns3: refactor the loopback related function\n (bsc#1104353 ).\n\n - net: hns3: Refactor the mapping of tqp to vport\n (bsc#1104353 ).\n\n - net: hns3: Refactor the skb receiving and transmitting\n function (bsc#1104353).\n\n - net: hns3: remove a couple of redundant assignments\n (bsc#1104353 ).\n\n - net: hns3: remove add/del_tunnel_udp in hns3_enet module\n (bsc#1104353).\n\n - net: hns3: Remove a useless member of struct hns3_stats\n (bsc#1104353).\n\n - net: hns3: Remove error log when getting pfc stats fails\n (bsc#1104353).\n\n - net: hns3: Remove packet statistics in the range of\n 8192~12287 (bsc#1104353).\n\n - net: hns3: remove redundant memset when alloc buffer\n (bsc#1104353).\n\n - net: hns3: remove redundant semicolon (bsc#1104353).\n\n - net: hns3: Remove repeat statistic of rx_errors\n (bsc#1104353 ).\n\n - net: hns3: Removes unnecessary check when clearing TX/RX\n rings (bsc#1104353).\n\n - net: hns3: remove TSO config command from VF driver\n (bsc#1104353 ).\n\n - net: hns3: remove unnecessary pci_set_drvdata() and\n devm_kfree() (bsc#1104353).\n\n - net: hns3: remove unused GL setup function (bsc#1104353\n ).\n\n - net: hns3: remove unused hclgevf_cfg_func_mta_filter\n (bsc#1104353).\n\n - net: hns3: Remove unused led control code (bsc#1104353\n ).\n\n - net: hns3: report the function type the same line with\n hns3_nic_get_stats64 (bsc#1104353).\n\n - net: hns3: set the cmdq out_vld bit to 0 after used\n (bsc#1104353 ).\n\n - net: hns3: set the max ring num when alloc netdev\n (bsc#1104353 ).\n\n - net: hns3: Setting for fc_mode and dcb enable flag in TM\n module (bsc#1104353).\n\n - net: hns3: Support for dynamically assigning tx buffer\n to TC (bsc#1104353).\n\n - net: hns3: Unified HNS3 {VF|PF} Ethernet Driver for\n hip08 SoC (bsc#1104353).\n\n - net: hns3: unify the pause params setup function\n (bsc#1104353 ).\n\n - net: hns3: Unify the strings display of packet\n statistics (bsc#1104353).\n\n - net: hns3: Updates MSI/MSI-X alloc/free APIs(depricated)\n to new APIs (bsc#1104353).\n\n - net: hns3: Updates RX packet info fetch in case of multi\n BD (bsc#1104353).\n\n - net: hns3: Use enums instead of magic number in\n hclge_is_special_opcode (bsc#1104353).\n\n - net: hns3: VF should get the real rss_size instead of\n rss_size_max (bsc#1104353).\n\n - net: lan78xx: Fix race in tx pending skb size\n calculation (bsc#1100132).\n\n - net: lan78xx: fix rx handling before first packet is\n send (bsc#1100132).\n\n - net: qmi_wwan: add BroadMobi BM806U 2020:2033\n (bsc#1087092).\n\n - net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).\n\n - net-usb: add qmi_wwan if on lte modem wistron neweb\n d18q1 (bsc#1087092).\n\n - net: usb: asix: replace mii_nway_restart in resume path\n (bsc#1100132).\n\n - orangefs: report attributes_mask and attributes for\n statx (bsc#1101832).\n\n - orangefs: set i_size on new symlink (bsc#1101845).\n\n - overflow.h: Add allocation size calculation helpers\n (bsc#1101116,).\n\n - powerpc/64: Add GENERIC_CPU support for little endian\n ().\n\n - powerpc/fadump: handle crash memory ranges array index\n overflow (bsc#1103269).\n\n - powerpc/fadump: merge adjacent memory ranges to reduce\n PT_LOAD segements (bsc#1103269).\n\n - powerpc/pkeys: Deny read/write/execute by default\n (bsc#1097577).\n\n - powerpc/pkeys: Fix calculation of total pkeys\n (bsc#1097577).\n\n - powerpc/pkeys: Give all threads control of their key\n permissions (bsc#1097577).\n\n - powerpc/pkeys: key allocation/deallocation must not\n change pkey registers (bsc#1097577).\n\n - powerpc/pkeys: make protection key 0 less special\n (bsc#1097577).\n\n - powerpc/pkeys: Preallocate execute-only key\n (bsc#1097577).\n\n - powerpc/pkeys: Save the pkey registers before fork\n (bsc#1097577).\n\n - qed*: Add link change count value to ethtool statistics\n display.\n\n - qed: Add qed APIs for PHY module query (bsc#1086314 ).\n\n - qed: Add srq core support for RoCE and iWARP\n (bsc#1086314 ).\n\n - qede: Add driver callbacks for eeprom module query\n (bsc#1086314 ).\n\n - qedf: Add get_generic_tlv_data handler (bsc#1086317).\n\n - qedf: Add support for populating ethernet TLVs\n (bsc#1086317).\n\n - qed: fix spelling mistake 'successffuly' ->\n 'successfully' (bsc#1086314).\n\n - qedi: Add get_generic_tlv_data handler (bsc#1086315).\n\n - qedi: Add support for populating ethernet TLVs\n (bsc#1086315).\n\n - qed: Make some functions static (bsc#1086314).\n\n - qed: remove redundant functions qed_get_cm_pq_idx_rl\n (bsc#1086314).\n\n - qed: remove redundant functions\n qed_set_gft_event_id_cm_hdr (bsc#1086314).\n\n - qed: remove redundant pointer 'name' (bsc#1086314).\n\n - qed: use dma_zalloc_coherent instead of allocator/memset\n (bsc#1086314).\n\n - qed*: Utilize FW 8.37.2.0 (bsc#1086314).\n\n - rdma/hns: Add 64KB page size support for hip08\n (bsc#1104427 ).\n\n - rdma/hns: Add command queue support for hip08 RoCE\n driver (bsc#1104427).\n\n - rdma/hns: Add CQ operations support for hip08 RoCE\n driver (bsc#1104427).\n\n - rdma/hns: Add detailed comments for mb() call\n (bsc#1104427 ).\n\n - rdma/hns: Add eq support of hip08 (bsc#1104427).\n\n - rdma/hns: Add gsi qp support for modifying qp in hip08\n (bsc#1104427).\n\n - rdma/hns: Add mailbox's implementation for hip08 RoCE\n driver (bsc#1104427).\n\n - rdma/hns: Add modify CQ support for hip08 (bsc#1104427\n ).\n\n - rdma/hns: Add names to function arguments in function\n pointers (bsc#1104427).\n\n - rdma/hns: Add profile support for hip08 driver\n (bsc#1104427 ).\n\n - rdma/hns: Add QP operations support for hip08 SoC\n (bsc#1104427 ).\n\n - rdma/hns: Add releasing resource operation in error\n branch (bsc#1104427).\n\n - rdma/hns: Add rereg mr support for hip08 (bsc#1104427 ).\n\n - rdma/hns: Add reset process for RoCE in hip08\n (bsc#1104427 ).\n\n - rdma/hns: Add return operation when configured global\n param fail (bsc#1104427).\n\n - rdma/hns: Add rq inline data support for hip08 RoCE\n (bsc#1104427 ).\n\n - rdma/hns: Add rq inline flags judgement (bsc#1104427 ).\n\n - rdma/hns: Add sq_invld_flg field in QP context\n (bsc#1104427 ).\n\n - rdma/hns: Add support for processing send wr and receive\n wr (bsc#1104427).\n\n - rdma/hns: Add the interfaces to support multi hop\n addressing for the contexts in hip08 (bsc#1104427).\n\n - rdma/hns: Adjust the order of cleanup hem table\n (bsc#1104427 ).\n\n - rdma/hns: Assign dest_qp when deregistering mr\n (bsc#1104427 ).\n\n - rdma/hns: Assign the correct value for tx_cqn\n (bsc#1104427 ).\n\n - rdma/hns: Assign zero for pkey_index of wc in hip08\n (bsc#1104427 ).\n\n - rdma/hns: Avoid NULL pointer exception (bsc#1104427 ).\n\n - rdma/hns: Bugfix for cq record db for kernel\n (bsc#1104427 ).\n\n - rdma/hns: Bugfix for init hem table (bsc#1104427).\n\n - rdma/hns: Bugfix for rq record db for kernel\n (bsc#1104427 ).\n\n - rdma/hns: Check return value of kzalloc (bsc#1104427 ).\n\n - rdma/hns: Configure BT BA and BT attribute for the\n contexts in hip08 (bsc#1104427).\n\n - rdma/hns: Configure fence attribute in hip08 RoCE\n (bsc#1104427 ).\n\n - rdma/hns: Configure mac&gid and user access region for\n hip08 RoCE driver (bsc#1104427).\n\n - rdma/hns: Configure sgid type for hip08 RoCE\n (bsc#1104427 ).\n\n - rdma/hns: Configure the MTPT in hip08 (bsc#1104427).\n\n - rdma/hns: Configure TRRL field in hip08 RoCE device\n (bsc#1104427 ).\n\n - rdma/hns: Create gsi qp in hip08 (bsc#1104427).\n\n - rdma/hns: Delete the unnecessary initializing enum to\n zero (bsc#1104427).\n\n - rdma/hns: Do not unregister a callback we didn't\n register (bsc#1104427).\n\n - rdma/hns: Drop local zgid in favor of core defined\n variable (bsc#1104427).\n\n - rdma/hns: Enable inner_pa_vld filed of mpt (bsc#1104427\n ).\n\n - rdma/hns: Enable the cqe field of sqwqe of RC\n (bsc#1104427 ).\n\n - rdma/hns: ensure for-loop actually iterates and free's\n buffers (bsc#1104427).\n\n - rdma/hns: Fill sq wqe context of ud type in hip08\n (bsc#1104427 ).\n\n - rdma/hns: Filter for zero length of sge in hip08 kernel\n mode (bsc#1104427).\n\n - rdma/hns: Fix a bug with modifying mac address\n (bsc#1104427 ).\n\n - rdma/hns: Fix a couple misspellings (bsc#1104427).\n\n - rdma/hns: Fix calltrace for sleeping in atomic\n (bsc#1104427 ).\n\n - rdma/hns: Fix cqn type and init resp (bsc#1104427).\n\n - rdma/hns: Fix cq record doorbell enable in kernel\n (bsc#1104427 ).\n\n - rdma/hns: Fix endian problems around imm_data and rkey\n (bsc#1104427).\n\n - rdma/hns: Fix inconsistent warning (bsc#1104427).\n\n - rdma/hns: Fix init resp when alloc ucontext (bsc#1104427\n ).\n\n - rdma/hns: Fix misplaced call to\n hns_roce_cleanup_hem_table (bsc#1104427).\n\n - rdma/hns: Fix QP state judgement before receiving work\n requests (bsc#1104427).\n\n - rdma/hns: Fix QP state judgement before sending work\n requests (bsc#1104427).\n\n - rdma/hns: fix spelling mistake: 'Reseved' -> 'Reserved'\n (bsc#1104427).\n\n - rdma/hns: Fix the bug with NULL pointer (bsc#1104427 ).\n\n - rdma/hns: Fix the bug with rq sge (bsc#1104427).\n\n - rdma/hns: Fix the endian problem for hns (bsc#1104427 ).\n\n - rdma/hns: Fix the illegal memory operation when cross\n page (bsc#1104427).\n\n - rdma/hns: Fix the issue of IOVA not page continuous in\n hip08 (bsc#1104427).\n\n - rdma/hns: Fix the qp context state diagram (bsc#1104427\n ).\n\n - rdma/hns: Generate gid type of RoCEv2 (bsc#1104427).\n\n - rdma/hns: Get rid of page operation after\n dma_alloc_coherent (bsc#1104427).\n\n - rdma/hns: Get rid of virt_to_page and vmap calls after\n dma_alloc_coherent (bsc#1104427).\n\n - rdma/hns: Implement the disassociate_ucontext API\n (bsc#1104427 ).\n\n - rdma/hns: Increase checking CMQ status timeout value\n (bsc#1104427).\n\n - rdma/hns: Initialize the PCI device for hip08 RoCE\n (bsc#1104427 ).\n\n - rdma/hns: Intercept illegal RDMA operation when use\n inline data (bsc#1104427).\n\n - rdma/hns: Load the RoCE dirver automatically\n (bsc#1104427 ).\n\n - rdma/hns: make various function static, fixes warnings\n (bsc#1104427).\n\n - rdma/hns: Modify assignment device variable to support\n both PCI device and platform device (bsc#1104427).\n\n - rdma/hns: Modify the usage of cmd_sn in hip08\n (bsc#1104427 ).\n\n - rdma/hns: Modify the value with rd&dest_rd of qp_attr\n (bsc#1104427).\n\n - rdma/hns: Modify uar allocation algorithm to avoid\n bitmap exhaust (bsc#1104427).\n\n - rdma/hns: Move priv in order to add multiple hns_roce\n support (bsc#1104427).\n\n - rdma/hns: Move the location for initializing tmp_len\n (bsc#1104427).\n\n - rdma/hns: Not support qp transition from reset to reset\n for hip06 (bsc#1104427).\n\n - rdma/hns: Only assign dest_qp if IB_QP_DEST_QPN bit is\n set (bsc#1104427).\n\n - rdma/hns: Only assign dqpn if IB_QP_PATH_DEST_QPN bit is\n set (bsc#1104427).\n\n - rdma/hns: Only assign mtu if IB_QP_PATH_MTU bit is set\n (bsc#1104427).\n\n - rdma/hns: Refactor code for readability (bsc#1104427 ).\n\n - rdma/hns: Refactor eq code for hip06 (bsc#1104427).\n\n - rdma/hns: remove redundant assignment to variable j\n (bsc#1104427 ).\n\n - rdma/hns: Remove some unnecessary attr_mask judgement\n (bsc#1104427).\n\n - rdma/hns: Remove unnecessary operator (bsc#1104427).\n\n - rdma/hns: Remove unnecessary platform_get_resource()\n error check (bsc#1104427).\n\n - rdma/hns: Rename the idx field of db (bsc#1104427).\n\n - rdma/hns: Replace condition statement using hardware\n version information (bsc#1104427).\n\n - rdma/hns: Replace __raw_write*(cpu_to_le*()) with LE\n write*() (bsc#1104427).\n\n - rdma/hns: return 0 rather than return a garbage status\n value (bsc#1104427).\n\n - rdma/hns_roce: Do not check return value of\n zap_vma_ptes() (bsc#1104427).\n\n - rdma/hns: Set access flags of hip08 RoCE (bsc#1104427 ).\n\n - rdma/hns: Set desc_dma_addr for zero when free cmq desc\n (bsc#1104427).\n\n - rdma/hns: Set NULL for __internal_mr (bsc#1104427).\n\n - rdma/hns: Set rdma_ah_attr type for querying qp\n (bsc#1104427 ).\n\n - rdma/hns: Set se attribute of sqwqe in hip08\n (bsc#1104427 ).\n\n - rdma/hns: Set sq_cur_sge_blk_addr field in QPC in hip08\n (bsc#1104427).\n\n - rdma/hns: Set the guid for hip08 RoCE device\n (bsc#1104427 ).\n\n - rdma/hns: Set the owner field of SQWQE in hip08 RoCE\n (bsc#1104427).\n\n - rdma/hns: Split CQE from MTT in hip08 (bsc#1104427).\n\n - rdma/hns: Split hw v1 driver from hns roce driver\n (bsc#1104427 ).\n\n - rdma/hns: Submit bad wr (bsc#1104427).\n\n - rdma/hns: Support cq record doorbell for kernel space\n (bsc#1104427).\n\n - rdma/hns: Support cq record doorbell for the user space\n (bsc#1104427).\n\n - rdma/hns: Support multi hop addressing for PBL in hip08\n (bsc#1104427).\n\n - rdma/hns: Support rq record doorbell for kernel space\n (bsc#1104427).\n\n - rdma/hns: Support rq record doorbell for the user space\n (bsc#1104427).\n\n - rdma/hns: Support WQE/CQE/PBL page size configurable\n feature in hip08 (bsc#1104427).\n\n - rdma/hns: Unify the calculation for hem index in hip08\n (bsc#1104427).\n\n - rdma/hns: Update assignment method for owner field of\n send wqe (bsc#1104427).\n\n - rdma/hns: Update calculation of irrl_ba field for hip08\n (bsc#1104427).\n\n - rdma/hns: Update convert function of endian format\n (bsc#1104427 ).\n\n - rdma/hns: Update the interfaces for MTT/CQE multi hop\n addressing in hip08 (bsc#1104427).\n\n - rdma/hns: Update the IRRL table chunk size in hip08\n (bsc#1104427 ).\n\n - rdma/hns: Update the PD&CQE&MTT specification in hip08\n (bsc#1104427).\n\n - rdma/hns: Update the usage of ack timeout in hip08\n (bsc#1104427 ).\n\n - rdma/hns: Update the usage of sr_max and rr_max field\n (bsc#1104427).\n\n - rdma/hns: Update the verbs of polling for completion\n (bsc#1104427).\n\n - rdma/hns: Use free_pages function instead of free_page\n (bsc#1104427).\n\n - rdma/hns: Use structs to describe the uABI instead of\n opencoding (bsc#1104427).\n\n - rdma/qedr: Fix NULL pointer dereference when running\n over iWARP without RDMA-CM (bsc#1086314).\n\n - rdma/qedr: fix spelling mistake: 'adrresses' ->\n 'addresses' (bsc#1086314).\n\n - rdma/qedr: fix spelling mistake: 'failes' -> 'fails'\n (bsc#1086314).\n\n - reiserfs: fix buffer overflow with long warning messages\n (bsc#1101847).\n\n -\n reiserfs-fix-buffer-overflow-with-long-warning-messa.pat\n ch: Silence bogus compiler warning about unused result\n of strscpy().\n\n - s390/dasd: configurable IFCC handling (bsc#1097808).\n\n - sched/smt: Update sched_smt_present at runtime\n (bsc#1089343).\n\n - scsi: mpt3sas: Add an I/O barrier (bsc#1086906,).\n\n - scsi: mpt3sas: Added support for SAS Device Discovery\n Error Event (bsc#1086906,).\n\n - scsi: mpt3sas: Add PCI device ID for Andromeda\n (bsc#1086906,).\n\n - scsi: mpt3sas: Allow processing of events during driver\n unload (bsc#1086906,).\n\n - scsi: mpt3sas: As per MPI-spec, use combined reply queue\n for SAS3.5 controllers when HBA supports more than 16\n MSI-x vectors (bsc#1086906,).\n\n - scsi: mpt3sas: Bug fix for big endian systems\n (bsc#1086906,).\n\n - scsi: mpt3sas: Cache enclosure pages during enclosure\n add (bsc#1086906,).\n\n - scsi: mpt3sas: clarify mmio pointer types\n (bsc#1086906,).\n\n - scsi: mpt3sas: Configure reply post queue depth, DMA and\n sgl tablesize (bsc#1086906,).\n\n - scsi: mpt3sas: Do not abort I/Os issued to NVMe drives\n while processing Async Broadcast primitive event\n (bsc#1086906,).\n\n - scsi: mpt3sas: Do not access the structure after\n decrementing it's instance reference count\n (bsc#1086906,).\n\n - scsi: mpt3sas: Do not mark fw_event workqueue as\n WQ_MEM_RECLAIM (bsc#1086906,).\n\n - scsi: mpt3sas: Enhanced handling of Sense Buffer\n (bsc#1086906,).\n\n - scsi: mpt3sas: Fix, False timeout prints for ioctl and\n other internal commands during controller reset\n (bsc#1086906,).\n\n - scsi: mpt3sas: fix possible memory leak (bsc#1086906,).\n\n - scsi: mpt3sas: fix spelling mistake: 'disbale' ->\n 'disable' (bsc#1086906,).\n\n - scsi: mpt3sas: For NVME device, issue a protocol level\n reset (bsc#1086906,).\n\n - scsi: mpt3sas: Incorrect command status was set/marked\n as not used (bsc#1086906,).\n\n - scsi: mpt3sas: Increase event log buffer to support 24\n port HBA's (bsc#1086906,).\n\n - scsi: mpt3sas: Introduce API to get BAR0 mapped buffer\n address (bsc#1086906,).\n\n - scsi: mpt3sas: Introduce Base function for cloning\n (bsc#1086906,).\n\n - scsi: mpt3sas: Introduce function to clone mpi reply\n (bsc#1086906,).\n\n - scsi: mpt3sas: Introduce function to clone mpi request\n (bsc#1086906,).\n\n - scsi: mpt3sas: Lockless access for chain buffers\n (bsc#1086906,).\n\n - scsi: mpt3sas: Optimize I/O memory consumption in driver\n (bsc#1086906,).\n\n - scsi: mpt3sas: Pre-allocate RDPQ Array at driver boot\n time (bsc#1086906,).\n\n - scsi: mpt3sas: Replace PCI pool old API (bsc#1081917). -\n Refresh\n patches.drivers/scsi-mpt3sas-SGL-to-PRP-Translation-for-\n I-Os-to-NVMe.patch.\n\n - scsi: mpt3sas: Report Firmware Package Version from HBA\n Driver (bsc#1086906,).\n\n - scsi: mpt3sas: Update driver version '25.100.00.00'\n (bsc#1086906,).\n\n - scsi: mpt3sas: Update driver version '26.100.00.00'\n (bsc#1086906,).\n\n - scsi: mpt3sas: Update MPI Headers (bsc#1086906,).\n\n - scsi: qedf: Add additional checks when restarting an\n rport due to ABTS timeout (bsc#1086317).\n\n - scsi: qedf: Add check for offload before flushing I/Os\n for target (bsc#1086317).\n\n - scsi: qedf: Add dcbx_not_wait module parameter so we\n won't wait for DCBX convergence to start discovery\n (bsc#1086317).\n\n - scsi: qedf: Add missing skb frees in error path\n (bsc#1086317).\n\n - scsi: qedf: Add more defensive checks for concurrent\n error conditions (bsc#1086317).\n\n - scsi: qedf: Add task id to kref_get_unless_zero() debug\n messages when flushing requests (bsc#1086317).\n\n - scsi: qedf: Check if link is already up when receiving a\n link up event from qed (bsc#1086317).\n\n - scsi: qedf: fix LTO-enabled build (bsc#1086317).\n\n - scsi: qedf: Fix VLAN display when printing sent FIP\n frames (bsc#1086317).\n\n - scsi: qedf: Honor default_prio module parameter even if\n DCBX does not converge (bsc#1086317).\n\n - scsi: qedf: Honor priority from DCBX FCoE App tag\n (bsc#1086317).\n\n - scsi: qedf: If qed fails to enable MSI-X fail PCI probe\n (bsc#1086317).\n\n - scsi: qedf: Improve firmware debug dump handling\n (bsc#1086317).\n\n - scsi: qedf: Increase the number of default FIP VLAN\n request retries to 60 (bsc#1086317).\n\n - scsi: qedf: Release RRQ reference correctly when RRQ\n command times out (bsc#1086317).\n\n - scsi: qedf: remove redundant initialization of 'fcport'\n (bsc#1086317).\n\n - scsi: qedf: Remove setting DCBX pending during soft\n context reset (bsc#1086317).\n\n - scsi: qedf: Return request as DID_NO_CONNECT if MSI-X is\n not enabled (bsc#1086317).\n\n - scsi: qedf: Sanity check FCoE/FIP priority value to make\n sure it's between 0 and 7 (bsc#1086317).\n\n - scsi: qedf: Send the driver state to MFW (bsc#1086317).\n\n - scsi: qedf: Set the UNLOADING flag when removing a vport\n (bsc#1086317).\n\n - scsi: qedf: Synchronize rport restarts when multiple ELS\n commands time out (bsc#1086317).\n\n - scsi: qedf: Update copyright for 2018 (bsc#1086317).\n\n - scsi: qedf: Update version number to 8.33.16.20\n (bsc#1086317).\n\n - scsi: qedf: use correct strncpy() size (bsc#1086317).\n\n - scsi: qedi: fix building with LTO (bsc#1086315).\n\n - scsi: qedi: fix build regression (bsc#1086315).\n\n - scsi: qedi: Fix kernel crash during port toggle\n (bsc#1086315).\n\n - scsi: qedi: Send driver state to MFW (bsc#1086315).\n\n - scsi: qla2xxx: correctly shift host byte (bsc#1086327,).\n\n - scsi: qla2xxx: Correct setting of\n SAM_STAT_CHECK_CONDITION (bsc#1086327,).\n\n - scsi: qla2xxx: Fix crash on qla2x00_mailbox_command\n (bsc#1086327,).\n\n - scsi: qla2xxx: Fix Inquiry command being dropped in\n Target mode (bsc#1086327,).\n\n - scsi: qla2xxx: Fix race condition between iocb timeout\n and initialisation (bsc#1086327,).\n\n - scsi: qla2xxx: Fix Rport and session state getting out\n of sync (bsc#1086327,).\n\n - scsi: qla2xxx: Fix sending ADISC command for login\n (bsc#1086327,).\n\n - scsi: qla2xxx: Fix setting lower transfer speed if GPSC\n fails (bsc#1086327,).\n\n - scsi: qla2xxx: Fix TMF and Multi-Queue config\n (bsc#1086327,).\n\n - scsi: qla2xxx: Move GPSC and GFPNID out of session\n management (bsc#1086327,).\n\n - scsi: qla2xxx: Prevent relogin loop by removing stale\n code (bsc#1086327,).\n\n - scsi: qla2xxx: Reduce redundant ADISC command for RSCNs\n (bsc#1086327,).\n\n - scsi: qla2xxx: remove irq save in qla2x00_poll()\n (bsc#1086327,).\n\n - scsi: qla2xxx: Remove stale debug value for login_retry\n flag (bsc#1086327,).\n\n - scsi: qla2xxx: Update driver version to 10.00.00.07-k\n (bsc#1086327,).\n\n - scsi: qla2xxx: Use predefined get_datalen_for_atio()\n inline function (bsc#1086327,).\n\n - scsi: qla4xxx: Move an array from a .h into a .c file\n (bsc#1086331).\n\n - scsi: qla4xxx: Remove unused symbols (bsc#1086331).\n\n - scsi: qla4xxx: skip error recovery in case of register\n disconnect (bsc#1086331).\n\n - scsi: qla4xxx: Use dma_pool_zalloc() (bsc#1086331).\n\n - scsi: qla4xxx: Use zeroing allocator rather than\n allocator/memset (bsc#1086331).\n\n - selftests/powerpc: Fix core-pkey for default execute\n permission change (bsc#1097577).\n\n - selftests/powerpc: Fix ptrace-pkey for default execute\n permission change (bsc#1097577).\n\n - supported.conf: add drivers/md/dm-writecache\n\n - supported.conf: added hns3 modules\n\n - supported.conf: added hns-roce-hw-v1 and hns-roce-hw-v2\n\n - supported.conf: Enable HiSi v3 SAS adapter ()\n\n - tcp_rbd depends on BLK_DEV_RBD ().\n\n - typec: tcpm: fusb302: Resolve out of order messaging\n events (bsc#1087092).\n\n - udf: Detect incorrect directory size (bsc#1101891).\n\n - udf: Provide saner default for invalid uid / gid\n (bsc#1101890).\n\n - vfs: add the sb_start_intwrite_trylock() helper\n (bsc#1101841).\n\n - x86/apic: Ignore secondary threads if nosmt=force\n (bsc#1089343).\n\n - x86/CPU/AMD: Do not check CPUID max ext level before\n parsing SMP info (bsc#1089343).\n\n - x86/cpu/AMD: Evaluate smp_num_siblings early\n (bsc#1089343).\n\n - x86/CPU/AMD: Move TOPOEXT reenablement before reading\n smp_num_siblings (bsc#1089343).\n\n - x86/cpu/AMD: Remove the pointless detect_ht() call\n (bsc#1089343).\n\n - x86/cpu/common: Provide detect_ht_early() (bsc#1089343).\n\n - x86/cpu/intel: Evaluate smp_num_siblings early\n (bsc#1089343).\n\n - x86/cpu: Remove the pointless CPU printout\n (bsc#1089343).\n\n - x86/cpu/topology: Provide\n detect_extended_topology_early() (bsc#1089343).\n\n - x86/KVM/VMX: Add module argument for L1TF mitigation.\n\n - x86/smp: Provide topology_is_primary_thread()\n (bsc#1089343).\n\n - x86/topology: Provide topology_smt_supported()\n (bsc#1089343).\n\n - x86/xen: init %gs very early to avoid page faults with\n stack protector (bnc#1104777).\n\n - xen-netback: fix input validation in\n xenvif_set_hash_mapping() (bnc#1103277).\n\n - xen/netfront: do not cache skb_shinfo() (bnc#1065600).\n\n - xfs: catch inode allocation state mismatch corruption\n (bsc#1104211).\n\n - xfs: prevent creating negative-sized file via\n INSERT_RANGE (bsc#1101833).\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1065600\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1081917\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1083647\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1086288\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1086314\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1086315\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1086317\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1086327\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1086331\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1086906\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1087081\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1087092\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1089343\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1090888\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1097104\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1097577\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1097808\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1099811\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1099813\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1099844\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1099845\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1099846\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1099849\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1099863\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1099864\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1100132\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101116\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101828\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101832\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101833\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101837\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101839\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101841\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101843\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101844\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101845\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101847\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101852\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101853\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101867\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101872\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101874\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101875\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101882\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101883\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101885\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101887\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101890\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101891\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101893\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101895\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101896\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101900\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101902\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101903\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1102340\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1103097\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1103269\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1103277\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1103363\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1103445\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1103886\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1104066\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1104211\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1104319\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1104353\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1104365\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1104427\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1104494\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1104495\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1104708\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1104777\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected the Linux Kernel packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-debug\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-debug-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-debug-base-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-debug-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-debug-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-debug-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-debug-devel-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-default\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-default-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-default-base-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-default-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-default-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-default-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-default-devel-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-docs-html\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-kvmsmall\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-kvmsmall-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-kvmsmall-base-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-kvmsmall-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-kvmsmall-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-kvmsmall-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-kvmsmall-devel-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-macros\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-obs-build\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-obs-build-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-obs-qa\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-source\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-source-vanilla\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-syms\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-vanilla\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-vanilla-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-vanilla-base-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-vanilla-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-vanilla-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-vanilla-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-vanilla-devel-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:opensuse:15.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/08/17\");\n script_set_attribute(attribute:\"in_the_news\", value:\"true\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/08/17\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release =~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"openSUSE\");\nif (release !~ \"^(SUSE15\\.0)$\") audit(AUDIT_OS_RELEASE_NOT, \"openSUSE\", \"15.0\", release);\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\nourarch = get_kb_item(\"Host/cpu\");\nif (!ourarch) audit(AUDIT_UNKNOWN_ARCH);\nif (ourarch !~ \"^(x86_64)$\") audit(AUDIT_ARCH_NOT, \"x86_64\", ourarch);\n\nflag = 0;\n\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-debug-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-debug-base-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-debug-base-debuginfo-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-debug-debuginfo-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-debug-debugsource-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-debug-devel-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-debug-devel-debuginfo-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-default-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-default-base-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-default-base-debuginfo-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-default-debuginfo-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-default-debugsource-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-default-devel-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-default-devel-debuginfo-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-devel-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-docs-html-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-kvmsmall-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-kvmsmall-base-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-kvmsmall-base-debuginfo-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-kvmsmall-debuginfo-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-kvmsmall-debugsource-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-kvmsmall-devel-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-kvmsmall-devel-debuginfo-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-macros-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-obs-build-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-obs-build-debugsource-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-obs-qa-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-source-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-source-vanilla-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-syms-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-vanilla-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-vanilla-base-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-vanilla-base-debuginfo-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-vanilla-debuginfo-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-vanilla-debugsource-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-vanilla-devel-4.12.14-lp150.12.16.1\") ) flag++;\nif ( rpm_check(release:\"SUSE15.0\", reference:\"kernel-vanilla-devel-debuginfo-4.12.14-lp150.12.16.1\") ) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"kernel-debug / kernel-debug-base / kernel-debug-base-debuginfo / etc\");\n}\n", "cvss": {"score": 7.8, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2018-12-02T15:38:16", "references": ["https://usn.ubuntu.com/3753-2/"], "pluginID": "112112", "description": "USN-3753-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS.\n\nIt was discovered that the generic SCSI driver in the Linux kernel did not properly enforce permissions on kernel memory access. A local attacker could use this to expose sensitive information or possibly elevate privileges. (CVE-2017-13168)\n\nWen Xu discovered that a use-after-free vulnerability existed in the ext4 filesystem implementation in the Linux kernel. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-10876, CVE-2018-10879)\n\nWen Xu discovered that a buffer overflow existed in the ext4 filesystem implementation in the Linux kernel. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-10877)\n\nWen Xu discovered that an out-of-bounds write vulnerability existed in the ext4 filesystem implementation in the Linux kernel. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-10878, CVE-2018-10882)\n\nWen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly keep meta-data information consistent in some situations. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash). (CVE-2018-10881)\n\nShankara Pailoor discovered that the JFS filesystem implementation in the Linux kernel contained a buffer overflow when handling extended attributes. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.\n(CVE-2018-12233)\n\nWen Xu discovered that the XFS filesystem implementation in the Linux kernel did not properly handle an error condition with a corrupted xfs image. An attacker could use this to construct a malicious xfs image that, when mounted, could cause a denial of service (system crash).\n(CVE-2018-13094)\n\nIt was discovered that the Linux kernel did not properly handle setgid file creation when performed by a non-member of the group. A local attacker could use this to gain elevated privileges. (CVE-2018-13405)\n\nSilvio Cesare discovered that the generic VESA frame buffer driver in the Linux kernel contained an integer overflow. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-13406).\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "edition": 5, "reporter": "Tenable", "published": "2018-08-24T00:00:00", "title": "Ubuntu 14.04 LTS : linux-lts-xenial, linux-aws vulnerabilities (USN-3753-2)", "type": "nessus", "enchantments": {"score": {"modified": "2018-12-02T15:38:16", "vector": "NONE", "value": 7.2}}, "naslFamily": "Ubuntu Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-10882", "CVE-2018-10877", "CVE-2018-10878", "CVE-2018-13405", "CVE-2018-13406", "CVE-2018-10881", "CVE-2018-12233", "CVE-2017-13168", "CVE-2018-10876", "CVE-2018-10879", "CVE-2018-13094"], "modified": "2018-12-01T00:00:00", "cpe": ["p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-aws", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-lowlatency", "p-cpe:/a:canonical:ubuntu_linux:linux-image-generic-lpae-lts-xenial", "p-cpe:/a:canonical:ubuntu_linux:linux-image-lowlatency-lts-xenial", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-generic-lpae", "p-cpe:/a:canonical:ubuntu_linux:linux-image-generic-lts-xenial", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-generic", "p-cpe:/a:canonical:ubuntu_linux:linux-image-aws", "cpe:/o:canonical:ubuntu_linux:14.04"], "id": "UBUNTU_USN-3753-2.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=112112", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Ubuntu Security Notice USN-3753-2. The text \n# itself is copyright (C) Canonical, Inc. See \n# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered \n# trademark of Canonical, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(112112);\n script_version(\"1.3\");\n script_cvs_date(\"Date: 2018/12/01 15:12:42\");\n\n script_cve_id(\"CVE-2017-13168\", \"CVE-2018-10876\", \"CVE-2018-10877\", \"CVE-2018-10878\", \"CVE-2018-10879\", \"CVE-2018-10881\", \"CVE-2018-10882\", \"CVE-2018-12233\", \"CVE-2018-13094\", \"CVE-2018-13405\", \"CVE-2018-13406\");\n script_xref(name:\"USN\", value:\"3753-2\");\n\n script_name(english:\"Ubuntu 14.04 LTS : linux-lts-xenial, linux-aws vulnerabilities (USN-3753-2)\");\n script_summary(english:\"Checks dpkg output for updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Ubuntu host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"USN-3753-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04\nLTS. This update provides the corresponding updates for the Linux\nHardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu\n14.04 LTS.\n\nIt was discovered that the generic SCSI driver in the Linux kernel did\nnot properly enforce permissions on kernel memory access. A local\nattacker could use this to expose sensitive information or possibly\nelevate privileges. (CVE-2017-13168)\n\nWen Xu discovered that a use-after-free vulnerability existed in the\next4 filesystem implementation in the Linux kernel. An attacker could\nuse this to construct a malicious ext4 image that, when mounted, could\ncause a denial of service (system crash) or possibly execute arbitrary\ncode. (CVE-2018-10876, CVE-2018-10879)\n\nWen Xu discovered that a buffer overflow existed in the ext4\nfilesystem implementation in the Linux kernel. An attacker could use\nthis to construct a malicious ext4 image that, when mounted, could\ncause a denial of service (system crash) or possibly execute arbitrary\ncode. (CVE-2018-10877)\n\nWen Xu discovered that an out-of-bounds write vulnerability existed in\nthe ext4 filesystem implementation in the Linux kernel. An attacker\ncould use this to construct a malicious ext4 image that, when mounted,\ncould cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2018-10878, CVE-2018-10882)\n\nWen Xu discovered that the ext4 filesystem implementation in the Linux\nkernel did not properly keep meta-data information consistent in some\nsituations. An attacker could use this to construct a malicious ext4\nimage that, when mounted, could cause a denial of service (system\ncrash). (CVE-2018-10881)\n\nShankara Pailoor discovered that the JFS filesystem implementation in\nthe Linux kernel contained a buffer overflow when handling extended\nattributes. A local attacker could use this to cause a denial of\nservice (system crash) or possibly execute arbitrary code.\n(CVE-2018-12233)\n\nWen Xu discovered that the XFS filesystem implementation in the Linux\nkernel did not properly handle an error condition with a corrupted xfs\nimage. An attacker could use this to construct a malicious xfs image\nthat, when mounted, could cause a denial of service (system crash).\n(CVE-2018-13094)\n\nIt was discovered that the Linux kernel did not properly handle setgid\nfile creation when performed by a non-member of the group. A local\nattacker could use this to gain elevated privileges. (CVE-2018-13405)\n\nSilvio Cesare discovered that the generic VESA frame buffer driver in\nthe Linux kernel contained an integer overflow. A local attacker could\nuse this to cause a denial of service (system crash) or possibly\nexecute arbitrary code. (CVE-2018-13406).\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://usn.ubuntu.com/3753-2/\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-aws\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-generic\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-generic-lpae\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-lowlatency\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-aws\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-generic-lpae-lts-xenial\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-generic-lts-xenial\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-lowlatency-lts-xenial\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:14.04\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/08/24\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/08/24\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"Ubuntu Security Notice (C) 2018 Canonical, Inc. / NASL script (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Ubuntu Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/cpu\", \"Host/Ubuntu\", \"Host/Ubuntu/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"ubuntu.inc\");\ninclude(\"misc_func.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Ubuntu/release\");\nif ( isnull(release) ) audit(AUDIT_OS_NOT, \"Ubuntu\");\nrelease = chomp(release);\nif (! ereg(pattern:\"^(14\\.04)$\", string:release)) audit(AUDIT_OS_NOT, \"Ubuntu 14.04\", \"Ubuntu \" + release);\nif ( ! get_kb_item(\"Host/Debian/dpkg-l\") ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Ubuntu\", cpu);\n\nflag = 0;\n\nif (ubuntu_check(osver:\"14.04\", pkgname:\"linux-image-4.4.0-1028-aws\", pkgver:\"4.4.0-1028.31\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"linux-image-4.4.0-134-generic\", pkgver:\"4.4.0-134.160~14.04.1\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"linux-image-4.4.0-134-generic-lpae\", pkgver:\"4.4.0-134.160~14.04.1\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"linux-image-4.4.0-134-lowlatency\", pkgver:\"4.4.0-134.160~14.04.1\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"linux-image-aws\", pkgver:\"4.4.0.1028.28\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"linux-image-generic-lpae-lts-xenial\", pkgver:\"4.4.0.134.114\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"linux-image-generic-lts-xenial\", pkgver:\"4.4.0.134.114\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"linux-image-lowlatency-lts-xenial\", pkgver:\"4.4.0.134.114\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : ubuntu_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = ubuntu_pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"linux-image-4.4-aws / linux-image-4.4-generic / etc\");\n}\n", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-12-02T15:46:51", "references": ["https://www.suse.com/security/cve/CVE-2018-10882/", "https://bugzilla.suse.com/show_bug.cgi?id=1064232", "https://bugzilla.suse.com/show_bug.cgi?id=1101841", "https://bugzilla.suse.com/show_bug.cgi?id=1022604", "https://bugzilla.suse.com/show_bug.cgi?id=1103717", "https://bugzilla.suse.com/show_bug.cgi?id=969477", "https://bugzilla.suse.com/show_bug.cgi?id=1106995", "https://bugzilla.suse.com/show_bug.cgi?id=1019699", "https://www.suse.com/security/cve/CVE-2018-13095/", "https://bugzilla.suse.com/show_bug.cgi?id=1103445", "https://bugzilla.suse.com/show_bug.cgi?id=969476", "https://bugzilla.suse.com/show_bug.cgi?id=1106281", "https://bugzilla.suse.com/show_bug.cgi?id=1015342", "https://bugzilla.suse.com/show_bug.cgi?id=1099864", "https://www.suse.com/security/cve/CVE-2018-16658/", "https://bugzilla.suse.com/show_bug.cgi?id=1102346", "https://bugzilla.suse.com/show_bug.cgi?id=1100001", "https://bugzilla.suse.com/show_bug.cgi?id=1107689", "https://bugzilla.suse.com/show_bug.cgi?id=1096748", "https://bugzilla.suse.com/show_bug.cgi?id=1099844", "https://bugzilla.suse.com/show_bug.cgi?id=1099832", "https://bugzilla.suse.com/show_bug.cgi?id=1105396", "https://bugzilla.suse.com/show_bug.cgi?id=1106185", "https://bugzilla.suse.com/show_bug.cgi?id=1091860", "https://bugzilla.suse.com/show_bug.cgi?id=1104683", "https://bugzilla.suse.com/show_bug.cgi?id=1105524", "https://bugzilla.suse.com/show_bug.cgi?id=1087092", "https://bugzilla.suse.com/show_bug.cgi?id=1086457", "https://bugzilla.suse.com/show_bug.cgi?id=1056596", "https://bugzilla.suse.com/show_bug.cgi?id=1015343", "https://bugzilla.suse.com/show_bug.cgi?id=1106511", "https://bugzilla.suse.com/show_bug.cgi?id=1062604", "https://bugzilla.suse.com/show_bug.cgi?id=1085539", "https://bugzilla.suse.com/show_bug.cgi?id=1024365", "https://bugzilla.suse.com/show_bug.cgi?id=1083663", "https://bugzilla.suse.com/show_bug.cgi?id=1105392", "https://bugzilla.suse.com/show_bug.cgi?id=1012382", "https://bugzilla.suse.com/show_bug.cgi?id=1017967", "https://www.suse.com/security/cve/CVE-2018-10883/", "https://www.suse.com/security/cve/CVE-2018-10902/", "http://www.nessus.org/u?8190d585", "https://bugzilla.suse.com/show_bug.cgi?id=1050431", "https://bugzilla.suse.com/show_bug.cgi?id=1106278", "https://www.suse.com/security/cve/CVE-2018-12896/", "https://www.suse.com/security/cve/CVE-2018-6555/", "https://bugzilla.suse.com/show_bug.cgi?id=1107060", "https://bugzilla.suse.com/show_bug.cgi?id=1107966", "https://bugzilla.suse.com/show_bug.cgi?id=1103269", "https://bugzilla.suse.com/show_bug.cgi?id=1099597", "https://bugzilla.suse.com/show_bug.cgi?id=1019695", "https://bugzilla.suse.com/show_bug.cgi?id=1106283", "https://bugzilla.suse.com/show_bug.cgi?id=1055014", "https://bugzilla.suse.com/show_bug.cgi?id=1104494", "https://www.suse.com/security/cve/CVE-2018-1128/", "https://www.suse.com/security/cve/CVE-2018-10877/", "https://bugzilla.suse.com/show_bug.cgi?id=1085042", "https://bugzilla.suse.com/show_bug.cgi?id=1080157", "https://bugzilla.suse.com/show_bug.cgi?id=1105271", "https://bugzilla.suse.com/show_bug.cgi?id=1106929", "https://bugzilla.suse.com/show_bug.cgi?id=1099849", "https://bugzilla.suse.com/show_bug.cgi?id=1099810", "https://bugzilla.suse.com/show_bug.cgi?id=1099846", "https://bugzilla.suse.com/show_bug.cgi?id=1107078", "https://bugzilla.suse.com/show_bug.cgi?id=1104897", "https://bugzilla.suse.com/show_bug.cgi?id=1099811", "https://bugzilla.suse.com/show_bug.cgi?id=970506", "https://bugzilla.suse.com/show_bug.cgi?id=963575", "https://bugzilla.suse.com/show_bug.cgi?id=1096254", "https://bugzilla.suse.com/show_bug.cgi?id=1099845", "https://www.suse.com/security/cve/CVE-2018-13094/", "https://bugzilla.suse.com/show_bug.cgi?id=1065364", "https://bugzilla.suse.com/show_bug.cgi?id=1024376", "https://www.suse.com/security/cve/CVE-2018-10879/", "https://bugzilla.suse.com/show_bug.cgi?id=1107735", "https://bugzilla.suse.com/show_bug.cgi?id=1027968", "https://bugzilla.suse.com/show_bug.cgi?id=1104485", "https://bugzilla.suse.com/show_bug.cgi?id=1053685", "https://bugzilla.suse.com/show_bug.cgi?id=1048317", "https://bugzilla.suse.com/show_bug.cgi?id=1089066", "https://bugzilla.suse.com/show_bug.cgi?id=1100000", "https://www.suse.com/security/cve/CVE-2018-10938/", "https://bugzilla.suse.com/show_bug.cgi?id=1031492", "https://bugzilla.suse.com/show_bug.cgi?id=1099922", "https://bugzilla.suse.com/show_bug.cgi?id=1104319", "https://www.suse.com/security/cve/CVE-2018-10880/", "https://bugzilla.suse.com/show_bug.cgi?id=1105292", "https://bugzilla.suse.com/show_bug.cgi?id=1102715", "https://www.suse.com/security/cve/CVE-2018-10878/", "https://bugzilla.suse.com/show_bug.cgi?id=1106697", "https://bugzilla.suse.com/show_bug.cgi?id=969470", "https://www.suse.com/security/cve/CVE-2018-6554/", "https://bugzilla.suse.com/show_bug.cgi?id=1106105", "https://bugzilla.suse.com/show_bug.cgi?id=1106016", "https://bugzilla.suse.com/show_bug.cgi?id=1106509", "https://bugzilla.suse.com/show_bug.cgi?id=1102517", "https://bugzilla.suse.com/show_bug.cgi?id=1105322", "https://bugzilla.suse.com/show_bug.cgi?id=1042286", "https://www.suse.com/security/cve/CVE-2018-15572/", "https://bugzilla.suse.com/show_bug.cgi?id=1106934", "https://bugzilla.suse.com/show_bug.cgi?id=1085536", "https://bugzilla.suse.com/show_bug.cgi?id=1091171", "https://www.suse.com/security/cve/CVE-2018-9363/", "https://bugzilla.suse.com/show_bug.cgi?id=1063646", "https://bugzilla.suse.com/show_bug.cgi?id=1068075", "https://bugzilla.suse.com/show_bug.cgi?id=1021121", "https://bugzilla.suse.com/show_bug.cgi?id=1024361", "https://bugzilla.suse.com/show_bug.cgi?id=1066223", "https://www.suse.com/security/cve/CVE-2018-10881/", "https://bugzilla.suse.com/show_bug.cgi?id=1030552", "https://www.suse.com/security/cve/CVE-2018-13093/", "https://bugzilla.suse.com/show_bug.cgi?id=1106275", "https://bugzilla.suse.com/show_bug.cgi?id=1069138", "https://bugzilla.suse.com/show_bug.cgi?id=966170", "https://bugzilla.suse.com/show_bug.cgi?id=1107319", "https://bugzilla.suse.com/show_bug.cgi?id=1105769", "https://bugzilla.suse.com/show_bug.cgi?id=1097105", "https://bugzilla.suse.com/show_bug.cgi?id=1068032", "https://bugzilla.suse.com/show_bug.cgi?id=1106271", "https://bugzilla.suse.com/show_bug.cgi?id=1098822", "https://bugzilla.suse.com/show_bug.cgi?id=966172", "https://bugzilla.suse.com/show_bug.cgi?id=1105323", "https://bugzilla.suse.com/show_bug.cgi?id=1100132", "https://bugzilla.suse.com/show_bug.cgi?id=1099999", "https://bugzilla.suse.com/show_bug.cgi?id=1104495", "https://bugzilla.suse.com/show_bug.cgi?id=1098253", "https://www.suse.com/security/cve/CVE-2018-10876/", "https://bugzilla.suse.com/show_bug.cgi?id=1106369", "https://bugzilla.suse.com/show_bug.cgi?id=1099813", "https://bugzilla.suse.com/show_bug.cgi?id=1033962", "https://bugzilla.suse.com/show_bug.cgi?id=1102797", "https://bugzilla.suse.com/show_bug.cgi?id=1105536", "https://bugzilla.suse.com/show_bug.cgi?id=1099863", "https://bugzilla.suse.com/show_bug.cgi?id=1102486", "https://bugzilla.suse.com/show_bug.cgi?id=1090888", "https://bugzilla.suse.com/show_bug.cgi?id=1106276", "https://bugzilla.suse.com/show_bug.cgi?id=1020412", "https://bugzilla.suse.com/show_bug.cgi?id=1107320", "https://bugzilla.suse.com/show_bug.cgi?id=1078921", "https://www.suse.com/security/cve/CVE-2018-1129/", "https://bugzilla.suse.com/show_bug.cgi?id=1106229", "https://bugzilla.suse.com/show_bug.cgi?id=1101822"], "pluginID": "117629", "description": "The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.155 to receive various security and bugfixes.\n\nThe following security bugs were fixed :\n\nCVE-2018-13093: Prevent NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occured because of a lack of proper validation that cached inodes are free during allocation (bnc#1100001).\n\nCVE-2018-13095: Prevent denial of service (memory corruption and BUG) that could have occurred for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork (bnc#1099999).\n\nCVE-2018-13094: Prevent OOPS that may have occured for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp (bnc#1100000).\n\nCVE-2018-12896: Prevent integer overflow in the POSIX timer code that was caused by the way the overrun accounting works. Depending on interval and expiry time values, the overrun can be larger than INT_MAX, but the accounting is int based. This basically made the accounting values, which are visible to user space via timer_getoverrun(2) and siginfo::si_overrun, random. This allowed a local user to cause a denial of service (signed integer overflow) via crafted mmap, futex, timer_create, and timer_settime system calls (bnc#1099922).\n\nCVE-2018-16658: Prevent information leak in cdrom_ioctl_drive_status that could have been used by local attackers to read kernel memory (bnc#1107689).\n\nCVE-2018-6555: The irda_setsockopt function allowed local users to cause a denial of service (ias_object use-after-free and system crash) or possibly have unspecified other impact via an AF_IRDA socket (bnc#1106511).\n\nCVE-2018-6554: Prevent memory leak in the irda_bind function that allowed local users to cause a denial of service (memory consumption) by repeatedly binding an AF_IRDA socket (bnc#1106509).\n\nCVE-2018-1129: A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol (bnc#1096748).\n\nCVE-2018-1128: It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service (bnc#1096748).\n\nCVE-2018-10938: A crafted network packet sent remotely by an attacker forced the kernel to enter an infinite loop in the cipso_v4_optptr() function leading to a denial-of-service (bnc#1106016).\n\nCVE-2018-15572: The spectre_v2_select_mitigation function did not always fill RSB upon a context switch, which made it easier for attackers to conduct userspace-userspace spectreRSB attacks (bnc#1102517).\n\nCVE-2018-10902: Protect against concurrent access to prevent double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status(). A malicious local attacker could have used this for privilege escalation (bnc#1105322 1105323).\n\nCVE-2018-9363: Prevent buffer overflow in hidp_process_report (bsc#1105292)\n\nCVE-2018-10883: A local user could have caused an out-of-bounds write in jbd2_journal_dirty_metadata(), a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image (bsc#1099863).\n\nCVE-2018-10879: A local user could have caused a use-after-free in ext4_xattr_set_entry function and a denial of service or unspecified other impact by renaming a file in a crafted ext4 filesystem image (bsc#1099844).\n\nCVE-2018-10878: A local user could have caused an out-of-bounds write and a denial of service or unspecified other impact by mounting and operating a crafted ext4 filesystem image (bsc#1099813).\n\nCVE-2018-10876: A use-after-free was possible in ext4_ext_remove_space() function when mounting and operating a crafted ext4 image (bsc#1099811).\n\nCVE-2018-10877: Prevent out-of-bound access in the ext4_ext_drop_refs() function when operating on a crafted ext4 filesystem image (bsc#1099846).\n\nCVE-2018-10881: A local user could have caused an out-of-bound access in ext4_get_group_info function, a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image (bsc#1099864).\n\nCVE-2018-10882: A local user could have caused an out-of-bound write, a denial of service, and a system crash by unmounting a crafted ext4 filesystem image (bsc#1099849).\n\nCVE-2018-10880: Prevent stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a crafted ext4 image in ext4_update_inline_data(). An attacker could have used this to cause a system crash and a denial of service (bsc#1099845).\n\nThe update package also includes non-security fixes. See advisory for details.\n\nNote that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "edition": 6, "reporter": "Tenable", "published": "2018-09-21T00:00:00", "title": "SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2018:2776-1)", "type": "nessus", "enchantments": {"score": {"modified": "2018-12-02T15:46:51", "vector": "NONE", "value": 7.2}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-10882", "CVE-2018-10877", "CVE-2018-10880", "CVE-2018-10878", "CVE-2018-13095", "CVE-2018-10881", "CVE-2018-6555", "CVE-2018-13093", "CVE-2018-9363", "CVE-2018-10883", "CVE-2018-16658", "CVE-2018-1129", "CVE-2018-10902", "CVE-2018-10876", "CVE-2018-10938", "CVE-2018-10879", "CVE-2018-1128", "CVE-2018-12896", "CVE-2018-15572", "CVE-2018-6554", "CVE-2018-13094"], "modified": "2018-12-01T00:00:00", "cpe": ["p-cpe:/a:novell:suse_linux:kernel-default-debugsource", "cpe:/o:novell:suse_linux:12", "p-cpe:/a:novell:suse_linux:kernel-syms", "p-cpe:/a:novell:suse_linux:kernel-default-base-debuginfo", "p-cpe:/a:novell:suse_linux:kernel-default-base", "p-cpe:/a:novell:suse_linux:kernel-default-extra", "p-cpe:/a:novell:suse_linux:kernel-default-debuginfo", "p-cpe:/a:novell:suse_linux:kernel-default-extra-debuginfo", "p-cpe:/a:novell:suse_linux:kernel-default-devel", "p-cpe:/a:novell:suse_linux:kernel-default-man", "p-cpe:/a:novell:suse_linux:kernel-default"], "id": "SUSE_SU-2018-2776-1.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=117629", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from SUSE update advisory SUSE-SU-2018:2776-1.\n# The text itself is copyright (C) SUSE.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(117629);\n script_version(\"1.4\");\n script_cvs_date(\"Date: 2018/12/01 13:19:05\");\n\n script_cve_id(\"CVE-2018-10876\", \"CVE-2018-10877\", \"CVE-2018-10878\", \"CVE-2018-10879\", \"CVE-2018-10880\", \"CVE-2018-10881\", \"CVE-2018-10882\", \"CVE-2018-10883\", \"CVE-2018-10902\", \"CVE-2018-10938\", \"CVE-2018-1128\", \"CVE-2018-1129\", \"CVE-2018-12896\", \"CVE-2018-13093\", \"CVE-2018-13094\", \"CVE-2018-13095\", \"CVE-2018-15572\", \"CVE-2018-16658\", \"CVE-2018-6554\", \"CVE-2018-6555\", \"CVE-2018-9363\");\n\n script_name(english:\"SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2018:2776-1)\");\n script_summary(english:\"Checks rpm output for the updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote SUSE host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.155 to\nreceive various security and bugfixes.\n\nThe following security bugs were fixed :\n\nCVE-2018-13093: Prevent NULL pointer dereference and panic in\nlookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a\ncorrupted xfs image. This occured because of a lack of proper\nvalidation that cached inodes are free during allocation\n(bnc#1100001).\n\nCVE-2018-13095: Prevent denial of service (memory corruption and BUG)\nthat could have occurred for a corrupted xfs image upon encountering\nan inode that is in extent format, but has more extents than fit in\nthe inode fork (bnc#1099999).\n\nCVE-2018-13094: Prevent OOPS that may have occured for a corrupted xfs\nimage after xfs_da_shrink_inode() is called with a NULL bp\n(bnc#1100000).\n\nCVE-2018-12896: Prevent integer overflow in the POSIX timer code that\nwas caused by the way the overrun accounting works. Depending on\ninterval and expiry time values, the overrun can be larger than\nINT_MAX, but the accounting is int based. This basically made the\naccounting values, which are visible to user space via\ntimer_getoverrun(2) and siginfo::si_overrun, random. This allowed a\nlocal user to cause a denial of service (signed integer overflow) via\ncrafted mmap, futex, timer_create, and timer_settime system calls\n(bnc#1099922).\n\nCVE-2018-16658: Prevent information leak in cdrom_ioctl_drive_status\nthat could have been used by local attackers to read kernel memory\n(bnc#1107689).\n\nCVE-2018-6555: The irda_setsockopt function allowed local users to\ncause a denial of service (ias_object use-after-free and system crash)\nor possibly have unspecified other impact via an AF_IRDA socket\n(bnc#1106511).\n\nCVE-2018-6554: Prevent memory leak in the irda_bind function that\nallowed local users to cause a denial of service (memory consumption)\nby repeatedly binding an AF_IRDA socket (bnc#1106509).\n\nCVE-2018-1129: A flaw was found in the way signature calculation was\nhandled by cephx authentication protocol. An attacker having access to\nceph cluster network who is able to alter the message payload was able\nto bypass signature checks done by cephx protocol (bnc#1096748).\n\nCVE-2018-1128: It was found that cephx authentication protocol did not\nverify ceph clients correctly and was vulnerable to replay attack. Any\nattacker having access to ceph cluster network who is able to sniff\npackets on network can use this vulnerability to authenticate with\nceph service and perform actions allowed by ceph service\n(bnc#1096748).\n\nCVE-2018-10938: A crafted network packet sent remotely by an attacker\nforced the kernel to enter an infinite loop in the cipso_v4_optptr()\nfunction leading to a denial-of-service (bnc#1106016).\n\nCVE-2018-15572: The spectre_v2_select_mitigation function did not\nalways fill RSB upon a context switch, which made it easier for\nattackers to conduct userspace-userspace spectreRSB attacks\n(bnc#1102517).\n\nCVE-2018-10902: Protect against concurrent access to prevent double\nrealloc (double free) in snd_rawmidi_input_params() and\nsnd_rawmidi_output_status(). A malicious local attacker could have\nused this for privilege escalation (bnc#1105322 1105323).\n\nCVE-2018-9363: Prevent buffer overflow in hidp_process_report\n(bsc#1105292)\n\nCVE-2018-10883: A local user could have caused an out-of-bounds write\nin jbd2_journal_dirty_metadata(), a denial of service, and a system\ncrash by mounting and operating on a crafted ext4 filesystem image\n(bsc#1099863).\n\nCVE-2018-10879: A local user could have caused a use-after-free in\next4_xattr_set_entry function and a denial of service or unspecified\nother impact by renaming a file in a crafted ext4 filesystem image\n(bsc#1099844).\n\nCVE-2018-10878: A local user could have caused an out-of-bounds write\nand a denial of service or unspecified other impact by mounting and\noperating a crafted ext4 filesystem image (bsc#1099813).\n\nCVE-2018-10876: A use-after-free was possible in\next4_ext_remove_space() function when mounting and operating a crafted\next4 image (bsc#1099811).\n\nCVE-2018-10877: Prevent out-of-bound access in the\next4_ext_drop_refs() function when operating on a crafted ext4\nfilesystem image (bsc#1099846).\n\nCVE-2018-10881: A local user could have caused an out-of-bound access\nin ext4_get_group_info function, a denial of service, and a system\ncrash by mounting and operating on a crafted ext4 filesystem image\n(bsc#1099864).\n\nCVE-2018-10882: A local user could have caused an out-of-bound write,\na denial of service, and a system crash by unmounting a crafted ext4\nfilesystem image (bsc#1099849).\n\nCVE-2018-10880: Prevent stack-out-of-bounds write in the ext4\nfilesystem code when mounting and writing to a crafted ext4 image in\next4_update_inline_data(). An attacker could have used this to cause a\nsystem crash and a denial of service (bsc#1099845).\n\nThe update package also includes non-security fixes. See advisory for\ndetails.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the SUSE security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1012382\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1015342\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1015343\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1017967\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1019695\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1019699\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1020412\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1021121\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1022604\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1024361\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1024365\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1024376\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1027968\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1030552\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1031492\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1033962\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1042286\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1048317\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1050431\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1053685\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1055014\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1056596\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1062604\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1063646\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1064232\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1065364\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1066223\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1068032\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1068075\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1069138\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1078921\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1080157\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1083663\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1085042\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1085536\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1085539\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1086457\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1087092\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1089066\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1090888\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1091171\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1091860\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1096254\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1096748\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1097105\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1098253\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1098822\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099597\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099810\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099811\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099813\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099832\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099844\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099845\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099846\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099849\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099863\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099864\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099922\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099999\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1100000\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1100001\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1100132\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1101822\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1101841\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1102346\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1102486\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1102517\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1102715\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1102797\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1103269\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1103445\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1103717\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104319\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104485\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104494\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104495\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104683\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104897\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105271\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105292\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105322\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105323\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105392\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105396\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105524\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105536\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105769\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106016\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106105\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106185\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106229\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106271\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106275\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106276\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106278\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106281\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106283\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106369\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106509\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106511\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106697\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106929\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106934\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106995\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1107060\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1107078\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1107319\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1107320\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1107689\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1107735\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1107966\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=963575\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=966170\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=966172\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=969470\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=969476\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=969477\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=970506\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10876/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10877/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10878/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10879/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10880/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10881/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10882/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10883/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10902/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10938/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-1128/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-1129/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-12896/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-13093/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-13094/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-13095/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-15572/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-16658/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-6554/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-6555/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-9363/\"\n );\n # https://www.suse.com/support/update/announcement/2018/suse-su-20182776-1/\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?8190d585\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"To install this SUSE Security Update use the SUSE recommended\ninstallation methods like YaST online_update or 'zypper patch'.\n\nAlternatively you can run the command listed for your product :\n\nSUSE Linux Enterprise Workstation Extension 12-SP3:zypper in -t patch\nSUSE-SLE-WE-12-SP3-2018-1941=1\n\nSUSE Linux Enterprise Software Development Kit 12-SP3:zypper in -t\npatch SUSE-SLE-SDK-12-SP3-2018-1941=1\n\nSUSE Linux Enterprise Server 12-SP3:zypper in -t patch\nSUSE-SLE-SERVER-12-SP3-2018-1941=1\n\nSUSE Linux Enterprise High Availability 12-SP3:zypper in -t patch\nSUSE-SLE-HA-12-SP3-2018-1941=1\n\nSUSE Linux Enterprise Desktop 12-SP3:zypper in -t patch\nSUSE-SLE-DESKTOP-12-SP3-2018-1941=1\n\nSUSE CaaS Platform ALL :\n\nTo install this update, use the SUSE CaaS Platform Velum dashboard. It\nwill inform you if it detects new updates and let you then trigger\nupdating of the complete cluster in a controlled way.\n\nSUSE CaaS Platform 3.0 :\n\nTo install this update, use the SUSE CaaS Platform Velum dashboard. It\nwill inform you if it detects new updates and let you then trigger\nupdating of the complete cluster in a controlled way.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-base-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-extra\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-extra-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-man\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-syms\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:suse_linux:12\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/09/20\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/09/21\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release !~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"SUSE\");\nos_ver = eregmatch(pattern: \"^(SLE(S|D)\\d+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"SUSE\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^(SLED12|SLES12)$\", string:os_ver)) audit(AUDIT_OS_NOT, \"SUSE SLED12 / SLES12\", \"SUSE \" + os_ver);\n\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^i[3-6]86$\" && \"x86_64\" >!< cpu && \"s390x\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"SUSE \" + os_ver, cpu);\n\nsp = get_kb_item(\"Host/SuSE/patchlevel\");\nif (isnull(sp)) sp = \"0\";\nif (os_ver == \"SLES12\" && (! ereg(pattern:\"^(3)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLES12 SP3\", os_ver + \" SP\" + sp);\nif (os_ver == \"SLED12\" && (! ereg(pattern:\"^(3)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLED12 SP3\", os_ver + \" SP\" + sp);\n\n\nflag = 0;\nif (rpm_check(release:\"SLES12\", sp:\"3\", cpu:\"s390x\", reference:\"kernel-default-man-4.4.155-94.50.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"3\", reference:\"kernel-default-4.4.155-94.50.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"3\", reference:\"kernel-default-base-4.4.155-94.50.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"3\", reference:\"kernel-default-base-debuginfo-4.4.155-94.50.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"3\", reference:\"kernel-default-debuginfo-4.4.155-94.50.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"3\", reference:\"kernel-default-debugsource-4.4.155-94.50.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"3\", reference:\"kernel-default-devel-4.4.155-94.50.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"3\", reference:\"kernel-syms-4.4.155-94.50.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"3\", cpu:\"x86_64\", reference:\"kernel-default-4.4.155-94.50.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"3\", cpu:\"x86_64\", reference:\"kernel-default-debuginfo-4.4.155-94.50.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"3\", cpu:\"x86_64\", reference:\"kernel-default-debugsource-4.4.155-94.50.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"3\", cpu:\"x86_64\", reference:\"kernel-default-devel-4.4.155-94.50.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"3\", cpu:\"x86_64\", reference:\"kernel-default-extra-4.4.155-94.50.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"3\", cpu:\"x86_64\", reference:\"kernel-default-extra-debuginfo-4.4.155-94.50.1\")) flag++;\nif (rpm_check(release:\"SLED12\", sp:\"3\", cpu:\"x86_64\", reference:\"kernel-syms-4.4.155-94.50.1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"kernel\");\n}\n", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-12-02T15:24:46", "references": ["https://www.suse.com/security/cve/CVE-2018-10882/", "https://bugzilla.suse.com/show_bug.cgi?id=1064233", "https://bugzilla.suse.com/show_bug.cgi?id=1090534", "https://bugzilla.suse.com/show_bug.cgi?id=1103445", "https://bugzilla.suse.com/show_bug.cgi?id=1099864", "https://www.suse.com/security/cve/CVE-2018-16658/", "https://bugzilla.suse.com/show_bug.cgi?id=1097108", "https://bugzilla.suse.com/show_bug.cgi?id=1090955", "https://bugzilla.suse.com/show_bug.cgi?id=1100001", "https://bugzilla.suse.com/show_bug.cgi?id=1107689", "https://bugzilla.suse.com/show_bug.cgi?id=1099844", "https://bugzilla.suse.com/show_bug.cgi?id=1104818", "https://bugzilla.suse.com/show_bug.cgi?id=1102870", "https://bugzilla.suse.com/show_bug.cgi?id=1024788", "https://bugzilla.suse.com/show_bug.cgi?id=1105396", "https://www.suse.com/security/cve/CVE-2018-16276/", "https://bugzilla.suse.com/show_bug.cgi?id=1108912", "https://www.suse.com/security/cve/CVE-2018-10853/", "https://www.suse.com/security/cve/CVE-2018-14634/", "https://bugzilla.suse.com/show_bug.cgi?id=1106511", "https://bugzilla.suse.com/show_bug.cgi?id=1106095", "https://bugzilla.suse.com/show_bug.cgi?id=1062604", "https://bugzilla.suse.com/show_bug.cgi?id=1105100", "https://bugzilla.suse.com/show_bug.cgi?id=1012382", "https://www.suse.com/security/cve/CVE-2018-10883/", "https://www.suse.com/security/cve/CVE-2018-10902/", "http://www.nessus.org/u?e50fcd04", "https://www.suse.com/security/cve/CVE-2018-12896/", "https://www.suse.com/security/cve/CVE-2018-6555/", "https://www.suse.com/security/cve/CVE-2018-10877/", "https://bugzilla.suse.com/show_bug.cgi?id=1104906", "https://bugzilla.suse.com/show_bug.cgi?id=1099849", "https://bugzilla.suse.com/show_bug.cgi?id=1099846", "https://bugzilla.suse.com/show_bug.cgi?id=1099811", "https://bugzilla.suse.com/show_bug.cgi?id=1099845", "https://www.suse.com/security/cve/CVE-2018-10879/", "https://www.suse.com/security/cve/CVE-2018-14617/", "https://bugzilla.suse.com/show_bug.cgi?id=1099922", "https://bugzilla.suse.com/show_bug.cgi?id=1104319", "https://www.suse.com/security/cve/CVE-2018-10880/", "https://www.suse.com/security/cve/CVE-2018-10940/", "https://bugzilla.suse.com/show_bug.cgi?id=1065999", "https://www.suse.com/security/cve/CVE-2018-10878/", "https://www.suse.com/security/cve/CVE-2018-6554/", "https://bugzilla.suse.com/show_bug.cgi?id=1106509", "https://bugzilla.suse.com/show_bug.cgi?id=1092903", "https://bugzilla.suse.com/show_bug.cgi?id=1105322", "https://bugzilla.suse.com/show_bug.cgi?id=1091171", "https://www.suse.com/security/cve/CVE-2018-10881/", "https://www.suse.com/security/cve/CVE-2018-13093/", "https://bugzilla.suse.com/show_bug.cgi?id=1105323", "https://bugzilla.suse.com/show_bug.cgi?id=1104495", "https://www.suse.com/security/cve/CVE-2018-10876/", "https://bugzilla.suse.com/show_bug.cgi?id=1106369", "https://bugzilla.suse.com/show_bug.cgi?id=1099813", "https://bugzilla.suse.com/show_bug.cgi?id=1097104", "https://bugzilla.suse.com/show_bug.cgi?id=1096547", "https://bugzilla.suse.com/show_bug.cgi?id=1099863"], "pluginID": "117824", "description": "The SUSE Linux Enterprise 12 SP1 kernel was updated receive various security and bugfixes.\n\nThe following security bugs were fixed :\n\nCVE-2018-14634: Prevent integer overflow in create_elf_tables that allowed a local attacker to exploit this vulnerability via a SUID-root binary and obtain full root privileges (bsc#1108912)\n\nCVE-2018-14617: Prevent NULL pointer dereference and panic in hfsplus_lookup() when opening a file (that is purportedly a hard link) in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata directory (bsc#1102870)\n\nCVE-2018-16276: Incorrect bounds checking in the yurex USB driver in yurex_read allowed local attackers to use user access read/writes to crash the kernel or potentially escalate privileges (bsc#1106095)\n\nCVE-2018-12896: Prevent integer overflow in the POSIX timer code that was caused by the way the overrun accounting works. Depending on interval and expiry time values, the overrun can be larger than INT_MAX, but the accounting is int based. This basically made the accounting values, which are visible to user space via timer_getoverrun(2) and siginfo::si_overrun, random. This allowed a local user to cause a denial of service (signed integer overflow) via crafted mmap, futex, timer_create, and timer_settime system calls (bnc#1099922)\n\nCVE-2018-13093: Prevent NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occured because of a lack of proper validation that cached inodes are free during allocation (bnc#1100001)\n\nCVE-2018-10940: The cdrom_ioctl_media_changed function allowed local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory (bsc#1092903)\n\nCVE-2018-16658: Prevent information leak in cdrom_ioctl_drive_status that could have been used by local attackers to read kernel memory (bnc#1107689)\n\nCVE-2018-6555: The irda_setsockopt function allowed local users to cause a denial of service (ias_object use-after-free and system crash) or possibly have unspecified other impact via an AF_IRDA socket (bnc#1106511)\n\nCVE-2018-6554: Prevent memory leak in the irda_bind function that allowed local users to cause a denial of service (memory consumption) by repeatedly binding an AF_IRDA socket (bnc#1106509)\n\nCVE-2018-10902: Protect against concurrent access to prevent double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status(). A malicious local attacker could have used this for privilege escalation (bnc#1105322)\n\nCVE-2018-10879: A local user could have caused a use-after-free in ext4_xattr_set_entry function and a denial of service or unspecified other impact by renaming a file in a crafted ext4 filesystem image (bsc#1099844)\n\nCVE-2018-10883: A local user could have caused an out-of-bounds write in jbd2_journal_dirty_metadata(), a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image (bsc#1099863)\n\nCVE-2018-10880: Prevent stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a crafted ext4 image in ext4_update_inline_data(). An attacker could have used this to cause a system crash and a denial of service (bsc#1099845)\n\nCVE-2018-10882: A local user could have caused an out-of-bound write, a denial of service, and a system crash by unmounting a crafted ext4 filesystem image (bsc#1099849)\n\nCVE-2018-10881: A local user could have caused an out-of-bound access in ext4_get_group_info function, a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image (bsc#1099864)\n\nCVE-2018-10877: Prevent out-of-bound access in the ext4_ext_drop_refs() function when operating on a crafted ext4 filesystem image (bsc#1099846)\n\nCVE-2018-10876: A use-after-free was possible in ext4_ext_remove_space() function when mounting and operating a crafted ext4 image (bsc#1099811)\n\nCVE-2018-10878: A local user could have caused an out-of-bounds write and a denial of service or unspecified other impact by mounting and operating a crafted ext4 filesystem image (bsc#1099813)\n\nCVE-2018-10853: The KVM hypervisor did not check current privilege(CPL) level while emulating unprivileged instructions. An unprivileged guest user/process could have used this flaw to potentially escalate privileges inside guest (bsc#1097104).\n\nThe update package also includes non-security fixes. See advisory for details.\n\nNote that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "edition": 4, "reporter": "Tenable", "published": "2018-09-28T00:00:00", "title": "SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2908-1)", "type": "nessus", "enchantments": {"score": {"modified": "2018-12-02T15:24:46", "vector": "NONE", "value": 7.5}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-10882", "CVE-2018-10877", "CVE-2018-10940", "CVE-2018-10880", "CVE-2018-10878", "CVE-2018-10853", "CVE-2018-10881", "CVE-2018-6555", "CVE-2018-13093", "CVE-2018-16276", "CVE-2018-14617", "CVE-2018-10883", "CVE-2018-16658", "CVE-2018-10902", "CVE-2018-10876", "CVE-2018-10879", "CVE-2018-14634", "CVE-2018-12896", "CVE-2018-6554"], "modified": "2018-12-01T00:00:00", "cpe": ["p-cpe:/a:novell:suse_linux:kernel-default-debugsource", "cpe:/o:novell:suse_linux:12", "p-cpe:/a:novell:suse_linux:kernel-syms", "p-cpe:/a:novell:suse_linux:kernel-default-base-debuginfo", "p-cpe:/a:novell:suse_linux:kernel-default-base", "p-cpe:/a:novell:suse_linux:kernel-xen", "p-cpe:/a:novell:suse_linux:kernel-xen-debuginfo", "p-cpe:/a:novell:suse_linux:kernel-xen-debugsource", "p-cpe:/a:novell:suse_linux:kernel-xen-base", "p-cpe:/a:novell:suse_linux:kernel-default-debuginfo", "p-cpe:/a:novell:suse_linux:kernel-default-devel", "p-cpe:/a:novell:suse_linux:kernel-default-man", "p-cpe:/a:novell:suse_linux:kernel-default", "p-cpe:/a:novell:suse_linux:kernel-xen-base-debuginfo", "p-cpe:/a:novell:suse_linux:kernel-xen-devel"], "id": "SUSE_SU-2018-2908-1.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=117824", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from SUSE update advisory SUSE-SU-2018:2908-1.\n# The text itself is copyright (C) SUSE.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(117824);\n script_version(\"1.3\");\n script_cvs_date(\"Date: 2018/12/01 13:19:06\");\n\n script_cve_id(\"CVE-2018-10853\", \"CVE-2018-10876\", \"CVE-2018-10877\", \"CVE-2018-10878\", \"CVE-2018-10879\", \"CVE-2018-10880\", \"CVE-2018-10881\", \"CVE-2018-10882\", \"CVE-2018-10883\", \"CVE-2018-10902\", \"CVE-2018-10940\", \"CVE-2018-12896\", \"CVE-2018-13093\", \"CVE-2018-14617\", \"CVE-2018-14634\", \"CVE-2018-16276\", \"CVE-2018-16658\", \"CVE-2018-6554\", \"CVE-2018-6555\");\n\n script_name(english:\"SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2908-1)\");\n script_summary(english:\"Checks rpm output for the updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote SUSE host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The SUSE Linux Enterprise 12 SP1 kernel was updated receive various\nsecurity and bugfixes.\n\nThe following security bugs were fixed :\n\nCVE-2018-14634: Prevent integer overflow in create_elf_tables that\nallowed a local attacker to exploit this vulnerability via a SUID-root\nbinary and obtain full root privileges (bsc#1108912)\n\nCVE-2018-14617: Prevent NULL pointer dereference and panic in\nhfsplus_lookup() when opening a file (that is purportedly a hard link)\nin an hfs+ filesystem that has malformed catalog data, and is mounted\nread-only without a metadata directory (bsc#1102870)\n\nCVE-2018-16276: Incorrect bounds checking in the yurex USB driver in\nyurex_read allowed local attackers to use user access read/writes to\ncrash the kernel or potentially escalate privileges (bsc#1106095)\n\nCVE-2018-12896: Prevent integer overflow in the POSIX timer code that\nwas caused by the way the overrun accounting works. Depending on\ninterval and expiry time values, the overrun can be larger than\nINT_MAX, but the accounting is int based. This basically made the\naccounting values, which are visible to user space via\ntimer_getoverrun(2) and siginfo::si_overrun, random. This allowed a\nlocal user to cause a denial of service (signed integer overflow) via\ncrafted mmap, futex, timer_create, and timer_settime system calls\n(bnc#1099922)\n\nCVE-2018-13093: Prevent NULL pointer dereference and panic in\nlookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a\ncorrupted xfs image. This occured because of a lack of proper\nvalidation that cached inodes are free during allocation (bnc#1100001)\n\nCVE-2018-10940: The cdrom_ioctl_media_changed function allowed local\nattackers to use a incorrect bounds check in the CDROM driver\nCDROM_MEDIA_CHANGED ioctl to read out kernel memory (bsc#1092903)\n\nCVE-2018-16658: Prevent information leak in cdrom_ioctl_drive_status\nthat could have been used by local attackers to read kernel memory\n(bnc#1107689)\n\nCVE-2018-6555: The irda_setsockopt function allowed local users to\ncause a denial of service (ias_object use-after-free and system crash)\nor possibly have unspecified other impact via an AF_IRDA socket\n(bnc#1106511)\n\nCVE-2018-6554: Prevent memory leak in the irda_bind function that\nallowed local users to cause a denial of service (memory consumption)\nby repeatedly binding an AF_IRDA socket (bnc#1106509)\n\nCVE-2018-10902: Protect against concurrent access to prevent double\nrealloc (double free) in snd_rawmidi_input_params() and\nsnd_rawmidi_output_status(). A malicious local attacker could have\nused this for privilege escalation (bnc#1105322)\n\nCVE-2018-10879: A local user could have caused a use-after-free in\next4_xattr_set_entry function and a denial of service or unspecified\nother impact by renaming a file in a crafted ext4 filesystem image\n(bsc#1099844)\n\nCVE-2018-10883: A local user could have caused an out-of-bounds write\nin jbd2_journal_dirty_metadata(), a denial of service, and a system\ncrash by mounting and operating on a crafted ext4 filesystem image\n(bsc#1099863)\n\nCVE-2018-10880: Prevent stack-out-of-bounds write in the ext4\nfilesystem code when mounting and writing to a crafted ext4 image in\next4_update_inline_data(). An attacker could have used this to cause a\nsystem crash and a denial of service (bsc#1099845)\n\nCVE-2018-10882: A local user could have caused an out-of-bound write,\na denial of service, and a system crash by unmounting a crafted ext4\nfilesystem image (bsc#1099849)\n\nCVE-2018-10881: A local user could have caused an out-of-bound access\nin ext4_get_group_info function, a denial of service, and a system\ncrash by mounting and operating on a crafted ext4 filesystem image\n(bsc#1099864)\n\nCVE-2018-10877: Prevent out-of-bound access in the\next4_ext_drop_refs() function when operating on a crafted ext4\nfilesystem image (bsc#1099846)\n\nCVE-2018-10876: A use-after-free was possible in\next4_ext_remove_space() function when mounting and operating a crafted\next4 image (bsc#1099811)\n\nCVE-2018-10878: A local user could have caused an out-of-bounds write\nand a denial of service or unspecified other impact by mounting and\noperating a crafted ext4 filesystem image (bsc#1099813)\n\nCVE-2018-10853: The KVM hypervisor did not check current\nprivilege(CPL) level while emulating unprivileged instructions. An\nunprivileged guest user/process could have used this flaw to\npotentially escalate privileges inside guest (bsc#1097104).\n\nThe update package also includes non-security fixes. See advisory for\ndetails.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the SUSE security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1012382\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1024788\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1062604\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1064233\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1065999\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1090534\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1090955\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1091171\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1092903\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1096547\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1097104\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1097108\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099811\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099813\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099844\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099845\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099846\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099849\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099863\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099864\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099922\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1100001\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1102870\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1103445\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104319\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104495\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104818\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104906\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105100\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105322\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105323\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105396\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106095\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106369\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106509\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106511\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1107689\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1108912\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10853/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10876/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10877/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10878/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10879/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10880/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10881/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10882/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10883/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10902/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10940/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-12896/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-13093/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-14617/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-14634/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-16276/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-16658/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-6554/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-6555/\"\n );\n # https://www.suse.com/support/update/announcement/2018/suse-su-20182908-1/\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?e50fcd04\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"To install this SUSE Security Update use the SUSE recommended\ninstallation methods like YaST online_update or 'zypper patch'.\n\nAlternatively you can run the command listed for your product :\n\nSUSE Linux Enterprise Server 12-SP1-LTSS:zypper in -t patch\nSUSE-SLE-SERVER-12-SP1-2018-2063=1\n\nSUSE Linux Enterprise Module for Public Cloud 12:zypper in -t patch\nSUSE-SLE-Module-Public-Cloud-12-2018-2063=1\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-base-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-man\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-syms\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-xen\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-xen-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-xen-base-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-xen-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-xen-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-xen-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:suse_linux:12\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/09/27\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/09/28\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release !~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"SUSE\");\nos_ver = eregmatch(pattern: \"^(SLE(S|D)\\d+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"SUSE\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^(SLES12)$\", string:os_ver)) audit(AUDIT_OS_NOT, \"SUSE SLES12\", \"SUSE \" + os_ver);\n\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^i[3-6]86$\" && \"x86_64\" >!< cpu && \"s390x\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"SUSE \" + os_ver, cpu);\n\nsp = get_kb_item(\"Host/SuSE/patchlevel\");\nif (isnull(sp)) sp = \"0\";\nif (os_ver == \"SLES12\" && (! ereg(pattern:\"^(1)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLES12 SP1\", os_ver + \" SP\" + sp);\n\n\nflag = 0;\nif (rpm_check(release:\"SLES12\", sp:\"1\", cpu:\"x86_64\", reference:\"kernel-xen-3.12.74-60.64.104.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", cpu:\"x86_64\", reference:\"kernel-xen-base-3.12.74-60.64.104.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", cpu:\"x86_64\", reference:\"kernel-xen-base-debuginfo-3.12.74-60.64.104.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", cpu:\"x86_64\", reference:\"kernel-xen-debuginfo-3.12.74-60.64.104.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", cpu:\"x86_64\", reference:\"kernel-xen-debugsource-3.12.74-60.64.104.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", cpu:\"x86_64\", reference:\"kernel-xen-devel-3.12.74-60.64.104.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", cpu:\"s390x\", reference:\"kernel-default-man-3.12.74-60.64.104.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"kernel-default-3.12.74-60.64.104.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"kernel-default-base-3.12.74-60.64.104.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"kernel-default-base-debuginfo-3.12.74-60.64.104.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"kernel-default-debuginfo-3.12.74-60.64.104.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"kernel-default-debugsource-3.12.74-60.64.104.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"kernel-default-devel-3.12.74-60.64.104.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"1\", reference:\"kernel-syms-3.12.74-60.64.104.1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"kernel\");\n}\n", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-12-02T15:29:52", "references": ["https://www.suse.com/security/cve/CVE-2018-10882/", "https://bugzilla.suse.com/show_bug.cgi?id=1064232", "https://bugzilla.suse.com/show_bug.cgi?id=1103445", "https://bugzilla.suse.com/show_bug.cgi?id=1099864", "https://www.suse.com/security/cve/CVE-2018-16658/", "https://bugzilla.suse.com/show_bug.cgi?id=1100001", "https://bugzilla.suse.com/show_bug.cgi?id=1107689", "https://bugzilla.suse.com/show_bug.cgi?id=1099844", "https://www.suse.com/security/cve/CVE-2018-17182/", "https://bugzilla.suse.com/show_bug.cgi?id=1102870", "https://www.suse.com/security/cve/CVE-2018-16276/", "https://bugzilla.suse.com/show_bug.cgi?id=1108912", "https://www.suse.com/security/cve/CVE-2018-10853/", "https://www.suse.com/security/cve/CVE-2018-14634/", "https://bugzilla.suse.com/show_bug.cgi?id=1106511", "https://bugzilla.suse.com/show_bug.cgi?id=1106095", "https://bugzilla.suse.com/show_bug.cgi?id=1062604", "https://bugzilla.suse.com/show_bug.cgi?id=1012382", "https://www.suse.com/security/cve/CVE-2018-10883/", "https://www.suse.com/security/cve/CVE-2018-10902/", "https://www.suse.com/security/cve/CVE-2018-12896/", "https://www.suse.com/security/cve/CVE-2018-6555/", "https://bugzilla.suse.com/show_bug.cgi?id=1093215", "https://bugzilla.suse.com/show_bug.cgi?id=1108399", "https://www.suse.com/security/cve/CVE-2018-10877/", "https://bugzilla.suse.com/show_bug.cgi?id=1104906", "https://bugzilla.suse.com/show_bug.cgi?id=1099849", "http://www.nessus.org/u?2d33c84c", "https://bugzilla.suse.com/show_bug.cgi?id=1099846", "https://bugzilla.suse.com/show_bug.cgi?id=1099811", "https://bugzilla.suse.com/show_bug.cgi?id=1099845", "https://www.suse.com/security/cve/CVE-2018-10879/", "https://www.suse.com/security/cve/CVE-2018-14617/", "https://bugzilla.suse.com/show_bug.cgi?id=1099922", "https://bugzilla.suse.com/show_bug.cgi?id=1104319", "https://www.suse.com/security/cve/CVE-2018-10880/", "https://www.suse.com/security/cve/CVE-2018-10940/", "https://bugzilla.suse.com/show_bug.cgi?id=1065999", "https://www.suse.com/security/cve/CVE-2018-10878/", "https://www.suse.com/security/cve/CVE-2018-6554/", "https://bugzilla.suse.com/show_bug.cgi?id=1105412", "https://bugzilla.suse.com/show_bug.cgi?id=1106509", "https://bugzilla.suse.com/show_bug.cgi?id=1092903", "https://bugzilla.suse.com/show_bug.cgi?id=1105322", "https://www.suse.com/security/cve/CVE-2018-10881/", "https://www.suse.com/security/cve/CVE-2018-13093/", "https://bugzilla.suse.com/show_bug.cgi?id=1100089", "https://bugzilla.suse.com/show_bug.cgi?id=1104495", "https://www.suse.com/security/cve/CVE-2018-10876/", "https://bugzilla.suse.com/show_bug.cgi?id=1106369", "https://bugzilla.suse.com/show_bug.cgi?id=1099813", "https://bugzilla.suse.com/show_bug.cgi?id=1097104", "https://bugzilla.suse.com/show_bug.cgi?id=1096547", "https://bugzilla.suse.com/show_bug.cgi?id=1099863"], "pluginID": "118033", "description": "The SUSE Linux Enterprise 12 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed :\n\nCVE-2018-14634: Prevent integer overflow in create_elf_tables that allowed a local attacker to exploit this vulnerability via a SUID-root binary and obtain full root privileges (bsc#1108912)\n\nCVE-2018-14617: Prevent NULL pointer dereference and panic in hfsplus_lookup() when opening a file (that is purportedly a hard link) in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata directory (bsc#1102870)\n\nCVE-2018-16276: Incorrect bounds checking in the yurex USB driver in yurex_read allowed local attackers to use user access read/writes to crash the kernel or potentially escalate privileges (bsc#1106095)\n\nCVE-2018-12896: Prevent integer overflow in the POSIX timer code that was caused by the way the overrun accounting works. Depending on interval and expiry time values, the overrun can be larger than INT_MAX, but the accounting is int based. This basically made the accounting values, which are visible to user space via timer_getoverrun(2) and siginfo::si_overrun, random. This allowed a local user to cause a denial of service (signed integer overflow) via crafted mmap, futex, timer_create, and timer_settime system calls (bnc#1099922)\n\nCVE-2018-13093: Prevent NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occured because of a lack of proper validation that cached inodes are free during allocation (bnc#1100001)\n\nCVE-2018-10940: The cdrom_ioctl_media_changed function allowed local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory (bsc#1092903)\n\nCVE-2018-16658: Prevent information leak in cdrom_ioctl_drive_status that could have been used by local attackers to read kernel memory (bnc#1107689)\n\nCVE-2018-6555: The irda_setsockopt function allowed local users to cause a denial of service (ias_object use-after-free and system crash) or possibly have unspecified other impact via an AF_IRDA socket (bnc#1106511)\n\nCVE-2018-6554: Prevent memory leak in the irda_bind function that allowed local users to cause a denial of service (memory consumption) by repeatedly binding an AF_IRDA socket (bnc#1106509)\n\nCVE-2018-10853: The KVM hypervisor did not check current privilege(CPL) level while emulating unprivileged instructions. An unprivileged guest user/process could have used this flaw to potentially escalate privileges inside guest (bsc#1097104)\n\nCVE-2018-10902: Protect against concurrent access to prevent double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status(). A malicious local attacker could have used this for privilege escalation (bnc#1105322).\n\nCVE-2018-10879: A local user could have caused a use-after-free in ext4_xattr_set_entry function and a denial of service or unspecified other impact by renaming a file in a crafted ext4 filesystem image (bsc#1099844)\n\nCVE-2018-10883: A local user could have caused an out-of-bounds write in jbd2_journal_dirty_metadata(), a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image (bsc#1099863)\n\nCVE-2018-10880: Prevent stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a crafted ext4 image in ext4_update_inline_data(). An attacker could have used this to cause a system crash and a denial of service (bsc#1099845)\n\nCVE-2018-10882: A local user could have caused an out-of-bound write, a denial of service, and a system crash by unmounting a crafted ext4 filesystem image (bsc#1099849)\n\nCVE-2018-10881: A local user could have caused an out-of-bound access in ext4_get_group_info function, a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image (bsc#1099864)\n\nCVE-2018-10877: Prevent out-of-bound access in the ext4_ext_drop_refs() function when operating on a crafted ext4 filesystem image (bsc#1099846)\n\nCVE-2018-10876: A use-after-free was possible in ext4_ext_remove_space() function when mounting and operating a crafted ext4 image (bsc#1099811)\n\nCVE-2018-10878: A local user could have caused an out-of-bounds write and a denial of service or unspecified other impact by mounting and operating a crafted ext4 filesystem image (bsc#1099813)\n\nCVE-2018-17182: An issue was discovered in the Linux kernel The vmacache_flush_all function in mm/vmacache.c mishandled sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations (bnc#1108399).\n\nThe update package also includes non-security fixes. See advisory for details.\n\nNote that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "edition": 4, "reporter": "Tenable", "published": "2018-10-10T00:00:00", "title": "SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3083-1)", "type": "nessus", "enchantments": {"score": {"modified": "2018-12-02T15:29:52", "vector": "NONE", "value": 7.5}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-10882", "CVE-2018-10877", "CVE-2018-10940", "CVE-2018-10880", "CVE-2018-10878", "CVE-2018-10853", "CVE-2018-10881", "CVE-2018-6555", "CVE-2018-13093", "CVE-2018-17182", "CVE-2018-16276", "CVE-2018-14617", "CVE-2018-10883", "CVE-2018-16658", "CVE-2018-10902", "CVE-2018-10876", "CVE-2018-10879", "CVE-2018-14634", "CVE-2018-12896", "CVE-2018-6554"], "modified": "2018-12-01T00:00:00", "cpe": ["p-cpe:/a:novell:suse_linux:kernel-default-debugsource", "cpe:/o:novell:suse_linux:12", "p-cpe:/a:novell:suse_linux:kernel-syms", "p-cpe:/a:novell:suse_linux:kernel-default-base-debuginfo", "p-cpe:/a:novell:suse_linux:kernel-default-base", "p-cpe:/a:novell:suse_linux:kgraft-patch-3_12_61-52_146-xen", "p-cpe:/a:novell:suse_linux:kernel-xen", "p-cpe:/a:novell:suse_linux:kernel-xen-debuginfo", "p-cpe:/a:novell:suse_linux:kernel-xen-debugsource", "p-cpe:/a:novell:suse_linux:kernel-xen-base", "p-cpe:/a:novell:suse_linux:kernel-default-debuginfo", "p-cpe:/a:novell:suse_linux:kgraft-patch-3_12_61-52_146-default", "p-cpe:/a:novell:suse_linux:kernel-default-devel", "p-cpe:/a:novell:suse_linux:kernel-default-man", "p-cpe:/a:novell:suse_linux:kernel-default", "p-cpe:/a:novell:suse_linux:kernel-xen-base-debuginfo", "p-cpe:/a:novell:suse_linux:kernel-xen-devel"], "id": "SUSE_SU-2018-3083-1.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=118033", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from SUSE update advisory SUSE-SU-2018:3083-1.\n# The text itself is copyright (C) SUSE.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(118033);\n script_version(\"1.3\");\n script_cvs_date(\"Date: 2018/12/01 13:19:06\");\n\n script_cve_id(\"CVE-2018-10853\", \"CVE-2018-10876\", \"CVE-2018-10877\", \"CVE-2018-10878\", \"CVE-2018-10879\", \"CVE-2018-10880\", \"CVE-2018-10881\", \"CVE-2018-10882\", \"CVE-2018-10883\", \"CVE-2018-10902\", \"CVE-2018-10940\", \"CVE-2018-12896\", \"CVE-2018-13093\", \"CVE-2018-14617\", \"CVE-2018-14634\", \"CVE-2018-16276\", \"CVE-2018-16658\", \"CVE-2018-17182\", \"CVE-2018-6554\", \"CVE-2018-6555\");\n\n script_name(english:\"SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3083-1)\");\n script_summary(english:\"Checks rpm output for the updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote SUSE host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The SUSE Linux Enterprise 12 kernel was updated to receive various\nsecurity and bugfixes.\n\nThe following security bugs were fixed :\n\nCVE-2018-14634: Prevent integer overflow in create_elf_tables that\nallowed a local attacker to exploit this vulnerability via a SUID-root\nbinary and obtain full root privileges (bsc#1108912)\n\nCVE-2018-14617: Prevent NULL pointer dereference and panic in\nhfsplus_lookup() when opening a file (that is purportedly a hard link)\nin an hfs+ filesystem that has malformed catalog data, and is mounted\nread-only without a metadata directory (bsc#1102870)\n\nCVE-2018-16276: Incorrect bounds checking in the yurex USB driver in\nyurex_read allowed local attackers to use user access read/writes to\ncrash the kernel or potentially escalate privileges (bsc#1106095)\n\nCVE-2018-12896: Prevent integer overflow in the POSIX timer code that\nwas caused by the way the overrun accounting works. Depending on\ninterval and expiry time values, the overrun can be larger than\nINT_MAX, but the accounting is int based. This basically made the\naccounting values, which are visible to user space via\ntimer_getoverrun(2) and siginfo::si_overrun, random. This allowed a\nlocal user to cause a denial of service (signed integer overflow) via\ncrafted mmap, futex, timer_create, and timer_settime system calls\n(bnc#1099922)\n\nCVE-2018-13093: Prevent NULL pointer dereference and panic in\nlookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a\ncorrupted xfs image. This occured because of a lack of proper\nvalidation that cached inodes are free during allocation (bnc#1100001)\n\nCVE-2018-10940: The cdrom_ioctl_media_changed function allowed local\nattackers to use a incorrect bounds check in the CDROM driver\nCDROM_MEDIA_CHANGED ioctl to read out kernel memory (bsc#1092903)\n\nCVE-2018-16658: Prevent information leak in cdrom_ioctl_drive_status\nthat could have been used by local attackers to read kernel memory\n(bnc#1107689)\n\nCVE-2018-6555: The irda_setsockopt function allowed local users to\ncause a denial of service (ias_object use-after-free and system crash)\nor possibly have unspecified other impact via an AF_IRDA socket\n(bnc#1106511)\n\nCVE-2018-6554: Prevent memory leak in the irda_bind function that\nallowed local users to cause a denial of service (memory consumption)\nby repeatedly binding an AF_IRDA socket (bnc#1106509)\n\nCVE-2018-10853: The KVM hypervisor did not check current\nprivilege(CPL) level while emulating unprivileged instructions. An\nunprivileged guest user/process could have used this flaw to\npotentially escalate privileges inside guest (bsc#1097104)\n\nCVE-2018-10902: Protect against concurrent access to prevent double\nrealloc (double free) in snd_rawmidi_input_params() and\nsnd_rawmidi_output_status(). A malicious local attacker could have\nused this for privilege escalation (bnc#1105322).\n\nCVE-2018-10879: A local user could have caused a use-after-free in\next4_xattr_set_entry function and a denial of service or unspecified\nother impact by renaming a file in a crafted ext4 filesystem image\n(bsc#1099844)\n\nCVE-2018-10883: A local user could have caused an out-of-bounds write\nin jbd2_journal_dirty_metadata(), a denial of service, and a system\ncrash by mounting and operating on a crafted ext4 filesystem image\n(bsc#1099863)\n\nCVE-2018-10880: Prevent stack-out-of-bounds write in the ext4\nfilesystem code when mounting and writing to a crafted ext4 image in\next4_update_inline_data(). An attacker could have used this to cause a\nsystem crash and a denial of service (bsc#1099845)\n\nCVE-2018-10882: A local user could have caused an out-of-bound write,\na denial of service, and a system crash by unmounting a crafted ext4\nfilesystem image (bsc#1099849)\n\nCVE-2018-10881: A local user could have caused an out-of-bound access\nin ext4_get_group_info function, a denial of service, and a system\ncrash by mounting and operating on a crafted ext4 filesystem image\n(bsc#1099864)\n\nCVE-2018-10877: Prevent out-of-bound access in the\next4_ext_drop_refs() function when operating on a crafted ext4\nfilesystem image (bsc#1099846)\n\nCVE-2018-10876: A use-after-free was possible in\next4_ext_remove_space() function when mounting and operating a crafted\next4 image (bsc#1099811)\n\nCVE-2018-10878: A local user could have caused an out-of-bounds write\nand a denial of service or unspecified other impact by mounting and\noperating a crafted ext4 filesystem image (bsc#1099813)\n\nCVE-2018-17182: An issue was discovered in the Linux kernel The\nvmacache_flush_all function in mm/vmacache.c mishandled sequence\nnumber overflows. An attacker can trigger a use-after-free (and\npossibly gain privileges) via certain thread creation, map, unmap,\ninvalidation, and dereference operations (bnc#1108399).\n\nThe update package also includes non-security fixes. See advisory for\ndetails.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the SUSE security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1012382\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1062604\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1064232\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1065999\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1092903\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1093215\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1096547\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1097104\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099811\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099813\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099844\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099845\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099846\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099849\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099863\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099864\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099922\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1100001\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1100089\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1102870\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1103445\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104319\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104495\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104906\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105322\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105412\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106095\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106369\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106509\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106511\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1107689\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1108399\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1108912\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10853/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10876/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10877/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10878/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10879/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10880/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10881/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10882/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10883/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10902/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10940/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-12896/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-13093/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-14617/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-14634/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-16276/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-16658/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-17182/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-6554/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-6555/\"\n );\n # https://www.suse.com/support/update/announcement/2018/suse-su-20183083-1/\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?2d33c84c\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"To install this SUSE Security Update use the SUSE recommended\ninstallation methods like YaST online_update or 'zypper patch'.\n\nAlternatively you can run the command listed for your product :\n\nSUSE Linux Enterprise Server 12-LTSS:zypper in -t patch\nSUSE-SLE-SERVER-12-2018-2185=1\n\nSUSE Linux Enterprise Module for Public Cloud 12:zypper in -t patch\nSUSE-SLE-Module-Public-Cloud-12-2018-2185=1\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-base-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-man\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-syms\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-xen\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-xen-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-xen-base-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-xen-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-xen-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-xen-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kgraft-patch-3_12_61-52_146-default\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kgraft-patch-3_12_61-52_146-xen\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:suse_linux:12\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/10/09\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/10/10\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release !~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"SUSE\");\nos_ver = eregmatch(pattern: \"^(SLE(S|D)\\d+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"SUSE\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^(SLES12)$\", string:os_ver)) audit(AUDIT_OS_NOT, \"SUSE SLES12\", \"SUSE \" + os_ver);\n\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^i[3-6]86$\" && \"x86_64\" >!< cpu && \"s390x\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"SUSE \" + os_ver, cpu);\n\nsp = get_kb_item(\"Host/SuSE/patchlevel\");\nif (isnull(sp)) sp = \"0\";\nif (os_ver == \"SLES12\" && (! ereg(pattern:\"^(0)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLES12 SP0\", os_ver + \" SP\" + sp);\n\n\nflag = 0;\nif (rpm_check(release:\"SLES12\", sp:\"0\", cpu:\"x86_64\", reference:\"kernel-xen-3.12.61-52.146.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", cpu:\"x86_64\", reference:\"kernel-xen-base-3.12.61-52.146.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", cpu:\"x86_64\", reference:\"kernel-xen-base-debuginfo-3.12.61-52.146.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", cpu:\"x86_64\", reference:\"kernel-xen-debuginfo-3.12.61-52.146.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", cpu:\"x86_64\", reference:\"kernel-xen-debugsource-3.12.61-52.146.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", cpu:\"x86_64\", reference:\"kernel-xen-devel-3.12.61-52.146.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", cpu:\"x86_64\", reference:\"kgraft-patch-3_12_61-52_146-default-1-1.5.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", cpu:\"x86_64\", reference:\"kgraft-patch-3_12_61-52_146-xen-1-1.5.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", cpu:\"s390x\", reference:\"kernel-default-man-3.12.61-52.146.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", reference:\"kernel-default-3.12.61-52.146.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", reference:\"kernel-default-base-3.12.61-52.146.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", reference:\"kernel-default-base-debuginfo-3.12.61-52.146.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", reference:\"kernel-default-debuginfo-3.12.61-52.146.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", reference:\"kernel-default-debugsource-3.12.61-52.146.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", reference:\"kernel-default-devel-3.12.61-52.146.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"0\", reference:\"kernel-syms-3.12.61-52.146.1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"kernel\");\n}\n", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-11-02T00:41:30", "references": ["https://bugzilla.opensuse.org/show_bug.cgi?id=1096978", "https://bugzilla.opensuse.org/show_bug.cgi?id=1087081", "https://bugzilla.opensuse.org/show_bug.cgi?id=1102188", "https://bugzilla.opensuse.org/show_bug.cgi?id=1097771", "https://bugzilla.opensuse.org/show_bug.cgi?id=1012382", "https://bugzilla.opensuse.org/show_bug.cgi?id=1099858", "https://bugzilla.opensuse.org/show_bug.cgi?id=1082653", "https://bugzilla.opensuse.org/show_bug.cgi?id=1102215", "https://bugzilla.opensuse.org/show_bug.cgi?id=1102205", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101841", "https://bugzilla.opensuse.org/show_bug.cgi?id=1099849", "https://bugzilla.opensuse.org/show_bug.cgi?id=1103745", "https://bugzilla.opensuse.org/show_bug.cgi?id=1085042", "https://bugzilla.opensuse.org/show_bug.cgi?id=1103119", "https://bugzilla.opensuse.org/show_bug.cgi?id=1104174", "https://bugzilla.opensuse.org/show_bug.cgi?id=1095643", "https://bugzilla.opensuse.org/show_bug.cgi?id=1103445", "https://bugzilla.opensuse.org/show_bug.cgi?id=1099846", "https://bugzilla.opensuse.org/show_bug.cgi?id=1086457", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101331", "https://bugzilla.opensuse.org/show_bug.cgi?id=1092001", "https://bugzilla.opensuse.org/show_bug.cgi?id=1089343", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101658", "https://bugzilla.opensuse.org/show_bug.cgi?id=1099811", "https://bugzilla.opensuse.org/show_bug.cgi?id=1102211", "https://bugzilla.opensuse.org/show_bug.cgi?id=1100132", "https://bugzilla.opensuse.org/show_bug.cgi?id=1104494", "https://bugzilla.opensuse.org/show_bug.cgi?id=1090435", "https://bugzilla.opensuse.org/show_bug.cgi?id=1090123", "https://bugzilla.opensuse.org/show_bug.cgi?id=1099845", "https://bugzilla.opensuse.org/show_bug.cgi?id=1103884", "https://bugzilla.opensuse.org/show_bug.cgi?id=1099844", "https://bugzilla.opensuse.org/show_bug.cgi?id=1094244", "https://bugzilla.opensuse.org/show_bug.cgi?id=1100930", "https://bugzilla.opensuse.org/show_bug.cgi?id=1103269", "https://bugzilla.opensuse.org/show_bug.cgi?id=1103717", "https://bugzilla.opensuse.org/show_bug.cgi?id=1104495", "https://bugzilla.opensuse.org/show_bug.cgi?id=1082979", "https://bugzilla.opensuse.org/show_bug.cgi?id=1103580", "https://bugzilla.opensuse.org/show_bug.cgi?id=1085536", "https://bugzilla.opensuse.org/show_bug.cgi?id=1103097", "https://bugzilla.opensuse.org/show_bug.cgi?id=1104365", "https://bugzilla.opensuse.org/show_bug.cgi?id=1099863", "https://bugzilla.opensuse.org/show_bug.cgi?id=1099864", "https://bugzilla.opensuse.org/show_bug.cgi?id=1102207", "https://bugzilla.opensuse.org/show_bug.cgi?id=1102214", "https://bugzilla.opensuse.org/show_bug.cgi?id=1099813", "https://bugzilla.opensuse.org/show_bug.cgi?id=1102197", "https://bugzilla.opensuse.org/show_bug.cgi?id=1102851", "https://bugzilla.opensuse.org/show_bug.cgi?id=1102340", "https://bugzilla.opensuse.org/show_bug.cgi?id=1102203", "https://bugzilla.opensuse.org/show_bug.cgi?id=1102683", "https://bugzilla.opensuse.org/show_bug.cgi?id=1102394", "https://bugzilla.opensuse.org/show_bug.cgi?id=1104319", "https://bugzilla.opensuse.org/show_bug.cgi?id=1101789"], "pluginID": "111997", "description": "The openSUSE Leap 42.3 kernel was updated to 4.4.143 to receive various security and bugfixes.\n\nThe following security bugs were fixed :\n\n - CVE-2017-18344: The timer_create syscall implementation in kernel/time/posix-timers.c didn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID/timers is read). This allowed userspace applications to read arbitrary kernel memory (on a kernel built with CONFIG_POSIX_TIMERS and CONFIG_CHECKPOINT_RESTORE) (bnc#1102851 bnc#1103580).\n\n - CVE-2018-10876: A flaw was found in Linux kernel in the ext4 filesystem code. A use-after-free is possible in ext4_ext_remove_space() function when mounting and operating a crafted ext4 image. (bnc#1099811)\n\n - CVE-2018-10877: Linux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4_ext_drop_refs() function when operating on a crafted ext4 filesystem image. (bnc#1099846)\n\n - CVE-2018-10878: A flaw was found in the ext4 filesystem.\n A local user can cause an out-of-bounds write and a denial of service or unspecified other impact is possible by mounting and operating a crafted ext4 filesystem image. (bnc#1099813)\n\n - CVE-2018-10879: A flaw was found in the ext4 filesystem.\n A local user can cause a use-after-free in ext4_xattr_set_entry function and a denial of service or unspecified other impact may occur by renaming a file in a crafted ext4 filesystem image. (bnc#1099844)\n\n - CVE-2018-10880: Linux kernel is vulnerable to a stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a crafted ext4 image in ext4_update_inline_data(). An attacker could use this to cause a system crash and a denial of service.\n (bnc#1099845)\n\n - CVE-2018-10881: A flaw was found in the ext4 filesystem.\n A local user can cause an out-of-bound access in ext4_get_group_info function, a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image. (bnc#1099864)\n\n - CVE-2018-10882: A flaw was found in the ext4 filesystem.\n A local user can cause an out-of-bound write in in fs/jbd2/transaction.c code, a denial of service, and a system crash by unmounting a crafted ext4 filesystem image. (bnc#1099849)\n\n - CVE-2018-10883: A flaw was found in the ext4 filesystem.\n A local user can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image. (bnc#1099863)\n\n - CVE-2018-14734: drivers/infiniband/core/ucma.c allowed ucma_leave_multicast to access a certain data structure after a cleanup step in ucma_process_join, which allowed attackers to cause a denial of service (use-after-free) (bnc#1103119).\n\n - CVE-2018-3620: Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis (bnc#1087081 1089343 ).\n\n - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis (bnc#1089343 1104365).\n\n - CVE-2018-5390 aka 'SegmentSmack': The Linux kernel could be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service (bnc#1102340).\n\n - CVE-2018-5391 aka 'FragmentSmack': A flaw in the IP packet reassembly could be used by remote attackers to consume lots of CPU time (bnc#1103097).\n\nThe following non-security bugs were fixed :\n\n - Add support for 5,25,50, and 100G to 802.3ad bonding driver (bsc#1096978)\n\n - ahci: Disable LPM on Lenovo 50 series laptops with a too old BIOS (bnc#1012382).\n\n - arm64: do not open code page table entry creation (bsc#1102197).\n\n - arm64: kpti: Use early_param for kpti= command-line option (bsc#1102188).\n\n - arm64: Make sure permission updates happen for pmd/pud (bsc#1102197).\n\n - atm: zatm: Fix potential Spectre v1 (bnc#1012382).\n\n - bcm63xx_enet: correct clock usage (bnc#1012382).\n\n - bcm63xx_enet: do not write to random DMA channel on BCM6345 (bnc#1012382).\n\n - blkcg: simplify statistic accumulation code (bsc#1082979).\n\n - block: copy ioprio in __bio_clone_fast() (bsc#1082653).\n\n - block/swim: Fix array bounds check (bsc#1082979).\n\n - bpf: fix loading of BPF_MAXINSNS sized programs (bsc#1012382).\n\n - bpf, x64: fix memleak when not converging after image (bsc#1012382).\n\n - btrfs: Do not remove block group still has pinned down bytes (bsc#1086457).\n\n - cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE flag (bsc#1099858).\n\n - cachefiles: Fix refcounting bug in backing-file read monitoring (bsc#1099858).\n\n - cachefiles: Wait rather than BUG'ing on 'Unexpected object collision' (bsc#1099858).\n\n - cifs: fix bad/NULL ptr dereferencing in SMB2_sess_setup() (bsc#1090123).\n\n - compiler, clang: always inline when CONFIG_OPTIMIZE_INLINING is disabled (bnc#1012382).\n\n - compiler, clang: properly override 'inline' for clang (bnc#1012382).\n\n - compiler, clang: suppress warning for unused static inline functions (bnc#1012382).\n\n - compiler-gcc.h: Add __attribute__((gnu_inline)) to all inline declarations (bnc#1012382).\n\n - cpu/hotplug: Add sysfs state interface (bsc#1089343).\n\n - cpu/hotplug: Provide knobs to control SMT (bsc#1089343).\n\n - cpu/hotplug: Split do_cpu_down() (bsc#1089343).\n\n - crypto: crypto4xx - fix crypto4xx_build_pdr, crypto4xx_build_sdr leak (bnc#1012382).\n\n - crypto: crypto4xx - remove bad list_del (bnc#1012382).\n\n - dm thin metadata: remove needless work from\n __commit_transaction (bsc#1082979).\n\n - drm/msm: Fix possible null dereference on failure of get_pages() (bsc#1102394).\n\n - drm: re-enable error handling (bsc#1103884).\n\n - esp6: fix memleak on error path in esp6_input (git-fixes).\n\n - ext4: check for allocation block validity with block group locked (bsc#1104495).\n\n - ext4: do not update s_last_mounted of a frozen fs (bsc#1101841).\n\n - ext4: factor out helper ext4_sample_last_mounted() (bsc#1101841).\n\n - ext4: fix check to prevent initializing reserved inodes (bsc#1104319).\n\n - ext4: fix false negatives *and* false positives in ext4_check_descriptors() (bsc#1103445).\n\n - ext4: fix inline data updates with checksums enabled (bsc#1104494).\n\n - fscache: Allow cancelled operations to be enqueued (bsc#1099858).\n\n - fscache: Fix reference overput in fscache_attach_object() error handling (bsc#1099858).\n\n - genirq: Make force irq threading setup more robust (bsc#1082979).\n\n - hid: usbhid: add quirk for innomedia INNEX GENESIS/ATARI adapter (bnc#1012382).\n\n - ib/isert: fix T10-pi check mask setting (bsc#1082979).\n\n - ibmasm: do not write out of bounds in read handler (bnc#1012382).\n\n - ibmvnic: Fix error recovery on login failure (bsc#1101789).\n\n - ibmvnic: Remove code to request error information (bsc#1104174).\n\n - ibmvnic: Revise RX/TX queue error messages (bsc#1101331).\n\n - ibmvnic: Update firmware error reporting with cause string (bsc#1104174).\n\n - iw_cxgb4: correctly enforce the max reg_mr depth (bnc#1012382).\n\n - kabi protect includes in include/linux/inet.h (bsc#1095643).\n\n - kabi protect net/core/utils.c includes (bsc#1095643).\n\n - kABI: protect struct loop_device (kabi).\n\n - kABI: reintroduce __static_cpu_has_safe (kabi).\n\n - Kbuild: fix # escaping in .cmd files for future Make (bnc#1012382).\n\n - keys: DNS: fix parsing multiple options (bnc#1012382).\n\n - kvm: arm/arm64: Drop resource size check for GICV window (bsc#1102215).\n\n - kvm: arm/arm64: Set dist->spis to NULL after kfree (bsc#1102214).\n\n - libata: do not try to pass through NCQ commands to non-NCQ devices (bsc#1082979).\n\n - loop: add recursion validation to LOOP_CHANGE_FD (bnc#1012382).\n\n - loop: remember whether sysfs_create_group() was done (bnc#1012382).\n\n - mmc: dw_mmc: fix card threshold control configuration (bsc#1102203).\n\n - mm: check VMA flags to avoid invalid PROT_NONE NUMA balancing (bsc#1097771).\n\n - net: cxgb3_main: fix potential Spectre v1 (bnc#1012382).\n\n - net: dccp: avoid crash in ccid3_hc_rx_send_feedback() (bnc#1012382).\n\n - net: dccp: switch rx_tstamp_last_feedback to monotonic clock (bnc#1012382).\n\n - netfilter: ebtables: reject non-bridge targets (bnc#1012382).\n\n - netfilter: nf_queue: augment nfqa_cfg_policy (bnc#1012382).\n\n - netfilter: x_tables: initialise match/target check parameter struct (bnc#1012382).\n\n - net/mlx5: Fix command interface race in polling mode (bnc#1012382).\n\n - net/mlx5: Fix incorrect raw command length parsing (bnc#1012382).\n\n - net: mvneta: fix the Rx desc DMA address in the Rx path (bsc#1102207).\n\n - net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL (bnc#1012382).\n\n - net: off by one in inet6_pton() (bsc#1095643).\n\n - net: phy: marvell: Use strlcpy() for ethtool::get_strings (bsc#1102205).\n\n - net_sched: blackhole: tell upper qdisc about dropped packets (bnc#1012382).\n\n - net: sungem: fix rx checksum support (bnc#1012382).\n\n - net/utils: generic inet_pton_with_scope helper (bsc#1095643).\n\n - null_blk: use sector_div instead of do_div (bsc#1082979).\n\n - nvme-rdma: Check remotely invalidated rkey matches our expected rkey (bsc#1092001).\n\n - nvme-rdma: default MR page size to 4k (bsc#1092001).\n\n - nvme-rdma: do not complete requests before a send work request has completed (bsc#1092001).\n\n - nvme-rdma: do not suppress send completions (bsc#1092001).\n\n - nvme-rdma: Fix command completion race at error recovery (bsc#1090435).\n\n - nvme-rdma: make nvme_rdma_[create|destroy]_queue_ib symmetrical (bsc#1092001).\n\n - nvme-rdma: use inet_pton_with_scope helper (bsc#1095643).\n\n - nvme-rdma: Use mr pool (bsc#1092001).\n\n - nvme-rdma: wait for local invalidation before completing a request (bsc#1092001).\n\n - ocfs2: subsystem.su_mutex is required while accessing the item->ci_parent (bnc#1012382).\n\n - pci: ibmphp: Fix use-before-set in get_max_bus_speed() (bsc#1100132).\n\n - perf tools: Move syscall number fallbacks from perf-sys.h to tools/arch/x86/include/asm/ (bnc#1012382).\n\n - pm / hibernate: Fix oops at snapshot_write() (bnc#1012382).\n\n - powerpc/64: Initialise thread_info for emergency stacks (bsc#1094244, bsc#1100930, bsc#1102683).\n\n - powerpc/fadump: handle crash memory ranges array index overflow (bsc#1103269).\n\n - powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD segements (bsc#1103269).\n\n - qed: Limit msix vectors in kdump kernel to the minimum required count (bnc#1012382).\n\n - r8152: napi hangup fix after disconnect (bnc#1012382).\n\n - rdma/ocrdma: Fix an error code in ocrdma_alloc_pd() (bsc#1082979).\n\n - rdma/ocrdma: Fix error codes in ocrdma_create_srq() (bsc#1082979).\n\n - rdma/ucm: Mark UCM interface as BROKEN (bnc#1012382).\n\n - rds: avoid unenecessary cong_update in loop transport (bnc#1012382).\n\n - Revert 'block-cancel-workqueue-entries-on-blk_mq_freeze_queue' (bsc#1103717)\n\n - Revert 'sit: reload iphdr in ipip6_rcv' (bnc#1012382).\n\n - Revert 'x86/cpufeature: Move some of the scattered feature bits to x86_capability' (kabi).\n\n - Revert 'x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6' (kabi).\n\n - rtlwifi: rtl8821ae: fix firmware is not ready to run (bnc#1012382).\n\n - s390/qeth: fix error handling in adapter command callbacks (bnc#1103745, LTC#169699).\n\n - sched/smt: Update sched_smt_present at runtime (bsc#1089343).\n\n - scsi: qlogicpti: Fix an error handling path in 'qpti_sbus_probe()' (bsc#1082979).\n\n - scsi: sg: fix minor memory leak in error path (bsc#1082979).\n\n - scsi: target: fix crash with iscsi target and dvd (bsc#1082979).\n\n - smsc75xx: Add workaround for gigabit link up hardware errata (bsc#1100132).\n\n - smsc95xx: Configure pause time to 0xffff when tx flow control enabled (bsc#1085536).\n\n - supported.conf: Do not build KMP for openSUSE kernels The merge of kselftest-kmp was overseen, and bad for openSUSE-42.3\n\n - tcp: fix Fast Open key endianness (bnc#1012382).\n\n - tcp: prevent bogus FRTO undos with non-SACK flows (bnc#1012382).\n\n - tools build: fix # escaping in .cmd files for future Make (bnc#1012382).\n\n - uprobes/x86: Remove incorrect WARN_ON() in uprobe_init_insn() (bnc#1012382).\n\n - usb: core: handle hub C_PORT_OVER_CURRENT condition (bsc#1100132).\n\n - usb: quirks: add delay quirks for Corsair Strafe (bnc#1012382).\n\n - usb: serial: ch341: fix type promotion bug in ch341_control_in() (bnc#1012382).\n\n - usb: serial: cp210x: add another USB ID for Qivicon ZigBee stick (bnc#1012382).\n\n - usb: serial: keyspan_pda: fix modem-status error handling (bnc#1012382).\n\n - usb: serial: mos7840: fix status-register error handling (bnc#1012382).\n\n - usb: yurex: fix out-of-bounds uaccess in read handler (bnc#1012382).\n\n - vfio: platform: Fix reset module leak in error path (bsc#1102211).\n\n - vfs: add the sb_start_intwrite_trylock() helper (bsc#1101841).\n\n - vhost_net: validate sock before trying to put its fd (bnc#1012382).\n\n - vmw_balloon: fix inflation with batching (bnc#1012382).\n\n - x86/alternatives: Add an auxilary section (bnc#1012382).\n\n - x86/alternatives: Discard dynamic check after init (bnc#1012382).\n\n - x86/apic: Ignore secondary threads if nosmt=force (bsc#1089343).\n\n - x86/asm: Add _ASM_ARG* constants for argument registers to <asm/asm.h> (bnc#1012382).\n\n - x86/boot: Simplify kernel load address alignment check (bnc#1012382).\n\n - x86/CPU/AMD: Do not check CPUID max ext level before parsing SMP info (bsc#1089343).\n\n - x86/cpu/AMD: Evaluate smp_num_siblings early (bsc#1089343).\n\n - x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (bsc#1089343). Update config files.\n\n - x86/cpu/AMD: Remove the pointless detect_ht() call (bsc#1089343).\n\n - x86/cpu/common: Provide detect_ht_early() (bsc#1089343).\n\n - x86/cpufeature: Add helper macro for mask check macros (bnc#1012382).\n\n - x86/cpufeature: Carve out X86_FEATURE_* (bnc#1012382).\n\n - x86/cpufeature: Get rid of the non-asm goto variant (bnc#1012382).\n\n - x86/cpufeature: Make sure DISABLED/REQUIRED macros are updated (bnc#1012382).\n\n - x86/cpufeature: Move some of the scattered feature bits to x86_capability (bnc#1012382).\n\n - x86/cpufeature: Replace the old static_cpu_has() with safe variant (bnc#1012382).\n\n - x86/cpufeature: Speed up cpu_feature_enabled() (bnc#1012382).\n\n - x86/cpufeature: Update cpufeaure macros (bnc#1012382).\n\n - x86/cpu/intel: Evaluate smp_num_siblings early (bsc#1089343).\n\n - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (bnc#1012382).\n\n - x86/cpu: Provide a config option to disable static_cpu_has (bnc#1012382).\n\n - x86/cpu: Remove the pointless CPU printout (bsc#1089343).\n\n - x86/cpu/topology: Provide detect_extended_topology_early() (bsc#1089343).\n\n - x86/fpu: Add an XSTATE_OP() macro (bnc#1012382).\n\n - x86/fpu: Get rid of xstate_fault() (bnc#1012382).\n\n - x86/headers: Do not include asm/processor.h in asm/atomic.h (bnc#1012382).\n\n - x86/mm/pkeys: Fix mismerge of protection keys CPUID bits (bnc#1012382).\n\n - x86/mm: Simplify p[g4um]d_page() macros (1087081).\n\n - x86/smpboot: Do not use smp_num_siblings in\n __max_logical_packages calculation (bsc#1089343).\n\n - x86/smp: Provide topology_is_primary_thread() (bsc#1089343).\n\n - x86/topology: Add topology_max_smt_threads() (bsc#1089343).\n\n - x86/topology: Provide topology_smt_supported() (bsc#1089343).\n\n - x86/vdso: Use static_cpu_has() (bnc#1012382).\n\n - xen/grant-table: log the lack of grants (bnc#1085042).\n\n - xen-netfront: Fix mismatched rtnl_unlock (bnc#1101658).\n\n - xen-netfront: Update features after registering netdev (bnc#1101658).\n\n - xhci: xhci-mem: off by one in xhci_stream_id_to_ring() (bnc#1012382).", "edition": 11, "reporter": "Tenable", "published": "2018-08-20T00:00:00", "title": "openSUSE Security Update : the Linux Kernel (openSUSE-2018-885) (Foreshadow)", "type": "nessus", "enchantments": {"score": {"modified": "2018-11-02T00:41:30", "vector": "NONE", "value": 7.5}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-10882", "CVE-2018-10877", "CVE-2018-10880", "CVE-2018-10878", "CVE-2018-10881", "CVE-2018-14734", "CVE-2018-3646", "CVE-2018-5391", "CVE-2018-3620", "CVE-2018-10883", "CVE-2017-18344", "CVE-2018-5390", "CVE-2018-10876", "CVE-2018-10879"], "modified": "2018-11-01T00:00:00", "cpe": ["p-cpe:/a:novell:opensuse:kernel-source", "p-cpe:/a:novell:opensuse:kernel-source-vanilla", "p-cpe:/a:novell:opensuse:kernel-vanilla-debugsource", "p-cpe:/a:novell:opensuse:kernel-vanilla-base-debuginfo", "p-cpe:/a:novell:opensuse:kernel-debug-debuginfo", "p-cpe:/a:novell:opensuse:kernel-vanilla-debuginfo", "p-cpe:/a:novell:opensuse:kernel-default-debugsource", "p-cpe:/a:novell:opensuse:kernel-default-debuginfo", "p-cpe:/a:novell:opensuse:kernel-vanilla-base", "p-cpe:/a:novell:opensuse:kernel-debug-devel-debuginfo", "p-cpe:/a:novell:opensuse:kernel-default-devel", "p-cpe:/a:novell:opensuse:kernel-devel", "p-cpe:/a:novell:opensuse:kernel-docs-html", "p-cpe:/a:novell:opensuse:kernel-obs-qa", "p-cpe:/a:novell:opensuse:kernel-docs-pdf", "p-cpe:/a:novell:opensuse:kernel-macros", "p-cpe:/a:novell:opensuse:kernel-syms", "p-cpe:/a:novell:opensuse:kernel-vanilla", "p-cpe:/a:novell:opensuse:kernel-vanilla-devel", "p-cpe:/a:novell:opensuse:kernel-debug-base", "p-cpe:/a:novell:opensuse:kernel-debug-debugsource", "p-cpe:/a:novell:opensuse:kernel-default", "p-cpe:/a:novell:opensuse:kernel-debug-devel", "cpe:/o:novell:opensuse:42.3", "p-cpe:/a:novell:opensuse:kernel-debug-base-debuginfo", "p-cpe:/a:novell:opensuse:kernel-debug", "p-cpe:/a:novell:opensuse:kernel-obs-build-debugsource", "p-cpe:/a:novell:opensuse:kernel-default-base", "p-cpe:/a:novell:opensuse:kernel-obs-build", "p-cpe:/a:novell:opensuse:kernel-default-base-debuginfo"], "id": "OPENSUSE-2018-885.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=111997", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from openSUSE Security Update openSUSE-2018-885.\n#\n# The text description of this plugin is (C) SUSE LLC.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(111997);\n script_version(\"1.7\");\n script_cvs_date(\"Date: 2018/11/01 9:58:38\");\n\n script_cve_id(\"CVE-2017-18344\", \"CVE-2018-10876\", \"CVE-2018-10877\", \"CVE-2018-10878\", \"CVE-2018-10879\", \"CVE-2018-10880\", \"CVE-2018-10881\", \"CVE-2018-10882\", \"CVE-2018-10883\", \"CVE-2018-14734\", \"CVE-2018-3620\", \"CVE-2018-3646\", \"CVE-2018-5390\", \"CVE-2018-5391\");\n\n script_name(english:\"openSUSE Security Update : the Linux Kernel (openSUSE-2018-885) (Foreshadow)\");\n script_summary(english:\"Check for the openSUSE-2018-885 patch\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote openSUSE host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The openSUSE Leap 42.3 kernel was updated to 4.4.143 to receive\nvarious security and bugfixes.\n\nThe following security bugs were fixed :\n\n - CVE-2017-18344: The timer_create syscall implementation\n in kernel/time/posix-timers.c didn't properly validate\n the sigevent->sigev_notify field, which leads to\n out-of-bounds access in the show_timer function (called\n when /proc/$PID/timers is read). This allowed userspace\n applications to read arbitrary kernel memory (on a\n kernel built with CONFIG_POSIX_TIMERS and\n CONFIG_CHECKPOINT_RESTORE) (bnc#1102851 bnc#1103580).\n\n - CVE-2018-10876: A flaw was found in Linux kernel in the\n ext4 filesystem code. A use-after-free is possible in\n ext4_ext_remove_space() function when mounting and\n operating a crafted ext4 image. (bnc#1099811)\n\n - CVE-2018-10877: Linux kernel ext4 filesystem is\n vulnerable to an out-of-bound access in the\n ext4_ext_drop_refs() function when operating on a\n crafted ext4 filesystem image. (bnc#1099846)\n\n - CVE-2018-10878: A flaw was found in the ext4 filesystem.\n A local user can cause an out-of-bounds write and a\n denial of service or unspecified other impact is\n possible by mounting and operating a crafted ext4\n filesystem image. (bnc#1099813)\n\n - CVE-2018-10879: A flaw was found in the ext4 filesystem.\n A local user can cause a use-after-free in\n ext4_xattr_set_entry function and a denial of service or\n unspecified other impact may occur by renaming a file in\n a crafted ext4 filesystem image. (bnc#1099844)\n\n - CVE-2018-10880: Linux kernel is vulnerable to a\n stack-out-of-bounds write in the ext4 filesystem code\n when mounting and writing to a crafted ext4 image in\n ext4_update_inline_data(). An attacker could use this to\n cause a system crash and a denial of service.\n (bnc#1099845)\n\n - CVE-2018-10881: A flaw was found in the ext4 filesystem.\n A local user can cause an out-of-bound access in\n ext4_get_group_info function, a denial of service, and a\n system crash by mounting and operating on a crafted ext4\n filesystem image. (bnc#1099864)\n\n - CVE-2018-10882: A flaw was found in the ext4 filesystem.\n A local user can cause an out-of-bound write in in\n fs/jbd2/transaction.c code, a denial of service, and a\n system crash by unmounting a crafted ext4 filesystem\n image. (bnc#1099849)\n\n - CVE-2018-10883: A flaw was found in the ext4 filesystem.\n A local user can cause an out-of-bounds write in\n jbd2_journal_dirty_metadata(), a denial of service, and\n a system crash by mounting and operating on a crafted\n ext4 filesystem image. (bnc#1099863)\n\n - CVE-2018-14734: drivers/infiniband/core/ucma.c allowed\n ucma_leave_multicast to access a certain data structure\n after a cleanup step in ucma_process_join, which allowed\n attackers to cause a denial of service (use-after-free)\n (bnc#1103119).\n\n - CVE-2018-3620: Systems with microprocessors utilizing\n speculative execution and address translations may allow\n unauthorized disclosure of information residing in the\n L1 data cache to an attacker with local user access via\n a terminal page fault and a side-channel analysis\n (bnc#1087081 1089343 ).\n\n - CVE-2018-3646: Systems with microprocessors utilizing\n speculative execution and address translations may allow\n unauthorized disclosure of information residing in the\n L1 data cache to an attacker with local user access with\n guest OS privilege via a terminal page fault and a\n side-channel analysis (bnc#1089343 1104365).\n\n - CVE-2018-5390 aka 'SegmentSmack': The Linux kernel could\n be forced to make very expensive calls to\n tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for\n every incoming packet which can lead to a denial of\n service (bnc#1102340).\n\n - CVE-2018-5391 aka 'FragmentSmack': A flaw in the IP\n packet reassembly could be used by remote attackers to\n consume lots of CPU time (bnc#1103097).\n\nThe following non-security bugs were fixed :\n\n - Add support for 5,25,50, and 100G to 802.3ad bonding\n driver (bsc#1096978)\n\n - ahci: Disable LPM on Lenovo 50 series laptops with a too\n old BIOS (bnc#1012382).\n\n - arm64: do not open code page table entry creation\n (bsc#1102197).\n\n - arm64: kpti: Use early_param for kpti= command-line\n option (bsc#1102188).\n\n - arm64: Make sure permission updates happen for pmd/pud\n (bsc#1102197).\n\n - atm: zatm: Fix potential Spectre v1 (bnc#1012382).\n\n - bcm63xx_enet: correct clock usage (bnc#1012382).\n\n - bcm63xx_enet: do not write to random DMA channel on\n BCM6345 (bnc#1012382).\n\n - blkcg: simplify statistic accumulation code\n (bsc#1082979).\n\n - block: copy ioprio in __bio_clone_fast() (bsc#1082653).\n\n - block/swim: Fix array bounds check (bsc#1082979).\n\n - bpf: fix loading of BPF_MAXINSNS sized programs\n (bsc#1012382).\n\n - bpf, x64: fix memleak when not converging after image\n (bsc#1012382).\n\n - btrfs: Do not remove block group still has pinned down\n bytes (bsc#1086457).\n\n - cachefiles: Fix missing clear of the\n CACHEFILES_OBJECT_ACTIVE flag (bsc#1099858).\n\n - cachefiles: Fix refcounting bug in backing-file read\n monitoring (bsc#1099858).\n\n - cachefiles: Wait rather than BUG'ing on 'Unexpected\n object collision' (bsc#1099858).\n\n - cifs: fix bad/NULL ptr dereferencing in\n SMB2_sess_setup() (bsc#1090123).\n\n - compiler, clang: always inline when\n CONFIG_OPTIMIZE_INLINING is disabled (bnc#1012382).\n\n - compiler, clang: properly override 'inline' for clang\n (bnc#1012382).\n\n - compiler, clang: suppress warning for unused static\n inline functions (bnc#1012382).\n\n - compiler-gcc.h: Add __attribute__((gnu_inline)) to all\n inline declarations (bnc#1012382).\n\n - cpu/hotplug: Add sysfs state interface (bsc#1089343).\n\n - cpu/hotplug: Provide knobs to control SMT (bsc#1089343).\n\n - cpu/hotplug: Split do_cpu_down() (bsc#1089343).\n\n - crypto: crypto4xx - fix crypto4xx_build_pdr,\n crypto4xx_build_sdr leak (bnc#1012382).\n\n - crypto: crypto4xx - remove bad list_del (bnc#1012382).\n\n - dm thin metadata: remove needless work from\n __commit_transaction (bsc#1082979).\n\n - drm/msm: Fix possible null dereference on failure of\n get_pages() (bsc#1102394).\n\n - drm: re-enable error handling (bsc#1103884).\n\n - esp6: fix memleak on error path in esp6_input\n (git-fixes).\n\n - ext4: check for allocation block validity with block\n group locked (bsc#1104495).\n\n - ext4: do not update s_last_mounted of a frozen fs\n (bsc#1101841).\n\n - ext4: factor out helper ext4_sample_last_mounted()\n (bsc#1101841).\n\n - ext4: fix check to prevent initializing reserved inodes\n (bsc#1104319).\n\n - ext4: fix false negatives *and* false positives in\n ext4_check_descriptors() (bsc#1103445).\n\n - ext4: fix inline data updates with checksums enabled\n (bsc#1104494).\n\n - fscache: Allow cancelled operations to be enqueued\n (bsc#1099858).\n\n - fscache: Fix reference overput in\n fscache_attach_object() error handling (bsc#1099858).\n\n - genirq: Make force irq threading setup more robust\n (bsc#1082979).\n\n - hid: usbhid: add quirk for innomedia INNEX GENESIS/ATARI\n adapter (bnc#1012382).\n\n - ib/isert: fix T10-pi check mask setting (bsc#1082979).\n\n - ibmasm: do not write out of bounds in read handler\n (bnc#1012382).\n\n - ibmvnic: Fix error recovery on login failure\n (bsc#1101789).\n\n - ibmvnic: Remove code to request error information\n (bsc#1104174).\n\n - ibmvnic: Revise RX/TX queue error messages\n (bsc#1101331).\n\n - ibmvnic: Update firmware error reporting with cause\n string (bsc#1104174).\n\n - iw_cxgb4: correctly enforce the max reg_mr depth\n (bnc#1012382).\n\n - kabi protect includes in include/linux/inet.h\n (bsc#1095643).\n\n - kabi protect net/core/utils.c includes (bsc#1095643).\n\n - kABI: protect struct loop_device (kabi).\n\n - kABI: reintroduce __static_cpu_has_safe (kabi).\n\n - Kbuild: fix # escaping in .cmd files for future Make\n (bnc#1012382).\n\n - keys: DNS: fix parsing multiple options (bnc#1012382).\n\n - kvm: arm/arm64: Drop resource size check for GICV window\n (bsc#1102215).\n\n - kvm: arm/arm64: Set dist->spis to NULL after kfree\n (bsc#1102214).\n\n - libata: do not try to pass through NCQ commands to\n non-NCQ devices (bsc#1082979).\n\n - loop: add recursion validation to LOOP_CHANGE_FD\n (bnc#1012382).\n\n - loop: remember whether sysfs_create_group() was done\n (bnc#1012382).\n\n - mmc: dw_mmc: fix card threshold control configuration\n (bsc#1102203).\n\n - mm: check VMA flags to avoid invalid PROT_NONE NUMA\n balancing (bsc#1097771).\n\n - net: cxgb3_main: fix potential Spectre v1 (bnc#1012382).\n\n - net: dccp: avoid crash in ccid3_hc_rx_send_feedback()\n (bnc#1012382).\n\n - net: dccp: switch rx_tstamp_last_feedback to monotonic\n clock (bnc#1012382).\n\n - netfilter: ebtables: reject non-bridge targets\n (bnc#1012382).\n\n - netfilter: nf_queue: augment nfqa_cfg_policy\n (bnc#1012382).\n\n - netfilter: x_tables: initialise match/target check\n parameter struct (bnc#1012382).\n\n - net/mlx5: Fix command interface race in polling mode\n (bnc#1012382).\n\n - net/mlx5: Fix incorrect raw command length parsing\n (bnc#1012382).\n\n - net: mvneta: fix the Rx desc DMA address in the Rx path\n (bsc#1102207).\n\n - net/nfc: Avoid stalls when nfc_alloc_send_skb() returned\n NULL (bnc#1012382).\n\n - net: off by one in inet6_pton() (bsc#1095643).\n\n - net: phy: marvell: Use strlcpy() for\n ethtool::get_strings (bsc#1102205).\n\n - net_sched: blackhole: tell upper qdisc about dropped\n packets (bnc#1012382).\n\n - net: sungem: fix rx checksum support (bnc#1012382).\n\n - net/utils: generic inet_pton_with_scope helper\n (bsc#1095643).\n\n - null_blk: use sector_div instead of do_div\n (bsc#1082979).\n\n - nvme-rdma: Check remotely invalidated rkey matches our\n expected rkey (bsc#1092001).\n\n - nvme-rdma: default MR page size to 4k (bsc#1092001).\n\n - nvme-rdma: do not complete requests before a send work\n request has completed (bsc#1092001).\n\n - nvme-rdma: do not suppress send completions\n (bsc#1092001).\n\n - nvme-rdma: Fix command completion race at error recovery\n (bsc#1090435).\n\n - nvme-rdma: make nvme_rdma_[create|destroy]_queue_ib\n symmetrical (bsc#1092001).\n\n - nvme-rdma: use inet_pton_with_scope helper\n (bsc#1095643).\n\n - nvme-rdma: Use mr pool (bsc#1092001).\n\n - nvme-rdma: wait for local invalidation before completing\n a request (bsc#1092001).\n\n - ocfs2: subsystem.su_mutex is required while accessing\n the item->ci_parent (bnc#1012382).\n\n - pci: ibmphp: Fix use-before-set in get_max_bus_speed()\n (bsc#1100132).\n\n - perf tools: Move syscall number fallbacks from\n perf-sys.h to tools/arch/x86/include/asm/ (bnc#1012382).\n\n - pm / hibernate: Fix oops at snapshot_write()\n (bnc#1012382).\n\n - powerpc/64: Initialise thread_info for emergency stacks\n (bsc#1094244, bsc#1100930, bsc#1102683).\n\n - powerpc/fadump: handle crash memory ranges array index\n overflow (bsc#1103269).\n\n - powerpc/fadump: merge adjacent memory ranges to reduce\n PT_LOAD segements (bsc#1103269).\n\n - qed: Limit msix vectors in kdump kernel to the minimum\n required count (bnc#1012382).\n\n - r8152: napi hangup fix after disconnect (bnc#1012382).\n\n - rdma/ocrdma: Fix an error code in ocrdma_alloc_pd()\n (bsc#1082979).\n\n - rdma/ocrdma: Fix error codes in ocrdma_create_srq()\n (bsc#1082979).\n\n - rdma/ucm: Mark UCM interface as BROKEN (bnc#1012382).\n\n - rds: avoid unenecessary cong_update in loop transport\n (bnc#1012382).\n\n - Revert\n 'block-cancel-workqueue-entries-on-blk_mq_freeze_queue'\n (bsc#1103717)\n\n - Revert 'sit: reload iphdr in ipip6_rcv' (bnc#1012382).\n\n - Revert 'x86/cpufeature: Move some of the scattered\n feature bits to x86_capability' (kabi).\n\n - Revert 'x86/cpu: Probe CPUID leaf 6 even when\n cpuid_level == 6' (kabi).\n\n - rtlwifi: rtl8821ae: fix firmware is not ready to run\n (bnc#1012382).\n\n - s390/qeth: fix error handling in adapter command\n callbacks (bnc#1103745, LTC#169699).\n\n - sched/smt: Update sched_smt_present at runtime\n (bsc#1089343).\n\n - scsi: qlogicpti: Fix an error handling path in\n 'qpti_sbus_probe()' (bsc#1082979).\n\n - scsi: sg: fix minor memory leak in error path\n (bsc#1082979).\n\n - scsi: target: fix crash with iscsi target and dvd\n (bsc#1082979).\n\n - smsc75xx: Add workaround for gigabit link up hardware\n errata (bsc#1100132).\n\n - smsc95xx: Configure pause time to 0xffff when tx flow\n control enabled (bsc#1085536).\n\n - supported.conf: Do not build KMP for openSUSE kernels\n The merge of kselftest-kmp was overseen, and bad for\n openSUSE-42.3\n\n - tcp: fix Fast Open key endianness (bnc#1012382).\n\n - tcp: prevent bogus FRTO undos with non-SACK flows\n (bnc#1012382).\n\n - tools build: fix # escaping in .cmd files for future\n Make (bnc#1012382).\n\n - uprobes/x86: Remove incorrect WARN_ON() in\n uprobe_init_insn() (bnc#1012382).\n\n - usb: core: handle hub C_PORT_OVER_CURRENT condition\n (bsc#1100132).\n\n - usb: quirks: add delay quirks for Corsair Strafe\n (bnc#1012382).\n\n - usb: serial: ch341: fix type promotion bug in\n ch341_control_in() (bnc#1012382).\n\n - usb: serial: cp210x: add another USB ID for Qivicon\n ZigBee stick (bnc#1012382).\n\n - usb: serial: keyspan_pda: fix modem-status error\n handling (bnc#1012382).\n\n - usb: serial: mos7840: fix status-register error handling\n (bnc#1012382).\n\n - usb: yurex: fix out-of-bounds uaccess in read handler\n (bnc#1012382).\n\n - vfio: platform: Fix reset module leak in error path\n (bsc#1102211).\n\n - vfs: add the sb_start_intwrite_trylock() helper\n (bsc#1101841).\n\n - vhost_net: validate sock before trying to put its fd\n (bnc#1012382).\n\n - vmw_balloon: fix inflation with batching (bnc#1012382).\n\n - x86/alternatives: Add an auxilary section (bnc#1012382).\n\n - x86/alternatives: Discard dynamic check after init\n (bnc#1012382).\n\n - x86/apic: Ignore secondary threads if nosmt=force\n (bsc#1089343).\n\n - x86/asm: Add _ASM_ARG* constants for argument registers\n to <asm/asm.h> (bnc#1012382).\n\n - x86/boot: Simplify kernel load address alignment check\n (bnc#1012382).\n\n - x86/CPU/AMD: Do not check CPUID max ext level before\n parsing SMP info (bsc#1089343).\n\n - x86/cpu/AMD: Evaluate smp_num_siblings early\n (bsc#1089343).\n\n - x86/CPU/AMD: Move TOPOEXT reenablement before reading\n smp_num_siblings (bsc#1089343). Update config files.\n\n - x86/cpu/AMD: Remove the pointless detect_ht() call\n (bsc#1089343).\n\n - x86/cpu/common: Provide detect_ht_early() (bsc#1089343).\n\n - x86/cpufeature: Add helper macro for mask check macros\n (bnc#1012382).\n\n - x86/cpufeature: Carve out X86_FEATURE_* (bnc#1012382).\n\n - x86/cpufeature: Get rid of the non-asm goto variant\n (bnc#1012382).\n\n - x86/cpufeature: Make sure DISABLED/REQUIRED macros are\n updated (bnc#1012382).\n\n - x86/cpufeature: Move some of the scattered feature bits\n to x86_capability (bnc#1012382).\n\n - x86/cpufeature: Replace the old static_cpu_has() with\n safe variant (bnc#1012382).\n\n - x86/cpufeature: Speed up cpu_feature_enabled()\n (bnc#1012382).\n\n - x86/cpufeature: Update cpufeaure macros (bnc#1012382).\n\n - x86/cpu/intel: Evaluate smp_num_siblings early\n (bsc#1089343).\n\n - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6\n (bnc#1012382).\n\n - x86/cpu: Provide a config option to disable\n static_cpu_has (bnc#1012382).\n\n - x86/cpu: Remove the pointless CPU printout\n (bsc#1089343).\n\n - x86/cpu/topology: Provide\n detect_extended_topology_early() (bsc#1089343).\n\n - x86/fpu: Add an XSTATE_OP() macro (bnc#1012382).\n\n - x86/fpu: Get rid of xstate_fault() (bnc#1012382).\n\n - x86/headers: Do not include asm/processor.h in\n asm/atomic.h (bnc#1012382).\n\n - x86/mm/pkeys: Fix mismerge of protection keys CPUID bits\n (bnc#1012382).\n\n - x86/mm: Simplify p[g4um]d_page() macros (1087081).\n\n - x86/smpboot: Do not use smp_num_siblings in\n __max_logical_packages calculation (bsc#1089343).\n\n - x86/smp: Provide topology_is_primary_thread()\n (bsc#1089343).\n\n - x86/topology: Add topology_max_smt_threads()\n (bsc#1089343).\n\n - x86/topology: Provide topology_smt_supported()\n (bsc#1089343).\n\n - x86/vdso: Use static_cpu_has() (bnc#1012382).\n\n - xen/grant-table: log the lack of grants (bnc#1085042).\n\n - xen-netfront: Fix mismatched rtnl_unlock (bnc#1101658).\n\n - xen-netfront: Update features after registering netdev\n (bnc#1101658).\n\n - xhci: xhci-mem: off by one in xhci_stream_id_to_ring()\n (bnc#1012382).\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1012382\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1082653\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1082979\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1085042\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1085536\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1086457\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1087081\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1089343\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1090123\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1090435\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1092001\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1094244\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1095643\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1096978\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1097771\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1099811\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1099813\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1099844\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1099845\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1099846\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1099849\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1099858\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1099863\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1099864\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1100132\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1100930\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101331\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101658\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101789\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1101841\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1102188\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1102197\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1102203\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1102205\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1102207\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1102211\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1102214\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1102215\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1102340\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1102394\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1102683\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1102851\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1103097\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1103119\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1103269\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1103445\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1103580\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1103717\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1103745\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1103884\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1104174\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1104319\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1104365\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1104494\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1104495\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected the Linux Kernel packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-debug\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-debug-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-debug-base-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-debug-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-debug-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-debug-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-debug-devel-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-default\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-default-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-default-base-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-default-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-default-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-default-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-docs-html\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-docs-pdf\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-macros\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-obs-build\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-obs-build-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-obs-qa\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-source\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-source-vanilla\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-syms\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-vanilla\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-vanilla-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-vanilla-base-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-vanilla-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-vanilla-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:kernel-vanilla-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:opensuse:42.3\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/08/17\");\n script_set_attribute(attribute:\"in_the_news\", value:\"true\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/08/20\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release =~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"openSUSE\");\nif (release !~ \"^(SUSE42\\.3)$\") audit(AUDIT_OS_RELEASE_NOT, \"openSUSE\", \"42.3\", release);\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\nourarch = get_kb_item(\"Host/cpu\");\nif (!ourarch) audit(AUDIT_UNKNOWN_ARCH);\nif (ourarch !~ \"^(x86_64)$\") audit(AUDIT_ARCH_NOT, \"x86_64\", ourarch);\n\nflag = 0;\n\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-debug-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-debug-base-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-debug-base-debuginfo-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-debug-debuginfo-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-debug-debugsource-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-debug-devel-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-debug-devel-debuginfo-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-default-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-default-base-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-default-base-debuginfo-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-default-debuginfo-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-default-debugsource-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-default-devel-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-devel-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-docs-html-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-docs-pdf-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-macros-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-obs-build-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-obs-build-debugsource-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-obs-qa-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-source-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-source-vanilla-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-syms-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-vanilla-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-vanilla-base-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-vanilla-base-debuginfo-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-vanilla-debuginfo-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-vanilla-debugsource-4.4.143-65.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"kernel-vanilla-devel-4.4.143-65.1\") ) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"kernel-devel / kernel-macros / kernel-source / etc\");\n}\n", "cvss": {"score": 7.8, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}, {"lastseen": "2018-09-01T23:58:07", "references": ["https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html", "https://packages.debian.org/source/jessie/linux-4.9"], "pluginID": "111165", "description": "Linux 4.9 has been packaged for Debian 8 as linux-4.9. This provides a supported upgrade path for systems that currently use kernel packages from the 'jessie-backports' suite.\n\nThere is no need to upgrade systems using Linux 3.16, as that kernel version will also continue to be supported in the LTS period.\n\nThis backport does not include the following binary packages :\n\nhyperv-daemons libcpupower1 libcpupower-dev libusbip-dev linux-compiler-gcc-4.9-x86 linux-cpupower linux-libc-dev usbip\n\nOlder versions of most of those are built from other source packages in Debian 8.\n\nSeveral vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.\n\nCVE-2017-5753\n\nFurther instances of code that was vulnerable to Spectre variant 1 (bounds-check bypass) have been mitigated.\n\nCVE-2017-18255\n\nIt was discovered that the performance events subsystem did not properly validate the value of the kernel.perf_cpu_time_max_percent sysctl. Setting a large value could have an unspecified security impact. However, only a privileged user can set this sysctl.\n\nCVE-2018-1118\n\nThe syzbot software found that the vhost driver did not initialise message buffers which would later be read by user processes. A user with access to the /dev/vhost-net device could use this to read sensitive information from the kernel or other users' processes.\n\nCVE-2018-1120\n\nQualys reported that a user able to mount FUSE filesystems can create a process such that when another process attempting to read its command line will be blocked for an arbitrarily long time. This could be used for denial of service, or to aid in exploiting a race condition in the other program.\n\nCVE-2018-1130\n\nThe syzbot software found that the DCCP implementation of sendmsg() does not check the socket state, potentially leading to a NULL pointer dereference. A local user could use this to cause a denial of service (crash). \n\nCVE-2018-3639\n\nMultiple researchers have discovered that Speculative Store Bypass (SSB), a feature implemented in many processors, could be used to read sensitive information from another context. In particular, code in a software sandbox may be able to read sensitive information from outside the sandbox. This issue is also known as Spectre variant 4.\n\nThis update allows the issue to be mitigated on some x86 processors by disabling SSB. This requires an update to the processor's microcode, which is non-free. It may be included in an update to the system BIOS or UEFI firmware, or in a future update to the intel-microcode or amd64-microcode packages.\n\nDisabling SSB can reduce performance significantly, so by default it is only done in tasks that use the seccomp feature. Applications that require this mitigation should request it explicitly through the prctl() system call. Users can control where the mitigation is enabled with the spec_store_bypass_disable kernel parameter.\n\nCVE-2018-5814\n\nJakub Jirasek reported race conditions in the USB/IP host driver. A malicious client could use this to cause a denial of service (crash or memory corruption), and possibly to execute code, on a USB/IP server.\n\nCVE-2018-10021\n\nA physically present attacker who unplugs a SAS cable can cause a denial of service (memory leak and WARN).\n\nCVE-2018-10087, CVE-2018-10124\n\nzhongjiang found that the wait4() and kill() system call implementations did not check for the invalid pid value of INT_MIN. If a user passed this value, the behaviour of the code was formally undefined and might have had a security impact.\n\nCVE-2018-10853\n\nAndy Lutomirski and Mika Penttil&auml; reported that KVM for x86 processors did not perform a necessary privilege check when emulating certain instructions. This could be used by an unprivileged user in a guest VM to escalate their privileges within the guest.\n\nCVE-2018-10876, CVE-2018-10877, CVE-2018-10878, CVE-2018-10879, CVE-2018-10880, CVE-2018-10881, CVE-2018-10882, CVE-2018-10883\n\nWen Xu at SSLab, Gatech, reported that crafted ext4 filesystem images could trigger a crash or memory corruption. A local user able to mount arbitrary filesystems, or an attacker providing filesystems to be mounted, could use this for denial of service or possibly for privilege escalation.\n\nCVE-2018-10940\n\nDan Carpenter reported that the optical disc driver (cdrom) does not correctly validate the parameter to the CDROM_MEDIA_CHANGED ioctl. A user with access to a cdrom device could use this to cause a denial of service (crash).\n\nCVE-2018-11506\n\nPiotr Gabriel Kosinski and Daniel Shapira reported that the SCSI optical disc driver (sr) did not allocate a sufficiently large buffer for sense data. A user with access to a SCSI optical disc device that can produce more than 64 bytes of sense data could use this to cause a denial of service (crash or memory corruption), and possibly for privilege escalation.\n\nCVE-2018-12233\n\nShankara Pailoor reported that a crafted JFS filesystem image could trigger a denial of service (memory corruption). This could possibly also be used for privilege escalation.\n\nCVE-2018-1000204\n\nThe syzbot software found that the SCSI generic driver (sg) would in some circumstances allow reading data from uninitialised buffers, which could include sensitive information from the kernel or other tasks. However, only privileged users with the CAP_SYS_ADMIN or CAP_SYS_RAWIO capability were allowed to do this, so this has little or no security impact.\n\nFor Debian 8 'Jessie', these problems have been fixed in version 4.9.110-1~deb8u1. This update additionally fixes Debian bugs #860900, #872907, #892057, #896775, #897590, and #898137; and includes many more bug fixes from stable updates 4.9.89-4.9.110 inclusive.\n\nWe recommend that you upgrade your linux-4.9 packages.\n\nNOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "edition": 5, "reporter": "Tenable", "published": "2018-07-20T00:00:00", "title": "Debian DLA-1423-1 : linux-4.9 new package (Spectre)", "type": "nessus", "enchantments": {"score": {"modified": "2018-09-01T23:58:07", "vector": "NONE", "value": 7.5}}, "naslFamily": "Debian Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-10882", "CVE-2018-10021", "CVE-2017-18255", "CVE-2018-10877", "CVE-2017-5753", "CVE-2018-10940", "CVE-2018-10880", "CVE-2018-10878", "CVE-2018-11506", "CVE-2018-10853", "CVE-2018-10881", "CVE-2018-1118", "CVE-2018-1130", "CVE-2018-1120", "CVE-2018-5814", "CVE-2018-1000204", "CVE-2018-10883", "CVE-2018-12233", "CVE-2018-10087", "CVE-2018-10124", "CVE-2018-10876", "CVE-2018-10879", "CVE-2018-3639"], "modified": "2018-08-31T00:00:00", "cpe": ["p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-common-rt", "p-cpe:/a:debian:debian_linux:linux-perf-4.9", "p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-all-armhf", "p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-rt-686-pae", "p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-686", "p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-686", "p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-all", "p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-armmp", "p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-686-pae-dbg", "p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-686-pae", "cpe:/o:debian:debian_linux:8.0", "p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-amd64", "p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-686-pae", "p-cpe:/a:debian:debian_linux:linux-doc-4.9", "p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-marvell", "p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-common", "p-cpe:/a:debian:debian_linux:linux-compiler-gcc-4.9-arm", "p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-armmp", "p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-amd64-dbg", "p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-rt-amd64-dbg", "p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-amd64", "p-cpe:/a:debian:debian_linux:linux-support-4.9.0-0.bpo.7", "p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-armmp-lpae", "p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-rt-amd64", "p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-marvell", "p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-armmp-lpae", "p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-all-i386", "p-cpe:/a:debian:debian_linux:linux-kbuild-4.9", "p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-all-armel", "p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-all-amd64", "p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-rt-686-pae-dbg", "p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-rt-686-pae", "p-cpe:/a:debian:debian_linux:linux-manual-4.9", "p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-rt-amd64", "p-cpe:/a:debian:debian_linux:linux-source-4.9"], "id": "DEBIAN_DLA-1423.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=111165", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Debian Security Advisory DLA-1423-1. The text\n# itself is copyright (C) Software in the Public Interest, Inc.\n#\n\nif (NASL_LEVEL < 3000) exit(0);\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(111165);\n script_version(\"1.5\");\n script_cvs_date(\"Date: 2018/08/31 12:25:01\");\n\n script_cve_id(\"CVE-2017-18255\", \"CVE-2017-5753\", \"CVE-2018-1000204\", \"CVE-2018-10021\", \"CVE-2018-10087\", \"CVE-2018-10124\", \"CVE-2018-10853\", \"CVE-2018-10876\", \"CVE-2018-10877\", \"CVE-2018-10878\", \"CVE-2018-10879\", \"CVE-2018-10880\", \"CVE-2018-10881\", \"CVE-2018-10882\", \"CVE-2018-10883\", \"CVE-2018-10940\", \"CVE-2018-1118\", \"CVE-2018-1120\", \"CVE-2018-1130\", \"CVE-2018-11506\", \"CVE-2018-12233\", \"CVE-2018-3639\", \"CVE-2018-5814\");\n\n script_name(english:\"Debian DLA-1423-1 : linux-4.9 new package (Spectre)\");\n script_summary(english:\"Checks dpkg output for the updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Debian host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Linux 4.9 has been packaged for Debian 8 as linux-4.9. This provides a\nsupported upgrade path for systems that currently use kernel packages\nfrom the 'jessie-backports' suite.\n\nThere is no need to upgrade systems using Linux 3.16, as that kernel\nversion will also continue to be supported in the LTS period.\n\nThis backport does not include the following binary packages :\n\nhyperv-daemons libcpupower1 libcpupower-dev libusbip-dev\nlinux-compiler-gcc-4.9-x86 linux-cpupower linux-libc-dev usbip\n\nOlder versions of most of those are built from other source packages\nin Debian 8.\n\nSeveral vulnerabilities have been discovered in the Linux kernel that\nmay lead to a privilege escalation, denial of service or information\nleaks.\n\nCVE-2017-5753\n\nFurther instances of code that was vulnerable to Spectre variant 1\n(bounds-check bypass) have been mitigated.\n\nCVE-2017-18255\n\nIt was discovered that the performance events subsystem did not\nproperly validate the value of the kernel.perf_cpu_time_max_percent\nsysctl. Setting a large value could have an unspecified security\nimpact. However, only a privileged user can set this sysctl.\n\nCVE-2018-1118\n\nThe syzbot software found that the vhost driver did not initialise\nmessage buffers which would later be read by user processes. A user\nwith access to the /dev/vhost-net device could use this to read\nsensitive information from the kernel or other users' processes.\n\nCVE-2018-1120\n\nQualys reported that a user able to mount FUSE filesystems can create\na process such that when another process attempting to read its\ncommand line will be blocked for an arbitrarily long time. This could\nbe used for denial of service, or to aid in exploiting a race\ncondition in the other program.\n\nCVE-2018-1130\n\nThe syzbot software found that the DCCP implementation of sendmsg()\ndoes not check the socket state, potentially leading to a NULL pointer\ndereference. A local user could use this to cause a denial of service\n(crash). \n\nCVE-2018-3639\n\nMultiple researchers have discovered that Speculative Store Bypass\n(SSB), a feature implemented in many processors, could be used to read\nsensitive information from another context. In particular, code in a\nsoftware sandbox may be able to read sensitive information from\noutside the sandbox. This issue is also known as Spectre variant 4.\n\nThis update allows the issue to be mitigated on some x86\nprocessors by disabling SSB. This requires an update to the\nprocessor's microcode, which is non-free. It may be included\nin an update to the system BIOS or UEFI firmware, or in a\nfuture update to the intel-microcode or amd64-microcode\npackages.\n\nDisabling SSB can reduce performance significantly, so by\ndefault it is only done in tasks that use the seccomp\nfeature. Applications that require this mitigation should\nrequest it explicitly through the prctl() system call. Users\ncan control where the mitigation is enabled with the\nspec_store_bypass_disable kernel parameter.\n\nCVE-2018-5814\n\nJakub Jirasek reported race conditions in the USB/IP host driver. A\nmalicious client could use this to cause a denial of service (crash or\nmemory corruption), and possibly to execute code, on a USB/IP server.\n\nCVE-2018-10021\n\nA physically present attacker who unplugs a SAS cable can cause a\ndenial of service (memory leak and WARN).\n\nCVE-2018-10087, CVE-2018-10124\n\nzhongjiang found that the wait4() and kill() system call\nimplementations did not check for the invalid pid value of INT_MIN. If\na user passed this value, the behaviour of the code was formally\nundefined and might have had a security impact.\n\nCVE-2018-10853\n\nAndy Lutomirski and Mika Penttil&auml; reported that KVM for x86\nprocessors did not perform a necessary privilege check when emulating\ncertain instructions. This could be used by an unprivileged user in a\nguest VM to escalate their privileges within the guest.\n\nCVE-2018-10876, CVE-2018-10877, CVE-2018-10878, CVE-2018-10879,\nCVE-2018-10880, CVE-2018-10881, CVE-2018-10882, CVE-2018-10883\n\nWen Xu at SSLab, Gatech, reported that crafted ext4 filesystem images\ncould trigger a crash or memory corruption. A local user able to mount\narbitrary filesystems, or an attacker providing filesystems to be\nmounted, could use this for denial of service or possibly for\nprivilege escalation.\n\nCVE-2018-10940\n\nDan Carpenter reported that the optical disc driver (cdrom) does not\ncorrectly validate the parameter to the CDROM_MEDIA_CHANGED ioctl. A\nuser with access to a cdrom device could use this to cause a denial of\nservice (crash).\n\nCVE-2018-11506\n\nPiotr Gabriel Kosinski and Daniel Shapira reported that the SCSI\noptical disc driver (sr) did not allocate a sufficiently large buffer\nfor sense data. A user with access to a SCSI optical disc device that\ncan produce more than 64 bytes of sense data could use this to cause a\ndenial of service (crash or memory corruption), and possibly for\nprivilege escalation.\n\nCVE-2018-12233\n\nShankara Pailoor reported that a crafted JFS filesystem image could\ntrigger a denial of service (memory corruption). This could possibly\nalso be used for privilege escalation.\n\nCVE-2018-1000204\n\nThe syzbot software found that the SCSI generic driver (sg) would in\nsome circumstances allow reading data from uninitialised buffers,\nwhich could include sensitive information from the kernel or other\ntasks. However, only privileged users with the CAP_SYS_ADMIN or\nCAP_SYS_RAWIO capability were allowed to do this, so this has little\nor no security impact.\n\nFor Debian 8 'Jessie', these problems have been fixed in version\n4.9.110-1~deb8u1. This update additionally fixes Debian bugs #860900,\n#872907, #892057, #896775, #897590, and #898137; and includes many\nmore bug fixes from stable updates 4.9.89-4.9.110 inclusive.\n\nWe recommend that you upgrade your linux-4.9 packages.\n\nNOTE: Tenable Network Security has extracted the preceding description\nblock directly from the DLA security advisory. Tenable has attempted\nto automatically clean and format it as much as possible without\nintroducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://packages.debian.org/source/jessie/linux-4.9\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Upgrade the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:F/RL:ND/RC:ND\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:F/RL:X/RC:X\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n script_set_attribute(attribute:\"exploit_framework_canvas\", value:\"true\");\n script_set_attribute(attribute:\"canvas_package\", value:'CANVAS');\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-compiler-gcc-4.9-arm\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-doc-4.9\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-686\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-686-pae\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-all\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-all-amd64\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-all-armel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-all-armhf\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-all-i386\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-amd64\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-armmp\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-armmp-lpae\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-common-rt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-marvell\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-rt-686-pae\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-headers-4.9.0-0.bpo.7-rt-amd64\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-686\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-686-pae\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-686-pae-dbg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-amd64\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-amd64-dbg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-armmp\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-armmp-lpae\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-marvell\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-rt-686-pae\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-rt-686-pae-dbg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-rt-amd64\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-image-4.9.0-0.bpo.7-rt-amd64-dbg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-kbuild-4.9\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-manual-4.9\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-perf-4.9\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-source-4.9\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:linux-support-4.9.0-0.bpo.7\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:8.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/07/18\");\n script_set_attribute(attribute:\"in_the_news\", value:\"true\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/07/20\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Debian Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Debian/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"debian_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Debian/release\")) audit(AUDIT_OS_NOT, \"Debian\");\nif (!get_kb_item(\"Host/Debian/dpkg-l\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\nif (deb_check(release:\"8.0\", prefix:\"linux-compiler-gcc-4.9-arm\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-doc-4.9\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-headers-4.9.0-0.bpo.7-686\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-headers-4.9.0-0.bpo.7-686-pae\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-headers-4.9.0-0.bpo.7-all\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-headers-4.9.0-0.bpo.7-all-amd64\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-headers-4.9.0-0.bpo.7-all-armel\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-headers-4.9.0-0.bpo.7-all-armhf\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-headers-4.9.0-0.bpo.7-all-i386\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-headers-4.9.0-0.bpo.7-amd64\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-headers-4.9.0-0.bpo.7-armmp\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-headers-4.9.0-0.bpo.7-armmp-lpae\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-headers-4.9.0-0.bpo.7-common\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-headers-4.9.0-0.bpo.7-common-rt\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-headers-4.9.0-0.bpo.7-marvell\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-headers-4.9.0-0.bpo.7-rt-686-pae\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-headers-4.9.0-0.bpo.7-rt-amd64\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-image-4.9.0-0.bpo.7-686\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-image-4.9.0-0.bpo.7-686-pae\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-image-4.9.0-0.bpo.7-686-pae-dbg\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-image-4.9.0-0.bpo.7-amd64\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-image-4.9.0-0.bpo.7-amd64-dbg\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-image-4.9.0-0.bpo.7-armmp\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-image-4.9.0-0.bpo.7-armmp-lpae\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-image-4.9.0-0.bpo.7-marvell\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-image-4.9.0-0.bpo.7-rt-686-pae\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-image-4.9.0-0.bpo.7-rt-686-pae-dbg\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-image-4.9.0-0.bpo.7-rt-amd64\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-image-4.9.0-0.bpo.7-rt-amd64-dbg\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-kbuild-4.9\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-manual-4.9\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-perf-4.9\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-source-4.9\", reference:\"4.9.110-1~deb8u1\")) flag++;\nif (deb_check(release:\"8.0\", prefix:\"linux-support-4.9.0-0.bpo.7\", reference:\"4.9.110-1~deb8u1\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-12-02T15:32:09", "references": ["https://www.suse.com/security/cve/CVE-2018-10882/", "https://bugzilla.suse.com/show_bug.cgi?id=1064232", "https://bugzilla.suse.com/show_bug.cgi?id=1101841", "https://bugzilla.suse.com/show_bug.cgi?id=1022604", "https://bugzilla.suse.com/show_bug.cgi?id=969477", "https://bugzilla.suse.com/show_bug.cgi?id=1106995", "https://bugzilla.suse.com/show_bug.cgi?id=1019699", "https://www.suse.com/security/cve/CVE-2018-13095/", "https://bugzilla.suse.com/show_bug.cgi?id=1103445", "https://bugzilla.suse.com/show_bug.cgi?id=969476", "https://bugzilla.suse.com/show_bug.cgi?id=1106281", "https://bugzilla.suse.com/show_bug.cgi?id=1015342", "https://bugzilla.suse.com/show_bug.cgi?id=1099864", "https://www.suse.com/security/cve/CVE-2018-16658/", "https://bugzilla.suse.com/show_bug.cgi?id=1102346", "https://bugzilla.suse.com/show_bug.cgi?id=1100001", "https://bugzilla.suse.com/show_bug.cgi?id=1107689", "https://bugzilla.suse.com/show_bug.cgi?id=1096748", "https://bugzilla.suse.com/show_bug.cgi?id=1099844", "https://bugzilla.suse.com/show_bug.cgi?id=1099832", "https://bugzilla.suse.com/show_bug.cgi?id=1105396", "http://www.nessus.org/u?737e2176", "https://bugzilla.suse.com/show_bug.cgi?id=1106185", "https://bugzilla.suse.com/show_bug.cgi?id=1091860", "https://bugzilla.suse.com/show_bug.cgi?id=1104683", "https://bugzilla.suse.com/show_bug.cgi?id=1105524", "https://bugzilla.suse.com/show_bug.cgi?id=1087092", "https://bugzilla.suse.com/show_bug.cgi?id=1086457", "https://bugzilla.suse.com/show_bug.cgi?id=1056596", "https://bugzilla.suse.com/show_bug.cgi?id=1015343", "https://bugzilla.suse.com/show_bug.cgi?id=1106511", "https://bugzilla.suse.com/show_bug.cgi?id=1106594", "https://bugzilla.suse.com/show_bug.cgi?id=1062604", "https://bugzilla.suse.com/show_bug.cgi?id=1085539", "https://bugzilla.suse.com/show_bug.cgi?id=1024365", "https://bugzilla.suse.com/show_bug.cgi?id=1083663", "https://bugzilla.suse.com/show_bug.cgi?id=1105392", "https://bugzilla.suse.com/show_bug.cgi?id=1012382", "https://bugzilla.suse.com/show_bug.cgi?id=1017967", "https://www.suse.com/security/cve/CVE-2018-10883/", "https://www.suse.com/security/cve/CVE-2018-10902/", "https://bugzilla.suse.com/show_bug.cgi?id=1050431", "https://bugzilla.suse.com/show_bug.cgi?id=1106278", "https://www.suse.com/security/cve/CVE-2018-12896/", "https://www.suse.com/security/cve/CVE-2018-6555/", "https://bugzilla.suse.com/show_bug.cgi?id=1107060", "https://bugzilla.suse.com/show_bug.cgi?id=1107966", "https://bugzilla.suse.com/show_bug.cgi?id=1103269", "https://bugzilla.suse.com/show_bug.cgi?id=1099597", "https://bugzilla.suse.com/show_bug.cgi?id=1019695", "https://bugzilla.suse.com/show_bug.cgi?id=1106283", "https://bugzilla.suse.com/show_bug.cgi?id=1055014", "https://bugzilla.suse.com/show_bug.cgi?id=1104494", "https://www.suse.com/security/cve/CVE-2018-1128/", "https://www.suse.com/security/cve/CVE-2018-10877/", "https://bugzilla.suse.com/show_bug.cgi?id=1085042", "https://bugzilla.suse.com/show_bug.cgi?id=1080157", "https://bugzilla.suse.com/show_bug.cgi?id=1105271", "https://bugzilla.suse.com/show_bug.cgi?id=1106929", "https://bugzilla.suse.com/show_bug.cgi?id=1099849", "https://bugzilla.suse.com/show_bug.cgi?id=1099810", "https://bugzilla.suse.com/show_bug.cgi?id=1099846", "https://bugzilla.suse.com/show_bug.cgi?id=1107078", "https://bugzilla.suse.com/show_bug.cgi?id=1104897", "https://bugzilla.suse.com/show_bug.cgi?id=1099811", "https://bugzilla.suse.com/show_bug.cgi?id=970506", "https://bugzilla.suse.com/show_bug.cgi?id=963575", "https://bugzilla.suse.com/show_bug.cgi?id=1096254", "https://bugzilla.suse.com/show_bug.cgi?id=1099845", "https://www.suse.com/security/cve/CVE-2018-13094/", "https://bugzilla.suse.com/show_bug.cgi?id=1065364", "https://bugzilla.suse.com/show_bug.cgi?id=1024376", "https://www.suse.com/security/cve/CVE-2018-10879/", "https://bugzilla.suse.com/show_bug.cgi?id=1107735", "https://bugzilla.suse.com/show_bug.cgi?id=1027968", "https://bugzilla.suse.com/show_bug.cgi?id=1104485", "https://bugzilla.suse.com/show_bug.cgi?id=1053685", "https://bugzilla.suse.com/show_bug.cgi?id=1048317", "https://bugzilla.suse.com/show_bug.cgi?id=1089066", "https://bugzilla.suse.com/show_bug.cgi?id=1100000", "https://www.suse.com/security/cve/CVE-2018-10938/", "https://bugzilla.suse.com/show_bug.cgi?id=1099922", "https://bugzilla.suse.com/show_bug.cgi?id=1104319", "https://www.suse.com/security/cve/CVE-2018-10880/", "https://bugzilla.suse.com/show_bug.cgi?id=1105292", "https://bugzilla.suse.com/show_bug.cgi?id=1102715", "https://www.suse.com/security/cve/CVE-2018-10940/", "https://www.suse.com/security/cve/CVE-2018-10878/", "https://bugzilla.suse.com/show_bug.cgi?id=1106697", "https://bugzilla.suse.com/show_bug.cgi?id=969470", "https://www.suse.com/security/cve/CVE-2018-6554/", "https://bugzilla.suse.com/show_bug.cgi?id=1106105", "https://bugzilla.suse.com/show_bug.cgi?id=1106016", "https://bugzilla.suse.com/show_bug.cgi?id=1106509", "https://bugzilla.suse.com/show_bug.cgi?id=1102517", "https://bugzilla.suse.com/show_bug.cgi?id=1092903", "https://bugzilla.suse.com/show_bug.cgi?id=1105322", "https://bugzilla.suse.com/show_bug.cgi?id=1042286", "https://www.suse.com/security/cve/CVE-2018-15572/", "https://bugzilla.suse.com/show_bug.cgi?id=1106934", "https://bugzilla.suse.com/show_bug.cgi?id=1085536", "https://bugzilla.suse.com/show_bug.cgi?id=1091171", "https://www.suse.com/security/cve/CVE-2018-9363/", "https://bugzilla.suse.com/show_bug.cgi?id=1063646", "https://bugzilla.suse.com/show_bug.cgi?id=1068075", "https://bugzilla.suse.com/show_bug.cgi?id=1021121", "https://bugzilla.suse.com/show_bug.cgi?id=1024361", "https://bugzilla.suse.com/show_bug.cgi?id=1066223", "https://www.suse.com/security/cve/CVE-2018-10881/", "https://bugzilla.suse.com/show_bug.cgi?id=1030552", "https://www.suse.com/security/cve/CVE-2018-13093/", "https://bugzilla.suse.com/show_bug.cgi?id=1106275", "https://bugzilla.suse.com/show_bug.cgi?id=1069138", "https://bugzilla.suse.com/show_bug.cgi?id=966170", "https://bugzilla.suse.com/show_bug.cgi?id=1107319", "https://bugzilla.suse.com/show_bug.cgi?id=1105769", "https://bugzilla.suse.com/show_bug.cgi?id=1097105", "https://bugzilla.suse.com/show_bug.cgi?id=1068032", "https://bugzilla.suse.com/show_bug.cgi?id=1106271", "https://bugzilla.suse.com/show_bug.cgi?id=1098822", "https://bugzilla.suse.com/show_bug.cgi?id=966172", "https://bugzilla.suse.com/show_bug.cgi?id=1100132", "https://bugzilla.suse.com/show_bug.cgi?id=1099999", "https://bugzilla.suse.com/show_bug.cgi?id=1104495", "https://bugzilla.suse.com/show_bug.cgi?id=1098253", "https://www.suse.com/security/cve/CVE-2018-10876/", "https://bugzilla.suse.com/show_bug.cgi?id=1106369", "https://bugzilla.suse.com/show_bug.cgi?id=1099813", "https://bugzilla.suse.com/show_bug.cgi?id=1033962", "https://bugzilla.suse.com/show_bug.cgi?id=1102797", "https://bugzilla.suse.com/show_bug.cgi?id=1105536", "https://bugzilla.suse.com/show_bug.cgi?id=1099863", "https://bugzilla.suse.com/show_bug.cgi?id=1102486", "https://bugzilla.suse.com/show_bug.cgi?id=1090888", "https://bugzilla.suse.com/show_bug.cgi?id=1106276", "https://bugzilla.suse.com/show_bug.cgi?id=1020412", "https://bugzilla.suse.com/show_bug.cgi?id=1107320", "https://bugzilla.suse.com/show_bug.cgi?id=1078921", "https://www.suse.com/security/cve/CVE-2018-1129/", "https://bugzilla.suse.com/show_bug.cgi?id=1106229", "https://bugzilla.suse.com/show_bug.cgi?id=1101822"], "pluginID": "117800", "description": "The SUSE Linux Enterprise 12 SP3 azure kernel was updated to 4.4.155 to receive various security and bugfixes.\n\nThe following security bugs were fixed :\n\nCVE-2018-13093: Prevent NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occured because of a lack of proper validation that cached inodes are free during allocation (bnc#1100001)\n\nCVE-2018-13095: Prevent denial of service (memory corruption and BUG) that could have occurred for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork (bnc#1099999)\n\nCVE-2018-13094: Prevent OOPS that may have occured for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp (bnc#1100000)\n\nCVE-2018-12896: Prevent integer overflow in the POSIX timer code that was caused by the way the overrun accounting works. Depending on interval and expiry time values, the overrun can be larger than INT_MAX, but the accounting is int based. This basically made the accounting values, which are visible to user space via timer_getoverrun(2) and siginfo::si_overrun, random. This allowed a local user to cause a denial of service (signed integer overflow) via crafted mmap, futex, timer_create, and timer_settime system calls (bnc#1099922)\n\nCVE-2018-16658: Prevent information leak in cdrom_ioctl_drive_status that could have been used by local attackers to read kernel memory (bnc#1107689)\n\nCVE-2018-10940: The cdrom_ioctl_media_changed function allowed local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory (bsc#1092903)\n\nCVE-2018-6555: The irda_setsockopt function allowed local users to cause a denial of service (ias_object use-after-free and system crash) or possibly have unspecified other impact via an AF_IRDA socket (bnc#1106511)\n\nCVE-2018-6554: Prevent memory leak in the irda_bind function that allowed local users to cause a denial of service (memory consumption) by repeatedly binding an AF_IRDA socket (bnc#1106509)\n\nCVE-2018-1129: A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol (bnc#1096748)\n\nCVE-2018-1128: It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service (bnc#1096748)\n\nCVE-2018-10938: A crafted network packet sent remotely by an attacker forced the kernel to enter an infinite loop in the cipso_v4_optptr() function leading to a denial-of-service (bnc#1106016)\n\nCVE-2018-15572: The spectre_v2_select_mitigation function did not always fill RSB upon a context switch, which made it easier for attackers to conduct userspace-userspace spectreRSB attacks (bnc#1102517)\n\nCVE-2018-10902: Protect against concurrent access to prevent double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status(). A malicious local attacker could have used this for privilege escalation (bnc#1105322).\n\nCVE-2018-9363: Prevent buffer overflow in hidp_process_report (bsc#1105292)\n\nCVE-2018-10883: A local user could have caused an out-of-bounds write in jbd2_journal_dirty_metadata(), a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image (bsc#1099863)\n\nCVE-2018-10879: A local user could have caused a use-after-free in ext4_xattr_set_entry function and a denial of service or unspecified other impact by renaming a file in a crafted ext4 filesystem image (bsc#1099844)\n\nCVE-2018-10878: A local user could have caused an out-of-bounds write and a denial of service or unspecified other impact by mounting and operating a crafted ext4 filesystem image (bsc#1099813)\n\nCVE-2018-10876: A use-after-free was possible in ext4_ext_remove_space() function when mounting and operating a crafted ext4 image (bsc#1099811)\n\nCVE-2018-10877: Prevent out-of-bound access in the ext4_ext_drop_refs() function when operating on a crafted ext4 filesystem image (bsc#1099846)\n\nCVE-2018-10881: A local user could have caused an out-of-bound access in ext4_get_group_info function, a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image (bsc#1099864)\n\nCVE-2018-10882: A local user could have caused an out-of-bound write, a denial of service, and a system crash by unmounting a crafted ext4 filesystem image (bsc#1099849)\n\nCVE-2018-10880: Prevent stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a crafted ext4 image in ext4_update_inline_data(). An attacker could have used this to cause a system crash and a denial of service (bsc#1099845)\n\nThe update package also includes non-security fixes. See advisory for details.\n\nNote that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "edition": 4, "reporter": "Tenable", "published": "2018-09-27T00:00:00", "title": "SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2858-1)", "type": "nessus", "enchantments": {"score": {"modified": "2018-12-02T15:32:09", "vector": "NONE", "value": 7.2}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-10882", "CVE-2018-10877", "CVE-2018-10940", "CVE-2018-10880", "CVE-2018-10878", "CVE-2018-13095", "CVE-2018-10881", "CVE-2018-6555", "CVE-2018-13093", "CVE-2018-9363", "CVE-2018-10883", "CVE-2018-16658", "CVE-2018-1129", "CVE-2018-10902", "CVE-2018-10876", "CVE-2018-10938", "CVE-2018-10879", "CVE-2018-1128", "CVE-2018-12896", "CVE-2018-15572", "CVE-2018-6554", "CVE-2018-13094"], "modified": "2018-12-01T00:00:00", "cpe": ["p-cpe:/a:novell:suse_linux:kernel-azure-devel", "cpe:/o:novell:suse_linux:12", "p-cpe:/a:novell:suse_linux:kernel-azure", "p-cpe:/a:novell:suse_linux:kernel-azure-debugsource", "p-cpe:/a:novell:suse_linux:kernel-syms-azure", "p-cpe:/a:novell:suse_linux:kernel-azure-base-debuginfo", "p-cpe:/a:novell:suse_linux:kernel-azure-debuginfo", "p-cpe:/a:novell:suse_linux:kernel-azure-base"], "id": "SUSE_SU-2018-2858-1.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=117800", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from SUSE update advisory SUSE-SU-2018:2858-1.\n# The text itself is copyright (C) SUSE.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(117800);\n script_version(\"1.3\");\n script_cvs_date(\"Date: 2018/12/01 13:19:06\");\n\n script_cve_id(\"CVE-2018-10876\", \"CVE-2018-10877\", \"CVE-2018-10878\", \"CVE-2018-10879\", \"CVE-2018-10880\", \"CVE-2018-10881\", \"CVE-2018-10882\", \"CVE-2018-10883\", \"CVE-2018-10902\", \"CVE-2018-10938\", \"CVE-2018-10940\", \"CVE-2018-1128\", \"CVE-2018-1129\", \"CVE-2018-12896\", \"CVE-2018-13093\", \"CVE-2018-13094\", \"CVE-2018-13095\", \"CVE-2018-15572\", \"CVE-2018-16658\", \"CVE-2018-6554\", \"CVE-2018-6555\", \"CVE-2018-9363\");\n\n script_name(english:\"SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2858-1)\");\n script_summary(english:\"Checks rpm output for the updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote SUSE host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The SUSE Linux Enterprise 12 SP3 azure kernel was updated to 4.4.155\nto receive various security and bugfixes.\n\nThe following security bugs were fixed :\n\nCVE-2018-13093: Prevent NULL pointer dereference and panic in\nlookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a\ncorrupted xfs image. This occured because of a lack of proper\nvalidation that cached inodes are free during allocation (bnc#1100001)\n\nCVE-2018-13095: Prevent denial of service (memory corruption and BUG)\nthat could have occurred for a corrupted xfs image upon encountering\nan inode that is in extent format, but has more extents than fit in\nthe inode fork (bnc#1099999)\n\nCVE-2018-13094: Prevent OOPS that may have occured for a corrupted xfs\nimage after xfs_da_shrink_inode() is called with a NULL bp\n(bnc#1100000)\n\nCVE-2018-12896: Prevent integer overflow in the POSIX timer code that\nwas caused by the way the overrun accounting works. Depending on\ninterval and expiry time values, the overrun can be larger than\nINT_MAX, but the accounting is int based. This basically made the\naccounting values, which are visible to user space via\ntimer_getoverrun(2) and siginfo::si_overrun, random. This allowed a\nlocal user to cause a denial of service (signed integer overflow) via\ncrafted mmap, futex, timer_create, and timer_settime system calls\n(bnc#1099922)\n\nCVE-2018-16658: Prevent information leak in cdrom_ioctl_drive_status\nthat could have been used by local attackers to read kernel memory\n(bnc#1107689)\n\nCVE-2018-10940: The cdrom_ioctl_media_changed function allowed local\nattackers to use a incorrect bounds check in the CDROM driver\nCDROM_MEDIA_CHANGED ioctl to read out kernel memory (bsc#1092903)\n\nCVE-2018-6555: The irda_setsockopt function allowed local users to\ncause a denial of service (ias_object use-after-free and system crash)\nor possibly have unspecified other impact via an AF_IRDA socket\n(bnc#1106511)\n\nCVE-2018-6554: Prevent memory leak in the irda_bind function that\nallowed local users to cause a denial of service (memory consumption)\nby repeatedly binding an AF_IRDA socket (bnc#1106509)\n\nCVE-2018-1129: A flaw was found in the way signature calculation was\nhandled by cephx authentication protocol. An attacker having access to\nceph cluster network who is able to alter the message payload was able\nto bypass signature checks done by cephx protocol (bnc#1096748)\n\nCVE-2018-1128: It was found that cephx authentication protocol did not\nverify ceph clients correctly and was vulnerable to replay attack. Any\nattacker having access to ceph cluster network who is able to sniff\npackets on network can use this vulnerability to authenticate with\nceph service and perform actions allowed by ceph service (bnc#1096748)\n\nCVE-2018-10938: A crafted network packet sent remotely by an attacker\nforced the kernel to enter an infinite loop in the cipso_v4_optptr()\nfunction leading to a denial-of-service (bnc#1106016)\n\nCVE-2018-15572: The spectre_v2_select_mitigation function did not\nalways fill RSB upon a context switch, which made it easier for\nattackers to conduct userspace-userspace spectreRSB attacks\n(bnc#1102517)\n\nCVE-2018-10902: Protect against concurrent access to prevent double\nrealloc (double free) in snd_rawmidi_input_params() and\nsnd_rawmidi_output_status(). A malicious local attacker could have\nused this for privilege escalation (bnc#1105322).\n\nCVE-2018-9363: Prevent buffer overflow in hidp_process_report\n(bsc#1105292)\n\nCVE-2018-10883: A local user could have caused an out-of-bounds write\nin jbd2_journal_dirty_metadata(), a denial of service, and a system\ncrash by mounting and operating on a crafted ext4 filesystem image\n(bsc#1099863)\n\nCVE-2018-10879: A local user could have caused a use-after-free in\next4_xattr_set_entry function and a denial of service or unspecified\nother impact by renaming a file in a crafted ext4 filesystem image\n(bsc#1099844)\n\nCVE-2018-10878: A local user could have caused an out-of-bounds write\nand a denial of service or unspecified other impact by mounting and\noperating a crafted ext4 filesystem image (bsc#1099813)\n\nCVE-2018-10876: A use-after-free was possible in\next4_ext_remove_space() function when mounting and operating a crafted\next4 image (bsc#1099811)\n\nCVE-2018-10877: Prevent out-of-bound access in the\next4_ext_drop_refs() function when operating on a crafted ext4\nfilesystem image (bsc#1099846)\n\nCVE-2018-10881: A local user could have caused an out-of-bound access\nin ext4_get_group_info function, a denial of service, and a system\ncrash by mounting and operating on a crafted ext4 filesystem image\n(bsc#1099864)\n\nCVE-2018-10882: A local user could have caused an out-of-bound write,\na denial of service, and a system crash by unmounting a crafted ext4\nfilesystem image (bsc#1099849)\n\nCVE-2018-10880: Prevent stack-out-of-bounds write in the ext4\nfilesystem code when mounting and writing to a crafted ext4 image in\next4_update_inline_data(). An attacker could have used this to cause a\nsystem crash and a denial of service (bsc#1099845)\n\nThe update package also includes non-security fixes. See advisory for\ndetails.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the SUSE security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1012382\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1015342\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1015343\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1017967\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1019695\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1019699\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1020412\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1021121\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1022604\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1024361\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1024365\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1024376\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1027968\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1030552\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1033962\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1042286\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1048317\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1050431\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1053685\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1055014\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1056596\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1062604\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1063646\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1064232\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1065364\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1066223\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1068032\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1068075\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1069138\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1078921\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1080157\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1083663\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1085042\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1085536\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1085539\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1086457\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1087092\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1089066\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1090888\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1091171\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1091860\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1092903\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1096254\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1096748\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1097105\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1098253\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1098822\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099597\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099810\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099811\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099813\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099832\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099844\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099845\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099846\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099849\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099863\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099864\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099922\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099999\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1100000\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1100001\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1100132\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1101822\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1101841\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1102346\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1102486\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1102517\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1102715\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1102797\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1103269\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1103445\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104319\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104485\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104494\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104495\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104683\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104897\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105271\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105292\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105322\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105392\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105396\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105524\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105536\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105769\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106016\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106105\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106185\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106229\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106271\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106275\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106276\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106278\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106281\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106283\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106369\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106509\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106511\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106594\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106697\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106929\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106934\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106995\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1107060\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1107078\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1107319\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1107320\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1107689\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1107735\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1107966\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=963575\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=966170\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=966172\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=969470\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=969476\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=969477\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=970506\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10876/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10877/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10878/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10879/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10880/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10881/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10882/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10883/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10902/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10938/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10940/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-1128/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-1129/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-12896/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-13093/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-13094/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-13095/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-15572/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-16658/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-6554/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-6555/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-9363/\"\n );\n # https://www.suse.com/support/update/announcement/2018/suse-su-20182858-1/\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?737e2176\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"To install this SUSE Security Update use the SUSE recommended\ninstallation methods like YaST online_update or 'zypper patch'.\n\nAlternatively you can run the command listed for your product :\n\nSUSE Linux Enterprise Software Development Kit 12-SP3:zypper in -t\npatch SUSE-SLE-SDK-12-SP3-2018-2004=1\n\nSUSE Linux Enterprise Server 12-SP3:zypper in -t patch\nSUSE-SLE-SERVER-12-SP3-2018-2004=1\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-azure\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-azure-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-azure-base-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-azure-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-azure-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-azure-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-syms-azure\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:suse_linux:12\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/09/25\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/09/27\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release !~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"SUSE\");\nos_ver = eregmatch(pattern: \"^(SLE(S|D)\\d+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"SUSE\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^(SLES12)$\", string:os_ver)) audit(AUDIT_OS_NOT, \"SUSE SLES12\", \"SUSE \" + os_ver);\n\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^i[3-6]86$\" && \"x86_64\" >!< cpu && \"s390x\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"SUSE \" + os_ver, cpu);\nif (cpu >!< \"x86_64\") audit(AUDIT_ARCH_NOT, \"x86_64\", cpu);\n\n\nsp = get_kb_item(\"Host/SuSE/patchlevel\");\nif (isnull(sp)) sp = \"0\";\nif (os_ver == \"SLES12\" && (! ereg(pattern:\"^(3)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLES12 SP3\", os_ver + \" SP\" + sp);\n\n\nflag = 0;\nif (rpm_check(release:\"SLES12\", sp:\"3\", cpu:\"x86_64\", reference:\"kernel-azure-4.4.155-4.16.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"3\", cpu:\"x86_64\", reference:\"kernel-azure-base-4.4.155-4.16.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"3\", cpu:\"x86_64\", reference:\"kernel-azure-base-debuginfo-4.4.155-4.16.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"3\", cpu:\"x86_64\", reference:\"kernel-azure-debuginfo-4.4.155-4.16.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"3\", cpu:\"x86_64\", reference:\"kernel-azure-debugsource-4.4.155-4.16.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"3\", cpu:\"x86_64\", reference:\"kernel-azure-devel-4.4.155-4.16.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"3\", cpu:\"x86_64\", reference:\"kernel-syms-azure-4.4.155-4.16.1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"kernel\");\n}\n", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-12-02T15:31:57", "references": ["https://www.suse.com/security/cve/CVE-2018-10882/", "https://bugzilla.suse.com/show_bug.cgi?id=1064232", "https://bugzilla.suse.com/show_bug.cgi?id=1105348", "https://www.suse.com/security/cve/CVE-2018-13095/", "https://bugzilla.suse.com/show_bug.cgi?id=1103445", "https://bugzilla.suse.com/show_bug.cgi?id=1082519", "https://bugzilla.suse.com/show_bug.cgi?id=1094466", "https://bugzilla.suse.com/show_bug.cgi?id=1099864", "https://www.suse.com/security/cve/CVE-2018-16658/", "https://bugzilla.suse.com/show_bug.cgi?id=1100001", "https://bugzilla.suse.com/show_bug.cgi?id=1107689", "https://bugzilla.suse.com/show_bug.cgi?id=1099844", "https://www.suse.com/security/cve/CVE-2018-17182/", "https://bugzilla.suse.com/show_bug.cgi?id=1102870", "https://bugzilla.suse.com/show_bug.cgi?id=1105296", "https://bugzilla.suse.com/show_bug.cgi?id=1100152", "https://bugzilla.suse.com/show_bug.cgi?id=1109333", "https://bugzilla.suse.com/show_bug.cgi?id=1105396", "https://bugzilla.suse.com/show_bug.cgi?id=1099993", "https://www.suse.com/security/cve/CVE-2018-16276/", "https://www.suse.com/security/cve/CVE-2018-10853/", "https://bugzilla.suse.com/show_bug.cgi?id=1106512", "https://bugzilla.suse.com/show_bug.cgi?id=1106511", "https://bugzilla.suse.com/show_bug.cgi?id=1106594", "https://bugzilla.suse.com/show_bug.cgi?id=1106095", "https://bugzilla.suse.com/show_bug.cgi?id=1062604", "https://bugzilla.suse.com/show_bug.cgi?id=1012382", "https://www.suse.com/security/cve/CVE-2018-10883/", "https://www.suse.com/security/cve/CVE-2018-10902/", "https://bugzilla.suse.com/show_bug.cgi?id=1084536", "https://www.suse.com/security/cve/CVE-2018-12896/", "https://www.suse.com/security/cve/CVE-2018-6555/", "https://bugzilla.suse.com/show_bug.cgi?id=1108239", "https://bugzilla.suse.com/show_bug.cgi?id=1107966", "https://bugzilla.suse.com/show_bug.cgi?id=1099597", "https://bugzilla.suse.com/show_bug.cgi?id=1108399", "https://www.suse.com/security/cve/CVE-2018-10877/", "https://bugzilla.suse.com/show_bug.cgi?id=1085042", "https://bugzilla.suse.com/show_bug.cgi?id=1099849", "https://bugzilla.suse.com/show_bug.cgi?id=1099846", "https://bugzilla.suse.com/show_bug.cgi?id=1099811", "https://www.suse.com/security/cve/CVE-2018-14678/", "https://www.suse.com/security/cve/CVE-2018-15594/", "https://bugzilla.suse.com/show_bug.cgi?id=1099845", "https://www.suse.com/security/cve/CVE-2018-13094/", "https://bugzilla.suse.com/show_bug.cgi?id=1065364", "https://www.suse.com/security/cve/CVE-2018-10879/", "https://bugzilla.suse.com/show_bug.cgi?id=1107735", "https://bugzilla.suse.com/show_bug.cgi?id=1089066", "https://bugzilla.suse.com/show_bug.cgi?id=1100000", "https://www.suse.com/security/cve/CVE-2018-14617/", "https://www.suse.com/security/cve/CVE-2018-10938/", "https://bugzilla.suse.com/show_bug.cgi?id=1099922", "https://bugzilla.suse.com/show_bug.cgi?id=1104319", "https://www.suse.com/security/cve/CVE-2018-10880/", "https://bugzilla.suse.com/show_bug.cgi?id=1105292", "https://bugzilla.suse.com/show_bug.cgi?id=1102715", "https://www.suse.com/security/cve/CVE-2018-10940/", "https://www.suse.com/security/cve/CVE-2018-10878/", "https://www.suse.com/security/cve/CVE-2018-6554/", "https://bugzilla.suse.com/show_bug.cgi?id=1106016", "https://bugzilla.suse.com/show_bug.cgi?id=1106509", "https://bugzilla.suse.com/show_bug.cgi?id=1102517", "https://bugzilla.suse.com/show_bug.cgi?id=1092903", "https://bugzilla.suse.com/show_bug.cgi?id=1105322", "https://bugzilla.suse.com/show_bug.cgi?id=1042286", "https://www.suse.com/security/cve/CVE-2018-15572/", "https://www.suse.com/security/cve/CVE-2018-9363/", "https://www.suse.com/security/cve/CVE-2018-10881/", "https://www.suse.com/security/cve/CVE-2018-13093/", "https://bugzilla.suse.com/show_bug.cgi?id=1082863", "https://www.suse.com/security/cve/CVE-2018-7480/", "https://bugzilla.suse.com/show_bug.cgi?id=1095344", "https://bugzilla.suse.com/show_bug.cgi?id=1088810", "https://bugzilla.suse.com/show_bug.cgi?id=1099999", "https://bugzilla.suse.com/show_bug.cgi?id=1104495", "http://www.nessus.org/u?b663a3db", "https://www.suse.com/security/cve/CVE-2018-10876/", "https://bugzilla.suse.com/show_bug.cgi?id=1106369", "https://bugzilla.suse.com/show_bug.cgi?id=1099813", "https://bugzilla.suse.com/show_bug.cgi?id=1097104", "https://bugzilla.suse.com/show_bug.cgi?id=1096547", "https://bugzilla.suse.com/show_bug.cgi?id=1105536", "https://bugzilla.suse.com/show_bug.cgi?id=1099863", "https://www.suse.com/security/cve/CVE-2018-7757/"], "pluginID": "118034", "description": "The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes.\n\nCVE-2018-10853: A flaw was found in the way the KVM hypervisor emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check current privilege(CPL) level while emulating unprivileged instructions. An unprivileged guest user/process could use this flaw to potentially escalate privileges inside guest (bnc#1097104).\n\nCVE-2018-10876: A flaw was found in Linux kernel in the ext4 filesystem code. A use-after-free is possible in ext4_ext_remove_space() function when mounting and operating a crafted ext4 image. (bnc#1099811)\n\nCVE-2018-10877: Linux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4_ext_drop_refs() function when operating on a crafted ext4 filesystem image. (bnc#1099846)\n\nCVE-2018-10878: A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write and a denial of service or unspecified other impact is possible by mounting and operating a crafted ext4 filesystem image. (bnc#1099813)\n\nCVE-2018-10879: A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a use-after-free in ext4_xattr_set_entry function and a denial of service or unspecified other impact may occur by renaming a file in a crafted ext4 filesystem image. (bnc#1099844)\n\nCVE-2018-10880: Linux kernel is vulnerable to a stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a crafted ext4 image in ext4_update_inline_data(). An attacker could use this to cause a system crash and a denial of service. (bnc#1099845)\n\nCVE-2018-10881: A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound access in ext4_get_group_info function, a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image.\n(bnc#1099864)\n\nCVE-2018-10882: A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound write in in fs/jbd2/transaction.c code, a denial of service, and a system crash by unmounting a crafted ext4 filesystem image. (bnc#1099849)\n\nCVE-2018-10883: A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image.\n(bnc#1099863)\n\nCVE-2018-10902: It was found that the raw midi kernel driver did not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part of snd_rawmidi_ioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for privilege escalation (bnc#1105322).\n\nCVE-2018-10938: A crafted network packet sent remotely by an attacker may force the kernel to enter an infinite loop in the cipso_v4_optptr() function in net/ipv4/cipso_ipv4.c leading to a denial-of-service. A certain non-default configuration of LSM (Linux Security Module) and NetLabel should be set up on a system before an attacker could leverage this flaw (bnc#1106016).\n\nCVE-2018-10940: The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c allowed local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory (bnc#1092903).\n\nCVE-2018-12896: An Integer Overflow in kernel/time/posix-timers.c in the POSIX timer code is caused by the way the overrun accounting works. Depending on interval and expiry time values, the overrun can be larger than INT_MAX, but the accounting is int based. This basically made the accounting values, which are visible to user space via timer_getoverrun(2) and siginfo::si_overrun, random. For example, a local user can cause a denial of service (signed integer overflow) via crafted mmap, futex, timer_create, and timer_settime system calls (bnc#1099922).\n\nCVE-2018-13093: There is a NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free during allocation (bnc#1100001).\n\nCVE-2018-13094: An OOPS may occur for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp (bnc#1100000).\n\nCVE-2018-13095: A denial of service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork (bnc#1099999).\n\nCVE-2018-14617: There is a NULL pointer dereference and panic in hfsplus_lookup() in fs/hfsplus/dir.c when opening a file (that is purportedly a hard link) in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata directory (bnc#1102870).\n\nCVE-2018-14678: The xen_failsafe_callback entry point in arch/x86/entry/entry_64.S did not properly maintain RBX, which allowed local users to cause a denial of service (uninitialized memory usage and system crash). Within Xen, 64-bit x86 PV Linux guest OS users can trigger a guest OS crash or possibly gain privileges (bnc#1102715).\n\nCVE-2018-15572: The spectre_v2_select_mitigation function in arch/x86/kernel/cpu/bugs.c did not always fill RSB upon a context switch, which made it easier for attackers to conduct userspace-userspace spectreRSB attacks (bnc#1102517 bnc#1105296).\n\nCVE-2018-15594: arch/x86/kernel/paravirt.c mishandled certain indirect calls, which made it easier for attackers to conduct Spectre-v2 attacks against paravirtual guests (bnc#1105348).\n\nCVE-2018-16276: Local attackers could use user access read/writes with incorrect bounds checking in the yurex USB driver to crash the kernel or potentially escalate privileges (bnc#1106095).\n\nCVE-2018-16658: An information leak in cdrom_ioctl_drive_status in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 (bnc#1107689).\n\nCVE-2018-17182: The vmacache_flush_all function in mm/vmacache.c mishandled sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations (bnc#1108399).\n\nCVE-2018-6554: Memory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c allowed local users to cause a denial of service (memory consumption) by repeatedly binding an AF_IRDA socket (bnc#1106509).\n\nCVE-2018-6555: The irda_setsockopt function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c allowed local users to cause a denial of service (ias_object use-after-free and system crash) or possibly have unspecified other impact via an AF_IRDA socket (bnc#1106511).\n\nCVE-2018-7757: Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c allowed local users to cause a denial of service (memory consumption) via many read accesses to files in the /sys/class/sas_phy directory, as demonstrated by the /sys/class/sas_phy/phy-1:0:12/invalid_dword_count file (bnc#1084536).\n\nCVE-2018-9363: A buffer overflow in bluetooth HID report processing could be used by malicious bluetooth devices to crash the kernel or potentially execute code (bnc#1105292). The following security bugs were fixed :\n\nCVE-2018-7480: The blkcg_init_queue function in block/blk-cgroup.c allowed local users to cause a denial of service (double free) or possibly have unspecified other impact by triggering a creation failure (bnc#1082863).\n\nThe update package also includes non-security fixes. See advisory for details.\n\nNote that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "edition": 3, "reporter": "Tenable", "published": "2018-10-10T00:00:00", "title": "SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3084-1)", "type": "nessus", "enchantments": {"score": {"modified": "2018-12-02T15:31:57", "vector": "NONE", "value": 7.2}}, "naslFamily": "SuSE Local Security Checks", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-10882", "CVE-2018-10877", "CVE-2018-10940", "CVE-2018-10880", "CVE-2018-10878", "CVE-2018-13095", "CVE-2018-10853", "CVE-2018-10881", "CVE-2018-6555", "CVE-2018-13093", "CVE-2018-17182", "CVE-2018-7757", "CVE-2018-15594", "CVE-2018-9363", "CVE-2018-16276", "CVE-2018-14617", "CVE-2018-10883", "CVE-2018-16658", "CVE-2018-14678", "CVE-2018-7480", "CVE-2018-10902", "CVE-2018-10876", "CVE-2018-10938", "CVE-2018-10879", "CVE-2018-12896", "CVE-2018-15572", "CVE-2018-6554", "CVE-2018-13094"], "modified": "2018-12-01T00:00:00", "cpe": ["p-cpe:/a:novell:suse_linux:lttng-modules-kmp-default", "p-cpe:/a:novell:suse_linux:kernel-default-debugsource", "cpe:/o:novell:suse_linux:12", "p-cpe:/a:novell:suse_linux:lttng-modules-debugsource", "p-cpe:/a:novell:suse_linux:kernel-syms", "p-cpe:/a:novell:suse_linux:kernel-default-base-debuginfo", "p-cpe:/a:novell:suse_linux:kgraft-patch-4_4_121-92_95-default", "p-cpe:/a:novell:suse_linux:kernel-default-base", "p-cpe:/a:novell:suse_linux:lttng-modules-kmp-default-debuginfo", "p-cpe:/a:novell:suse_linux:kernel-default-debuginfo", "p-cpe:/a:novell:suse_linux:kernel-default-devel", "p-cpe:/a:novell:suse_linux:lttng-modules", "p-cpe:/a:novell:suse_linux:kernel-default-man", "p-cpe:/a:novell:suse_linux:kernel-default"], "id": "SUSE_SU-2018-3084-1.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=118034", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from SUSE update advisory SUSE-SU-2018:3084-1.\n# The text itself is copyright (C) SUSE.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(118034);\n script_version(\"1.3\");\n script_cvs_date(\"Date: 2018/12/01 13:19:06\");\n\n script_cve_id(\"CVE-2018-10853\", \"CVE-2018-10876\", \"CVE-2018-10877\", \"CVE-2018-10878\", \"CVE-2018-10879\", \"CVE-2018-10880\", \"CVE-2018-10881\", \"CVE-2018-10882\", \"CVE-2018-10883\", \"CVE-2018-10902\", \"CVE-2018-10938\", \"CVE-2018-10940\", \"CVE-2018-12896\", \"CVE-2018-13093\", \"CVE-2018-13094\", \"CVE-2018-13095\", \"CVE-2018-14617\", \"CVE-2018-14678\", \"CVE-2018-15572\", \"CVE-2018-15594\", \"CVE-2018-16276\", \"CVE-2018-16658\", \"CVE-2018-17182\", \"CVE-2018-6554\", \"CVE-2018-6555\", \"CVE-2018-7480\", \"CVE-2018-7757\", \"CVE-2018-9363\");\n\n script_name(english:\"SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3084-1)\");\n script_summary(english:\"Checks rpm output for the updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote SUSE host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive\nvarious security and bugfixes.\n\nCVE-2018-10853: A flaw was found in the way the KVM hypervisor\nemulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not\ncheck current privilege(CPL) level while emulating unprivileged\ninstructions. An unprivileged guest user/process could use this flaw\nto potentially escalate privileges inside guest (bnc#1097104).\n\nCVE-2018-10876: A flaw was found in Linux kernel in the ext4\nfilesystem code. A use-after-free is possible in\next4_ext_remove_space() function when mounting and operating a crafted\next4 image. (bnc#1099811)\n\nCVE-2018-10877: Linux kernel ext4 filesystem is vulnerable to an\nout-of-bound access in the ext4_ext_drop_refs() function when\noperating on a crafted ext4 filesystem image. (bnc#1099846)\n\nCVE-2018-10878: A flaw was found in the Linux kernel's ext4\nfilesystem. A local user can cause an out-of-bounds write and a denial\nof service or unspecified other impact is possible by mounting and\noperating a crafted ext4 filesystem image. (bnc#1099813)\n\nCVE-2018-10879: A flaw was found in the Linux kernel's ext4\nfilesystem. A local user can cause a use-after-free in\next4_xattr_set_entry function and a denial of service or unspecified\nother impact may occur by renaming a file in a crafted ext4 filesystem\nimage. (bnc#1099844)\n\nCVE-2018-10880: Linux kernel is vulnerable to a stack-out-of-bounds\nwrite in the ext4 filesystem code when mounting and writing to a\ncrafted ext4 image in ext4_update_inline_data(). An attacker could use\nthis to cause a system crash and a denial of service. (bnc#1099845)\n\nCVE-2018-10881: A flaw was found in the Linux kernel's ext4\nfilesystem. A local user can cause an out-of-bound access in\next4_get_group_info function, a denial of service, and a system crash\nby mounting and operating on a crafted ext4 filesystem image.\n(bnc#1099864)\n\nCVE-2018-10882: A flaw was found in the Linux kernel's ext4\nfilesystem. A local user can cause an out-of-bound write in in\nfs/jbd2/transaction.c code, a denial of service, and a system crash by\nunmounting a crafted ext4 filesystem image. (bnc#1099849)\n\nCVE-2018-10883: A flaw was found in the Linux kernel's ext4\nfilesystem. A local user can cause an out-of-bounds write in\njbd2_journal_dirty_metadata(), a denial of service, and a system crash\nby mounting and operating on a crafted ext4 filesystem image.\n(bnc#1099863)\n\nCVE-2018-10902: It was found that the raw midi kernel driver did not\nprotect against concurrent access which leads to a double realloc\n(double free) in snd_rawmidi_input_params() and\nsnd_rawmidi_output_status() which are part of snd_rawmidi_ioctl()\nhandler in rawmidi.c file. A malicious local attacker could possibly\nuse this for privilege escalation (bnc#1105322).\n\nCVE-2018-10938: A crafted network packet sent remotely by an attacker\nmay force the kernel to enter an infinite loop in the\ncipso_v4_optptr() function in net/ipv4/cipso_ipv4.c leading to a\ndenial-of-service. A certain non-default configuration of LSM (Linux\nSecurity Module) and NetLabel should be set up on a system before an\nattacker could leverage this flaw (bnc#1106016).\n\nCVE-2018-10940: The cdrom_ioctl_media_changed function in\ndrivers/cdrom/cdrom.c allowed local attackers to use a incorrect\nbounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out\nkernel memory (bnc#1092903).\n\nCVE-2018-12896: An Integer Overflow in kernel/time/posix-timers.c in\nthe POSIX timer code is caused by the way the overrun accounting\nworks. Depending on interval and expiry time values, the overrun can\nbe larger than INT_MAX, but the accounting is int based. This\nbasically made the accounting values, which are visible to user space\nvia timer_getoverrun(2) and siginfo::si_overrun, random. For example,\na local user can cause a denial of service (signed integer overflow)\nvia crafted mmap, futex, timer_create, and timer_settime system calls\n(bnc#1099922).\n\nCVE-2018-13093: There is a NULL pointer dereference and panic in\nlookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a\ncorrupted xfs image. This occurs because of a lack of proper\nvalidation that cached inodes are free during allocation\n(bnc#1100001).\n\nCVE-2018-13094: An OOPS may occur for a corrupted xfs image after\nxfs_da_shrink_inode() is called with a NULL bp (bnc#1100000).\n\nCVE-2018-13095: A denial of service (memory corruption and BUG) can\noccur for a corrupted xfs image upon encountering an inode that is in\nextent format, but has more extents than fit in the inode fork\n(bnc#1099999).\n\nCVE-2018-14617: There is a NULL pointer dereference and panic in\nhfsplus_lookup() in fs/hfsplus/dir.c when opening a file (that is\npurportedly a hard link) in an hfs+ filesystem that has malformed\ncatalog data, and is mounted read-only without a metadata directory\n(bnc#1102870).\n\nCVE-2018-14678: The xen_failsafe_callback entry point in\narch/x86/entry/entry_64.S did not properly maintain RBX, which allowed\nlocal users to cause a denial of service (uninitialized memory usage\nand system crash). Within Xen, 64-bit x86 PV Linux guest OS users can\ntrigger a guest OS crash or possibly gain privileges (bnc#1102715).\n\nCVE-2018-15572: The spectre_v2_select_mitigation function in\narch/x86/kernel/cpu/bugs.c did not always fill RSB upon a context\nswitch, which made it easier for attackers to conduct\nuserspace-userspace spectreRSB attacks (bnc#1102517 bnc#1105296).\n\nCVE-2018-15594: arch/x86/kernel/paravirt.c mishandled certain indirect\ncalls, which made it easier for attackers to conduct Spectre-v2\nattacks against paravirtual guests (bnc#1105348).\n\nCVE-2018-16276: Local attackers could use user access read/writes with\nincorrect bounds checking in the yurex USB driver to crash the kernel\nor potentially escalate privileges (bnc#1106095).\n\nCVE-2018-16658: An information leak in cdrom_ioctl_drive_status in\ndrivers/cdrom/cdrom.c could be used by local attackers to read kernel\nmemory because a cast from unsigned long to int interferes with bounds\nchecking. This is similar to CVE-2018-10940 (bnc#1107689).\n\nCVE-2018-17182: The vmacache_flush_all function in mm/vmacache.c\nmishandled sequence number overflows. An attacker can trigger a\nuse-after-free (and possibly gain privileges) via certain thread\ncreation, map, unmap, invalidation, and dereference operations\n(bnc#1108399).\n\nCVE-2018-6554: Memory leak in the irda_bind function in\nnet/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c\nallowed local users to cause a denial of service (memory consumption)\nby repeatedly binding an AF_IRDA socket (bnc#1106509).\n\nCVE-2018-6555: The irda_setsockopt function in net/irda/af_irda.c and\nlater in drivers/staging/irda/net/af_irda.c allowed local users to\ncause a denial of service (ias_object use-after-free and system crash)\nor possibly have unspecified other impact via an AF_IRDA socket\n(bnc#1106511).\n\nCVE-2018-7757: Memory leak in the sas_smp_get_phy_events function in\ndrivers/scsi/libsas/sas_expander.c allowed local users to cause a\ndenial of service (memory consumption) via many read accesses to files\nin the /sys/class/sas_phy directory, as demonstrated by the\n/sys/class/sas_phy/phy-1:0:12/invalid_dword_count file (bnc#1084536).\n\nCVE-2018-9363: A buffer overflow in bluetooth HID report processing\ncould be used by malicious bluetooth devices to crash the kernel or\npotentially execute code (bnc#1105292). The following security bugs\nwere fixed :\n\nCVE-2018-7480: The blkcg_init_queue function in block/blk-cgroup.c\nallowed local users to cause a denial of service (double free) or\npossibly have unspecified other impact by triggering a creation\nfailure (bnc#1082863).\n\nThe update package also includes non-security fixes. See advisory for\ndetails.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the SUSE security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1012382\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1042286\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1062604\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1064232\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1065364\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1082519\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1082863\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1084536\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1085042\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1088810\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1089066\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1092903\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1094466\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1095344\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1096547\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1097104\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099597\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099811\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099813\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099844\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099845\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099846\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099849\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099863\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099864\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099922\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099993\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1099999\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1100000\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1100001\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1100152\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1102517\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1102715\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1102870\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1103445\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104319\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1104495\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105292\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105296\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105322\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105348\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105396\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1105536\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106016\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106095\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106369\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106509\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106511\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106512\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1106594\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1107689\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1107735\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1107966\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1108239\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1108399\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.suse.com/show_bug.cgi?id=1109333\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10853/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10876/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10877/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10878/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10879/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10880/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10881/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10882/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10883/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10902/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10938/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-10940/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-12896/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-13093/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-13094/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-13095/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-14617/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-14678/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-15572/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-15594/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-16276/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-16658/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-17182/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-6554/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-6555/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-7480/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-7757/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.suse.com/security/cve/CVE-2018-9363/\"\n );\n # https://www.suse.com/support/update/announcement/2018/suse-su-20183084-1/\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?b663a3db\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"To install this SUSE Security Update use the SUSE recommended\ninstallation methods like YaST online_update or 'zypper patch'.\n\nAlternatively you can run the command listed for your product :\n\nSUSE OpenStack Cloud 7:zypper in -t patch\nSUSE-OpenStack-Cloud-7-2018-2188=1\n\nSUSE Linux Enterprise Server for SAP 12-SP2:zypper in -t patch\nSUSE-SLE-SAP-12-SP2-2018-2188=1\n\nSUSE Linux Enterprise Server 12-SP2-LTSS:zypper in -t patch\nSUSE-SLE-SERVER-12-SP2-2018-2188=1\n\nSUSE Linux Enterprise High Availability 12-SP2:zypper in -t patch\nSUSE-SLE-HA-12-SP2-2018-2188=1\n\nSUSE Enterprise Storage 4:zypper in -t patch\nSUSE-Storage-4-2018-2188=1\n\nOpenStack Cloud Magnum Orchestration 7:zypper in -t patch\nSUSE-OpenStack-Cloud-Magnum-Orchestration-7-2018-2188=1\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-base\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-base-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-default-man\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kernel-syms\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:kgraft-patch-4_4_121-92_95-default\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:lttng-modules\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:lttng-modules-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:lttng-modules-kmp-default\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:suse_linux:lttng-modules-kmp-default-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:suse_linux:12\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/10/09\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/10/10\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release !~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"SUSE\");\nos_ver = eregmatch(pattern: \"^(SLE(S|D)\\d+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"SUSE\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^(SLES12)$\", string:os_ver)) audit(AUDIT_OS_NOT, \"SUSE SLES12\", \"SUSE \" + os_ver);\n\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^i[3-6]86$\" && \"x86_64\" >!< cpu && \"s390x\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"SUSE \" + os_ver, cpu);\n\nsp = get_kb_item(\"Host/SuSE/patchlevel\");\nif (isnull(sp)) sp = \"0\";\nif (os_ver == \"SLES12\" && (! ereg(pattern:\"^(2)$\", string:sp))) audit(AUDIT_OS_NOT, \"SLES12 SP2\", os_ver + \" SP\" + sp);\n\n\nflag = 0;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"kgraft-patch-4_4_121-92_95-default-1-3.4.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"lttng-modules-2.7.1-9.6.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"lttng-modules-debugsource-2.7.1-9.6.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"lttng-modules-kmp-default-2.7.1_k4.4.121_92.95-9.6.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"x86_64\", reference:\"lttng-modules-kmp-default-debuginfo-2.7.1_k4.4.121_92.95-9.6.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", cpu:\"s390x\", reference:\"kernel-default-man-4.4.121-92.95.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", reference:\"kernel-default-4.4.121-92.95.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", reference:\"kernel-default-base-4.4.121-92.95.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", reference:\"kernel-default-base-debuginfo-4.4.121-92.95.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", reference:\"kernel-default-debuginfo-4.4.121-92.95.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", reference:\"kernel-default-debugsource-4.4.121-92.95.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", reference:\"kernel-default-devel-4.4.121-92.95.1\")) flag++;\nif (rpm_check(release:\"SLES12\", sp:\"2\", reference:\"kernel-syms-4.4.121-92.95.1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"kernel\");\n}\n", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "suse": [{"lastseen": "2018-08-17T15:01:24", "references": ["https://bugzilla.suse.com/1097808", "https://bugzilla.suse.com/1104319", "https://bugzilla.suse.com/1101891", "https://bugzilla.suse.com/1099864", "https://bugzilla.suse.com/1101837", "https://bugzilla.suse.com/1101896", "https://bugzilla.suse.com/1081917", "https://bugzilla.suse.com/1099811", "https://bugzilla.suse.com/1101833", "https://bugzilla.suse.com/1101844", "https://bugzilla.suse.com/1101903", "https://bugzilla.suse.com/1102340", "https://bugzilla.suse.com/1086906", "https://bugzilla.suse.com/1101116", "https://bugzilla.suse.com/1099863", "https://bugzilla.suse.com/1090888", "https://bugzilla.suse.com/1104777", "https://bugzilla.suse.com/1083647", "https://bugzilla.suse.com/1103886", "https://bugzilla.suse.com/1086314", "https://bugzilla.suse.com/1103269", "https://bugzilla.suse.com/1101890", "https://bugzilla.suse.com/1103277", "https://bugzilla.suse.com/1101839", "https://bugzilla.suse.com/1104494", "https://bugzilla.suse.com/1099846", "https://bugzilla.suse.com/1101874", "https://bugzilla.suse.com/1101845", "https://bugzilla.suse.com/1101853", "https://bugzilla.suse.com/1101852", "https://bugzilla.suse.com/1099845", "https://bugzilla.suse.com/1086288", "https://bugzilla.suse.com/1104066", "https://bugzilla.suse.com/1086317", "https://bugzilla.suse.com/1101893", "https://bugzilla.suse.com/1101867", "https://bugzilla.suse.com/1086315", "https://bugzilla.suse.com/1101885", "https://bugzilla.suse.com/1065600", "https://bugzilla.suse.com/1097577", "https://bugzilla.suse.com/1104353", "https://bugzilla.suse.com/1101895", "https://bugzilla.suse.com/1099844", "https://bugzilla.suse.com/1103097", "https://bugzilla.suse.com/1101887", "https://bugzilla.suse.com/1103445", "https://bugzilla.suse.com/1101900", "https://bugzilla.suse.com/1101882", "https://bugzilla.suse.com/1104427", "https://bugzilla.suse.com/1101902", "https://bugzilla.suse.com/1101832", "https://bugzilla.suse.com/1103363", "https://bugzilla.suse.com/1089343", "https://bugzilla.suse.com/1101847", "https://bugzilla.suse.com/1099813", "https://bugzilla.suse.com/1104495", "https://bugzilla.suse.com/1097104", "https://bugzilla.suse.com/1101843", "https://bugzilla.suse.com/1101883", "https://bugzilla.suse.com/1087081", "https://bugzilla.suse.com/1087092", "https://bugzilla.suse.com/1101872", "https://bugzilla.suse.com/1099849", "https://bugzilla.suse.com/1100132", "https://bugzilla.suse.com/1086331", "https://bugzilla.suse.com/1101828", "https://bugzilla.suse.com/1086327", "https://bugzilla.suse.com/1104708", "https://bugzilla.suse.com/1104365", "https://bugzilla.suse.com/1104211", "https://bugzilla.suse.com/1101875", "https://bugzilla.suse.com/1101841"], "affectedPackage": [{"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-kvmsmall-debuginfo-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-kvmsmall-debuginfo", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-vanilla-devel-debuginfo-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-vanilla-devel-debuginfo", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-debug-debugsource-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-debug-debugsource", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "noarch", "packageFilename": "kernel-docs-4.12.14-lp150.12.16.1.noarch.rpm", "packageName": "kernel-docs", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-debug-devel-debuginfo-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-debug-devel-debuginfo", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "noarch", "packageFilename": "kernel-source-vanilla-4.12.14-lp150.12.16.1.noarch.rpm", "packageName": "kernel-source-vanilla", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-obs-build-debugsource-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-obs-build-debugsource", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-debug-debuginfo-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-debug-debuginfo", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-syms-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-syms", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-vanilla-devel-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-vanilla-devel", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-default-devel-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-default-devel", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-kvmsmall-devel-debuginfo-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-kvmsmall-devel-debuginfo", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-kvmsmall-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-kvmsmall", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-kvmsmall-base-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-kvmsmall-base", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "noarch", "packageFilename": "kernel-devel-4.12.14-lp150.12.16.1.noarch.rpm", "packageName": "kernel-devel", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-default-base-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-default-base", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-vanilla-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-vanilla", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-debug-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-debug", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-kvmsmall-debugsource-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-kvmsmall-debugsource", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-default-debugsource-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-default-debugsource", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-vanilla-base-debuginfo-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-vanilla-base-debuginfo", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-default-devel-debuginfo-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-default-devel-debuginfo", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-default-debuginfo-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-default-debuginfo", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-default-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-default", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-vanilla-debugsource-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-vanilla-debugsource", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-vanilla-debuginfo-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-vanilla-debuginfo", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "noarch", "packageFilename": "kernel-docs-html-4.12.14-lp150.12.16.1.noarch.rpm", "packageName": "kernel-docs-html", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "noarch", "packageFilename": "kernel-macros-4.12.14-lp150.12.16.1.noarch.rpm", "packageName": "kernel-macros", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-debug-base-debuginfo-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-debug-base-debuginfo", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-obs-build-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-obs-build", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-default-base-debuginfo-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-default-base-debuginfo", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-kvmsmall-devel-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-kvmsmall-devel", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-vanilla-base-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-vanilla-base", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-debug-base-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-debug-base", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-debug-devel-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-debug-devel", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-obs-qa-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-obs-qa", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "noarch", "packageFilename": "kernel-source-4.12.14-lp150.12.16.1.noarch.rpm", "packageName": "kernel-source", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "15.0", "packageVersion": "4.12.14-lp150.12.16.1", "arch": "x86_64", "packageFilename": "kernel-kvmsmall-base-debuginfo-4.12.14-lp150.12.16.1.x86_64.rpm", "packageName": "kernel-kvmsmall-base-debuginfo", "operator": "lt"}], "description": "The openSUSE Leap 15.0 kernel was updated to receive various security and\n bugfixes.\n\n The following security bugs were fixed:\n\n - CVE-2018-10853: A flaw was found in KVM in which certain instructions\n such as sgdt/sidt call segmented_write_std doesn't propagate access\n correctly. As such, during userspace induced exception, the guest can\n incorrectly assume that the exception happened in the kernel and panic\n (bnc#1097104).\n - CVE-2018-10876: A flaw was found in the ext4 filesystem code. A\n use-after-free is possible in ext4_ext_remove_space() function when\n mounting and operating a crafted ext4 image. (bnc#1099811)\n - CVE-2018-10877: Linux kernel ext4 filesystem is vulnerable to an\n out-of-bound access in the ext4_ext_drop_refs() function when operating\n on a crafted ext4 filesystem image. (bnc#1099846)\n - CVE-2018-10878: A flaw was found in the ext4 filesystem. A local user\n can cause an out-of-bounds write and a denial of service or unspecified\n other impact is possible by mounting and operating a crafted ext4\n filesystem image. (bnc#1099813)\n - CVE-2018-10879: A flaw was found in the ext4 filesystem. A local user\n can cause a use-after-free in ext4_xattr_set_entry function and a denial\n of service or unspecified other impact may occur by renaming a file in a\n crafted ext4 filesystem image. (bnc#1099844)\n - CVE-2018-10880: Linux kernel is vulnerable to a stack-out-of-bounds\n write in the ext4 filesystem code when mounting and writing to a crafted\n ext4 image in ext4_update_inline_data(). An attacker could use this to\n cause a system crash and a denial of service. (bnc#1099845)\n - CVE-2018-10881: A flaw was found in the ext4 filesystem. A local user\n can cause an out-of-bound access in ext4_get_group_info function, a\n denial of service, and a system crash by mounting and operating on a\n crafted ext4 filesystem image. (bnc#1099864)\n - CVE-2018-10882: A flaw was found in the ext4 filesystem. A local user\n can cause an out-of-bound write in in fs/jbd2/transaction.c code, a\n denial of service, and a system crash by unmounting a crafted ext4\n filesystem image. (bnc#1099849)\n - CVE-2018-10883: A flaw was found in the ext4 filesystem. A local user\n can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a\n denial of service, and a system crash by mounting and operating on a\n crafted ext4 filesystem image. (bnc#1099863)\n - CVE-2018-3620: Systems with microprocessors utilizing speculative\n execution and address translations may allow unauthorized disclosure of\n information residing in the L1 data cache to an attacker with local user\n access via a terminal page fault and a side-channel analysis\n (bnc#1087081).\n - CVE-2018-3646: Systems with microprocessors utilizing speculative\n execution and address translations may allow unauthorized disclosure of\n information residing in the L1 data cache to an attacker with local user\n access with guest OS privilege via a terminal page fault and a\n side-channel analysis (bnc#1089343 bnc#1104365).\n - CVE-2018-5391 aka &quot;FragmentSmack&quot;: A flaw in the IP packet reassembly\n could be used by remote attackers to consume lots of CPU time\n (bnc#1103097).\n\n The following non-security bugs were fixed:\n\n - afs: Fix directory permissions check (bsc#1101828).\n - bdi: Move cgroup bdi_writeback to a dedicated low concurrency workqueue\n (bsc#1101867).\n - be2net: gather debug info and reset adapter (only for Lancer) on a\n tx-timeout (bsc#1086288).\n - be2net: Update the driver version to 12.0.0.0 (bsc#1086288 ).\n - befs_lookup(): use d_splice_alias() (bsc#1101844).\n - block: Fix transfer when chunk sectors exceeds max (bsc#1101874).\n - bpf, ppc64: fix unexpected r0=0 exit path inside bpf_xadd (bsc#1083647).\n - branch-check: fix long-&gt;int truncation when profiling branches\n (bsc#1101116,).\n - cdrom: do not call check_disk_change() inside cdrom_open() (bsc#1101872).\n - compiler.h: enable builtin overflow checkers and add fallback code\n (bsc#1101116,).\n - cpu/hotplug: Make bringup/teardown of smp threads symmetric\n (bsc#1089343).\n - cpu/hotplug: Provide knobs to control SMT (bsc#1089343).\n - cpu/hotplug: Split do_cpu_down() (bsc#1089343).\n - delayacct: fix crash in delayacct_blkio_end() after delayacct init\n failure (bsc#1104066).\n - dm: add writecache target (bsc#1101116,).\n - dm writecache: support optional offset for start of device\n (bsc#1101116,).\n - dm writecache: use 2-factor allocator arguments (bsc#1101116,).\n - EDAC: Add missing MEM_LRDDR4 entry in edac_mem_types[] (bsc#1103886).\n - EDAC: Drop duplicated array of strings for memory type names\n (bsc#1103886).\n - ext2: fix a block leak (bsc#1101875).\n - ext4: add more mount time checks of the superblock (bsc#1101900).\n - ext4: bubble errors from ext4_find_inline_data_nolock() up to\n ext4_iget() (bsc#1101896).\n - ext4: check for allocation block validity with block group locked\n (bsc#1104495).\n - ext4: check superblock mapped prior to committing (bsc#1101902).\n - ext4: do not update s_last_mounted of a frozen fs (bsc#1101841).\n - ext4: factor out helper ext4_sample_last_mounted() (bsc#1101841).\n - ext4: fix check to prevent initializing reserved inodes (bsc#1104319).\n - ext4: fix false negatives *and* false positives in\n ext4_check_descriptors() (bsc#1103445).\n - ext4: fix fencepost error in check for inode count overflow during\n resize (bsc#1101853).\n - ext4: fix inline data updates with checksums enabled (bsc#1104494).\n - ext4: include the illegal physical block in the bad map ext4_error msg\n (bsc#1101903).\n - ext4: report delalloc reserve as non-free in statfs for project quota\n (bsc#1101843).\n - ext4: update mtime in ext4_punch_hole even if no blocks are released\n (bsc#1101895).\n - f2fs: call unlock_new_inode() before d_instantiate() (bsc#1101837).\n - fix io_destroy()/aio_complete() race (bsc#1101852).\n - Force log to disk before reading the AGF during a fstrim (bsc#1101893).\n - fscache: Fix hanging wait on page discarded by writeback (bsc#1101885).\n - fs: clear writeback errors in inode_init_always (bsc#1101882).\n - fs: do not scan the inode cache before SB_BORN is set (bsc#1101883).\n - hns3: fix unused function warning (bsc#1104353).\n - hns3pf: do not check handle during mqprio offload (bsc#1104353 ).\n - hns3pf: fix hns3_del_tunnel_port() (bsc#1104353).\n - hns3pf: Fix some harmless copy and paste bugs (bsc#1104353 ).\n - hv_netvsc: Fix napi reschedule while receive completion is busy ().\n - hv/netvsc: Fix NULL dereference at single queue mode fallback\n (bsc#1104708).\n - hwmon: (asus_atk0110) Replace deprecated device register call\n (bsc#1103363).\n - IB/hns: Annotate iomem pointers correctly (bsc#1104427 ).\n - IB/hns: Avoid compile test under non 64bit environments (bsc#1104427).\n - IB/hns: Declare local functions 'static' (bsc#1104427 ).\n - IB/hns: fix boolreturn.cocci warnings (bsc#1104427).\n - IB/hns: Fix for checkpatch.pl comment style warnings (bsc#1104427).\n - IB/hns: fix memory leak on ah on error return path (bsc#1104427 ).\n - IB/hns: fix returnvar.cocci warnings (bsc#1104427).\n - IB/hns: fix semicolon.cocci warnings (bsc#1104427).\n - IB/hns: Fix the bug of polling cq failed for loopback Qps (bsc#1104427).\n Refresh\n patches.suse/0001-IB-hns-checking-for-IS_ERR-instead-of-NULL.patch.\n - IB/hns: Fix the bug with modifying the MAC address without removing the\n driver (bsc#1104427).\n - IB/hns: Fix the bug with rdma operation (bsc#1104427 ).\n - IB/hns: Fix the bug with wild pointer when destroy rc qp (bsc#1104427).\n - IB/hns: include linux/interrupt.h (bsc#1104427).\n - IB/hns: Support compile test for hns RoCE driver (bsc#1104427 ).\n - IB/hns: Use zeroing memory allocator instead of allocator/memset\n (bsc#1104427).\n - isofs: fix potential memory leak in mount option parsing (bsc#1101887).\n - jump_label: Fix concurrent static_key_enable/disable() (bsc#1089343).\n - jump_label: Provide hotplug context variants (bsc#1089343).\n - jump_label: Reorder hotplug lock and jump_label_lock (bsc#1089343).\n - kabi/severities: Allow kABI changes for kvm/x86 (except for kvm_x86_ops)\n - kabi/severities: ignore qla2xxx as all symbols are internal\n - kabi/severities: ignore x86_kvm_ops; lttng-modules would have to be\n adjusted in case they depend on this particular change\n - kabi/severities: Relax kvm_vcpu_* kABI breakage\n - media: rc: oops in ir_timer_keyup after device unplug (bsc#1090888).\n - mm: fix __gup_device_huge vs unmap (bsc#1101839).\n - net: hns3: Add a check for client instance init state (bsc#1104353).\n - net: hns3: add a mask initialization for mac_vlan table (bsc#1104353).\n - net: hns3: Add *Asserting Reset* mailbox message &amp; handling in VF\n (bsc#1104353).\n - net: hns3: add Asym Pause support to phy default features (bsc#1104353).\n - net: hns3: Add dcb netlink interface for the support of DCB feature\n (bsc#1104353).\n - net: hns3: Add DCB support when interacting with network stack\n (bsc#1104353).\n - net: hns3: Add ethtool interface for vlan filter (bsc#1104353 ).\n - net: hns3: add ethtool_ops.get_channels support for VF (bsc#1104353).\n - net: hns3: add ethtool_ops.get_coalesce support to PF (bsc#1104353).\n - net: hns3: add ethtool_ops.set_coalesce support to PF (bsc#1104353).\n - net: hns3: add ethtool -p support for fiber port (bsc#1104353 ).\n - net: hns3: add ethtool related offload command (bsc#1104353 ).\n - net: hns3: Add Ethtool support to HNS3 driver (bsc#1104353 ).\n - net: hns3: add existence checking before adding unicast mac address\n (bsc#1104353).\n - net: hns3: add existence check when remove old uc mac address\n (bsc#1104353).\n - net: hns3: add feature check when feature changed (bsc#1104353 ).\n - net: hns3: add get_link support to VF (bsc#1104353).\n - net: hns3: add get/set_coalesce support to VF (bsc#1104353 ).\n - net: hns3: add handling vlan tag offload in bd (bsc#1104353 ).\n - net: hns3: Add hclge_dcb module for the support of DCB feature\n (bsc#1104353).\n - net: hns3: Add HNS3 Acceleration Engine &amp; Compatibility Layer Support\n (bsc#1104353).\n - net: hns3: Add HNS3 driver to kernel build framework &amp; MAINTAINERS\n (bsc#1104353).\n - net: hns3: Add hns3_get_handle macro in hns3 driver (bsc#1104353 ).\n - net: hns3: Add HNS3 IMP(Integrated Mgmt Proc) Cmd Interface Support\n (bsc#1104353).\n - net: hns3: Add HNS3 VF driver to kernel build framework (bsc#1104353).\n - net: hns3: Add HNS3 VF HCL(Hardware Compatibility Layer) Support\n (bsc#1104353).\n - net: hns3: Add HNS3 VF IMP(Integrated Management Proc) cmd interface\n (bsc#1104353).\n - net: hns3: add int_gl_idx setup for TX and RX queues (bsc#1104353).\n - net: hns3: add int_gl_idx setup for VF (bsc#1104353 ).\n - net: hns3: Add mac loopback selftest support in hns3 driver\n (bsc#1104353).\n - net: hns3: Add mailbox interrupt handling to PF driver (bsc#1104353).\n - net: hns3: Add mailbox support to PF driver (bsc#1104353 ).\n - net: hns3: Add mailbox support to VF driver (bsc#1104353 ).\n - net: hns3: add manager table initialization for hardware (bsc#1104353).\n - net: hns3: Add MDIO support to HNS3 Ethernet driver for hip08 SoC\n (bsc#1104353).\n - net: hns3: Add missing break in misc_irq_handle (bsc#1104353 ).\n - net: hns3: Add more packet size statisctics (bsc#1104353 ).\n - net: hns3: add MTU initialization for hardware (bsc#1104353 ).\n - net: hns3: add net status led support for fiber port (bsc#1104353).\n - net: hns3: add nic_client check when initialize roce base information\n (bsc#1104353).\n - net: hns3: add querying speed and duplex support to VF (bsc#1104353).\n - net: hns3: Add repeat address checking for setting mac address\n (bsc#1104353).\n - net: hns3: Add reset interface implementation in client (bsc#1104353).\n - net: hns3: Add reset process in hclge_main (bsc#1104353 ).\n - net: hns3: Add reset service task for handling reset requests\n (bsc#1104353).\n - net: hns3: add result checking for VF when modify unicast mac address\n (bsc#1104353).\n - net: hns3: Add some interface for the support of DCB feature\n (bsc#1104353).\n - net: hns3: Adds support for led locate command for copper port\n (bsc#1104353).\n - net: hns3: Add STRP_TAGP field support for hardware revision 0x21\n (bsc#1104353).\n - net: hns3: Add support for dynamically buffer reallocation (bsc#1104353).\n - net: hns3: add support for ETHTOOL_GRXFH (bsc#1104353 ).\n - net: hns3: add support for get_regs (bsc#1104353).\n - net: hns3: Add support for IFF_ALLMULTI flag (bsc#1104353 ).\n - net: hns3: Add support for misc interrupt (bsc#1104353 ).\n - net: hns3: add support for nway_reset (bsc#1104353).\n - net: hns3: Add support for PFC setting in TM module (bsc#1104353 ).\n - net: hns3: Add support for port shaper setting in TM module\n (bsc#1104353).\n - net: hns3: add support for querying advertised pause frame by ethtool\n ethx (bsc#1104353).\n - net: hns3: add support for querying pfc puase packets statistic\n (bsc#1104353).\n - net: hns3: add support for set_link_ksettings (bsc#1104353 ).\n - net: hns3: add support for set_pauseparam (bsc#1104353 ).\n - net: hns3: add support for set_ringparam (bsc#1104353 ).\n - net: hns3: add support for set_rxnfc (bsc#1104353).\n - net: hns3: Add support for tx_accept_tag2 and tx_accept_untag2 config\n (bsc#1104353).\n - net: hns3: add support for VF driver inner interface\n hclgevf_ops.get_tqps_and_rss_info (bsc#1104353).\n - net: hns3: Add support of hardware rx-vlan-offload to HNS3 VF driver\n (bsc#1104353).\n - net: hns3: Add support of HNS3 Ethernet Driver for hip08 SoC\n (bsc#1104353).\n - net: hns3: Add support of .sriov_configure in HNS3 driver (bsc#1104353).\n - net: hns3: Add support of the HNAE3 framework (bsc#1104353 ).\n - net: hns3: Add support of TX Scheduler &amp; Shaper to HNS3 driver\n (bsc#1104353).\n - net: hns3: Add support to change MTU in HNS3 hardware (bsc#1104353).\n - net: hns3: Add support to enable TX/RX promisc mode for H/W rev(0x21)\n (bsc#1104353).\n - net: hns3: add support to modify tqps number (bsc#1104353 ).\n - net: hns3: add support to query tqps number (bsc#1104353 ).\n - net: hns3: Add support to re-initialize the hclge device (bsc#1104353).\n - net: hns3: Add support to request VF Reset to PF (bsc#1104353 ).\n - net: hns3: Add support to reset the enet/ring mgmt layer (bsc#1104353).\n - net: hns3: add support to update flow control settings after autoneg\n (bsc#1104353).\n - net: hns3: Add tc-based TM support for sriov enabled port (bsc#1104353).\n - net: hns3: Add timeout process in hns3_enet (bsc#1104353 ).\n - net: hns3: Add VF Reset device state and its handling (bsc#1104353).\n - net: hns3: Add VF Reset Service Task to support event handling\n (bsc#1104353).\n - net: hns3: add vlan offload config command (bsc#1104353 ).\n - net: hns3: change GL update rate (bsc#1104353).\n - net: hns3: Change PF to add ring-vect binding &amp; resetQ to mailbox\n (bsc#1104353).\n - net: hns3: Change return type of hnae3_register_ae_algo (bsc#1104353).\n - net: hns3: Change return type of hnae3_register_ae_dev (bsc#1104353).\n - net: hns3: Change return value in hnae3_register_client (bsc#1104353).\n - net: hns3: Changes required in PF mailbox to support VF reset\n (bsc#1104353).\n - net: hns3: Changes to make enet watchdog timeout func common for PF/VF\n (bsc#1104353).\n - net: hns3: Changes to support ARQ(Asynchronous Receive Queue)\n (bsc#1104353).\n - net: hns3: change the returned tqp number by ethtool -x (bsc#1104353).\n - net: hns3: change the time interval of int_gl calculating (bsc#1104353).\n - net: hns3: change the unit of GL value macro (bsc#1104353 ).\n - net: hns3: change TM sched mode to TC-based mode when SRIOV enabled\n (bsc#1104353).\n - net: hns3: check for NULL function pointer in hns3_nic_set_features\n (bsc#1104353).\n - net: hns3: Cleanup for endian issue in hns3 driver (bsc#1104353 ).\n - net: hns3: Cleanup for non-static function in hns3 driver (bsc#1104353).\n - net: hns3: Cleanup for ROCE capability flag in ae_dev (bsc#1104353).\n - net: hns3: Cleanup for shifting true in hns3 driver (bsc#1104353 ).\n - net: hns3: Cleanup for struct that used to send cmd to firmware\n (bsc#1104353).\n - net: hns3: Cleanup indentation for Kconfig in the the hisilicon folder\n (bsc#1104353).\n - net: hns3: cleanup mac auto-negotiation state query (bsc#1104353 ).\n - net: hns3: cleanup mac auto-negotiation state query in\n hclge_update_speed_duplex (bsc#1104353).\n - net: hns3: cleanup of return values in hclge_init_client_instance()\n (bsc#1104353).\n - net: hns3: Clear TX/RX rings when stopping port &amp; un-initializing client\n (bsc#1104353).\n - net: hns3: Consistently using GENMASK in hns3 driver (bsc#1104353).\n - net: hns3: converting spaces into tabs to avoid checkpatch.pl warning\n (bsc#1104353).\n - net: hns3: Disable VFs change rxvlan offload status (bsc#1104353 ).\n - net: hns3: Disable vf vlan filter when vf vlan table is full\n (bsc#1104353).\n - net: hns3: ensure media_type is unitialized (bsc#1104353 ).\n - net: hns3: export pci table of hclge and hclgevf to userspace\n (bsc#1104353).\n - net: hns3: fix a bug about hns3_clean_tx_ring (bsc#1104353 ).\n - net: hns3: fix a bug for phy supported feature initialization\n (bsc#1104353).\n - net: hns3: fix a bug in hclge_uninit_client_instance (bsc#1104353).\n - net: hns3: fix a bug in hns3_driv_to_eth_caps (bsc#1104353 ).\n - net: hns3: fix a bug when alloc new buffer (bsc#1104353 ).\n - net: hns3: fix a bug when getting phy address from NCL_config file\n (bsc#1104353).\n - net: hns3: fix a dead loop in hclge_cmd_csq_clean (bsc#1104353 ).\n - net: hns3: fix a handful of spelling mistakes (bsc#1104353 ).\n - net: hns3: Fix a loop index error of tqp statistics query (bsc#1104353).\n - net: hns3: Fix a misuse to devm_free_irq (bsc#1104353 ).\n - net: hns3: Fix an error handling path in 'hclge_rss_init_hw()'\n (bsc#1104353).\n - net: hns3: Fix an error macro definition of HNS3_TQP_STAT (bsc#1104353).\n - net: hns3: Fix an error of total drop packet statistics (bsc#1104353).\n - net: hns3: Fix a response data read error of tqp statistics query\n (bsc#1104353).\n - net: hns3: fix endian issue when PF get mbx message flag (bsc#1104353).\n - net: hns3: fix error type definition of return value (bsc#1104353).\n - net: hns3: Fixes API to fetch ethernet header length with kernel default\n (bsc#1104353).\n - net: hns3: Fixes error reported by Kbuild and internal review\n (bsc#1104353).\n - net: hns3: Fixes initalization of RoCE handle and makes it conditional\n (bsc#1104353).\n - net: hns3: Fixes initialization of phy address from firmware\n (bsc#1104353).\n - net: hns3: Fixes kernel panic issue during rmmod hns3 driver\n (bsc#1104353).\n - net: hns3: Fixes ring-to-vector map-and-unmap command (bsc#1104353).\n - net: hns3: Fixes the back pressure setting when sriov is enabled\n (bsc#1104353).\n - net: hns3: Fixes the command used to unmap ring from vector\n (bsc#1104353).\n - net: hns3: Fixes the default VLAN-id of PF (bsc#1104353 ).\n - net: hns3: Fixes the error legs in hclge_init_ae_dev function\n (bsc#1104353).\n - net: hns3: Fixes the ether address copy with appropriate API\n (bsc#1104353).\n - net: hns3: Fixes the initialization of MAC address in hardware\n (bsc#1104353).\n - net: hns3: Fixes the init of the VALID BD info in the descriptor\n (bsc#1104353).\n - net: hns3: Fixes the missing PCI iounmap for various legs (bsc#1104353).\n - net: hns3: Fixes the missing u64_stats_fetch_begin_irq in 64-bit stats\n fetch (bsc#1104353).\n - net: hns3: Fixes the out of bounds access in hclge_map_tqp (bsc#1104353).\n - net: hns3: Fixes the premature exit of loop when matching clients\n (bsc#1104353).\n - net: hns3: fixes the ring index in hns3_fini_ring (bsc#1104353 ).\n - net: hns3: Fixes the state to indicate client-type initialization\n (bsc#1104353).\n - net: hns3: Fixes the static checker error warning in\n hns3_get_link_ksettings() (bsc#1104353).\n - net: hns3: Fixes the static check warning due to missing unsupp L3 proto\n check (bsc#1104353).\n - net: hns3: Fixes the wrong IS_ERR check on the returned phydev value\n (bsc#1104353).\n - net: hns3: fix for buffer overflow smatch warning (bsc#1104353 ).\n - net: hns3: fix for changing MTU (bsc#1104353).\n - net: hns3: fix for cleaning ring problem (bsc#1104353 ).\n - net: hns3: Fix for CMDQ and Misc. interrupt init order problem\n (bsc#1104353).\n - net: hns3: fix for coal configuation lost when setting the channel\n (bsc#1104353).\n - net: hns3: fix for coalesce configuration lost during reset\n (bsc#1104353).\n - net: hns3: Fix for deadlock problem occurring when unregistering ae_algo\n (bsc#1104353).\n - net: hns3: Fix for DEFAULT_DV when dev does not support DCB\n (bsc#1104353).\n - net: hns3: Fix for fiber link up problem (bsc#1104353 ).\n - net: hns3: fix for getting advertised_caps in hns3_get_link_ksettings\n (bsc#1104353).\n - net: hns3: fix for getting autoneg in hns3_get_link_ksettings\n (bsc#1104353).\n - net: hns3: fix for getting auto-negotiation state in hclge_get_autoneg\n (bsc#1104353).\n - net: hns3: fix for getting wrong link mode problem (bsc#1104353 ).\n - net: hns3: Fix for hclge_reset running repeatly problem (bsc#1104353).\n - net: hns3: Fix for hns3 module is loaded multiple times problem\n (bsc#1104353).\n - net: hns3: fix for ipv6 address loss problem after setting channels\n (bsc#1104353).\n - net: hns3: fix for loopback failure when vlan filter is enable\n (bsc#1104353).\n - net: hns3: fix for netdev not running problem after calling net_stop and\n net_open (bsc#1104353).\n - net: hns3: Fix for netdev not running problem after calling net_stop and\n net_open (bsc#1104353).\n - net: hns3: fix for not initializing VF rss_hash_key problem\n (bsc#1104353).\n - net: hns3: fix for not returning problem in get_link_ksettings when phy\n exists (bsc#1104353).\n - net: hns3: fix for not setting pause parameters (bsc#1104353 ).\n - net: hns3: Fix for not setting rx private buffer size to zero\n (bsc#1104353).\n - net: hns3: Fix for packet loss due wrong filter config in VLAN tbls\n (bsc#1104353).\n - net: hns3: fix for pause configuration lost during reset (bsc#1104353).\n - net: hns3: Fix for PF mailbox receving unknown message (bsc#1104353).\n - net: hns3: fix for phy_addr error in hclge_mac_mdio_config (bsc#1104353).\n - net: hns3: Fix for phy not link up problem after resetting (bsc#1104353).\n - net: hns3: Fix for pri to tc mapping in TM (bsc#1104353 ).\n - net: hns3: fix for returning wrong value problem in\n hns3_get_rss_indir_size (bsc#1104353).\n - net: hns3: fix for returning wrong value problem in\n hns3_get_rss_key_size (bsc#1104353).\n - net: hns3: fix for RSS configuration loss problem during reset\n (bsc#1104353).\n - net: hns3: Fix for rx priv buf allocation when DCB is not supported\n (bsc#1104353).\n - net: hns3: Fix for rx_priv_buf_alloc not setting rx shared buffer\n (bsc#1104353).\n - net: hns3: Fix for service_task not running problem after resetting\n (bsc#1104353).\n - net: hns3: Fix for setting mac address when resetting (bsc#1104353).\n - net: hns3: fix for setting MTU (bsc#1104353).\n - net: hns3: Fix for setting rss_size incorrectly (bsc#1104353 ).\n - net: hns3: Fix for the null pointer problem occurring when initializing\n ae_dev failed (bsc#1104353).\n - net: hns3: fix for the wrong shift problem in hns3_set_txbd_baseinfo\n (bsc#1104353).\n - net: hns3: fix for updating fc_mode_last_time (bsc#1104353 ).\n - net: hns3: fix for use-after-free when setting ring parameter\n (bsc#1104353).\n - net: hns3: Fix for VF mailbox cannot receiving PF response (bsc#1104353).\n - net: hns3: Fix for VF mailbox receiving unknown message (bsc#1104353).\n - net: hns3: fix for vlan table lost problem when resetting (bsc#1104353).\n - net: hns3: Fix for vxlan tx checksum bug (bsc#1104353 ).\n - net: hns3: Fix initialization when cmd is not supported (bsc#1104353).\n - net: hns3: fix length overflow when CONFIG_ARM64_64K_PAGES (bsc#1104353).\n - net: hns3: fix null pointer dereference before null check (bsc#1104353).\n - net: hns3: fix return value error of hclge_get_mac_vlan_cmd_status()\n (bsc#1104353).\n - net: hns3: fix rx path skb-&gt;truesize reporting bug (bsc#1104353 ).\n - net: hns3: Fix setting mac address error (bsc#1104353 ).\n - net: hns3: Fix spelling errors (bsc#1104353).\n - net: hns3: fix spelling mistake: &quot;capabilty&quot; -&gt; &quot;capability&quot;\n (bsc#1104353).\n - net: hns3: fix the bug of hns3_set_txbd_baseinfo (bsc#1104353 ).\n - net: hns3: fix the bug when map buffer fail (bsc#1104353 ).\n - net: hns3: fix the bug when reuse command description in\n hclge_add_mac_vlan_tbl (bsc#1104353).\n - net: hns3: Fix the missing client list node initialization (bsc#1104353).\n - net: hns3: fix the ops check in hns3_get_rxnfc (bsc#1104353 ).\n - net: hns3: fix the queue id for tqp enable&amp;&amp;reset (bsc#1104353 ).\n - net: hns3: fix the ring count for ETHTOOL_GRXRINGS (bsc#1104353 ).\n - net: hns3: fix the TX/RX ring.queue_index in hns3_ring_get_cfg\n (bsc#1104353).\n - net: hns3: fix the VF queue reset flow error (bsc#1104353 ).\n - net: hns3: fix to correctly fetch l4 protocol outer header (bsc#1104353).\n - net: hns3: Fix to support autoneg only for port attached with phy\n (bsc#1104353).\n - net: hns3: Fix typo error for feild in hclge_tm (bsc#1104353 ).\n - net: hns3: free the ring_data structrue when change tqps (bsc#1104353).\n - net: hns3: get rss_size_max from configuration but not hardcode\n (bsc#1104353).\n - net: hns3: get vf count by pci_sriov_get_totalvfs (bsc#1104353 ).\n - net: hns3: hclge_inform_reset_assert_to_vf() can be static (bsc#1104353).\n - net: hns3: hns3:fix a bug about statistic counter in reset process\n (bsc#1104353).\n - net: hns3: hns3_get_channels() can be static (bsc#1104353 ).\n - net: hns3: Increase the default depth of bucket for TM shaper\n (bsc#1104353).\n - net: hns3: increase the max time for IMP handle command (bsc#1104353).\n - net: hns3: make local functions static (bsc#1104353 ).\n - net: hns3: Mask the packet statistics query when NIC is down\n (bsc#1104353).\n - net: hns3: Modify the update period of packet statistics (bsc#1104353).\n - net: hns3: never send command queue message to IMP when reset\n (bsc#1104353).\n - net: hns3: Optimize PF CMDQ interrupt switching process (bsc#1104353).\n - net: hns3: Optimize the PF's process of updating multicast MAC\n (bsc#1104353).\n - net: hns3: Optimize the VF's process of updating multicast MAC\n (bsc#1104353).\n - net: hns3: reallocate tx/rx buffer after changing mtu (bsc#1104353).\n - net: hns3: refactor GL update function (bsc#1104353 ).\n - net: hns3: refactor interrupt coalescing init function (bsc#1104353).\n - net: hns3: Refactor mac_init function (bsc#1104353).\n - net: hns3: Refactor of the reset interrupt handling logic (bsc#1104353).\n - net: hns3: Refactors the requested reset &amp; pending reset handling code\n (bsc#1104353).\n - net: hns3: refactor the coalesce related struct (bsc#1104353 ).\n - net: hns3: refactor the get/put_vector function (bsc#1104353 ).\n - net: hns3: refactor the hclge_get/set_rss function (bsc#1104353 ).\n - net: hns3: refactor the hclge_get/set_rss_tuple function (bsc#1104353).\n - net: hns3: Refactor the initialization of command queue (bsc#1104353).\n - net: hns3: refactor the loopback related function (bsc#1104353 ).\n - net: hns3: Refactor the mapping of tqp to vport (bsc#1104353 ).\n - net: hns3: Refactor the skb receiving and transmitting function\n (bsc#1104353).\n - net: hns3: remove a couple of redundant assignments (bsc#1104353 ).\n - net: hns3: remove add/del_tunnel_udp in hns3_enet module (bsc#1104353).\n - net: hns3: Remove a useless member of struct hns3_stats (bsc#1104353).\n - net: hns3: Remove error log when getting pfc stats fails (bsc#1104353).\n - net: hns3: Remove packet statistics in the range of 8192~12287\n (bsc#1104353).\n - net: hns3: remove redundant memset when alloc buffer (bsc#1104353).\n - net: hns3: remove redundant semicolon (bsc#1104353).\n - net: hns3: Remove repeat statistic of rx_errors (bsc#1104353 ).\n - net: hns3: Removes unnecessary check when clearing TX/RX rings\n (bsc#1104353).\n - net: hns3: remove TSO config command from VF driver (bsc#1104353 ).\n - net: hns3: remove unnecessary pci_set_drvdata() and devm_kfree()\n (bsc#1104353).\n - net: hns3: remove unused GL setup function (bsc#1104353 ).\n - net: hns3: remove unused hclgevf_cfg_func_mta_filter (bsc#1104353).\n - net: hns3: Remove unused led control code (bsc#1104353 ).\n - net: hns3: report the function type the same line with\n hns3_nic_get_stats64 (bsc#1104353).\n - net: hns3: set the cmdq out_vld bit to 0 after used (bsc#1104353 ).\n - net: hns3: set the max ring num when alloc netdev (bsc#1104353 ).\n - net: hns3: Setting for fc_mode and dcb enable flag in TM module\n (bsc#1104353).\n - net: hns3: Support for dynamically assigning tx buffer to TC\n (bsc#1104353).\n - net: hns3: Unified HNS3 {VF|PF} Ethernet Driver for hip08 SoC\n (bsc#1104353).\n - net: hns3: unify the pause params setup function (bsc#1104353 ).\n - net: hns3: Unify the strings display of packet statistics (bsc#1104353).\n - net: hns3: Updates MSI/MSI-X alloc/free APIs(depricated) to new APIs\n (bsc#1104353).\n - net: hns3: Updates RX packet info fetch in case of multi BD\n (bsc#1104353).\n - net: hns3: Use enums instead of magic number in hclge_is_special_opcode\n (bsc#1104353).\n - net: hns3: VF should get the real rss_size instead of rss_size_max\n (bsc#1104353).\n - net: lan78xx: Fix race in tx pending skb size calculation (bsc#1100132).\n - net: lan78xx: fix rx handling before first packet is send (bsc#1100132).\n - net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).\n - net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).\n - net-usb: add qmi_wwan if on lte modem wistron neweb d18q1 (bsc#1087092).\n - net: usb: asix: replace mii_nway_restart in resume path (bsc#1100132).\n - orangefs: report attributes_mask and attributes for statx (bsc#1101832).\n - orangefs: set i_size on new symlink (bsc#1101845).\n - overflow.h: Add allocation size calculation helpers (bsc#1101116,).\n - powerpc/64: Add GENERIC_CPU support for little endian ().\n - powerpc/fadump: handle crash memory ranges array index overflow\n (bsc#1103269).\n - powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD segements\n (bsc#1103269).\n - powerpc/pkeys: Deny read/write/execute by default (bsc#1097577).\n - powerpc/pkeys: Fix calculation of total pkeys (bsc#1097577).\n - powerpc/pkeys: Give all threads control of their key permissions\n (bsc#1097577).\n - powerpc/pkeys: key allocation/deallocation must not change pkey\n registers (bsc#1097577).\n - powerpc/pkeys: make protection key 0 less special (bsc#1097577).\n - powerpc/pkeys: Preallocate execute-only key (bsc#1097577).\n - powerpc/pkeys: Save the pkey registers before fork (bsc#1097577).\n - qed*: Add link change count value to ethtool statistics display\n (bsc#1086314).\n - qed: Add qed APIs for PHY module query (bsc#1086314 ).\n - qed: Add srq core support for RoCE and iWARP (bsc#1086314 ).\n - qede: Add driver callbacks for eeprom module query (bsc#1086314 ).\n - qedf: Add get_generic_tlv_data handler (bsc#1086317).\n - qedf: Add support for populating ethernet TLVs (bsc#1086317).\n - qed: fix spelling mistake &quot;successffuly&quot; -&gt; &quot;successfully&quot; (bsc#1086314).\n - qedi: Add get_generic_tlv_data handler (bsc#1086315).\n - qedi: Add support for populating ethernet TLVs (bsc#1086315).\n - qed: Make some functions static (bsc#1086314).\n - qed: remove redundant functions qed_get_cm_pq_idx_rl (bsc#1086314).\n - qed: remove redundant functions qed_set_gft_event_id_cm_hdr\n (bsc#1086314).\n - qed: remove redundant pointer 'name' (bsc#1086314).\n - qed: use dma_zalloc_coherent instead of allocator/memset (bsc#1086314).\n - qed*: Utilize FW 8.37.2.0 (bsc#1086314).\n - rdma/hns: Add 64KB page size support for hip08 (bsc#1104427 ).\n - rdma/hns: Add command queue support for hip08 RoCE driver (bsc#1104427).\n - rdma/hns: Add CQ operations support for hip08 RoCE driver (bsc#1104427).\n - rdma/hns: Add detailed comments for mb() call (bsc#1104427 ).\n - rdma/hns: Add eq support of hip08 (bsc#1104427).\n - rdma/hns: Add gsi qp support for modifying qp in hip08 (bsc#1104427).\n - rdma/hns: Add mailbox's implementation for hip08 RoCE driver\n (bsc#1104427).\n - rdma/hns: Add modify CQ support for hip08 (bsc#1104427 ).\n - rdma/hns: Add names to function arguments in function pointers\n (bsc#1104427).\n - rdma/hns: Add profile support for hip08 driver (bsc#1104427 ).\n - rdma/hns: Add QP operations support for hip08 SoC (bsc#1104427 ).\n - rdma/hns: Add releasing resource operation in error branch (bsc#1104427).\n - rdma/hns: Add rereg mr support for hip08 (bsc#1104427 ).\n - rdma/hns: Add reset process for RoCE in hip08 (bsc#1104427 ).\n - rdma/hns: Add return operation when configured global param fail\n (bsc#1104427).\n - rdma/hns: Add rq inline data support for hip08 RoCE (bsc#1104427 ).\n - rdma/hns: Add rq inline flags judgement (bsc#1104427 ).\n - rdma/hns: Add sq_invld_flg field in QP context (bsc#1104427 ).\n - rdma/hns: Add support for processing send wr and receive wr\n (bsc#1104427).\n - rdma/hns: Add the interfaces to support multi hop addressing for the\n contexts in hip08 (bsc#1104427).\n - rdma/hns: Adjust the order of cleanup hem table (bsc#1104427 ).\n - rdma/hns: Assign dest_qp when deregistering mr (bsc#1104427 ).\n - rdma/hns: Assign the correct value for tx_cqn (bsc#1104427 ).\n - rdma/hns: Assign zero for pkey_index of wc in hip08 (bsc#1104427 ).\n - rdma/hns: Avoid NULL pointer exception (bsc#1104427 ).\n - rdma/hns: Bugfix for cq record db for kernel (bsc#1104427 ).\n - rdma/hns: Bugfix for init hem table (bsc#1104427).\n - rdma/hns: Bugfix for rq record db for kernel (bsc#1104427 ).\n - rdma/hns: Check return value of kzalloc (bsc#1104427 ).\n - rdma/hns: Configure BT BA and BT attribute for the contexts in hip08\n (bsc#1104427).\n - rdma/hns: Configure fence attribute in hip08 RoCE (bsc#1104427 ).\n - rdma/hns: Configure mac&amp;gid and user access region for hip08 RoCE driver\n (bsc#1104427).\n - rdma/hns: Configure sgid type for hip08 RoCE (bsc#1104427 ).\n - rdma/hns: Configure the MTPT in hip08 (bsc#1104427).\n - rdma/hns: Configure TRRL field in hip08 RoCE device (bsc#1104427 ).\n - rdma/hns: Create gsi qp in hip08 (bsc#1104427).\n - rdma/hns: Delete the unnecessary initializing enum to zero (bsc#1104427).\n - rdma/hns: Do not unregister a callback we didn't register (bsc#1104427).\n - rdma/hns: Drop local zgid in favor of core defined variable\n (bsc#1104427).\n - rdma/hns: Enable inner_pa_vld filed of mpt (bsc#1104427 ).\n - rdma/hns: Enable the cqe field of sqwqe of RC (bsc#1104427 ).\n - rdma/hns: ensure for-loop actually iterates and free's buffers\n (bsc#1104427).\n - rdma/hns: Fill sq wqe context of ud type in hip08 (bsc#1104427 ).\n - rdma/hns: Filter for zero length of sge in hip08 kernel mode\n (bsc#1104427).\n - rdma/hns: Fix a bug with modifying mac address (bsc#1104427 ).\n - rdma/hns: Fix a couple misspellings (bsc#1104427).\n - rdma/hns: Fix calltrace for sleeping in atomic (bsc#1104427 ).\n - rdma/hns: Fix cqn type and init resp (bsc#1104427).\n - rdma/hns: Fix cq record doorbell enable in kernel (bsc#1104427 ).\n - rdma/hns: Fix endian problems around imm_data and rkey (bsc#1104427).\n - rdma/hns: Fix inconsistent warning (bsc#1104427).\n - rdma/hns: Fix init resp when alloc ucontext (bsc#1104427 ).\n - rdma/hns: Fix misplaced call to hns_roce_cleanup_hem_table (bsc#1104427).\n - rdma/hns: Fix QP state judgement before receiving work requests\n (bsc#1104427).\n - rdma/hns: Fix QP state judgement before sending work requests\n (bsc#1104427).\n - rdma/hns: fix spelling mistake: &quot;Reseved&quot; -&gt; &quot;Reserved&quot; (bsc#1104427).\n - rdma/hns: Fix the bug with NULL pointer (bsc#1104427 ).\n - rdma/hns: Fix the bug with rq sge (bsc#1104427).\n - rdma/hns: Fix the endian problem for hns (bsc#1104427 ).\n - rdma/hns: Fix the illegal memory operation when cross page (bsc#1104427).\n - rdma/hns: Fix the issue of IOVA not page continuous in hip08\n (bsc#1104427).\n - rdma/hns: Fix the qp context state diagram (bsc#1104427 ).\n - rdma/hns: Generate gid type of RoCEv2 (bsc#1104427).\n - rdma/hns: Get rid of page operation after dma_alloc_coherent\n (bsc#1104427).\n - rdma/hns: Get rid of virt_to_page and vmap calls after\n dma_alloc_coherent (bsc#1104427).\n - rdma/hns: Implement the disassociate_ucontext API (bsc#1104427 ).\n - rdma/hns: Increase checking CMQ status timeout value (bsc#1104427).\n - rdma/hns: Initialize the PCI device for hip08 RoCE (bsc#1104427 ).\n - rdma/hns: Intercept illegal RDMA operation when use inline data\n (bsc#1104427).\n - rdma/hns: Load the RoCE dirver automatically (bsc#1104427 ).\n - rdma/hns: make various function static, fixes warnings (bsc#1104427).\n - rdma/hns: Modify assignment device variable to support both PCI device\n and platform device (bsc#1104427).\n - rdma/hns: Modify the usage of cmd_sn in hip08 (bsc#1104427 ).\n - rdma/hns: Modify the value with rd&amp;dest_rd of qp_attr (bsc#1104427).\n - rdma/hns: Modify uar allocation algorithm to avoid bitmap exhaust\n (bsc#1104427).\n - rdma/hns: Move priv in order to add multiple hns_roce support\n (bsc#1104427).\n - rdma/hns: Move the location for initializing tmp_len (bsc#1104427).\n - rdma/hns: Not support qp transition from reset to reset for hip06\n (bsc#1104427).\n - rdma/hns: Only assign dest_qp if IB_QP_DEST_QPN bit is set (bsc#1104427).\n - rdma/hns: Only assign dqpn if IB_QP_PATH_DEST_QPN bit is set\n (bsc#1104427).\n - rdma/hns: Only assign mtu if IB_QP_PATH_MTU bit is set (bsc#1104427).\n - rdma/hns: Refactor code for readability (bsc#1104427 ).\n - rdma/hns: Refactor eq code for hip06 (bsc#1104427).\n - rdma/hns: remove redundant assignment to variable j (bsc#1104427 ).\n - rdma/hns: Remove some unnecessary attr_mask judgement (bsc#1104427).\n - rdma/hns: Remove unnecessary operator (bsc#1104427).\n - rdma/hns: Remove unnecessary platform_get_resource() error check\n (bsc#1104427).\n - rdma/hns: Rename the idx field of db (bsc#1104427).\n - rdma/hns: Replace condition statement using hardware version information\n (bsc#1104427).\n - rdma/hns: Replace __raw_write*(cpu_to_le*()) with LE write*()\n (bsc#1104427).\n - rdma/hns: return 0 rather than return a garbage status value\n (bsc#1104427).\n - rdma/hns_roce: Do not check return value of zap_vma_ptes() (bsc#1104427).\n - rdma/hns: Set access flags of hip08 RoCE (bsc#1104427 ).\n - rdma/hns: Set desc_dma_addr for zero when free cmq desc (bsc#1104427).\n - rdma/hns: Set NULL for __internal_mr (bsc#1104427).\n - rdma/hns: Set rdma_ah_attr type for querying qp (bsc#1104427 ).\n - rdma/hns: Set se attribute of sqwqe in hip08 (bsc#1104427 ).\n - rdma/hns: Set sq_cur_sge_blk_addr field in QPC in hip08 (bsc#1104427).\n - rdma/hns: Set the guid for hip08 RoCE device (bsc#1104427 ).\n - rdma/hns: Set the owner field of SQWQE in hip08 RoCE (bsc#1104427).\n - rdma/hns: Split CQE from MTT in hip08 (bsc#1104427).\n - rdma/hns: Split hw v1 driver from hns roce driver (bsc#1104427 ).\n - rdma/hns: Submit bad wr (bsc#1104427).\n - rdma/hns: Support cq record doorbell for kernel space (bsc#1104427).\n - rdma/hns: Support cq record doorbell for the user space (bsc#1104427).\n - rdma/hns: Support multi hop addressing for PBL in hip08 (bsc#1104427).\n - rdma/hns: Support rq record doorbell for kernel space (bsc#1104427).\n - rdma/hns: Support rq record doorbell for the user space (bsc#1104427).\n - rdma/hns: Support WQE/CQE/PBL page size configurable feature in hip08\n (bsc#1104427).\n - rdma/hns: Unify the calculation for hem index in hip08 (bsc#1104427).\n - rdma/hns: Update assignment method for owner field of send wqe\n (bsc#1104427).\n - rdma/hns: Update calculation of irrl_ba field for hip08 (bsc#1104427).\n - rdma/hns: Update convert function of endian format (bsc#1104427 ).\n - rdma/hns: Update the interfaces for MTT/CQE multi hop addressing in\n hip08 (bsc#1104427).\n - rdma/hns: Update the IRRL table chunk size in hip08 (bsc#1104427 ).\n - rdma/hns: Update the PD&amp;CQE&amp;MTT specification in hip08 (bsc#1104427).\n - rdma/hns: Update the usage of ack timeout in hip08 (bsc#1104427 ).\n - rdma/hns: Update the usage of sr_max and rr_max field (bsc#1104427).\n - rdma/hns: Update the verbs of polling for completion (bsc#1104427).\n - rdma/hns: Use free_pages function instead of free_page (bsc#1104427).\n - rdma/hns: Use structs to describe the uABI instead of opencoding\n (bsc#1104427).\n - rdma/qedr: Fix NULL pointer dereference when running over iWARP without\n RDMA-CM (bsc#1086314).\n - rdma/qedr: fix spelling mistake: &quot;adrresses&quot; -&gt; &quot;addresses&quot;\n (bsc#1086314).\n - rdma/qedr: fix spelling mistake: &quot;failes&quot; -&gt; &quot;fails&quot; (bsc#1086314).\n - reiserfs: fix buffer overflow with long warning messages (bsc#1101847).\n - reiserfs-fix-buffer-overflow-with-long-warning-messa.patch: Silence\n bogus compiler warning about unused result of strscpy().\n - s390/dasd: configurable IFCC handling (bsc#1097808).\n - sched/smt: Update sched_smt_present at runtime (bsc#1089343).\n - scsi: mpt3sas: Add an I/O barrier (bsc#1086906,).\n - scsi: mpt3sas: Added support for SAS Device Discovery Error Event\n (bsc#1086906,).\n - scsi: mpt3sas: Add PCI device ID for Andromeda (bsc#1086906,).\n - scsi: mpt3sas: Allow processing of events during driver unload\n (bsc#1086906,).\n - scsi: mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5\n controllers when HBA supports more than 16 MSI-x vectors (bsc#1086906,).\n - scsi: mpt3sas: Bug fix for big endian systems (bsc#1086906,).\n - scsi: mpt3sas: Cache enclosure pages during enclosure add (bsc#1086906,).\n - scsi: mpt3sas: clarify mmio pointer types (bsc#1086906,).\n - scsi: mpt3sas: Configure reply post queue depth, DMA and sgl tablesize\n (bsc#1086906,).\n - scsi: mpt3sas: Do not abort I/Os issued to NVMe drives while processing\n Async Broadcast primitive event (bsc#1086906,).\n - scsi: mpt3sas: Do not access the structure after decrementing it's\n instance reference count (bsc#1086906,).\n - scsi: mpt3sas: Do not mark fw_event workqueue as WQ_MEM_RECLAIM\n (bsc#1086906,).\n - scsi: mpt3sas: Enhanced handling of Sense Buffer (bsc#1086906,).\n - scsi: mpt3sas: Fix, False timeout prints for ioctl and other internal\n commands during controller reset (bsc#1086906,).\n - scsi: mpt3sas: fix possible memory leak (bsc#1086906,).\n - scsi: mpt3sas: fix spelling mistake: &quot;disbale&quot; -&gt; &quot;disable&quot;\n (bsc#1086906,).\n - scsi: mpt3sas: For NVME device, issue a protocol level reset\n (bsc#1086906,).\n - scsi: mpt3sas: Incorrect command status was set/marked as not used\n (bsc#1086906,).\n - scsi: mpt3sas: Increase event log buffer to support 24 port HBA's\n (bsc#1086906,).\n - scsi: mpt3sas: Introduce API to get BAR0 mapped buffer address\n (bsc#1086906,).\n - scsi: mpt3sas: Introduce Base function for cloning (bsc#1086906,).\n - scsi: mpt3sas: Introduce function to clone mpi reply (bsc#1086906,).\n - scsi: mpt3sas: Introduce function to clone mpi request (bsc#1086906,).\n - scsi: mpt3sas: Lockless access for chain buffers (bsc#1086906,).\n - scsi: mpt3sas: Optimize I/O memory consumption in driver (bsc#1086906,).\n - scsi: mpt3sas: Pre-allocate RDPQ Array at driver boot time\n (bsc#1086906,).\n - scsi: mpt3sas: Replace PCI pool old API (bsc#1081917). - Refresh\n patches.drivers/scsi-mpt3sas-SGL-to-PRP-Translation-for-I-Os-to-NVMe.patch.\n\n - scsi: mpt3sas: Report Firmware Package Version from HBA Driver\n (bsc#1086906,).\n - scsi: mpt3sas: Update driver version &quot;25.100.00.00&quot; (bsc#1086906,).\n - scsi: mpt3sas: Update driver version &quot;26.100.00.00&quot; (bsc#1086906,).\n - scsi: mpt3sas: Update MPI Headers (bsc#1086906,).\n - scsi: qedf: Add additional checks when restarting an rport due to ABTS\n timeout (bsc#1086317).\n - scsi: qedf: Add check for offload before flushing I/Os for target\n (bsc#1086317).\n - scsi: qedf: Add dcbx_not_wait module parameter so we won't wait for DCBX\n convergence to start discovery (bsc#1086317).\n - scsi: qedf: Add missing skb frees in error path (bsc#1086317).\n - scsi: qedf: Add more defensive checks for concurrent error conditions\n (bsc#1086317).\n - scsi: qedf: Add task id to kref_get_unless_zero() debug messages when\n flushing requests (bsc#1086317).\n - scsi: qedf: Check if link is already up when receiving a link up event\n from qed (bsc#1086317).\n - scsi: qedf: fix LTO-enabled build (bsc#1086317).\n - scsi: qedf: Fix VLAN display when printing sent FIP frames (bsc#1086317).\n - scsi: qedf: Honor default_prio module parameter even if DCBX does not\n converge (bsc#1086317).\n - scsi: qedf: Honor priority from DCBX FCoE App tag (bsc#1086317).\n - scsi: qedf: If qed fails to enable MSI-X fail PCI probe (bsc#1086317).\n - scsi: qedf: Improve firmware debug dump handling (bsc#1086317).\n - scsi: qedf: Increase the number of default FIP VLAN request retries to\n 60 (bsc#1086317).\n - scsi: qedf: Release RRQ reference correctly when RRQ command times out\n (bsc#1086317).\n - scsi: qedf: remove redundant initialization of 'fcport' (bsc#1086317).\n - scsi: qedf: Remove setting DCBX pending during soft context reset\n (bsc#1086317).\n - scsi: qedf: Return request as DID_NO_CONNECT if MSI-X is not enabled\n (bsc#1086317).\n - scsi: qedf: Sanity check FCoE/FIP priority value to make sure it's\n between 0 and 7 (bsc#1086317).\n - scsi: qedf: Send the driver state to MFW (bsc#1086317).\n - scsi: qedf: Set the UNLOADING flag when removing a vport (bsc#1086317).\n - scsi: qedf: Synchronize rport restarts when multiple ELS commands time\n out (bsc#1086317).\n - scsi: qedf: Update copyright for 2018 (bsc#1086317).\n - scsi: qedf: Update version number to 8.33.16.20 (bsc#1086317).\n - scsi: qedf: use correct strncpy() size (bsc#1086317).\n - scsi: qedi: fix building with LTO (bsc#1086315).\n - scsi: qedi: fix build regression (bsc#1086315).\n - scsi: qedi: Fix kernel crash during port toggle (bsc#1086315).\n - scsi: qedi: Send driver state to MFW (bsc#1086315).\n - scsi: qla2xxx: correctly shift host byte (bsc#1086327,).\n - scsi: qla2xxx: Correct setting of SAM_STAT_CHECK_CONDITION\n (bsc#1086327,).\n - scsi: qla2xxx: Fix crash on qla2x00_mailbox_command (bsc#1086327,).\n - scsi: qla2xxx: Fix Inquiry command being dropped in Target mode\n (bsc#1086327,).\n - scsi: qla2xxx: Fix race condition between iocb timeout and\n initialisation (bsc#1086327,).\n - scsi: qla2xxx: Fix Rport and session state getting out of sync\n (bsc#1086327,).\n - scsi: qla2xxx: Fix sending ADISC command for login (bsc#1086327,).\n - scsi: qla2xxx: Fix setting lower transfer speed if GPSC fails\n (bsc#1086327,).\n - scsi: qla2xxx: Fix TMF and Multi-Queue config (bsc#1086327,).\n - scsi: qla2xxx: Move GPSC and GFPNID out of session management\n (bsc#1086327,).\n - scsi: qla2xxx: Prevent relogin loop by removing stale code\n (bsc#1086327,).\n - scsi: qla2xxx: Reduce redundant ADISC command for RSCNs (bsc#1086327,).\n - scsi: qla2xxx: remove irq save in qla2x00_poll() (bsc#1086327,).\n - scsi: qla2xxx: Remove stale debug value for login_retry flag\n (bsc#1086327,).\n - scsi: qla2xxx: Update driver version to 10.00.00.07-k (bsc#1086327,).\n - scsi: qla2xxx: Use predefined get_datalen_for_atio() inline function\n (bsc#1086327,).\n - scsi: qla4xxx: Move an array from a .h into a .c file (bsc#1086331).\n - scsi: qla4xxx: Remove unused symbols (bsc#1086331).\n - scsi: qla4xxx: skip error recovery in case of register disconnect\n (bsc#1086331).\n - scsi: qla4xxx: Use dma_pool_zalloc() (bsc#1086331).\n - scsi: qla4xxx: Use zeroing allocator rather than allocator/memset\n (bsc#1086331).\n - selftests/powerpc: Fix core-pkey for default execute permission change\n (bsc#1097577).\n - selftests/powerpc: Fix ptrace-pkey for default execute permission change\n (bsc#1097577).\n - supported.conf: add drivers/md/dm-writecache\n - supported.conf: added hns3 modules\n - supported.conf: added hns-roce-hw-v1 and hns-roce-hw-v2\n - supported.conf: Enable HiSi v3 SAS adapter ()\n - tcp_rbd depends on BLK_DEV_RBD ().\n - typec: tcpm: fusb302: Resolve out of order messaging events\n (bsc#1087092).\n - udf: Detect incorrect directory size (bsc#1101891).\n - udf: Provide saner default for invalid uid / gid (bsc#1101890).\n - vfs: add the sb_start_intwrite_trylock() helper (bsc#1101841).\n - x86/apic: Ignore secondary threads if nosmt=force (bsc#1089343).\n - x86/CPU/AMD: Do not check CPUID max ext level before parsing SMP info\n (bsc#1089343).\n - x86/cpu/AMD: Evaluate smp_num_siblings early (bsc#1089343).\n - x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings\n (bsc#1089343).\n - x86/cpu/AMD: Remove the pointless detect_ht() call (bsc#1089343).\n - x86/cpu/common: Provide detect_ht_early() (bsc#1089343).\n - x86/cpu/intel: Evaluate smp_num_siblings early (bsc#1089343).\n - x86/cpu: Remove the pointless CPU printout (bsc#1089343).\n - x86/cpu/topology: Provide detect_extended_topology_early() (bsc#1089343).\n - x86/KVM/VMX: Add module argument for L1TF mitigation.\n - x86/smp: Provide topology_is_primary_thread() (bsc#1089343).\n - x86/topology: Provide topology_smt_supported() (bsc#1089343).\n - x86/xen: init %gs very early to avoid page faults with stack protector\n (bnc#1104777).\n - xen-netback: fix input validation in xenvif_set_hash_mapping()\n (bnc#1103277).\n - xen/netfront: do not cache skb_shinfo() (bnc#1065600).\n - xfs: catch inode allocation state mismatch corruption (bsc#1104211).\n - xfs: prevent creating negative-sized file via INSERT_RANGE (bsc#1101833).\n\n", "edition": 1, "reporter": "Suse", "published": "2018-08-17T12:32:52", "title": "Security update for the Linux Kernel (important)", "type": "suse", "enchantments": {"score": {"modified": "2018-08-17T15:01:24", "vector": "NONE", "value": 7.2}}, "bulletinFamily": "unix", "cvelist": ["CVE-2018-10882", "CVE-2018-10877", "CVE-2018-10880", "CVE-2018-10878", "CVE-2018-10853", "CVE-2018-10881", "CVE-2018-3646", "CVE-2018-5391", "CVE-2018-3620", "CVE-2018-10883", "CVE-2018-10876", "CVE-2018-10879"], "modified": "2018-08-17T12:32:52", "id": "OPENSUSE-SU-2018:2407-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-08/msg00064.html", "cvss": {"score": 4.7, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:NONE/A:NONE/"}}, {"lastseen": "2018-08-17T15:01:24", "references": ["https://bugzilla.suse.com/1104319", "https://bugzilla.suse.com/1099864", "https://bugzilla.suse.com/1099811", "https://bugzilla.suse.com/1102214", "https://bugzilla.suse.com/1082653", "https://bugzilla.suse.com/1102340", "https://bugzilla.suse.com/1102205", "https://bugzilla.suse.com/1099863", "https://bugzilla.suse.com/1102203", "https://bugzilla.suse.com/1102188", "https://bugzilla.suse.com/1103269", "https://bugzilla.suse.com/1096978", "https://bugzilla.suse.com/1104494", "https://bugzilla.suse.com/1099846", "https://bugzilla.suse.com/1104174", "https://bugzilla.suse.com/1085536", "https://bugzilla.suse.com/1012382", "https://bugzilla.suse.com/1099845", "https://bugzilla.suse.com/1097771", "https://bugzilla.suse.com/1100930", "https://bugzilla.suse.com/1095643", "https://bugzilla.suse.com/1099858", "https://bugzilla.suse.com/1099844", "https://bugzilla.suse.com/1103717", "https://bugzilla.suse.com/1102211", "https://bugzilla.suse.com/1103884", "https://bugzilla.suse.com/1101331", "https://bugzilla.suse.com/1101789", "https://bugzilla.suse.com/1103097", "https://bugzilla.suse.com/1103445", "https://bugzilla.suse.com/1103119", "https://bugzilla.suse.com/1102207", "https://bugzilla.suse.com/1090123", "https://bugzilla.suse.com/1085042", "https://bugzilla.suse.com/1102851", "https://bugzilla.suse.com/1082979", "https://bugzilla.suse.com/1102215", "https://bugzilla.suse.com/1089343", "https://bugzilla.suse.com/1092001", "https://bugzilla.suse.com/1099813", "https://bugzilla.suse.com/1101658", "https://bugzilla.suse.com/1090435", "https://bugzilla.suse.com/1104495", "https://bugzilla.suse.com/1103580", "https://bugzilla.suse.com/1103745", "https://bugzilla.suse.com/1094244", "https://bugzilla.suse.com/1087081", "https://bugzilla.suse.com/1102394", "https://bugzilla.suse.com/1086457", "https://bugzilla.suse.com/1099849", "https://bugzilla.suse.com/1100132", "https://bugzilla.suse.com/1102683", "https://bugzilla.suse.com/1102197", "https://bugzilla.suse.com/1104365", "https://bugzilla.suse.com/1101841"], "affectedPackage": [{"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "noarch", "packageFilename": "kernel-docs-html-4.4.143-65.1.noarch.rpm", "packageName": "kernel-docs-html", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-vanilla-devel-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-vanilla-devel", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-debug-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-debug", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-vanilla-base-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-vanilla-base", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "noarch", "packageFilename": "kernel-source-vanilla-4.4.143-65.1.noarch.rpm", "packageName": "kernel-source-vanilla", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-default-devel-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-default-devel", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-default-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-default", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-vanilla-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-vanilla", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "noarch", "packageFilename": "kernel-devel-4.4.143-65.1.noarch.rpm", "packageName": "kernel-devel", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-debug-base-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-debug-base", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-vanilla-base-debuginfo-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-vanilla-base-debuginfo", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-debug-base-debuginfo-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-debug-base-debuginfo", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-default-base-debuginfo-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-default-base-debuginfo", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "noarch", "packageFilename": "kernel-macros-4.4.143-65.1.noarch.rpm", "packageName": "kernel-macros", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-obs-build-debugsource-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-obs-build-debugsource", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "noarch", "packageFilename": "kernel-docs-pdf-4.4.143-65.1.noarch.rpm", "packageName": "kernel-docs-pdf", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "noarch", "packageFilename": "kernel-docs-4.4.143-65.1.noarch.rpm", "packageName": "kernel-docs", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-default-base-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-default-base", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-debug-devel-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-debug-devel", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-debug-debuginfo-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-debug-debuginfo", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-debug-devel-debuginfo-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-debug-devel-debuginfo", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "noarch", "packageFilename": "kernel-source-4.4.143-65.1.noarch.rpm", "packageName": "kernel-source", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-vanilla-debuginfo-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-vanilla-debuginfo", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-obs-qa-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-obs-qa", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-vanilla-debugsource-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-vanilla-debugsource", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-syms-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-syms", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-default-debugsource-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-default-debugsource", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-default-debuginfo-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-default-debuginfo", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-debug-debugsource-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-debug-debugsource", "operator": "lt"}, {"OS": "openSUSE Leap", "OSVersion": "42.3", "packageVersion": "4.4.143-65.1", "arch": "x86_64", "packageFilename": "kernel-obs-build-4.4.143-65.1.x86_64.rpm", "packageName": "kernel-obs-build", "operator": "lt"}], "description": "The openSUSE Leap 42.3 kernel was updated to 4.4.143 to receive various\n security and bugfixes.\n\n The following security bugs were fixed:\n\n - CVE-2017-18344: The timer_create syscall implementation in\n kernel/time/posix-timers.c didn't properly validate the\n sigevent-&gt;sigev_notify field, which leads to out-of-bounds access in the\n show_timer function (called when /proc/$PID/timers is read). This\n allowed userspace applications to read arbitrary kernel memory (on a\n kernel built with CONFIG_POSIX_TIMERS and CONFIG_CHECKPOINT_RESTORE)\n (bnc#1102851 bnc#1103580).\n - CVE-2018-10876: A flaw was found in Linux kernel in the ext4 filesystem\n code. A use-after-free is possible in ext4_ext_remove_space() function\n when mounting and operating a crafted ext4 image. (bnc#1099811)\n - CVE-2018-10877: Linux kernel ext4 filesystem is vulnerable to an\n out-of-bound access in the ext4_ext_drop_refs() function when operating\n on a crafted ext4 filesystem image. (bnc#1099846)\n - CVE-2018-10878: A flaw was found in the ext4 filesystem. A local user\n can cause an out-of-bounds write and a denial of service or unspecified\n other impact is possible by mounting and operating a crafted ext4\n filesystem image. (bnc#1099813)\n - CVE-2018-10879: A flaw was found in the ext4 filesystem. A local user\n can cause a use-after-free in ext4_xattr_set_entry function and a denial\n of service or unspecified other impact may occur by renaming a file in a\n crafted ext4 filesystem image. (bnc#1099844)\n - CVE-2018-10880: Linux kernel is vulnerable to a stack-out-of-bounds\n write in the ext4 filesystem code when mounting and writing to a crafted\n ext4 image in ext4_update_inline_data(). An attacker could use this to\n cause a system crash and a denial of service. (bnc#1099845)\n - CVE-2018-10881: A flaw was found in the ext4 filesystem. A local user\n can cause an out-of-bound access in ext4_get_group_info function, a\n denial of service, and a system crash by mounting and operating on a\n crafted ext4 filesystem image. (bnc#1099864)\n - CVE-2018-10882: A flaw was found in the ext4 filesystem. A local user\n can cause an out-of-bound write in in fs/jbd2/transaction.c code, a\n denial of service, and a system crash by unmounting a crafted ext4\n filesystem image. (bnc#1099849)\n - CVE-2018-10883: A flaw was found in the ext4 filesystem. A local user\n can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a\n denial of service, and a system crash by mounting and operating on a\n crafted ext4 filesystem image. (bnc#1099863)\n - CVE-2018-14734: drivers/infiniband/core/ucma.c allowed\n ucma_leave_multicast to access a certain data structure after a cleanup\n step in ucma_process_join, which allowed attackers to cause a denial of\n service (use-after-free) (bnc#1103119).\n - CVE-2018-3620: Systems with microprocessors utilizing speculative\n execution and address translations may allow unauthorized disclosure of\n information residing in the L1 data cache to an attacker with local user\n access via a terminal page fault and a side-channel analysis\n (bnc#1087081 1089343 ).\n - CVE-2018-3646: Systems with microprocessors utilizing speculative\n execution and address translations may allow unauthorized disclosure of\n information residing in the L1 data cache to an attacker with local user\n access with guest OS privilege via a terminal page fault and a\n side-channel analysis (bnc#1089343 1104365).\n - CVE-2018-5390 aka &quot;SegmentSmack&quot;: The Linux kernel could be forced to\n make very expensive calls to tcp_collapse_ofo_queue() and\n tcp_prune_ofo_queue() for every incoming packet which can lead to a\n denial of service (bnc#1102340).\n - CVE-2018-5391 aka &quot;FragmentSmack&quot;: A flaw in the IP packet reassembly\n could be used by remote attackers to consume lots of CPU time\n (bnc#1103097).\n\n The following non-security bugs were fixed:\n\n - Add support for 5,25,50, and 100G to 802.3ad bonding driver (bsc#1096978)\n - ahci: Disable LPM on Lenovo 50 series laptops with a too old BIOS\n (bnc#1012382).\n - arm64: do not open code page table entry creation (bsc#1102197).\n - arm64: kpti: Use early_param for kpti= command-line option (bsc#1102188).\n - arm64: Make sure permission updates happen for pmd/pud (bsc#1102197).\n - atm: zatm: Fix potential Spectre v1 (bnc#1012382).\n - bcm63xx_enet: correct clock usage (bnc#1012382).\n - bcm63xx_enet: do not write to random DMA channel on BCM6345\n (bnc#1012382).\n - blkcg: simplify statistic accumulation code (bsc#1082979).\n - block: copy ioprio in __bio_clone_fast() (bsc#1082653).\n - block/swim: Fix array bounds check (bsc#1082979).\n - bpf: fix loading of BPF_MAXINSNS sized programs (bsc#1012382).\n - bpf, x64: fix memleak when not converging after image (bsc#1012382).\n - btrfs: Do not remove block group still has pinned down bytes\n (bsc#1086457).\n - cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE flag\n (bsc#1099858).\n - cachefiles: Fix refcounting bug in backing-file read monitoring\n (bsc#1099858).\n - cachefiles: Wait rather than BUG'ing on &quot;Unexpected object collision&quot;\n (bsc#1099858).\n - cifs: fix bad/NULL ptr dereferencing in SMB2_sess_setup() (bsc#1090123).\n - compiler, clang: always inline when CONFIG_OPTIMIZE_INLINING is disabled\n (bnc#1012382).\n - compiler, clang: properly override 'inline' for clang (bnc#1012382).\n - compiler, clang: suppress warning for unused static inline functions\n (bnc#1012382).\n - compiler-gcc.h: Add __attribute__((gnu_inline)) to all inline\n declarations (bnc#1012382).\n - cpu/hotplug: Add sysfs state interface (bsc#1089343).\n - cpu/hotplug: Provide knobs to control SMT (bsc#1089343).\n - cpu/hotplug: Split do_cpu_down() (bsc#1089343).\n - crypto: crypto4xx - fix crypto4xx_build_pdr, crypto4xx_build_sdr leak\n (bnc#1012382).\n - crypto: crypto4xx - remove bad list_del (bnc#1012382).\n - dm thin metadata: remove needless work from __commit_transaction\n (bsc#1082979).\n - drm/msm: Fix possible null dereference on failure of get_pages()\n (bsc#1102394).\n - drm: re-enable error handling (bsc#1103884).\n - esp6: fix memleak on error path in esp6_input (git-fixes).\n - ext4: check for allocation block validity with block group locked\n (bsc#1104495).\n - ext4: do not update s_last_mounted of a frozen fs (bsc#1101841).\n - ext4: factor out helper ext4_sample_last_mounted() (bsc#1101841).\n - ext4: fix check to prevent initializing reserved inodes (bsc#1104319).\n - ext4: fix false negatives *and* false positives in\n ext4_check_descriptors() (bsc#1103445).\n - ext4: fix inline data updates with checksums enabled (bsc#1104494).\n - fscache: Allow cancelled operations to be enqueued (bsc#1099858).\n - fscache: Fix reference overput in fscache_attach_object() error handling\n (bsc#1099858).\n - genirq: Make force irq threading setup more robust (bsc#1082979).\n - hid: usbhid: add quirk for innomedia INNEX GENESIS/ATARI adapter\n (bnc#1012382).\n - ib/isert: fix T10-pi check mask setting (bsc#1082979).\n - ibmasm: do not write out of bounds in read handler (bnc#1012382).\n - ibmvnic: Fix error recovery on login failure (bsc#1101789).\n - ibmvnic: Remove code to request error information (bsc#1104174).\n - ibmvnic: Revise RX/TX queue error messages (bsc#1101331).\n - ibmvnic: Update firmware error reporting with cause string (bsc#1104174).\n - iw_cxgb4: correctly enforce the max reg_mr depth (bnc#1012382).\n - kabi protect includes in include/linux/inet.h (bsc#1095643).\n - kabi protect net/core/utils.c includes (bsc#1095643).\n - kABI: protect struct loop_device (kabi).\n - kABI: reintroduce __static_cpu_has_safe (kabi).\n - Kbuild: fix # escaping in .cmd files for future Make (bnc#1012382).\n - keys: DNS: fix parsing multiple options (bnc#1012382).\n - kvm: arm/arm64: Drop resource size check for GICV window (bsc#1102215).\n - kvm: arm/arm64: Set dist-&gt;spis to NULL after kfree (bsc#1102214).\n - libata: do not try to pass through NCQ commands to non-NCQ devices\n (bsc#1082979).\n - loop: add recursion validation to LOOP_CHANGE_FD (bnc#1012382).\n - loop: remember whether sysfs_create_group() was done (bnc#1012382).\n - mmc: dw_mmc: fix card threshold control configuration (bsc#1102203).\n - mm: check VMA flags to avoid invalid PROT_NONE NUMA balancing\n (bsc#1097771).\n - net: cxgb3_main: fix potential Spectre v1 (bnc#1012382).\n - net: dccp: avoid crash in ccid3_hc_rx_send_feedback() (bnc#1012382).\n - net: dccp: switch rx_tstamp_last_feedback to monotonic clock\n (bnc#1012382).\n - netfilter: ebtables: reject non-bridge targets (bnc#1012382).\n - netfilter: nf_queue: augment nfqa_cfg_policy (bnc#1012382).\n - netfilter: x_tables: initialise match/target check parameter struct\n (bnc#1012382).\n - net/mlx5: Fix command interface race in polling mode (bnc#1012382).\n - net/mlx5: Fix incorrect raw command length parsing (bnc#1012382).\n - net: mvneta: fix the Rx desc DMA address in the Rx path (bsc#1102207).\n - net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL\n (bnc#1012382).\n - net: off by one in inet6_pton() (bsc#1095643).\n - net: phy: marvell: Use strlcpy() for ethtool::get_strings (bsc#1102205).\n - net_sched: blackhole: tell upper qdisc about dropped packets\n (bnc#1012382).\n - net: sungem: fix rx checksum support (bnc#1012382).\n - net/utils: generic inet_pton_with_scope helper (bsc#1095643).\n - null_blk: use sector_div instead of do_div (bsc#1082979).\n - nvme-rdma: Check remotely invalidated rkey matches our expected rkey\n (bsc#1092001).\n - nvme-rdma: default MR page size to 4k (bsc#1092001).\n - nvme-rdma: do not complete requests before a send work request has\n completed (bsc#1092001).\n - nvme-rdma: do not suppress send completions (bsc#1092001).\n - nvme-rdma: Fix command completion race at error recovery (bsc#1090435).\n - nvme-rdma: make nvme_rdma_[create|destroy]_queue_ib symmetrical\n (bsc#1092001).\n - nvme-rdma: use inet_pton_with_scope helper (bsc#1095643).\n - nvme-rdma: Use mr pool (bsc#1092001).\n - nvme-rdma: wait for local invalidation before completing a request\n (bsc#1092001).\n - ocfs2: subsystem.su_mutex is required while accessing the\n item-&gt;ci_parent (bnc#1012382).\n - pci: ibmphp: Fix use-before-set in get_max_bus_speed() (bsc#1100132).\n - perf tools: Move syscall number fallbacks from perf-sys.h to\n tools/arch/x86/include/asm/ (bnc#1012382).\n - pm / hibernate: Fix oops at snapshot_write() (bnc#1012382).\n - powerpc/64: Initialise thread_info for emergency stacks (bsc#1094244,\n bsc#1100930, bsc#1102683).\n - powerpc/fadump: handle crash memory ranges array index overflow\n (bsc#1103269).\n - powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD segements\n (bsc#1103269).\n - qed: Limit msix vectors in kdump kernel to the minimum required count\n (bnc#1012382).\n - r8152: napi hangup fix after disconnect (bnc#1012382).\n - rdma/ocrdma: Fix an error code in ocrdma_alloc_pd() (bsc#1082979).\n - rdma/ocrdma: Fix error codes in ocrdma_create_srq() (bsc#1082979).\n - rdma/ucm: Mark UCM interface as BROKEN (bnc#1012382).\n - rds: avoid unenecessary cong_update in loop transport (bnc#1012382).\n - Revert 'block-cancel-workqueue-entries-on-blk_mq_freeze_queue'\n (bsc#1103717)\n - Revert &quot;sit: reload iphdr in ipip6_rcv&quot; (bnc#1012382).\n - Revert &quot;x86/cpufeature: Move some of the scattered feature bits to\n x86_capability&quot; (kabi).\n - Revert &quot;x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6&quot; (kabi).\n - rtlwifi: rtl8821ae: fix firmware is not ready to run (bnc#1012382).\n - s390/qeth: fix error handling in adapter command callbacks (bnc#1103745,\n LTC#169699).\n - sched/smt: Update sched_smt_present at runtime (bsc#1089343).\n - scsi: qlogicpti: Fix an error handling path in 'qpti_sbus_probe()'\n (bsc#1082979).\n - scsi: sg: fix minor memory leak in error path (bsc#1082979).\n - scsi: target: fix crash with iscsi target and dvd (bsc#1082979).\n - smsc75xx: Add workaround for gigabit link up hardware errata\n (bsc#1100132).\n - smsc95xx: Configure pause time to 0xffff when tx flow control enabled\n (bsc#1085536).\n - supported.conf: Do not build KMP for openSUSE kernels The merge of\n kselftest-kmp was overseen, and bad for openSUSE-42.3\n - tcp: fix Fast Open key endianness (bnc#1012382).\n - tcp: prevent bogus FRTO undos with non-SACK flows (bnc#1012382).\n - tools build: fix # escaping in .cmd files for future Make (bnc#1012382).\n - uprobes/x86: Remove incorrect WARN_ON() in uprobe_init_insn()\n (bnc#1012382).\n - usb: core: handle hub C_PORT_OVER_CURRENT condition (bsc#1100132).\n - usb: quirks: add delay quirks for Corsair Strafe (bnc#1012382).\n - usb: serial: ch341: fix type promotion bug in ch341_control_in()\n (bnc#1012382).\n - usb: serial: cp210x: add another USB ID for Qivicon ZigBee stick\n (bnc#1012382).\n - usb: serial: keyspan_pda: fix modem-status error handling (bnc#1012382).\n - usb: serial: mos7840: fix status-register error handling (bnc#1012382).\n - usb: yurex: fix out-of-bounds uaccess in read handler (bnc#1012382).\n - vfio: platform: Fix reset module leak in error path (bsc#1102211).\n - vfs: add the sb_start_intwrite_trylock() helper (bsc#1101841).\n - vhost_net: validate sock before trying to put its fd (bnc#1012382).\n - vmw_balloon: fix inflation with batching (bnc#1012382).\n - x86/alternatives: Add an auxilary section (bnc#1012382).\n - x86/alternatives: Discard dynamic check after init (bnc#1012382).\n - x86/apic: Ignore secondary threads if nosmt=force (bsc#1089343).\n - x86/asm: Add _ASM_ARG* constants for argument registers to &lt;asm/asm.h&gt;\n (bnc#1012382).\n - x86/boot: Simplify kernel load address alignment check (bnc#1012382).\n - x86/CPU/AMD: Do not check CPUID max ext level before parsing SMP info\n (bsc#1089343).\n - x86/cpu/AMD: Evaluate smp_num_siblings early (bsc#1089343).\n - x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings\n (bsc#1089343). Update config files.\n - x86/cpu/AMD: Remove the pointless detect_ht() call (bsc#1089343).\n - x86/cpu/common: Provide detect_ht_early() (bsc#1089343).\n - x86/cpufeature: Add helper macro for mask check macros (bnc#1012382).\n - x86/cpufeature: Carve out X86_FEATURE_* (bnc#1012382).\n - x86/cpufeature: Get rid of the non-asm goto variant (bnc#1012382).\n - x86/cpufeature: Make sure DISABLED/REQUIRED macros are updated\n (bnc#1012382).\n - x86/cpufeature: Move some of the scattered feature bits to\n x86_capability (bnc#1012382).\n - x86/cpufeature: Replace the old static_cpu_has() with safe variant\n (bnc#1012382).\n - x86/cpufeature: Speed up cpu_feature_enabled() (bnc#1012382).\n - x86/cpufeature: Update cpufeaure macros (bnc#1012382).\n - x86/cpu/intel: Evaluate smp_num_siblings early (bsc#1089343).\n - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (bnc#1012382).\n - x86/cpu: Provide a config option to disable static_cpu_has (bnc#1012382).\n - x86/cpu: Remove the pointless CPU printout (bsc#1089343).\n - x86/cpu/topology: Provide detect_extended_topology_early() (bsc#1089343).\n - x86/fpu: Add an XSTATE_OP() macro (bnc#1012382).\n - x86/fpu: Get rid of xstate_fault() (bnc#1012382).\n - x86/headers: Do not include asm/processor.h in asm/atomic.h\n (bnc#1012382).\n - x86/mm/pkeys: Fix mismerge of protection keys CPUID bits (bnc#1012382).\n - x86/mm: Simplify p[g4um]d_page() macros (1087081).\n - x86/smpboot: Do not use smp_num_siblings in __max_logical_packages\n calculation (bsc#1089343).\n - x86/smp: Provide topology_is_primary_thread() (bsc#1089343).\n - x86/topology: Add topology_max_smt_threads() (bsc#1089343).\n - x86/topology: Provide topology_smt_supported() (bsc#1089343).\n - x86/vdso: Use static_cpu_has() (bnc#1012382).\n - xen/grant-table: log the lack of grants (bnc#1085042).\n - xen-netfront: Fix mismatched rtnl_unlock (bnc#1101658).\n - xen-netfront: Update features after registering netdev (bnc#1101658).\n - xhci: xhci-mem: off by one in xhci_stream_id_to_ring() (bnc#1012382).\n\n", "edition": 1, "reporter": "Suse", "published": "2018-08-17T12:20:07", "title": "Security update for the Linux Kernel (important)", "type": "suse", "enchantments": {"score": {"modified": "2018-08-17T15:01:24", "vector": "NONE", "value": 7.5}}, "bulletinFamily": "unix", "cvelist": ["CVE-2018-10882", "CVE-2018-10877", "CVE-2018-10880", "CVE-2018-10878", "CVE-2018-10881", "CVE-2018-14734", "CVE-2018-3646", "CVE-2018-5391", "CVE-2018-3620", "CVE-2018-10883", "CVE-2017-18344", "CVE-2018-5390", "CVE-2018-10876", "CVE-2018-10879"], "modified": "2018-08-17T12:20:07", "id": "OPENSUSE-SU-2018:2404-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-08/msg00061.html", "cvss": {"score": 4.7, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:NONE/A:NONE/"}}], "debian": [{"lastseen": "2018-10-16T22:13:42", "references": [], "affectedPackage": [{"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.8-rt-amd64_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.8-rt-amd64", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.7-marvell_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.7-marvell", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.8-rt-amd64-dbg_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.8-rt-amd64-dbg", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.8-686-pae-dbg_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.8-686-pae-dbg", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.7-amd64_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.7-amd64", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.7-686-pae_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.7-686-pae", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.7-marvell_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.7-marvell", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.8-rt-686-pae-dbg_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.8-rt-686-pae-dbg", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.7-rt-686-pae-dbg_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.7-rt-686-pae-dbg", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.8-common_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.8-common", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.7-all-amd64_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.7-all-amd64", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.8-amd64-dbg_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.8-amd64-dbg", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.7-common-rt_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.7-common-rt", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.8-armmp_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.8-armmp", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.7-rt-686-pae_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.7-rt-686-pae", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.8-all_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.8-all", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.8-armmp-lpae_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.8-armmp-lpae", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.8-686-pae_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.8-686-pae", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.8-rt-686-pae_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.8-rt-686-pae", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.7-rt-amd64-dbg_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.7-rt-amd64-dbg", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.7-all-armel_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.7-all-armel", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.8-rt-686-pae_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.8-rt-686-pae", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.8-amd64_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.8-amd64", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-doc-4.9_4.9.110-1~deb8u1_all.deb", "packageName": "linux-doc-4.9", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.8-686_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.8-686", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.8-all-i386_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.8-all-i386", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-compiler-gcc-4.9-arm_4.9.110-1~deb8u1_all.deb", "packageName": "linux-compiler-gcc-4.9-arm", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-support-4.9.0-0.bpo.7_4.9.110-1~deb8u1_all.deb", "packageName": "linux-support-4.9.0-0.bpo.7", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.7-rt-amd64_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.7-rt-amd64", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.7-686_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.7-686", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.8-armmp_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.8-armmp", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.8-common-rt_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.8-common-rt", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-support-4.9.0-0.bpo.8_4.9.110-1~deb8u1_all.deb", "packageName": "linux-support-4.9.0-0.bpo.8", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.8-all-amd64_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.8-all-amd64", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.7-armmp-lpae_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.7-armmp-lpae", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.7-amd64_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.7-amd64", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.7-all-armhf_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.7-all-armhf", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.8-armmp-lpae_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.8-armmp-lpae", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.7-all-i386_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.7-all-i386", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-manual-4.9_4.9.110-1~deb8u1_all.deb", "packageName": "linux-manual-4.9", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.8-all-armel_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.8-all-armel", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.7-686_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.7-686", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.8-686_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.8-686", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.7-armmp-lpae_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.7-armmp-lpae", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.7-all_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.7-all", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-source-4.9_4.9.110-1~deb8u1_all.deb", "packageName": "linux-source-4.9", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.8-rt-amd64_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.8-rt-amd64", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.7-common_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.7-common", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-perf-4.9_4.9.110-1~deb8u1_all.deb", "packageName": "linux-perf-4.9", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.7-686-pae_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.7-686-pae", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-kbuild-4.9_4.9.110-1~deb8u1_all.deb", "packageName": "linux-kbuild-4.9", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.7-armmp_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.7-armmp", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.7-rt-amd64_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.7-rt-amd64", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.8-marvell_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.8-marvell", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.7-amd64-dbg_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.7-amd64-dbg", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.7-686-pae-dbg_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.7-686-pae-dbg", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-4.9_4.9.110-1~deb8u1_all.deb", "packageName": "linux-4.9", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.8-amd64_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.8-amd64", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.7-rt-686-pae_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.7-rt-686-pae", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.8-marvell_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.8-marvell", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.8-686-pae_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.8-686-pae", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-image-4.9.0-0.bpo.7-armmp_4.9.110-1~deb8u1_all.deb", "packageName": "linux-image-4.9.0-0.bpo.7-armmp", "operator": "lt"}, {"OS": "Debian", "OSVersion": "8", "packageVersion": "4.9.110-1~deb8u1", "arch": "all", "packageFilename": "linux-headers-4.9.0-0.bpo.8-all-armhf_4.9.110-1~deb8u1_all.deb", "packageName": "linux-headers-4.9.0-0.bpo.8-all-armhf", "operator": "lt"}], "description": "Package : linux-4.9\nVersion : 4.9.110-1~deb8u1\nCVE ID : CVE-2017-5753 CVE-2017-18255 CVE-2018-1118 CVE-2018-1120\n CVE-2018-1130 CVE-2018-3639 CVE-2018-5814 CVE-2018-10021\n CVE-2018-10087 CVE-2018-10124 CVE-2018-10853 CVE-2018-10876\n CVE-2018-10877 CVE-2018-10878 CVE-2018-10879 CVE-2018-10880\n CVE-2018-10881 CVE-2018-10882 CVE-2018-10883 CVE-2018-10940\n CVE-2018-11506 CVE-2018-12233 CVE-2018-1000204\nDebian Bug : 860900 872907 892057 896775 897590 898137\n\nLinux 4.9 has been packaged for Debian 8 as linux-4.9. This provides\na supported upgrade path for systems that currently use kernel\npackages from the &quot;jessie-backports&quot; suite.\n\nThere is no need to upgrade systems using Linux 3.16, as that kernel\nversion will also continue to be supported in the LTS period.\n\nThis backport does not include the following binary packages:\n\n hyperv-daemons libcpupower1 libcpupower-dev libusbip-dev\n linux-compiler-gcc-4.9-x86 linux-cpupower linux-libc-dev usbip\n\nOlder versions of most of those are built from other source packages\nin Debian 8.\n\nSeveral vulnerabilities have been discovered in the Linux kernel that\nmay lead to a privilege escalation, denial of service or information\nleaks.\n\nCVE-2017-5753\n\n Further instances of code that was vulnerable to Spectre variant 1\n (bounds-check bypass) have been mitigated.\n\nCVE-2017-18255\n\n It was discovered that the performance events subsystem did not\n properly validate the value of the\n kernel.perf_cpu_time_max_percent sysctl. Setting a large value\n could have an unspecified security impact. However, only a\n privileged user can set this sysctl.\n\nCVE-2018-1118\n\n The syzbot software found that the vhost driver did not initialise\n message buffers which would later be read by user processes. A\n user with access to the /dev/vhost-net device could use this to\n read sensitive information from the kernel or other users&#x27;\n processes.\n\nCVE-2018-1120\n\n Qualys reported that a user able to mount FUSE filesystems can\n create a process such that when another process attempting to read\n its command line will be blocked for an arbitrarily long time.\n This could be used for denial of service, or to aid in exploiting\n a race condition in the other program.\n\nCVE-2018-1130\n\n The syzbot software found that the DCCP implementation of\n sendmsg() does not check the socket state, potentially leading\n to a null pointer dereference. A local user could use this to\n cause a denial of service (crash). \n\nCVE-2018-3639\n\n Multiple researchers have discovered that Speculative Store Bypass\n (SSB), a feature implemented in many processors, could be used to\n read sensitive information from another context. In particular,\n code in a software sandbox may be able to read sensitive\n information from outside the sandbox. This issue is also known as\n Spectre variant 4.\n\n This update allows the issue to be mitigated on some x86\n processors by disabling SSB. This requires an update to the\n processor&#x27;s microcode, which is non-free. It may be included in\n an update to the system BIOS or UEFI firmware, or in a future\n update to the intel-microcode or amd64-microcode packages.\n\n Disabling SSB can reduce performance significantly, so by default\n it is only done in tasks that use the seccomp feature.\n Applications that require this mitigation should request it\n explicitly through the prctl() system call. Users can control\n where the mitigation is enabled with the spec_store_bypass_disable\n kernel parameter.\n\nCVE-2018-5814\n\n Jakub Jirasek reported race conditions in the USB/IP host driver.\n A malicious client could use this to cause a denial of service\n (crash or memory corruption), and possibly to execute code, on a\n USB/IP server.\n\nCVE-2018-10021\n\n A physically present attacker who unplugs a SAS cable can cause a\n denial of service (memory leak and WARN).\n\nCVE-2018-10087, CVE-2018-10124\n\n zhongjiang found that the wait4() and kill() system call\n implementations did not check for the invalid pid value of\n INT_MIN. If a user passed this value, the behaviour of the code\n was formally undefined and might have had a security impact.\n\nCVE-2018-10853\n\n Andy Lutomirski and Mika Penttil\u00e4 reported that KVM for x86\n processors did not perform a necessary privilege check when\n emulating certain instructions. This could be used by an\n unprivileged user in a guest VM to escalate their privileges\n within the guest.\n\nCVE-2018-10876, CVE-2018-10877, CVE-2018-10878, CVE-2018-10879,\nCVE-2018-10880, CVE-2018-10881, CVE-2018-10882, CVE-2018-10883\n\n Wen Xu at SSLab, Gatech, reported that crafted ext4 filesystem\n images could trigger a crash or memory corruption. A local user\n able to mount arbitrary filesystems, or an attacker providing\n filesystems to be mounted, could use this for denial of service or\n possibly for privilege escalation.\n\nCVE-2018-10940\n\n Dan Carpenter reported that the optical disc driver (cdrom) does\n not correctly validate the parameter to the CDROM_MEDIA_CHANGED\n ioctl. A user with access to a cdrom device could use this to\n cause a denial of service (crash).\n\nCVE-2018-11506\n\n Piotr Gabriel Kosinski and Daniel Shapira reported that the\n SCSI optical disc driver (sr) did not allocate a sufficiently\n large buffer for sense data. A user with access to a SCSI\n optical disc device that can produce more than 64 bytes of\n sense data could use this to cause a denial of service (crash\n or memory corruption), and possibly for privilege escalation.\n\nCVE-2018-12233\n\n Shankara Pailoor reported that a crafted JFS filesystem image\n could trigger a denial of service (memory corruption). This\n could possibly also be used for privilege escalation.\n\nCVE-2018-1000204\n\n The syzbot software found that the SCSI generic driver (sg) would\n in some circumstances allow reading data from uninitialised\n buffers, which could include sensitive information from the kernel\n or other tasks. However, only privileged users with the\n CAP_SYS_ADMIN or CAP_SYS_RAWIO capability were allowed to do this,\n so this has little or no security impact.\n\nFor Debian 8 &quot;Jessie&quot;, these problems have been fixed in version\n4.9.110-1~deb8u1. This update additionally fixes Debian bugs\n#860900, #872907, #892057, #896775, #897590, and #898137; and\nincludes many more bug fixes from stable updates 4.9.89-4.9.110\ninclusive.\n\nWe recommend that you upgrade your linux-4.9 packages.\n\nFurther information about Debian LTS security advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://wiki.debian.org/LTS\n\n-- \nBen Hutchings - Debian developer, member of kernel, installer and LTS teams", "edition": 1, "reporter": "Debian", "published": "2018-07-18T15:37:58", "title": "[SECURITY] [DLA 1423-1] linux-4.9 new package", "type": "debian", "enchantments": {"score": {"modified": "2018-10-16T22:13:42", "vector": "NONE", "value": 7.2}}, "bulletinFamily": "unix", "cvelist": ["CVE-2018-10882", "CVE-2018-10021", "CVE-2017-18255", "CVE-2018-10877", "CVE-2017-5753", "CVE-2018-10940", "CVE-2018-10880", "CVE-2018-10878", "CVE-2018-11506", "CVE-2018-10853", "CVE-2018-10881", "CVE-2018-1118", "CVE-2018-1130", "CVE-2018-1120", "CVE-2018-5814", "CVE-2018-1000204", "CVE-2018-10883", "CVE-2018-12233", "CVE-2018-10087", "CVE-2018-10124", "CVE-2018-10876", "CVE-2018-10879", "CVE-2018-3639"], "modified": "2018-07-18T15:37:58", "id": "DEBIAN:DLA-1423-1:B239D", "href": "https://lists.debian.org/debian-lts-announce/2018/debian-lts-announce-201807/msg00020.html", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "redhat": [{"lastseen": "2018-10-30T10:33:11", "_object_types": ["robots.models.base.Bulletin", "robots.models.redhat.RedHatBulletin"], "references": [], "affectedPackage": [{"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "aarch64", "packageName": "kernel", "packageFilename": "kernel-4.14.0-115.el7a.aarch64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "ppc64le", "packageName": "kernel", "packageFilename": "kernel-4.14.0-115.el7a.ppc64le.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "s390x", "packageName": "kernel", "packageFilename": "kernel-4.14.0-115.el7a.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "noarch", "packageName": "kernel-abi-whitelists", "packageFilename": "kernel-abi-whitelists-4.14.0-115.el7a.noarch.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "src", "packageName": "kernel-alt", "packageFilename": "kernel-alt-4.14.0-115.el7a.src.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "ppc64le", "packageName": "kernel-bootwrapper", "packageFilename": "kernel-bootwrapper-4.14.0-115.el7a.ppc64le.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "aarch64", "packageName": "kernel-debug", "packageFilename": "kernel-debug-4.14.0-115.el7a.aarch64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "ppc64le", "packageName": "kernel-debug", "packageFilename": "kernel-debug-4.14.0-115.el7a.ppc64le.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "s390x", "packageName": "kernel-debug", "packageFilename": "kernel-debug-4.14.0-115.el7a.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "aarch64", "packageName": "kernel-debug-debuginfo", "packageFilename": "kernel-debug-debuginfo-4.14.0-115.el7a.aarch64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "ppc64le", "packageName": "kernel-debug-debuginfo", "packageFilename": "kernel-debug-debuginfo-4.14.0-115.el7a.ppc64le.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "s390x", "packageName": "kernel-debug-debuginfo", "packageFilename": "kernel-debug-debuginfo-4.14.0-115.el7a.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "aarch64", "packageName": "kernel-debug-devel", "packageFilename": "kernel-debug-devel-4.14.0-115.el7a.aarch64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "ppc64le", "packageName": "kernel-debug-devel", "packageFilename": "kernel-debug-devel-4.14.0-115.el7a.ppc64le.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "s390x", "packageName": "kernel-debug-devel", "packageFilename": "kernel-debug-devel-4.14.0-115.el7a.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "aarch64", "packageName": "kernel-debuginfo", "packageFilename": "kernel-debuginfo-4.14.0-115.el7a.aarch64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "ppc64le", "packageName": "kernel-debuginfo", "packageFilename": "kernel-debuginfo-4.14.0-115.el7a.ppc64le.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "s390x", "packageName": "kernel-debuginfo", "packageFilename": "kernel-debuginfo-4.14.0-115.el7a.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "aarch64", "packageName": "kernel-debuginfo-common-aarch64", "packageFilename": "kernel-debuginfo-common-aarch64-4.14.0-115.el7a.aarch64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "ppc64le", "packageName": "kernel-debuginfo-common-ppc64le", "packageFilename": "kernel-debuginfo-common-ppc64le-4.14.0-115.el7a.ppc64le.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "s390x", "packageName": "kernel-debuginfo-common-s390x", "packageFilename": "kernel-debuginfo-common-s390x-4.14.0-115.el7a.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "aarch64", "packageName": "kernel-devel", "packageFilename": "kernel-devel-4.14.0-115.el7a.aarch64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "ppc64le", "packageName": "kernel-devel", "packageFilename": "kernel-devel-4.14.0-115.el7a.ppc64le.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "s390x", "packageName": "kernel-devel", "packageFilename": "kernel-devel-4.14.0-115.el7a.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "noarch", "packageName": "kernel-doc", "packageFilename": "kernel-doc-4.14.0-115.el7a.noarch.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "aarch64", "packageName": "kernel-headers", "packageFilename": "kernel-headers-4.14.0-115.el7a.aarch64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "ppc64le", "packageName": "kernel-headers", "packageFilename": "kernel-headers-4.14.0-115.el7a.ppc64le.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "s390x", "packageName": "kernel-headers", "packageFilename": "kernel-headers-4.14.0-115.el7a.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "s390x", "packageName": "kernel-kdump", "packageFilename": "kernel-kdump-4.14.0-115.el7a.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "s390x", "packageName": "kernel-kdump-debuginfo", "packageFilename": "kernel-kdump-debuginfo-4.14.0-115.el7a.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "s390x", "packageName": "kernel-kdump-devel", "packageFilename": "kernel-kdump-devel-4.14.0-115.el7a.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "aarch64", "packageName": "kernel-tools", "packageFilename": "kernel-tools-4.14.0-115.el7a.aarch64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "ppc64le", "packageName": "kernel-tools", "packageFilename": "kernel-tools-4.14.0-115.el7a.ppc64le.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "aarch64", "packageName": "kernel-tools-debuginfo", "packageFilename": "kernel-tools-debuginfo-4.14.0-115.el7a.aarch64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "ppc64le", "packageName": "kernel-tools-debuginfo", "packageFilename": "kernel-tools-debuginfo-4.14.0-115.el7a.ppc64le.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "aarch64", "packageName": "kernel-tools-libs", "packageFilename": "kernel-tools-libs-4.14.0-115.el7a.aarch64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "ppc64le", "packageName": "kernel-tools-libs", "packageFilename": "kernel-tools-libs-4.14.0-115.el7a.ppc64le.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "aarch64", "packageName": "kernel-tools-libs-devel", "packageFilename": "kernel-tools-libs-devel-4.14.0-115.el7a.aarch64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "ppc64le", "packageName": "kernel-tools-libs-devel", "packageFilename": "kernel-tools-libs-devel-4.14.0-115.el7a.ppc64le.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "aarch64", "packageName": "perf", "packageFilename": "perf-4.14.0-115.el7a.aarch64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "ppc64le", "packageName": "perf", "packageFilename": "perf-4.14.0-115.el7a.ppc64le.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "s390x", "packageName": "perf", "packageFilename": "perf-4.14.0-115.el7a.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "aarch64", "packageName": "perf-debuginfo", "packageFilename": "perf-debuginfo-4.14.0-115.el7a.aarch64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "ppc64le", "packageName": "perf-debuginfo", "packageFilename": "perf-debuginfo-4.14.0-115.el7a.ppc64le.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "s390x", "packageName": "perf-debuginfo", "packageFilename": "perf-debuginfo-4.14.0-115.el7a.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "aarch64", "packageName": "python-perf", "packageFilename": "python-perf-4.14.0-115.el7a.aarch64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "ppc64le", "packageName": "python-perf", "packageFilename": "python-perf-4.14.0-115.el7a.ppc64le.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "s390x", "packageName": "python-perf", "packageFilename": "python-perf-4.14.0-115.el7a.s390x.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "aarch64", "packageName": "python-perf-debuginfo", "packageFilename": "python-perf-debuginfo-4.14.0-115.el7a.aarch64.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "ppc64le", "packageName": "python-perf-debuginfo", "packageFilename": "python-perf-debuginfo-4.14.0-115.el7a.ppc64le.rpm", "operator": "lt"}, {"OS": "RedHat", "OSVersion": "7", "packageVersion": "4.14.0-115.el7a", "arch": "s390x", "packageName": "python-perf-debuginfo", "packageFilename": "python-perf-debuginfo-4.14.0-115.el7a.s390x.rpm", "operator": "lt"}], "description": "The kernel-alt packages provide the Linux kernel version 4.x.\n\nSecurity Fix(es):\n\n* An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions (a commonly used performance optimization). It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the fact that memory read from address to which a recent memory write has occurred may see an older value and subsequently cause an update into the microprocessor's data cache even for speculatively executed instructions that never actually commit (retire). As a result, an unprivileged attacker could use this flaw to read privileged memory by conducting targeted cache side-channel attacks. (CVE-2018-3639, aarch64)\n\n* A flaw named SegmentSmack was found in the way the Linux kernel handled specially crafted TCP packets. A remote attacker could use this flaw to trigger time and calculation expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() functions by sending specially modified packets within ongoing TCP sessions which could lead to a CPU saturation and hence a denial of service on the system. Maintaining the denial of service condition requires continuous two-way TCP sessions to a reachable open port, thus the attacks cannot be performed using spoofed IP addresses. (CVE-2018-5390)\n\n* A flaw named FragmentSmack was found in the way the Linux kernel handled reassembly of fragmented IPv4 and IPv6 packets. A remote attacker could use this flaw to trigger time and calculation expensive fragment reassembly algorithm by sending specially crafted packets which could lead to a CPU saturation and hence a denial of service on the system. (CVE-2018-5391)\n\nSpace precludes documenting all of the security fixes in this advisory. See the descriptions of the remaining security fixes in the related Knowledge Article: \n\nhttps://access.redhat.com/articles/3658021\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nRed Hat would like to thank Ken Johnson (Microsoft Security Response Center) and Jann Horn (Google Project Zero) for reporting CVE-2018-3639; Juha-Matti Tilli (Aalto University - Department of Communications and Networking and Nokia Bell Labs) for reporting CVE-2018-5390 and CVE-2018-5391; Qualys Research Labs for reporting CVE-2018-1120; David Rientjes (Google) for reporting CVE-2018-1000200; and Wen Xu for reporting CVE-2018-1092, CVE-2018-1094, and CVE-2018-1095. The CVE-2018-14619 issue was discovered by Florian Weimer (Red Hat) and Ondrej Mosnacek (Red Hat).\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.", "reporter": "RedHat", "published": "2018-10-30T12:15:20", "type": "redhat", "title": "(RHSA-2018:2948) Important: kernel-alt security, bug fix, and enhancement update", "enchantments": {"score": {"modified": "2018-10-30T10:33:11", "vector": "NONE", "value": 5.0}}, "bulletinFamily": "unix", "cvelist": ["CVE-2017-13166", "CVE-2017-16648", "CVE-2017-17805", "CVE-2017-17806", "CVE-2017-18075", "CVE-2017-18208", "CVE-2017-18344", "CVE-2018-1000026", "CVE-2018-1000200", "CVE-2018-1000204", "CVE-2018-10322", "CVE-2018-1065", "CVE-2018-1068", "CVE-2018-10877", "CVE-2018-10878", "CVE-2018-10879", "CVE-2018-10880", "CVE-2018-10881", "CVE-2018-10882", "CVE-2018-10883", "CVE-2018-1092", "CVE-2018-1094", "CVE-2018-10940", "CVE-2018-1095", "CVE-2018-1118", "CVE-2018-1120", "CVE-2018-11506", "CVE-2018-12232", "CVE-2018-13405", "CVE-2018-14619", "CVE-2018-14641", "CVE-2018-3639", "CVE-2018-5344", "CVE-2018-5390", "CVE-2018-5391", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-5848", "CVE-2018-7566", "CVE-2018-7757", "CVE-2018-8781", "CVE-2018-9363"], "_object_type": "robots.models.redhat.RedHatBulletin", "modified": "2018-10-30T12:37:20", "id": "RHSA-2018:2948", "href": "https://access.redhat.com/errata/RHSA-2018:2948", "cvss": {"score": 7.8, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:COMPLETE/"}}]}