The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in inet->hdrincl that leads to uninitialized stack pointer usage; this allows a local user to execute code and gain privileges.
{"suse": [{"lastseen": "2018-01-30T20:53:56", "description": "This update for the Linux Kernel 4.4.103-92_53 fixes one issue.\n\n The following security issue was fixed:\n\n - CVE-2017-17712: The raw_sendmsg() function had a race condition that\n lead to uninitialized stack pointer usage. This allowed a local user to\n execute code and gain privileges (bsc#1073230).\n\n", "cvss3": {}, "published": "2018-01-30T18:10:10", "type": "suse", "title": "Security update for the Linux Kernel (Live Patch 16 for SLE 12 SP2) (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-17712"], "modified": "2018-01-30T18:10:10", "id": "SUSE-SU-2018:0298-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00100.html", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-02-13T20:25:27", "description": "This update for the Linux Kernel 4.4.103-6_38 fixes one issue.\n\n The following security issue was fixed:\n\n - CVE-2017-17712: The raw_sendmsg() function had a race condition that\n lead to uninitialized stack pointer usage. This allowed a local user to\n execute code and gain privileges (bsc#1073230).\n\n", "cvss3": {}, "published": "2018-02-13T18:10:18", "type": "suse", "title": "Security update for the Linux Kernel (Live Patch 7 for SLE 12 SP3) (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-17712"], "modified": "2018-02-13T18:10:18", "id": "SUSE-SU-2018:0436-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00021.html", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-01-30T20:53:56", "description": "This update for the Linux Kernel 4.4.103-92_56 fixes one issue.\n\n The following security issue was fixed:\n\n - CVE-2017-17712: The raw_sendmsg() function had a race condition that\n lead to uninitialized stack pointer usage. This allowed a local user to\n execute code and gain privileges (bsc#1073230).\n\n", "cvss3": {}, "published": "2018-01-30T18:15:09", "type": "suse", "title": "Security update for the Linux Kernel (Live Patch 17 for SLE 12 SP2) (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-17712"], "modified": "2018-01-30T18:15:09", "id": "SUSE-SU-2018:0301-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00101.html", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-02-13T14:29:47", "description": "This update for the Linux Kernel 4.4.92-6_30 fixes one issue.\n\n The following security issue was fixed:\n\n - CVE-2017-17712: The raw_sendmsg() function had a race condition that\n lead to uninitialized stack pointer usage. This allowed a local user to\n execute code and gain privileges (bsc#1073230).\n\n", "cvss3": {}, "published": "2018-02-13T12:11:23", "type": "suse", "title": "Security update for the Linux Kernel (Live Patch 5 for SLE 12 SP3) (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-17712"], "modified": "2018-02-13T12:11:23", "id": "SUSE-SU-2018:0431-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00019.html", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-01-30T20:53:56", "description": "This update for the Linux Kernel 4.4.90-92_50 fixes one issue.\n\n The following security issue was fixed:\n\n - CVE-2017-17712: The raw_sendmsg() function had a race condition that\n lead to uninitialized stack pointer usage. This allowed a local user to\n execute code and gain privileges (bsc#1073230).\n\n", "cvss3": {}, "published": "2018-01-30T18:08:03", "type": "suse", "title": "Security update for the Linux Kernel (Live Patch 15 for SLE 12 SP2) (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-17712"], "modified": "2018-01-30T18:08:03", "id": "SUSE-SU-2018:0294-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00097.html", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-02-13T18:07:24", "description": "This update for the Linux Kernel 4.4.103-6_33 fixes one issue.\n\n The following security issue was fixed:\n\n - CVE-2017-17712: The raw_sendmsg() function had a race condition that\n lead to uninitialized stack pointer usage. This allowed a local user to\n execute code and gain privileges (bsc#1073230).\n\n", "cvss3": {}, "published": "2018-02-13T15:07:44", "type": "suse", "title": "Security update for the Linux Kernel (Live Patch 6 for SLE 12 SP3) (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-17712"], "modified": "2018-02-13T15:07:44", "id": "SUSE-SU-2018:0433-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00020.html", "cvss": {"score": 6.9, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-02-02T02:53:09", "description": "This update for the Linux Kernel 4.4.90-6_12 fixes several issues.\n\n The following security issues were fixed:\n\n - CVE-2017-17712: The raw_sendmsg() function had a race condition that\n lead to uninitialized stack pointer usage. This allowed a local user to\n execute code and gain privileges (bsc#1073230).\n - CVE-2017-16939: The XFRM dump policy implementation allowed local users\n to gain privileges or cause a denial of service (use-after-free) via a\n crafted SO_RCVBUF setsockopt system call in conjunction with\n XFRM_MSG_GETPOLICY Netlink messages (bsc#1069708).\n\n", "cvss3": {}, "published": "2018-02-02T00:11:51", "type": "suse", "title": "Security update for the Linux Kernel (Live Patch 4 for SLE 12 SP3) (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-17712", "CVE-2017-16939"], "modified": "2018-02-02T00:11:51", "id": "SUSE-SU-2018:0345-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00002.html", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-01-30T20:53:56", "description": "This update for the Linux Kernel 4.4.49-92_11 fixes several issues.\n\n The following security issues were fixed:\n\n - CVE-2017-17712: The raw_sendmsg() function had a race condition that\n lead to uninitialized stack pointer usage. This allowed a local user to\n execute code and gain privileges (bsc#1073230).\n - CVE-2017-16939: The XFRM dump policy implementation allowed local users\n to gain privileges or cause a denial of service (use-after-free) via a\n crafted SO_RCVBUF setsockopt system call in conjunction with\n XFRM_MSG_GETPOLICY Netlink messages (bsc#1069708).\n\n", "cvss3": {}, "published": "2018-01-30T18:09:33", "type": "suse", "title": "Security update for the Linux Kernel (Live Patch 5 for SLE 12 SP2) (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-17712", "CVE-2017-16939"], "modified": "2018-01-30T18:09:33", "id": "SUSE-SU-2018:0297-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00099.html", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-01-30T02:53:48", "description": "This update for the Linux Kernel 4.4.59-92_17 fixes several issues.\n\n The following security issues were fixed:\n\n - CVE-2017-17712: The raw_sendmsg() function had a race condition that\n lead to uninitialized stack pointer usage. This allowed a local user to\n execute code and gain privileges (bsc#1073230).\n - CVE-2017-16939: The XFRM dump policy implementation allowed local users\n to gain privileges or cause a denial of service (use-after-free) via a\n crafted SO_RCVBUF setsockopt system call in conjunction with\n XFRM_MSG_GETPOLICY Netlink messages (bsc#1069708).\n\n", "cvss3": {}, "published": "2018-01-30T00:13:37", "type": "suse", "title": "Security update for the Linux Kernel (Live Patch 7 for SLE 12 SP2) (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-17712", "CVE-2017-16939"], "modified": "2018-01-30T00:13:37", "id": "SUSE-SU-2018:0273-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00088.html", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-01-30T20:53:56", "description": "This update for the Linux Kernel 4.4.49-92_14 fixes several issues.\n\n The following security issues were fixed:\n\n - CVE-2017-17712: The raw_sendmsg() function had a race condition that\n lead to uninitialized stack pointer usage. This allowed a local user to\n execute code and gain privileges (bsc#1073230).\n - CVE-2017-16939: The XFRM dump policy implementation allowed local users\n to gain privileges or cause a denial of service (use-after-free) via a\n crafted SO_RCVBUF setsockopt system call in conjunction with\n XFRM_MSG_GETPOLICY Netlink messages (bsc#1069708).\n\n", "cvss3": {}, "published": "2018-01-30T18:08:57", "type": "suse", "title": "Security update for the Linux Kernel (Live Patch 6 for SLE 12 SP2) (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-17712", "CVE-2017-16939"], "modified": "2018-01-30T18:08:57", "id": "SUSE-SU-2018:0296-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00098.html", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-02-02T02:53:09", "description": "This update for the Linux Kernel 4.4.82-6_3 fixes several issues.\n\n The following security issues were fixed:\n\n - CVE-2017-17712: The raw_sendmsg() function had a race condition that\n lead to uninitialized stack pointer usage. This allowed a local user to\n execute code and gain privileges (bsc#1073230).\n - CVE-2017-16939: The XFRM dump policy implementation allowed local users\n to gain privileges or cause a denial of service (use-after-free) via a\n crafted SO_RCVBUF setsockopt system call in conjunction with\n XFRM_MSG_GETPOLICY Netlink messages (bsc#1069708).\n\n", "cvss3": {}, "published": "2018-02-02T00:12:33", "type": "suse", "title": "Security update for the Linux Kernel (Live Patch 1 for SLE 12 SP3) (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-17712", "CVE-2017-16939"], "modified": "2018-02-02T00:12:33", "id": "SUSE-SU-2018:0346-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00003.html", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-01-30T02:53:48", "description": "This update for the Linux Kernel 4.4.59-92_20 fixes several issues.\n\n The following security issues were fixed:\n\n - CVE-2017-17712: The raw_sendmsg() function had a race condition that\n lead to uninitialized stack pointer usage. This allowed a local user to\n execute code and gain privileges (bsc#1073230).\n - CVE-2017-16939: The XFRM dump policy implementation allowed local users\n to gain privileges or cause a denial of service (use-after-free) via a\n crafted SO_RCVBUF setsockopt system call in conjunction with\n XFRM_MSG_GETPOLICY Netlink messages (bsc#1069708).\n\n", "cvss3": {}, "published": "2018-01-30T00:10:52", "type": "suse", "title": "Security update for the Linux Kernel (Live Patch 8 for SLE 12 SP2) (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-17712", "CVE-2017-16939"], "modified": "2018-01-30T00:10:52", "id": "SUSE-SU-2018:0269-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00084.html", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-02-02T02:53:09", "description": "This update for the Linux Kernel 4.4.82-6_6 fixes several issues.\n\n The following security issues were fixed:\n\n - CVE-2017-17712: The raw_sendmsg() function had a race condition that\n lead to uninitialized stack pointer usage. This allowed a local user to\n execute code and gain privileges (bsc#1073230).\n - CVE-2017-16939: The XFRM dump policy implementation allowed local users\n to gain privileges or cause a denial of service (use-after-free) via a\n crafted SO_RCVBUF setsockopt system call in conjunction with\n XFRM_MSG_GETPOLICY Netlink messages (bsc#1069708).\n\n", "cvss3": {}, "published": "2018-02-02T00:08:19", "type": "suse", "title": "Security update for the Linux Kernel (Live Patch 2 for SLE 12 SP3) (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-17712", "CVE-2017-16939"], "modified": "2018-02-02T00:08:19", "id": "SUSE-SU-2018:0340-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00001.html", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-01-30T02:53:48", "description": "This update for the Linux Kernel 4.4.74-92_35 fixes several issues.\n\n The following security issues were fixed:\n\n - CVE-2017-17712: The raw_sendmsg() function had a race condition that\n lead to uninitialized stack pointer usage. This allowed a local user to\n execute code and gain privileges (bsc#1073230).\n - CVE-2017-16939: The XFRM dump policy implementation allowed local users\n to gain privileges or cause a denial of service (use-after-free) via a\n crafted SO_RCVBUF setsockopt system call in conjunction with\n XFRM_MSG_GETPOLICY Netlink messages (bsc#1069708).\n\n", "cvss3": {}, "published": "2018-01-30T00:12:54", "type": "suse", "title": "Security update for the Linux Kernel (Live Patch 12 for SLE 12 SP2) (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-17712", "CVE-2017-16939"], "modified": "2018-01-30T00:12:54", "id": "SUSE-SU-2018:0272-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00087.html", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-02-02T02:53:09", "description": "This update for the Linux Kernel 4.4.82-6_9 fixes several issues.\n\n The following security issues were fixed:\n\n - CVE-2017-17712: The raw_sendmsg() function had a race condition that\n lead to uninitialized stack pointer usage. This allowed a local user to\n execute code and gain privileges (bsc#1073230).\n - CVE-2017-16939: The XFRM dump policy implementation allowed local users\n to gain privileges or cause a denial of service (use-after-free) via a\n crafted SO_RCVBUF setsockopt system call in conjunction with\n XFRM_MSG_GETPOLICY Netlink messages (bsc#1069708).\n\n", "cvss3": {}, "published": "2018-02-02T00:13:17", "type": "suse", "title": "Security update for the Linux Kernel (Live Patch 3 for SLE 12 SP3) (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-17712", "CVE-2017-16939"], "modified": "2018-02-02T00:13:17", "id": "SUSE-SU-2018:0347-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00004.html", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-01-30T14:53:57", "description": "This update for the Linux Kernel 4.4.74-92_32 fixes several issues.\n\n The following security issues were fixed:\n\n - CVE-2017-17712: The raw_sendmsg() function had a race condition that\n lead to uninitialized stack pointer usage. This allowed a local user to\n execute code and gain privileges (bsc#1073230).\n - CVE-2017-16939: The XFRM dump policy implementation allowed local users\n to gain privileges or cause a denial of service (use-after-free) via a\n crafted SO_RCVBUF setsockopt system call in conjunction with\n XFRM_MSG_GETPOLICY Netlink messages (bsc#1069708).\n\n", "cvss3": {}, "published": "2018-01-30T12:14:48", "type": "suse", "title": "Security update for the Linux Kernel (Live Patch 11 for SLE 12 SP2) (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-17712", "CVE-2017-16939"], "modified": "2018-01-30T12:14:48", "id": "SUSE-SU-2018:0280-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00094.html", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-01-30T02:53:48", "description": "This update for the Linux Kernel 4.4.74-92_38 fixes several issues.\n\n The following security issues were fixed:\n\n - CVE-2017-17712: The raw_sendmsg() function had a race condition that\n lead to uninitialized stack pointer usage. This allowed a local user to\n execute code and gain privileges (bsc#1073230).\n - CVE-2017-16939: The XFRM dump policy implementation allowed local users\n to gain privileges or cause a denial of service (use-after-free) via a\n crafted SO_RCVBUF setsockopt system call in conjunction with\n XFRM_MSG_GETPOLICY Netlink messages (bsc#1069708).\n\n", "cvss3": {}, "published": "2018-01-30T00:15:54", "type": "suse", "title": "Security update for the Linux Kernel (Live Patch 13 for SLE 12 SP2) (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-17712", "CVE-2017-16939"], "modified": "2018-01-30T00:15:54", "id": "SUSE-SU-2018:0277-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00092.html", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-01-30T14:53:57", "description": "This update for the Linux Kernel 4.4.90-92_45 fixes several issues.\n\n The following security issues were fixed:\n\n - CVE-2017-17712: The raw_sendmsg() function had a race condition that\n lead to uninitialized stack pointer usage. This allowed a local user to\n execute code and gain privileges (bsc#1073230).\n - CVE-2017-16939: The XFRM dump policy implementation allowed local users\n to gain privileges or cause a denial of service (use-after-free) via a\n crafted SO_RCVBUF setsockopt system call in conjunction with\n XFRM_MSG_GETPOLICY Netlink messages (bsc#1069708).\n\n", "cvss3": {}, "published": "2018-01-30T12:15:39", "type": "suse", "title": "Security update for the Linux Kernel (Live Patch 14 for SLE 12 SP2) (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-17712", "CVE-2017-16939"], "modified": "2018-01-30T12:15:39", "id": "SUSE-SU-2018:0281-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00095.html", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-01-30T14:53:57", "description": "This update for the Linux Kernel 4.4.59-92_24 fixes several issues.\n\n The following security issues were fixed:\n\n - CVE-2017-17712: The raw_sendmsg() function had a race condition that\n lead to uninitialized stack pointer usage. This allowed a local user to\n execute code and gain privileges (bsc#1073230).\n - CVE-2017-16939: The XFRM dump policy implementation allowed local users\n to gain privileges or cause a denial of service (use-after-free) via a\n crafted SO_RCVBUF setsockopt system call in conjunction with\n XFRM_MSG_GETPOLICY Netlink messages (bsc#1069708).\n\n", "cvss3": {}, "published": "2018-01-30T12:11:24", "type": "suse", "title": "Security update for the Linux Kernel (Live Patch 9 for SLE 12 SP2) (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-17712", "CVE-2017-16939"], "modified": "2018-01-30T12:11:24", "id": "SUSE-SU-2018:0278-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00093.html", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-01-30T14:53:57", "description": "This update for the Linux Kernel 4.4.74-92_29 fixes several issues.\n\n The following security issues were fixed:\n\n - CVE-2017-17712: The raw_sendmsg() function had a race condition that\n lead to uninitialized stack pointer usage. This allowed a local user to\n execute code and gain privileges (bsc#1073230).\n - CVE-2017-16939: The XFRM dump policy implementation allowed local users\n to gain privileges or cause a denial of service (use-after-free) via a\n crafted SO_RCVBUF setsockopt system call in conjunction with\n XFRM_MSG_GETPOLICY Netlink messages (bsc#1069708).\n\n", "cvss3": {}, "published": "2018-01-30T12:16:27", "type": "suse", "title": "Security update for the Linux Kernel (Live Patch 10 for SLE 12 SP2) (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-17712", "CVE-2017-16939"], "modified": "2018-01-30T12:16:27", "id": "SUSE-SU-2018:0282-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00096.html", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-02-10T00:54:55", "description": "The SUSE Linux Enterprise 12 SP2 kernel was updated to 4.4.114 to receive\n various security and bugfixes.\n\n The following security bugs were fixed:\n\n - CVE-2017-5715: Systems with microprocessors utilizing speculative\n execution and indirect branch prediction may allow unauthorized\n disclosure of information to an attacker with local user access via a\n side-channel analysis (bnc#1068032).\n\n The previous fix using CPU Microcode has been complemented by building\n the Linux Kernel with return trampolines aka "retpolines".\n\n - CVE-2017-15129: A use-after-free vulnerability was found in network\n namespaces code affecting the Linux kernel The function\n get_net_ns_by_id() in net/core/net_namespace.c did not check for the\n net::count value after it has found a peer network in netns_ids idr,\n which could lead to double free and memory corruption. This\n vulnerability could allow an unprivileged local user to induce kernel\n memory corruption on the system, leading to a crash. Due to the nature\n of the flaw, privilege escalation cannot be fully ruled out, although it\n is thought to be unlikely (bnc#1074839).\n - CVE-2017-17712: The raw_sendmsg() function in net/ipv4/raw.c in the\n Linux kernel has a race condition in inet->hdrincl that leads to\n uninitialized stack pointer usage; this allowed a local user to execute\n code and gain privileges (bnc#1073229).\n - CVE-2017-17862: kernel/bpf/verifier.c in the Linux kernel ignored\n unreachable code, even though it would still be processed by JIT\n compilers. This behavior, also considered an improper branch-pruning\n logic issue, could possibly be used by local users for denial of service\n (bnc#1073928).\n - CVE-2017-17864: kernel/bpf/verifier.c in the Linux kernel mishandled\n states_equal comparisons between the pointer data type and the\n UNKNOWN_VALUE data type, which allowed local users to obtain potentially\n sensitive address information, aka a "pointer leak (bnc#1073928).\n - CVE-2017-18017: The tcpmss_mangle_packet function in\n net/netfilter/xt_TCPMSS.c in the Linux kernel allowed remote attackers\n to cause a denial of service (use-after-free and memory corruption) or\n possibly have unspecified other impact by leveraging the presence of\n xt_TCPMSS in an iptables action (bnc#1074488).\n - CVE-2018-1000004: In the Linux kernel a race condition vulnerability\n existed in the sound system, this can lead to a deadlock and denial of\n service condition (bnc#1076017).\n - CVE-2018-5332: In the Linux kernel the rds_message_alloc_sgs() function\n did not validate a value that is used during DMA page allocation,\n leading to a heap-based out-of-bounds write (related to the\n rds_rdma_extra_size function in net/rds/rdma.c) (bnc#1075621).\n - CVE-2018-5333: In the Linux kernel the rds_cmsg_atomic function in\n net/rds/rdma.c mishandled cases where page pinning fails or an invalid\n address is supplied, leading to an rds_atomic_free_op NULL pointer\n dereference (bnc#1075617).\n\n The following non-security bugs were fixed:\n\n - 8021q: fix a memory leak for VLAN 0 device (bnc#1012382).\n - ACPI / scan: Prefer devices without _HID/_CID for _ADR matching\n (bnc#1012382).\n - ARC: uaccess: dont use "l" gcc inline asm constraint modifier\n (bnc#1012382).\n - Fix EX_SIZE. We do not have the patches that shave off parts of the\n exception data.\n - Fix build error in vma.c (bnc#1012382).\n - Fix mishandling of cases with MSR not being present (writing to MSR even\n though _state == -1).\n - Fix return value from ib[rs|pb]_enabled()\n - Input: trackpoint - force 3 buttons if 0 button is reported\n (bnc#1012382).\n - KVM: s390: Enable all facility bits that are known good for passthrough\n (bsc#1076806).\n - Kabi: Keep KVM stable after enable s390 wire up bpb feature\n (bsc#1076806).\n - Move RFI sysfs to a separate patch\n - Move the RFI debug code into separate patch.\n - Re-enable fixup detection by CPU type in case hypervisor call fails.\n - Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature"\n (bnc#1012382).\n - Revert "Re-enable fixup detection by CPU type in case hypervisor call\n fails." The firmware update is required for the existing instructions to\n also do the cache flush.\n - Revert "arm64: alternatives: add enable parameter to conditional asm\n macros" (bsc#1068032).\n - Revert "drm/armada: Fix compile fail" (bnc#1012382).\n - Revert "drm/radeon: dont switch vt on suspend" (bnc#1012382).\n - Revert "ipsec: Fix aborted xfrm policy dump crash" (kabi).\n - Revert "kaiser: vmstat show NR_KAISERTABLE as nr_overhead" (kabi).\n - Revert "lib/genalloc.c: make the avail variable an atomic_long_t" (kabi).\n - Revert "module: Add retpoline tag to VERMAGIC" (bnc#1012382 kabi).\n - Revert "netlink: add a start callback for starting a netlink dump"\n (kabi).\n - Revert "ocfs2: should wait dio before inode lock in ocfs2_setattr()"\n (bnc#1012382).\n - Revert "s390/kbuild: enable modversions for symbols exported from asm"\n (bnc#1012382).\n - Revert "sched/deadline: Use the revised wakeup rule for suspending\n constrained dl tasks" (kabi).\n - Revert "scsi: libsas: align sata_device's rps_resp on a cacheline"\n (kabi).\n - Revert "spi: SPI_FSL_DSPI should depend on HAS_DMA" (bnc#1012382).\n - Revert "userfaultfd: selftest: vm: allow to build in vm/ directory"\n (bnc#1012382).\n - Revert "x86/efi: Build our own page table structures" (bnc#1012382).\n - Revert "x86/efi: Hoist page table switching code into efi_call_virt()"\n (bnc#1012382).\n - Revert "x86/mm/pat: Ensure cpa->pfn only contains page frame numbers"\n (bnc#1012382).\n - SMB2: Fix share type handling (bnc#1074392).\n - Set supported_modules_check 1 (bsc#1072163).\n - Update patches.suse/powerpc-Secure-memory-rfi-flush-SLE12SP3.patch\n (bsc#1068032, bsc#1075087).\n - af_key: fix buffer overread in parse_exthdrs() (bnc#1012382).\n - af_key: fix buffer overread in verify_address_len() (bnc#1012382).\n - afs: Adjust mode bits processing (bnc#1012382).\n - afs: Connect up the CB.ProbeUuid (bnc#1012382).\n - afs: Fix afs_kill_pages() (bnc#1012382).\n - afs: Fix missing put_page() (bnc#1012382).\n - afs: Fix page leak in afs_write_begin() (bnc#1012382).\n - afs: Fix the maths in afs_fs_store_data() (bnc#1012382).\n - afs: Flush outstanding writes when an fd is closed (bnc#1012382).\n - afs: Migrate vlocation fields to 64-bit (bnc#1012382).\n - afs: Populate and use client modification time (bnc#1012382).\n - afs: Populate group ID from vnode status (bnc#1012382).\n - afs: Prevent callback expiry timer overflow (bnc#1012382).\n - alpha: fix build failures (bnc#1012382).\n - alsa: aloop: Fix inconsistent format due to incomplete rule\n (bsc#1031717).\n - alsa: aloop: Fix racy hw constraints adjustment (bsc#1031717).\n - alsa: aloop: Release cable upon open error path (bsc#1031717).\n - alsa: hda - Add HP ZBook 15u G3 Conexant CX20724 GPIO mute leds\n (bsc#1031717).\n - alsa: hda - Add MIC_NO_PRESENCE fixup for 2 HP machines (bsc#1031717).\n - alsa: hda - Add mute led support for HP EliteBook 840 G3 (bsc#1031717).\n - alsa: hda - Add mute led support for HP ProBook 440 G4 (bsc#1031717).\n - alsa: hda - Apply headphone noise quirk for another Dell XPS 13 variant\n (bsc#1031717).\n - alsa: hda - Apply the existing quirk to iMac 14,1 (bsc#1031717).\n - alsa: hda - Fix click noises on Samsung Ativ Book 8 (bsc#1031717).\n - alsa: hda - Fix headset microphone detection for ASUS N551 and N751\n (bsc#1031717).\n - alsa: hda - Fix mic regression by ASRock mobo fixup (bsc#1031717).\n - alsa: hda - Fix missing COEF init for ALC225/295/299 (bsc#1031717).\n - alsa: hda - Fix surround output pins for ASRock B150M mobo (bsc#1031717).\n - alsa: hda - On-board speaker fixup on ACER Veriton (bsc#1031717).\n - alsa: hda - Skip Realtek SKU check for Lenovo machines (bsc#1031717).\n - alsa: hda - add support for docking station for HP 820 G2 (bsc#1031717).\n - alsa: hda - add support for docking station for HP 840 G3 (bsc#1031717).\n - alsa: hda - change the location for one mic on a Lenovo machine\n (bsc#1031717).\n - alsa: hda - fix headset mic detection issue on a Dell machine\n (bsc#1031717).\n - alsa: hda - fix headset mic problem for Dell machines with alc274\n (bsc#1031717).\n - alsa: hda/realtek - ALC891 headset mode for Dell (bsc#1031717).\n - alsa: hda/realtek - Add ALC256 HP depop function (bsc#1031717).\n - alsa: hda/realtek - Add default procedure for suspend and resume state\n (bsc#1031717).\n - alsa: hda/realtek - Add support for ALC1220 (bsc#1031717).\n - alsa: hda/realtek - Add support for Acer Aspire E5-475 headset mic\n (bsc#1031717).\n - alsa: hda/realtek - Add support for headset MIC for ALC622 (bsc#1031717).\n - alsa: hda/realtek - Enable jack detection function for Intel ALC700\n (bsc#1031717).\n - alsa: hda/realtek - Fix ALC275 no sound issue (bsc#1031717).\n - alsa: hda/realtek - Fix Dell AIO LineOut issue (bsc#1031717).\n - alsa: hda/realtek - Fix headset and mic on several Asus laptops with\n ALC256 (bsc#1031717).\n - alsa: hda/realtek - Fix headset mic and speaker on Asus X441SA/X441UV\n (bsc#1031717).\n - alsa: hda/realtek - Fix headset mic on several Asus laptops with ALC255\n (bsc#1031717).\n - alsa: hda/realtek - Fix pincfg for Dell XPS 13 9370 (bsc#1031717).\n - alsa: hda/realtek - Fix speaker support for Asus AiO ZN270IE\n (bsc#1031717).\n - alsa: hda/realtek - Fix typo of pincfg for Dell quirk (bsc#1031717).\n - alsa: hda/realtek - New codec device ID for ALC1220 (bsc#1031717).\n - alsa: hda/realtek - New codec support for ALC257 (bsc#1031717).\n - alsa: hda/realtek - New codec support of ALC1220 (bsc#1031717).\n - alsa: hda/realtek - New codecs support for ALC215/ALC285/ALC289\n (bsc#1031717).\n - alsa: hda/realtek - No loopback on ALC225/ALC295 codec (bsc#1031717).\n - alsa: hda/realtek - Remove ALC285 device ID (bsc#1031717).\n - alsa: hda/realtek - Support Dell headset mode for ALC3271 (bsc#1031717).\n - alsa: hda/realtek - Support headset mode for ALC234/ALC274/ALC294\n (bsc#1031717).\n - alsa: hda/realtek - There is no loopback mixer in the ALC234/274/294\n (bsc#1031717).\n - alsa: hda/realtek - Update headset mode for ALC225 (bsc#1031717).\n - alsa: hda/realtek - Update headset mode for ALC298 (bsc#1031717).\n - alsa: hda/realtek - change the location for one of two front microphones\n (bsc#1031717).\n - alsa: hda/realtek - fix headset mic detection for MSI MS-B120\n (bsc#1031717).\n - alsa: hda: Drop useless WARN_ON() (bsc#1031717).\n - alsa: pcm: Abort properly at pending signal in OSS read/write loops\n (bsc#1031717).\n - alsa: pcm: Add missing error checks in OSS emulation plugin builder\n (bsc#1031717).\n - alsa: pcm: Allow aborting mutex lock at OSS read/write loops\n (bsc#1031717).\n - alsa: pcm: Remove incorrect snd_BUG_ON() usages (bsc#1031717).\n - alsa: pcm: Remove yet superfluous WARN_ON() (bsc#1031717).\n - alsa: pcm: prevent UAF in snd_pcm_info (bsc#1031717).\n - alsa: rawmidi: Avoid racy info ioctl via ctl device (bsc#1031717).\n - alsa: seq: Remove spurious WARN_ON() at timer check (bsc#1031717).\n - alsa: usb-audio: Add check return value for usb_string() (bsc#1031717).\n - alsa: usb-audio: Fix out-of-bound error (bsc#1031717).\n - alsa: usb-audio: Fix the missing ctl name suffix at parsing SU\n (bsc#1031717).\n - arm-ccn: perf: Prevent module unload while PMU is in use (bnc#1012382).\n - arm64/cpufeature: do not use mutex in bringup path (bsc#1068032).\n - arm64: Add hypervisor safe helper for checking constant capabilities\n (bsc#1068032).\n - arm64: Add macros to read/write system registers (bsc#1068032).\n - arm64: Add skeleton to harden the branch predictor against aliasing\n attacks (bsc#1068032).\n - arm64: Add trace_hardirqs_off annotation in ret_to_user (bsc#1068032).\n - arm64: Disable TTBR0_EL1 during normal kernel execution (bsc#1068032).\n - arm64: Disable kpti for non broadcast TLB HW (bsc#1068032).\n - arm64: Enable CONFIG_ARM64_SW_TTBR0_PAN (bsc#1068032).\n - arm64: Factor out PAN enabling/disabling into separate uaccess_* macros\n (bsc#1068032).\n - arm64: Factor out TTBR0_EL1 post-update workaround into a specific asm\n macro (bsc#1068032).\n - arm64: Fix circular include of asm/lse.h through linux/jump_label.h\n (bsc#1068032).\n - arm64: Fix compilation (bsc#1068032).\n - arm64: Handle el1 synchronous instruction aborts cleanly (bsc#1068032).\n - arm64: Implement branch predictor hardening for affected Cortex-A CPUs\n (bsc#1068032).\n - arm64: Initialise high_memory global variable earlier (bnc#1012382).\n - arm64: Introduce uaccess_{disable,enable} functionality based on\n TTBR0_EL1 (bsc#1068032).\n - arm64: Kconfig: Add CONFIG_UNMAP_KERNEL_AT_EL0 (bsc#1068032).\n - arm64: Kconfig: Reword UNMAP_KERNEL_AT_EL0 kconfig entry (bsc#1068032).\n - arm64: Mask all exceptions during kernel_exit (bsc#1068032).\n - arm64: Move BP hardening to check_and_switch_context (bsc#1068032).\n - arm64: Move post_ttbr_update_workaround to C code (bsc#1068032).\n - arm64: Move the async/fiq helpers to explicitly set process context\n flags (bsc#1068032).\n - arm64: SW PAN: Point saved ttbr0 at the zero page when switching to\n init_mm (bsc#1068032).\n - arm64: SW PAN: Update saved ttbr0 value on enter_lazy_tlb (bsc#1068032).\n - arm64: Store struct thread_info in sp_el0 (bsc#1068032).\n - arm64: Take into account ID_AA64PFR0_EL1.CSV3 (bsc#1068032).\n - arm64: Use static keys for CPU features (bsc#1068032).\n - arm64: add macro to extract ESR_ELx.EC (bsc#1068032).\n - arm64: alternative: add auto-nop infrastructure (bsc#1068032).\n - arm64: barriers: introduce nops and __nops macros for NOP sequences\n (bsc#1068032).\n - arm64: cpu_errata: Allow an erratum to be match for all revisions of a\n core (bsc#1068032).\n - arm64: cpufeature: Add scope for capability check (bsc#1068032).\n - arm64: cpufeature: Pass capability structure to ->enable callback\n (bsc#1068032).\n - arm64: debug: remove unused local_dbg_{enable, disable} macros\n (bsc#1068032).\n - arm64: do not pull uaccess.h into *.S (bsc#1068032).\n - arm64: entry.S convert el0_sync (bsc#1068032).\n - arm64: entry.S: Remove disable_dbg (bsc#1068032).\n - arm64: entry.S: convert el1_sync (bsc#1068032).\n - arm64: entry.S: convert elX_irq (bsc#1068032).\n - arm64: entry.S: move SError handling into a C function for future\n expansion (bsc#1068032).\n - arm64: entry: Add exception trampoline page for exceptions from EL0\n (bsc#1068032).\n - arm64: entry: Add fake CPU feature for unmapping the kernel at EL0\n (bsc#1068032).\n - arm64: entry: Explicitly pass exception level to kernel_ventry macro\n (bsc#1068032).\n - arm64: entry: Hook up entry trampoline to exception vectors\n (bsc#1068032).\n - arm64: entry: remove pointless SPSR mode check (bsc#1068032).\n - arm64: explicitly mask all exceptions (bsc#1068032).\n - arm64: factor out PAGE_* and CONT_* definitions (bsc#1068032).\n - arm64: factor out entry stack manipulation (bsc#1068032).\n - arm64: factor work_pending state machine to C (bsc#1068032).\n - arm64: fpsimd: Prevent registers leaking from dead tasks (bnc#1012382).\n - arm64: head.S: get rid of x25 and x26 with 'global' scope (bsc#1068032).\n - arm64: introduce an order for exceptions (bsc#1068032).\n - arm64: introduce mov_q macro to move a constant into a 64-bit register\n (bsc#1068032).\n - arm64: kaslr: Put kernel vectors address in separate data page\n (bsc#1068032).\n - arm64: kill ESR_LNX_EXEC (bsc#1068032).\n - arm64: kpti: Fix the interaction between ASID switching and software PAN\n (bsc#1068032).\n - arm64: kvm: Fix SMCCC handling of unimplemented SMC/HVC calls\n (bnc#1012382).\n - arm64: kvm: Survive unknown traps from guests (bnc#1012382).\n - arm64: kvm: Use per-CPU vector when BP hardening is enabled\n (bsc#1068032).\n - arm64: kvm: fix VTTBR_BADDR_MASK BUG_ON off-by-one (bnc#1012382).\n - arm64: mm: Add arm64_kernel_unmapped_at_el0 helper (bsc#1068032).\n - arm64: mm: Allocate ASIDs in pairs (bsc#1068032).\n - arm64: mm: Fix and re-enable ARM64_SW_TTBR0_PAN (bsc#1068032).\n - arm64: mm: Introduce TTBR_ASID_MASK for getting at the ASID in the TTBR\n (bsc#1068032).\n - arm64: mm: Invalidate both kernel and user ASIDs when performing TLBI\n (bsc#1068032).\n - arm64: mm: Map entry trampoline into trampoline and kernel page tables\n (bsc#1068032).\n - arm64: mm: Move ASID from TTBR0 to TTBR1 (bsc#1068032).\n - arm64: mm: Rename post_ttbr0_update_workaround (bsc#1068032).\n - arm64: mm: Temporarily disable ARM64_SW_TTBR0_PAN (bsc#1068032).\n - arm64: mm: Use non-global mappings for kernel space (bsc#1068032).\n - arm64: mm: hardcode rodata=true (bsc#1068032).\n - arm64: swp emulation: bound LL/SC retries before rescheduling\n (bsc#1068032).\n - arm64: sysreg: Fix unprotected macro argmuent in write_sysreg\n (bsc#1068032).\n - arm64: sysreg: allow write_sysreg to use XZR (bsc#1068032).\n - arm64: tlbflush.h: add __tlbi() macro (bsc#1068032).\n - arm64: tls: Avoid unconditional zeroing of tpidrro_el0 for native tasks\n (bsc#1068032).\n - arm64: use RET instruction for exiting the trampoline (bsc#1068032).\n - arm64: use alternative auto-nop (bsc#1068032).\n - arm64: xen: Enable user access before a privcmd hvc call (bsc#1068032).\n - arm: BUG if jumping to usermode address in kernel mode (bnc#1012382).\n - arm: OMAP1: DMA: Correct the number of logical channels (bnc#1012382).\n - arm: OMAP2+: Fix device node reference counts (bnc#1012382).\n - arm: OMAP2+: Release device node after it is no longer needed\n (bnc#1012382).\n - arm: OMAP2+: gpmc-onenand: propagate error on initialization failure\n (bnc#1012382).\n - arm: avoid faulting on qemu (bnc#1012382).\n - arm: dma-mapping: disallow dma_get_sgtable() for non-kernel managed\n memory (bnc#1012382).\n - arm: dts: am335x-evmsk: adjust mmc2 param to allow suspend (bnc#1012382).\n - arm: dts: kirkwood: fix pin-muxing of MPP7 on OpenBlocks A7\n (bnc#1012382).\n - arm: dts: omap3: logicpd-torpedo-37xx-devkit: Fix MMC1 cd-gpio\n (bnc#1012382).\n - arm: dts: ti: fix PCI bus dtc warnings (bnc#1012382).\n - arm: kprobes: Align stack to 8-bytes in test code (bnc#1012382).\n - arm: kprobes: Fix the return address of multiple kretprobes\n (bnc#1012382).\n - arm: kvm: Fix VTTBR_BADDR_MASK BUG_ON off-by-one (bnc#1012382).\n - arm: kvm: Survive unknown traps from guests (bnc#1012382).\n - asm-prototypes: Clear any CPP defines before declaring the functions\n (git-fixes).\n - asn.1: check for error from ASN1_OP_END__ACT actions (bnc#1012382).\n - asn.1: fix out-of-bounds read when parsing indefinite length item\n (bnc#1012382).\n - asoc: fsl_ssi: AC'97 ops need regmap, clock and cleaning up on failure\n (bsc#1031717).\n - asoc: twl4030: fix child-node lookup (bsc#1031717).\n - asoc: wm_adsp: Fix validation of firmware and coeff lengths\n (bsc#1031717).\n - ath9k: fix tx99 potential info leak (bnc#1012382).\n - atm: horizon: Fix irq release error (bnc#1012382).\n - audit: ensure that 'audit=1' actually enables audit for PID 1\n (bnc#1012382).\n - axonram: Fix gendisk handling (bnc#1012382).\n - backlight: pwm_bl: Fix overflow condition (bnc#1012382).\n - bcache.txt: standardize document format (bsc#1076110).\n - bcache: Avoid nested function definition (bsc#1076110).\n - bcache: Do not reinvent the wheel but use existing llist API\n (bsc#1076110).\n - bcache: Fix building error on MIPS (bnc#1012382).\n - bcache: Remove deprecated create_workqueue (bsc#1076110).\n - bcache: Remove redundant block_size assignment (bsc#1076110).\n - bcache: Remove redundant parameter for cache_alloc() (bsc#1076110).\n - bcache: Remove redundant set_capacity (bsc#1076110).\n - bcache: Update continue_at() documentation (bsc#1076110).\n - bcache: add a comment in journal bucket reading (bsc#1076110).\n - bcache: check return value of register_shrinker (bsc#1076110).\n - bcache: debug: avoid accessing .bi_io_vec directly (bsc#1076110).\n - bcache: do not write back data if reading it failed (bsc#1076110).\n - bcache: documentation formatting, edited for clarity, stripe alignment\n notes (bsc#1076110).\n - bcache: documentation updates and corrections (bsc#1076110).\n - bcache: explicitly destroy mutex while exiting (bnc#1012382).\n - bcache: fix a comments typo in bch_alloc_sectors() (bsc#1076110).\n - bcache: fix sequential large write IO bypass (bsc#1076110).\n - bcache: fix wrong cache_misses statistics (bnc#1012382).\n - bcache: gc does not work when triggering by manual command (bsc#1076110,\n bsc#1038078).\n - bcache: implement PI controller for writeback rate (bsc#1076110).\n - bcache: increase the number of open buckets (bsc#1076110).\n - bcache: only permit to recovery read error when cache device is clean\n (bnc#1012382 bsc#1043652).\n - bcache: partition support: add 16 minors per bcacheN device\n (bsc#1076110).\n - bcache: pr_err: more meaningful error message when nr_stripes is invalid\n (bsc#1076110).\n - bcache: rearrange writeback main thread ratelimit (bsc#1076110).\n - bcache: recover data from backing when data is clean (bnc#1012382\n bsc#1043652).\n - bcache: register_bcache(): call blkdev_put() when cache_alloc() fails\n (bsc#1076110).\n - bcache: remove unused parameter (bsc#1076110).\n - bcache: rewrite multiple partitions support (bsc#1076110, bsc#1038085,\n bsc#1019784).\n - bcache: safeguard a dangerous addressing in closure_queue (bsc#1076110).\n - bcache: silence static checker warning (bsc#1076110).\n - bcache: smooth writeback rate control (bsc#1076110).\n - bcache: switch to using blk_queue_write_cache() (bsc#1076110).\n - bcache: update bio->bi_opf bypass/writeback REQ_ flag hints\n (bsc#1076110).\n - bcache: update bucket_in_use in real time (bsc#1076110).\n - bcache: update document info (bsc#1076110).\n - bcache: use kmalloc to allocate bio in bch_data_verify() (bsc#1076110).\n - bcache: use llist_for_each_entry_safe() in __closure_wake_up()\n (bsc#1076110).\n - bcache: writeback rate clamping: make 32 bit safe (bsc#1076110).\n - bcache: writeback rate shouldn't artifically clamp (bsc#1076110).\n - be2net: restore properly promisc mode after queues reconfiguration\n (bsc#963844).\n - block: export bio_free_pages to other modules (bsc#1076110).\n - block: wake up all tasks blocked in get_request() (bnc#1012382).\n - bluetooth: btusb: driver to enable the usb-wakeup feature (bnc#1012382).\n - bnx2x: do not rollback VF MAC/VLAN filters we did not configure\n (bnc#1012382).\n - bnx2x: fix possible overrun of VFPF multicast addresses array\n (bnc#1012382).\n - bnx2x: prevent crash when accessing PTP with interface down\n (bnc#1012382).\n - btrfs: account for pinned bytes in should_alloc_chunk (bsc#1066842).\n - btrfs: add missing memset while reading compressed inline extents\n (bnc#1012382).\n - btrfs: clear space cache inode generation always (bnc#1012382).\n - can: af_can: can_rcv(): replace WARN_ONCE by pr_warn_once (bnc#1012382).\n - can: af_can: canfd_rcv(): replace WARN_ONCE by pr_warn_once\n (bnc#1012382).\n - can: ems_usb: cancel urb on -EPIPE and -EPROTO (bnc#1012382).\n - can: esd_usb2: cancel urb on -EPIPE and -EPROTO (bnc#1012382).\n - can: gs_usb: fix return value of the "set_bittiming" callback\n (bnc#1012382).\n - can: kvaser_usb: Fix comparison bug in kvaser_usb_read_bulk_callback()\n (bnc#1012382).\n - can: kvaser_usb: cancel urb on -EPIPE and -EPROTO (bnc#1012382).\n - can: kvaser_usb: free buf in error paths (bnc#1012382).\n - can: kvaser_usb: ratelimit errors if incomplete messages are received\n (bnc#1012382).\n - can: peak: fix potential bug in packet fragmentation (bnc#1012382).\n - can: ti_hecc: Fix napi poll return value for repoll (bnc#1012382).\n - can: usb_8dev: cancel urb on -EPIPE and -EPROTO (bnc#1012382).\n - cdc-acm: apply quirk for card reader (bsc#1060279).\n - cdrom: factor out common open_for_* code (bsc#1048585).\n - cdrom: wait for tray to close (bsc#1048585).\n - ceph: drop negative child dentries before try pruning inode's alias\n (bnc#1012382).\n - ceph: more accurate statfs (bsc#1077068).\n - clk: imx6: refine hdmi_isfr's parent to make HDMI work on i.MX6 SoCs w/o\n VPU (bnc#1012382).\n - clk: mediatek: add the option for determining PLL source clock\n (bnc#1012382).\n - clk: tegra: Fix cclk_lp divisor register (bnc#1012382).\n - cpuidle: Validate cpu_dev in cpuidle_add_sysfs() (bnc#1012382).\n - cpuidle: fix broadcast control when broadcast can not be entered\n (bnc#1012382).\n - cpuidle: powernv: Pass correct drv->cpumask for registration\n (bnc#1012382).\n - crypto: algapi - fix NULL dereference in crypto_remove_spawns()\n (bnc#1012382).\n - crypto: chacha20poly1305 - validate the digest size (bnc#1012382).\n - crypto: crypto4xx - increase context and scatter ring buffer elements\n (bnc#1012382).\n - crypto: deadlock between crypto_alg_sem/rtnl_mutex/genl_mutex\n (bnc#1012382).\n - crypto: mcryptd - protect the per-CPU queue with a lock (bnc#1012382).\n - crypto: n2 - cure use after free (bnc#1012382).\n - crypto: pcrypt - fix freeing pcrypt instances (bnc#1012382).\n - crypto: s5p-sss - Fix completing crypto request in IRQ handler\n (bnc#1012382).\n - crypto: tcrypt - fix buffer lengths in test_aead_speed() (bnc#1012382).\n - cxl: Check if vphb exists before iterating over AFU devices\n (bsc#1066223).\n - dax: Pass detailed error code from __dax_fault() (bsc#1072484).\n - dccp: don't restart ccid2_hc_tx_rto_expire() if sk in closed state\n (bnc#1012382).\n - delay: add poll_event_interruptible (bsc#1048585).\n - dm btree: fix serious bug in btree_split_beneath() (bnc#1012382).\n - dm bufio: fix shrinker scans when (nr_to_scan < retain_target)\n (bnc#1012382).\n - dm thin metadata: THIN_MAX_CONCURRENT_LOCKS should be 6 (bnc#1012382).\n - dmaengine: Fix array index out of bounds warning in __get_unmap_pool()\n (bnc#1012382).\n - dmaengine: dmatest: move callback wait queue to thread context\n (bnc#1012382).\n - dmaengine: pl330: fix double lock (bnc#1012382).\n - dmaengine: ti-dma-crossbar: Correct am335x/am43xx mux value type\n (bnc#1012382).\n - drivers/firmware: Expose psci_get_version through psci_ops structure\n (bsc#1068032).\n - drivers/md/bcache/util.h: remove duplicate inclusion of blkdev.h\n (bsc#1076110).\n - drivers: base: cacheinfo: fix boot error message when acpi is enabled\n (bnc#1012382).\n - drivers: base: cacheinfo: fix x86 with CONFIG_OF enabled (bnc#1012382).\n - drivers: net: xgene: Fix hardware checksum setting (bsc#1078526).\n - drm/amd/amdgpu: fix console deadlock if late init failed (bnc#1012382).\n - drm/exynos/decon5433: set STANDALONE_UPDATE_F on output enablement\n (bnc#1012382).\n - drm/exynos: gem: Drop NONCONTIG flag for buffers allocated without IOMMU\n (bnc#1012382).\n - drm/omap: fix dmabuf mmap for dma_alloc'ed buffers (bnc#1012382).\n - drm/radeon/si: add dpm quirk for Oland (bnc#1012382).\n - drm/radeon: fix atombios on big endian (bnc#1012382).\n - drm/radeon: reinstate oland workaround for sclk (bnc#1012382).\n - drm/vmwgfx: Potential off by one in vmw_view_add() (bnc#1012382).\n - drm: extra printk() wrapper macros (bnc#1012382).\n - dynamic-debug-howto: fix optional/omitted ending line number to be LARGE\n instead of 0 (bnc#1012382).\n - edac, i5000, i5400: Fix definition of NRECMEMB register (bnc#1012382).\n - edac, i5000, i5400: Fix use of MTR_DRAM_WIDTH macro (bnc#1012382).\n - edac, sb_edac: Fix missing break in switch (bnc#1012382).\n - eeprom: at24: check at24_read/write arguments (bnc#1012382).\n - efi/esrt: Cleanup bad memory map log messages (bnc#1012382).\n - efi: Move some sysfs files to be read-only by root (bnc#1012382).\n - eventpoll.h: add missing epoll event masks (bnc#1012382).\n - ext4: Fix ENOSPC handling in DAX page fault handle (bsc#1072484).\n - ext4: fix crash when a directory's i_size is too small (bnc#1012382).\n - ext4: fix fdatasync(2) after fallocate(2) operation (bnc#1012382).\n - fbdev: controlfb: Add missing modes to fix out of bounds access\n (bnc#1012382).\n - fjes: Fix wrong netdevice feature flags (bnc#1012382).\n - flow_dissector: properly cap thoff field (bnc#1012382).\n - fm10k: ensure we process SM mbx when processing VF mbx (bnc#1012382).\n - fork: clear thread stack upon allocation (bsc#1077560). Conflicts:\n series.conf\n - fscache: Fix the default for fscache_maybe_release_page() (bnc#1012382).\n - futex: Prevent overflow by strengthen input validation (bnc#1012382).\n - gcov: disable for COMPILE_TEST (bnc#1012382).\n - gfs2: Take inode off order_write list when setting jdata flag\n (bnc#1012382).\n - gpio: altera: Use handle_level_irq when configured as a level_high\n (bnc#1012382).\n - hid: chicony: Add support for another ASUS Zen AiO keyboard\n (bnc#1012382).\n - hid: xinmo: fix for out of range for THT 2P arcade controller\n (bnc#1012382).\n - hrtimer: Reset hrtimer cpu base proper on CPU hotplug (bnc#1012382).\n - hv: kvp: Avoid reading past allocated blocks from KVP file (bnc#1012382).\n - hwmon: (asus_atk0110) fix uninitialized data access (bnc#1012382).\n - i40e: Do not enable NAPI on q_vectors that have no rings (bnc#1012382).\n - ib/hfi1: Correct defered count after processing qp_wait_list (git-fixes).\n - ib/hfi1: Fix rnr_timer addition (git-fixes).\n - ib/hfi1: Handle kzalloc failure in init_pervl_scs (git-fixes).\n - ib/hfi1: Move iowait_init() to priv allocate (git-fixes).\n - ib/hfi1: Prevent kernel QP post send hard lockups (git-fixes).\n - ib/hfi1: Reset QSFP on every run through channel tuning (git-fixes).\n - ib/ipoib: Fix lockdep issue found on ipoib_ib_dev_heavy_flush\n (git-fixes).\n - ib/ipoib: Grab rtnl lock on heavy flush when calling ndo_open/stop\n (bnc#1012382).\n - ib/mlx4: Increase maximal message size under UD QP (bnc#1012382).\n - ib/mlx5: Assign send CQ and recv CQ of UMR QP (bnc#1012382).\n - ib/qib: Remove qpt_mask global (git-fixes).\n - ib/rdmavt: restore IRQs on error path in rvt_create_ah() (git-fixes).\n - ib/srpt: Disable RDMA access by the initiator (bnc#1012382).\n - ibmvnic: Allocate and request vpd in init_resources (bsc#1076872).\n - ibmvnic: Do not handle RX interrupts when not up (bsc#1075066).\n - ibmvnic: Fix IP offload control buffer (bsc#1076899).\n - ibmvnic: Fix IPv6 packet descriptors (bsc#1076899).\n - ibmvnic: Fix pending MAC address changes (bsc#1075627).\n - ibmvnic: Modify buffer size and number of queues on failover\n (bsc#1076872).\n - ibmvnic: Revert to previous mtu when unsupported value requested\n (bsc#1076872).\n - ibmvnic: Wait for device response when changing MAC (bsc#1078681).\n - igb: check memory allocation failure (bnc#1012382).\n - ima: fix hash algorithm initialization (bnc#1012382).\n - inet: frag: release spinlock before calling icmp_send() (bnc#1012382).\n - input: 88pm860x-ts - fix child-node lookup (bnc#1012382).\n - input: elantech - add new icbody type 15 (bnc#1012382).\n - input: i8042 - add TUXEDO BU1406 (N24_25BU) to the nomux list\n (bnc#1012382).\n - input: twl4030-vibra - fix sibling-node lookup (bnc#1012382).\n - input: twl6040-vibra - fix DT node memory management (bnc#1012382).\n - input: twl6040-vibra - fix child-node lookup (bnc#1012382).\n - intel_th: pci: Add Gemini Lake support (bnc#1012382).\n - iommu/arm-smmu-v3: Do not free page table ops twice (bnc#1012382).\n - iommu/vt-d: Fix scatterlist offset handling (bnc#1012382).\n - ip6_tunnel: disable dst caching if tunnel is dual-stack (bnc#1012382).\n - ipmi: Stop timers before cleaning up the module (bnc#1012382).\n - ipv4: Fix use-after-free when flushing FIB tables (bnc#1012382).\n - ipv4: Make neigh lookup keys for loopback/point-to-point devices be\n INADDR_ANY (bnc#1012382).\n - ipv4: igmp: guard against silly MTU values (bnc#1012382).\n - ipv6: Fix getsockopt() for sockets with default IPV6_AUTOFLOWLABEL\n (bnc#1012382).\n - ipv6: fix possible mem leaks in ipv6_make_skb() (bnc#1012382).\n - ipv6: fix udpv6 sendmsg crash caused by too small MTU (bnc#1012382).\n - ipv6: ip6_make_skb() needs to clear cork.base.dst (git-fixes).\n - ipv6: mcast: better catch silly mtu values (bnc#1012382).\n - ipv6: reorder icmpv6_init() and ip6_mr_init() (bnc#1012382).\n - ipvlan: fix ipv6 outbound device (bnc#1012382).\n - ipvlan: remove excessive packet scrubbing (bsc#1070799).\n - irda: vlsi_ir: fix check for DMA mapping errors (bnc#1012382).\n - irqchip/crossbar: Fix incorrect type of register size (bnc#1012382).\n - iscsi-target: Make TASK_REASSIGN use proper se_cmd->cmd_kref\n (bnc#1012382).\n - iscsi-target: fix memory leak in lio_target_tiqn_addtpg() (bnc#1012382).\n - isdn: kcapi: avoid uninitialized data (bnc#1012382).\n - iw_cxgb4: Only validate the MSN for successful completions (bnc#1012382).\n - ixgbe: fix use of uninitialized padding (bnc#1012382).\n - jump_label: Invoke jump_label_test() via early_initcall() (bnc#1012382).\n - jump_label: Make it possible for arches to invoke jump_label_init()\n earlier (bsc#1068032).\n - jump_labels: Allow array initialisers (bsc#1068032).\n - kABI: protect struct bpf_map (kabi).\n - kABI: protect struct ipv6_pinfo (kabi).\n - kABI: protect struct t10_alua_tg_pt_gp (kabi).\n - kabi fix for new hash_cred function (bsc#1012917).\n - kabi/severities: do not care about stuff_RSB\n - kaiser: Set _PAGE_NX only if supported (bnc#1012382).\n - kaiser: Set _PAGE_NX only if supported (bnc#1012382).\n - kbuild: add '-fno-stack-check' to kernel build options (bnc#1012382).\n - kbuild: modversions for EXPORT_SYMBOL() for asm (bsc#1074621\n bsc#1068032).\n - kbuild: pkg: use --transform option to prefix paths in tar (bnc#1012382).\n - kdb: Fix handling of kallsyms_symbol_next() return value (bnc#1012382).\n - kernel/acct.c: fix the acct->needcheck check in check_free_space()\n (bnc#1012382).\n - kernel/signal.c: protect the SIGNAL_UNKILLABLE tasks from\n !sig_kernel_only() signals (bnc#1012382).\n - kernel/signal.c: protect the traced SIGNAL_UNKILLABLE tasks from SIGKILL\n (bnc#1012382).\n - kernel/signal.c: remove the no longer needed SIGNAL_UNKILLABLE check in\n complete_signal() (bnc#1012382).\n - kernel: make groups_sort calling a responsibility group_info allocators\n (bnc#1012382).\n - keys: add missing permission check for request_key() destination\n (bnc#1012382).\n - kprobes/x86: Disable preemption in ftrace-based jprobes (bnc#1012382).\n - kpti: Rename to PAGE_TABLE_ISOLATION (bnc#1012382).\n - kpti: Report when enabled (bnc#1012382).\n - kvm: Fix stack-out-of-bounds read in write_mmio (bnc#1012382).\n - kvm: VMX: Fix enable VPID conditions (bnc#1012382).\n - kvm: VMX: remove I/O port 0x80 bypass on Intel hosts (bnc#1012382).\n - kvm: X86: Fix load RFLAGS w/o the fixed bit (bnc#1012382).\n - kvm: arm/arm64: Fix occasional warning from the timer work function\n (bnc#1012382 bsc#988524).\n - kvm: nVMX: VMCLEAR should not cause the vCPU to shut down (bnc#1012382).\n - kvm: nVMX: reset nested_run_pending if the vCPU is going to be reset\n (bnc#1012382).\n - kvm: pci-assign: do not map smm memory slot pages in vt-d page tables\n (bnc#1012382).\n - kvm: s390: wire up bpb feature (bsc#1076806).\n - kvm: vmx: Scrub hardware GPRs at VM-exit (bnc#1012382).\n - kvm: x86: Add memory barrier on vmcs field lookup (bnc#1012382).\n - kvm: x86: Exit to user-mode on #UD intercept when emulator requires\n (bnc#1012382).\n - kvm: x86: correct async page present tracepoint (bnc#1012382).\n - kvm: x86: fix RSM when PCID is non-zero (bnc#1012382).\n - kvm: x86: inject exceptions produced by x86_decode_insn (bnc#1012382).\n - kvm: x86: pvclock: Handle first-time write to pvclock-page contains\n random junk (bnc#1012382).\n - l2tp: cleanup l2tp_tunnel_delete calls (bnc#1012382).\n - lan78xx: Fix failure in USB Full Speed (bnc#1012382).\n - lib/genalloc.c: make the avail variable an atomic_long_t (bnc#1012382).\n - libata: apply MAX_SEC_1024 to all LITEON EP1 series devices\n (bnc#1012382).\n - libata: drop WARN from protocol error in ata_sff_qc_issue()\n (bnc#1012382).\n - macvlan: Only deliver one copy of the frame to the macvlan interface\n (bnc#1012382).\n - md-cluster: free md_cluster_info if node leave cluster (bnc#1012382).\n - media: dvb: i2c transfers over usb cannot be done from stack\n (bnc#1012382).\n - mfd: cros ec: spi: Do not send first message too soon (bnc#1012382).\n - mfd: twl4030-audio: Fix sibling-node lookup (bnc#1012382).\n - mfd: twl6040: Fix child-node lookup (bnc#1012382).\n - mlxsw: reg: Fix SPVM max record count (bnc#1012382).\n - mlxsw: reg: Fix SPVMLR max record count (bnc#1012382).\n - mm/mmap.c: do not blow on PROT_NONE MAP_FIXED holes in the stack\n (bnc#1012382).\n - mm/vmstat: Make NR_TLB_REMOTE_FLUSH_RECEIVED available even on UP\n (bnc#1012382).\n - mm: Handle 0 flags in _calc_vm_trans() macro (bnc#1012382).\n - mm: Introduce lm_alias (bsc#1068032).\n - mm: avoid returning VM_FAULT_RETRY from ->page_mkwrite handlers\n (bnc#1012382).\n - mm: drop unused pmdp_huge_get_and_clear_notify() (bnc#1012382).\n - mmc: core: Do not leave the block driver in a suspended state\n (bnc#1012382).\n - mmc: mediatek: Fixed bug where clock frequency could be set wrong\n (bnc#1012382).\n - module: set __jump_table alignment to 8 (bnc#1012382).\n - more bio_map_user_iov() leak fixes (bnc#1012382).\n - mtd: nand: Fix writing mtdoops to nand flash (bnc#1012382).\n - n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD)\n (bnc#1012382).\n - net/appletalk: Fix kernel memory disclosure (bnc#1012382).\n - net/mac80211/debugfs.c: prevent build failure with CONFIG_UBSAN=y\n (bnc#1012382).\n - net/packet: fix a race in packet_bind() and packet_notifier()\n (bnc#1012382).\n - net: Allow neigh contructor functions ability to modify the primary_key\n (bnc#1012382).\n - net: Do not allow negative values for busy_read and busy_poll sysctl\n interfaces (bnc#1012382).\n - net: Fix double free and memory corruption in get_net_ns_by_id()\n (bnc#1012382).\n - net: Resend IGMP memberships upon peer notification (bnc#1012382).\n - net: bcmgenet: Power up the internal PHY before probing the MII\n (bnc#1012382).\n - net: bcmgenet: correct MIB access of UniMAC RUNT counters (bnc#1012382).\n - net: bcmgenet: correct the RBUF_OVFL_CNT and RBUF_ERR_CNT MIB values\n (bnc#1012382).\n - net: bcmgenet: power down internal phy if open or resume fails\n (bnc#1012382).\n - net: bcmgenet: reserved phy revisions must be checked first\n (bnc#1012382).\n - net: bridge: fix early call to br_stp_change_bridge_id and plug newlink\n leaks (bnc#1012382).\n - net: core: fix module type in sock_diag_bind (bnc#1012382).\n - net: fec: fix multicast filtering hardware setup (bnc#1012382).\n - net: igmp: Use correct source address on IGMPv3 reports (bnc#1012382).\n - net: igmp: fix source address check for IGMPv3 reports (bnc#1012382).\n - net: initialize msg.msg_flags in recvfrom (bnc#1012382).\n - net: ipv4: fix for a race condition in raw_sendmsg (bnc#1012382).\n - net: mvmdio: disable/unprepare clocks in EPROBE_DEFER case (bnc#1012382).\n - net: mvneta: clear interface link status on port disable (bnc#1012382).\n - net: phy: at803x: Change error to EINVAL for invalid MAC (bnc#1012382).\n - net: phy: micrel: ksz9031: reconfigure autoneg after phy autoneg\n workaround (bnc#1012382).\n - net: qdisc_pkt_len_init() should be more robust (bnc#1012382).\n - net: qmi_wwan: Add USB IDs for MDM6600 modem on Motorola Droid 4\n (bnc#1012382).\n - net: qmi_wwan: add Sierra EM7565 1199:9091 (bnc#1012382).\n - net: reevalulate autoflowlabel setting after sysctl setting\n (bnc#1012382).\n - net: sctp: fix array overrun read on sctp_timer_tbl (bnc#1012382).\n - net: stmmac: enable EEE in MII, GMII or RGMII only (bnc#1012382).\n - net: systemport: Pad packet before inserting TSB (bnc#1012382).\n - net: systemport: Utilize skb_put_padto() (bnc#1012382).\n - net: tcp: close sock if net namespace is exiting (bnc#1012382).\n - net: wimax/i2400m: fix NULL-deref at probe (bnc#1012382).\n - netfilter: bridge: honor frag_max_size when refragmenting (bnc#1012382).\n - netfilter: do not track fragmented packets (bnc#1012382).\n - netfilter: ipvs: Fix inappropriate output of procfs (bnc#1012382).\n - netfilter: nfnetlink_queue: fix secctx memory leak (bnc#1012382).\n - netfilter: nfnetlink_queue: fix timestamp attribute (bsc#1074134).\n - netfilter: nfnl_cthelper: Fix memory leak (bnc#1012382).\n - netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash\n table (bnc#1012382).\n - netfilter: nfnl_cthelper: fix runtime expectation policy updates\n (bnc#1012382).\n - netlink: add a start callback for starting a netlink dump (bnc#1012382).\n - nfs: Do not take a reference on fl->fl_file for LOCK operation\n (bnc#1012382).\n - nfs: Fix a typo in nfs_rename() (bnc#1012382).\n - nfs: improve shinking of access cache (bsc#1012917).\n - nfsd: Fix another OPEN stateid race (bnc#1012382).\n - nfsd: Fix stateid races between OPEN and CLOSE (bnc#1012382).\n - nfsd: Make init_open_stateid() a bit more whole (bnc#1012382).\n - nfsd: auth: Fix gid sorting when rootsquash enabled (bnc#1012382).\n - nfsd: fix nfsd_minorversion(.., NFSD_AVAIL) (bnc#1012382).\n - nfsd: fix nfsd_reset_versions for NFSv4 (bnc#1012382).\n - nfsv4.1 respect server's max size in CREATE_SESSION (bnc#1012382).\n - nfsv4: Fix client recovery when server reboots multiple times\n (bnc#1012382).\n - nohz: Prevent a timer interrupt storm in tick_nohz_stop_sched_tick()\n (bnc#1012382).\n - openrisc: fix issue handling 8 byte get_user calls (bnc#1012382).\n - packet: fix crash in fanout_demux_rollover() (bnc#1012382).\n - parisc: Fix alignment of pa_tlb_lock in assembly on 32-bit SMP kernel\n (bnc#1012382).\n - parisc: Hide Diva-built-in serial aux and graphics card (bnc#1012382).\n - partially revert tipc improve link resiliency when rps is activated\n (bsc#1068038).\n - pci / PM: Force devices to D0 in pci_pm_thaw_noirq() (bnc#1012382).\n - pci/AER: Report non-fatal errors only to the affected endpoint\n (bnc#1012382).\n - pci/PME: Handle invalid data when reading Root Status (bnc#1012382).\n - pci: Avoid bus reset if bridge itself is broken (bnc#1012382).\n - pci: Create SR-IOV virtfn/physfn links before attaching driver\n (bnc#1012382).\n - pci: Detach driver before procfs & sysfs teardown on device remove\n (bnc#1012382).\n - perf symbols: Fix symbols__fixup_end heuristic for corner cases\n (bnc#1012382).\n - perf test attr: Fix ignored test case result (bnc#1012382).\n - perf: xgene: Add support for SoC PMU version 3 (bsc#1076809).\n - perf: xgene: Include module.h (bsc#1076809).\n - perf: xgene: Move PMU leaf functions into function pointer structure\n (bsc#1076809).\n - perf: xgene: Parse PMU subnode from the match table (bsc#1076809).\n - perf: xgene: Remove unnecessary managed resources cleanup (bsc#1076809).\n - phy: work around 'phys' references to usb-nop-xceiv devices\n (bnc#1012382).\n - pinctrl: adi2: Fix Kconfig build problem (bnc#1012382).\n - pinctrl: st: add irq_request/release_resources callbacks (bnc#1012382).\n - pipe: avoid round_pipe_size() nr_pages overflow on 32-bit (bnc#1012382).\n - powerpc/64: Add macros for annotating the destination of rfid/hrfid\n (bsc#1068032, bsc#1075087).\n - powerpc/64: Convert fast_exception_return to use RFI_TO_USER/KERNEL\n (bsc#1068032, bsc#1075087).\n - powerpc/64: Convert the syscall exit path to use RFI_TO_USER/KERNEL\n (bsc#1068032, bsc#1075087).\n - powerpc/64s: Add EX_SIZE definition for paca exception save areas\n (bsc#1068032, bsc#1075087).\n - powerpc/64s: Add support for RFI flush of L1-D cache (bsc#1068032,\n bsc#1075087).\n - powerpc/64s: Allow control of RFI flush via debugfs (bsc#1068032,\n bsc#1075087).\n - powerpc/64s: Convert slb_miss_common to use RFI_TO_USER/KERNEL\n (bsc#1068032, bsc#1075087).\n - powerpc/64s: Simple RFI macro conversions (bsc#1068032, bsc#1075087).\n - powerpc/64s: Support disabling RFI flush with no_rfi_flush and nopti\n (bsc#1068032, bsc#1075087).\n - powerpc/64s: Wire up cpu_show_meltdown() (bsc#1068032).\n - powerpc/asm: Allow including ppc_asm.h in asm files (bsc#1068032,\n bsc#1075087).\n - powerpc/ipic: Fix status get and status clear (bnc#1012382).\n - powerpc/perf/hv-24x7: Fix incorrect comparison in memord (bnc#1012382).\n - powerpc/perf: Dereference BHRB entries safely (bsc#1066223).\n - powerpc/powernv/cpufreq: Fix the frequency read by /proc/cpuinfo\n (bnc#1012382).\n - powerpc/powernv/ioda2: Gracefully fail if too many TCE levels requested\n (bnc#1012382).\n - powerpc/powernv: Check device-tree for RFI flush settings (bsc#1068032,\n bsc#1075087).\n - powerpc/pseries/rfi-flush: Call setup_rfi_flush() after LPM migration\n (bsc#1068032, bsc#1075087).\n - powerpc/pseries: Introduce H_GET_CPU_CHARACTERISTICS (bsc#1068032,\n bsc#1075087).\n - powerpc/pseries: Query hypervisor for RFI flush settings (bsc#1068032,\n bsc#1075087).\n - powerpc/pseries: include linux/types.h in asm/hvcall.h (bsc#1068032,\n bsc#1075087).\n - powerpc/pseries: rfi-flush: Call setup_rfi_flush() after LPM migration\n (bsc#1068032, bsc#1075087).\n - powerpc/rfi-flush: Add DEBUG_RFI config option (bsc#1068032,\n bsc#1075087).\n - powerpc/rfi-flush: Make setup_rfi_flush() not __init (bsc#1068032,\n bsc#1075087).\n - powerpc/rfi-flush: Move RFI flush fields out of the paca (unbreak kABI)\n (bsc#1068032, bsc#1075087).\n - powerpc/rfi-flush: Move the logic to avoid a redo into the sysfs code\n (bsc#1068032, bsc#1075087).\n - powerpc/rfi-flush: prevent crash when changing flush type to fallback\n after system boot (bsc#1068032, bsc#1075087).\n - ppp: Destroy the mutex when cleanup (bnc#1012382).\n - pppoe: take ->needed_headroom of lower device into account on xmit\n (bnc#1012382).\n - pti: unbreak EFI (bsc#1074709).\n - r8152: fix the list rx_done may be used without initialization\n (bnc#1012382).\n - r8152: prevent the driver from transmitting packets with carrier off\n (bnc#1012382).\n - r8169: fix memory corruption on retrieval of hardware statistics\n (bnc#1012382).\n - raid5: Set R5_Expanded on parity devices as well as data (bnc#1012382).\n - ravb: Remove Rx overflow log messages (bnc#1012382).\n - rbd: set max_segments to USHRT_MAX (bnc#1012382).\n - rdma/cma: Avoid triggering undefined behavior (bnc#1012382).\n - rdma/iser: Fix possible mr leak on device removal event (bnc#1012382).\n - rds: Fix NULL pointer dereference in __rds_rdma_map (bnc#1012382).\n - rds: Heap OOB write in rds_message_alloc_sgs() (bnc#1012382).\n - rds: null pointer dereference in rds_atomic_free_op (bnc#1012382).\n - regulator: Try to resolve regulators supplies on registration\n (bsc#1074847).\n - regulator: core: Rely on regulator_dev_release to free constraints\n (bsc#1074847).\n - regulator: da9063: Return an error code on probe failure (bsc#1074847).\n - regulator: pwm: Fix regulator ramp delay for continuous mode\n (bsc#1074847).\n - rfi-flush: Make DEBUG_RFI a CONFIG option (bsc#1068032, bsc#1075087).\n - ring-buffer: Mask out the info bits when returning buffer page length\n (bnc#1012382).\n - route: also update fnhe_genid when updating a route cache (bnc#1012382).\n - route: update fnhe_expires for redirect when the fnhe exists\n (bnc#1012382).\n - rtc: cmos: Initialize hpet timer before irq is registered (bsc#1077592).\n - rtc: pcf8563: fix output clock rate (bnc#1012382).\n - rtc: pl031: make interrupt optional (bnc#1012382).\n - rtc: set the alarm to the next expiring timer (bnc#1012382).\n - s390/pci: do not require AIS facility (bnc#1012382).\n - s390/qeth: no ETH header for outbound AF_IUCV (bnc#1012382).\n - s390/runtime instrumentation: simplify task exit handling (bnc#1012382).\n - s390: always save and restore all registers on context switch\n (bnc#1012382).\n - s390: fix compat system call table (bnc#1012382).\n - sch_dsmark: fix invalid skb_cow() usage (bnc#1012382).\n - sched/deadline: Make sure the replenishment timer fires in the next\n period (bnc#1012382).\n - sched/deadline: Throttle a constrained deadline task activated after the\n deadline (bnc#1012382).\n - sched/deadline: Use deadline instead of period when calculating overflow\n (bnc#1012382).\n - sched/deadline: Use the revised wakeup rule for suspending constrained\n dl tasks (bnc#1012382).\n - sched/deadline: Zero out positive runtime after throttling constrained\n tasks (git-fixes).\n - sched/rt: Do not pull from current CPU if only one CPU to pull\n (bnc#1022476).\n - scsi: bfa: integer overflow in debugfs (bnc#1012382).\n - scsi: check for device state in __scsi_remove_target() (bsc#1072589).\n - scsi: cxgb4i: fix Tx skb leak (bnc#1012382).\n - scsi: fixup kernel warning during rmmod() (bsc#1052360).\n - scsi: hpsa: cleanup sas_phy structures in sysfs when unloading\n (bnc#1012382).\n - scsi: hpsa: destroy sas transport properties before scsi_host\n (bnc#1012382).\n - scsi: libsas: align sata_device's rps_resp on a cacheline (bnc#1012382).\n - scsi: lpfc: Fix PT2PT PRLI reject (bnc#1012382).\n - scsi: lpfc: Fix crash during Hardware error recovery on SLI3 adapters\n (bnc#1012382).\n - scsi: lpfc: Fix secure firmware updates (bnc#1012382).\n - scsi: lpfc: PLOGI failures during NPIV testing (bnc#1012382).\n - scsi: mpt3sas: Fix IO error occurs on pulling out a drive from RAID1\n volume created on two SATA drive (bnc#1012382).\n - scsi: sd: change allow_restart to bool in sysfs interface (bnc#1012382).\n - scsi: sd: change manage_start_stop to bool in sysfs interface\n (bnc#1012382).\n - scsi: sg: disable SET_FORCE_LOW_DMA (bnc#1012382).\n - scsi: sr: wait for the medium to become ready (bsc#1048585).\n - sctp: Replace use of sockets_allocated with specified macro\n (bnc#1012382).\n - sctp: do not allow the v4 socket to bind a v4mapped v6 address\n (bnc#1012382).\n - sctp: do not free asoc when it is already dead in sctp_sendmsg\n (bnc#1012382).\n - sctp: return error if the asoc has been peeled off in\n sctp_wait_for_sndbuf (bnc#1012382).\n - sctp: use the right sk after waking up from wait_buf sleep (bnc#1012382).\n - selftest/powerpc: Fix false failures for skipped tests (bnc#1012382).\n - selftests/x86/ldt_get: Add a few additional tests for limits\n (bnc#1012382).\n - selftests/x86: Add test_vsyscall (bnc#1012382).\n - serial: 8250: Preserve DLD[7:4] for PORT_XR17V35X (bnc#1012382).\n - serial: 8250_pci: Add Amazon PCI serial device ID (bnc#1012382).\n - series.conf: fix wrong bsc reference\n - series.conf: whitespace cleanup\n - sfc: do not warn on successful change of MAC (bnc#1012382).\n - sh_eth: fix SH7757 GEther initialization (bnc#1012382).\n - sh_eth: fix TSU resource handling (bnc#1012382).\n - sit: update frag_off info (bnc#1012382).\n - sock: free skb in skb_complete_tx_timestamp on error (bnc#1012382).\n - sparc64/mm: set fields in deferred pages (bnc#1012382).\n - spi: sh-msiof: Fix DMA transfer size check (bnc#1012382).\n - spi: xilinx: Detect stall with Unknown commands (bnc#1012382).\n - spi_ks8995: fix "BUG: key accdaa28 not in .data!" (bnc#1012382).\n - staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl\n (bnc#1012382).\n - sunrpc: Fix rpc_task_begin trace point (bnc#1012382).\n - sunrpc: add RPCSEC_GSS hash_cred() function (bsc#1012917).\n - sunrpc: add auth_unix hash_cred() function (bsc#1012917).\n - sunrpc: add generic_auth hash_cred() function (bsc#1012917).\n - sunrpc: add hash_cred() function to rpc_authops struct (bsc#1012917).\n - sunrpc: replace generic auth_cred hash with auth-specific function\n (bsc#1012917).\n - sunrpc: use supplimental groups in auth hash (bsc#1012917).\n - sunxi-rsb: Include OF based modalias in device uevent (bnc#1012382).\n - sysfs/cpu: Add vulnerability folder (bnc#1012382).\n - sysfs/cpu: Fix typos in vulnerability documentation (bnc#1012382).\n - sysfs: spectre_v2, handle spec_ctrl (bsc#1075994 bsc#1075091).\n - sysrq : fix Show Regs call trace on ARM (bnc#1012382).\n - target/file: Do not return error for UNMAP if length is zero\n (bnc#1012382).\n - target/iscsi: Fix a race condition in iscsit_add_reject_from_cmd()\n (bnc#1012382).\n - target: Avoid early CMD_T_PRE_EXECUTE failures during ABORT_TASK\n (bnc#1012382).\n - target: Use system workqueue for ALUA transitions (bnc#1012382).\n - target: fix ALUA transition timeout handling (bnc#1012382).\n - target: fix race during implicit transition work flushes (bnc#1012382).\n - target:fix condition return in core_pr_dump_initiator_port()\n (bnc#1012382).\n - tcp md5sig: Use skb's saddr when replying to an incoming segment\n (bnc#1012382).\n - tcp: __tcp_hdrlen() helper (bnc#1012382).\n - tcp: correct memory barrier usage in tcp_check_space() (bnc#1012382).\n - tcp: fix under-evaluated ssthresh in TCP Vegas (bnc#1012382).\n - tg3: Fix rx hang on MTU change with 5717/5719 (bnc#1012382).\n - thermal/drivers/step_wise: Fix temperature regulation misbehavior\n (bnc#1012382).\n - thermal: hisilicon: Handle return value of clk_prepare_enable\n (bnc#1012382).\n - tipc: fix cleanup at module unload (bnc#1012382).\n - tipc: fix memory leak in tipc_accept_from_sock() (bnc#1012382).\n - tipc: improve link resiliency when rps is activated (bsc#1068038).\n - tracing: Allocate mask_str buffer dynamically (bnc#1012382).\n - tracing: Fix converting enum's from the map in trace_event_eval_update()\n (bnc#1012382).\n - tracing: Fix crash when it fails to alloc ring buffer (bnc#1012382).\n - tracing: Fix possible double free on failure of allocating trace buffer\n (bnc#1012382).\n - tracing: Remove extra zeroing out of the ring buffer page (bnc#1012382).\n - tty fix oops when rmmod 8250 (bnc#1012382).\n - uas: Always apply US_FL_NO_ATA_1X quirk to Seagate devices (bnc#1012382).\n - uas: ignore UAS for Norelsys NS1068(X) chips (bnc#1012382).\n - udf: Avoid overflow when session starts at large offset (bnc#1012382).\n - um: link vmlinux with -no-pie (bnc#1012382).\n - usb: Add device quirk for Logitech HD Pro Webcam C925e (bnc#1012382).\n - usb: Fix off by one in type-specific length check of BOS SSP capability\n (git-fixes).\n - usb: Increase usbfs transfer limit (bnc#1012382).\n - usb: add RESET_RESUME for ELSA MicroLink 56K (bnc#1012382).\n - usb: core: Add type-specific length check of BOS descriptors\n (bnc#1012382).\n - usb: core: prevent malicious bNumInterfaces overflow (bnc#1012382).\n - usb: devio: Prevent integer overflow in proc_do_submiturb()\n (bnc#1012382).\n - usb: fix usbmon BUG trigger (bnc#1012382).\n - usb: gadget: configs: plug memory leak (bnc#1012382).\n - usb: gadget: f_uvc: Sanity check wMaxPacketSize for SuperSpeed\n (bnc#1012382).\n - usb: gadget: ffs: Forbid usb_ep_alloc_request from sleeping\n (bnc#1012382).\n - usb: gadget: udc: remove pointer dereference after free (bnc#1012382).\n - usb: gadgetfs: Fix a potential memory leak in 'dev_config()'\n (bnc#1012382).\n - usb: hub: Cycle HUB power when initialization fails (bnc#1012382).\n - usb: misc: usb3503: make sure reset is low for at least 100us\n (bnc#1012382).\n - usb: musb: da8xx: fix babble condition handling (bnc#1012382).\n - usb: phy: isp1301: Add OF device ID table (bnc#1012382).\n - usb: phy: isp1301: Fix build warning when CONFIG_OF is disabled\n (git-fixes).\n - usb: phy: tahvo: fix error handling in tahvo_usb_probe() (bnc#1012382).\n - usb: quirks: Add no-lpm quirk for KY-688 USB 3.1 Type-C Hub\n (bnc#1012382).\n - usb: serial: cp210x: add IDs for LifeScan OneTouch Verio IQ\n (bnc#1012382).\n - usb: serial: cp210x: add new device ID ELV ALC 8xxx (bnc#1012382).\n - usb: serial: ftdi_sio: add id for Airbus DS P8GR (bnc#1012382).\n - usb: serial: option: add Quectel BG96 id (bnc#1012382).\n - usb: serial: option: add support for Telit ME910 PID 0x1101\n (bnc#1012382).\n - usb: serial: option: adding support for YUGA CLM920-NC5 (bnc#1012382).\n - usb: serial: qcserial: add Sierra Wireless EM7565 (bnc#1012382).\n - usb: uas and storage: Add US_FL_BROKEN_FUA for another JMicron JMS567 ID\n (bnc#1012382).\n - usb: usbfs: Filter flags passed in from user space (bnc#1012382).\n - usb: usbip: Fix possible deadlocks reported by lockdep (bnc#1012382).\n - usb: xhci: Add XHCI_TRUST_TX_LENGTH for Renesas uPD720201 (bnc#1012382).\n - usb: xhci: fix panic in xhci_free_virt_devices_depth_first (bnc#1012382).\n - usbip: Fix implicit fallthrough warning (bnc#1012382).\n - usbip: Fix potential format overflow in userspace tools (bnc#1012382).\n - usbip: fix stub_rx: get_pipe() to validate endpoint number (bnc#1012382).\n - usbip: fix stub_rx: harden CMD_SUBMIT path to handle malicious input\n (bnc#1012382).\n - usbip: fix stub_send_ret_submit() vulnerability to null transfer_buffer\n (bnc#1012382).\n - usbip: fix usbip bind writing random string after command in match_busid\n (bnc#1012382).\n - usbip: prevent leaking socket pointer address in messages (bnc#1012382).\n - usbip: prevent vhci_hcd driver from leaking a socket pointer address\n (bnc#1012382).\n - usbip: remove kernel addresses from usb device and urb debug msgs\n (bnc#1012382).\n - usbip: stub: stop printing kernel pointer addresses in messages\n (bnc#1012382).\n - usbip: vhci: stop printing kernel pointer addresses in messages\n (bnc#1012382).\n - userfaultfd: selftest: vm: allow to build in vm/ directory (bnc#1012382).\n - userfaultfd: shmem: __do_fault requires VM_FAULT_NOPAGE (bnc#1012382).\n - video: fbdev: au1200fb: Release some resources if a memory allocation\n fails (bnc#1012382).\n - video: fbdev: au1200fb: Return an error code if a memory allocation\n fails (bnc#1012382).\n - virtio: release virtio index when fail to device_register (bnc#1012382).\n - vmxnet3: repair memory leak (bnc#1012382).\n - vsyscall: Fix permissions for emulate mode with KAISER/PTI (bnc#1012382).\n - vt6655: Fix a possible sleep-in-atomic bug in vt6655_suspend\n (bnc#1012382).\n - vti6: Do not report path MTU below IPV6_MIN_MTU (bnc#1012382).\n - vti6: fix device register to report IFLA_INFO_KIND (bnc#1012382).\n - workqueue: trigger WARN if queue_delayed_work() is called with NULL @wq\n (bnc#1012382).\n - writeback: fix memory leak in wb_queue_work() (bnc#1012382).\n - x.509: fix buffer overflow detection in sprint_oid() (bsc#1075078).\n - x.509: reject invalid BIT STRING for subjectPublicKey (bnc#1012382).\n - x509: fix printing uninitialized stack memory when OID is empty\n (bsc#1075078).\n - x86/Documentation: Add PTI description (bnc#1012382).\n - x86/PCI: Make broadcom_postcore_init() check acpi_disabled (bnc#1012382).\n - x86/acpi: Handle SCI interrupts above legacy space gracefully\n (bsc#1068984).\n - x86/acpi: Reduce code duplication in mp_override_legacy_irq()\n (bsc#1068984).\n - x86/alternatives: Add missing '\\n' at end of ALTERNATIVE inline asm\n (bnc#1012382).\n - x86/alternatives: Fix optimize_nops() checking (bnc#1012382).\n - x86/apic/vector: Fix off by one in error path (bnc#1012382).\n - x86/asm/32: Make sync_core() handle missing CPUID on all 32-bit kernels\n (bnc#1012382).\n - x86/boot: Fix early command-line parsing when matching at end\n (bsc#1068032).\n - x86/cpu, x86/pti: Do not enable PTI on AMD processors (bnc#1012382).\n - x86/cpu: Factor out application of forced CPU caps (bnc#1012382).\n - x86/cpu: Implement CPU vulnerabilites sysfs functions (bnc#1012382).\n - x86/cpu: Merge bugs.c and bugs_64.c (bnc#1012382).\n - x86/cpufeatures: Add X86_BUG_CPU_INSECURE (bnc#1012382).\n - x86/cpufeatures: Add X86_BUG_SPECTRE_V[12] (bnc#1012382).\n - x86/cpufeatures: Make CPU bugs sticky (bnc#1012382).\n - x86/efi-bgrt: Fix kernel panic when mapping BGRT data (bnc#1012382).\n - x86/efi-bgrt: Replace early_memremap() with memremap() (bnc#1012382).\n - x86/efi: Build our own page table structures (bnc#1012382).\n - x86/efi: Hoist page table switching code into efi_call_virt()\n (bnc#1012382).\n - x86/entry: Use SYSCALL_DEFINE() macros for sys_modify_ldt()\n (bnc#1012382).\n - x86/hpet: Prevent might sleep splat on resume (bnc#1012382).\n - x86/kasan: Clear kasan_zero_page after TLB flush (bnc#1012382).\n - x86/kasan: Write protect kasan zero shadow (bnc#1012382).\n - x86/microcode/intel: Extend BDW late-loading further with LLC size check\n (bnc#1012382).\n - x86/microcode/intel: Extend BDW late-loading with a revision check\n (bnc#1012382).\n - x86/microcode/intel: Fix BDW late-loading revision check (bnc#1012382).\n - x86/mm/32: Move setup_clear_cpu_cap(X86_FEATURE_PCID) earlier\n (git-fixes).\n - x86/mm/pat: Ensure cpa->pfn only contains page frame numbers\n (bnc#1012382).\n - x86/mm: Disable PCID on 32-bit kernels (bnc#1012382).\n - x86/pti/efi: broken conversion from efi to kernel page table\n (bnc#1012382).\n - x86/pti: Document fix wrong index (bnc#1012382).\n - x86/pti: Rename BUG_CPU_INSECURE to BUG_CPU_MELTDOWN (bnc#1012382).\n - x86/retpolines/spec_ctrl: disable IBRS on !SKL if retpolines are active\n (bsc#1068032).\n - x86/smpboot: Remove stale TLB flush invocations (bnc#1012382).\n - x86/spectre_v2: fix ordering in IBRS initialization (bsc#1075994\n bsc#1075091).\n - x86/spectre_v2: nospectre_v2 means nospec too (bsc#1075994 bsc#1075091).\n - x86/tlb: Drop the _GPL from the cpu_tlbstate export (bnc#1012382).\n - x86/vm86/32: Switch to flush_tlb_mm_range() in mark_screen_rdonly()\n (bnc#1012382).\n - xen-netfront: Improve error handling during initialization (bnc#1012382).\n - xen-netfront: avoid crashing on resume after a failure in\n talk_to_netback() (bnc#1012382).\n - xfrm: Copy policy family in clone_policy (bnc#1012382).\n - xfs: Add infrastructure needed for error propagation during buffer IO\n failure (bsc#1068569).\n - xfs: Properly retry failed inode items in case of error during buffer\n writeback (bsc#1068569).\n - xfs: add "fail at unmount" error handling configuration (bsc#1068569).\n - xfs: add configurable error support to metadata buffers (bsc#1068569).\n - xfs: add configuration handlers for specific errors (bsc#1068569).\n - xfs: add configuration of error failure speed (bsc#1068569).\n - xfs: address kabi for xfs buffer retry infrastructure (kabi).\n - xfs: configurable error behavior via sysfs (bsc#1068569).\n - xfs: fix incorrect extent state in xfs_bmap_add_extent_unwritten_real\n (bnc#1012382).\n - xfs: fix log block underflow during recovery cycle verification\n (bnc#1012382).\n - xfs: fix up inode32/64 (re)mount handling (bsc#1069160).\n - xfs: introduce metadata IO error class (bsc#1068569).\n - xfs: introduce table-based init for error behaviors (bsc#1068569).\n - xfs: remove xfs_trans_ail_delete_bulk (bsc#1068569).\n - xhci: Do not add a virt_dev to the devs array before it's fully\n allocated (bnc#1012382).\n - xhci: Fix ring leak in failure path of xhci_alloc_virt_device()\n (bnc#1012382).\n - xhci: plat: Register shutdown for xhci_plat (bnc#1012382).\n - zram: set physical queue limits to avoid array out of bounds accesses\n (bnc#1012382).\n\n", "cvss3": {}, "published": "2018-02-09T21:15:14", "type": "suse", "title": "Security update for the Linux Kernel (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17862", "CVE-2017-15129", "CVE-2017-17712", "CVE-2017-5715", "CVE-2018-5332", "CVE-2017-18017", "CVE-2017-17864"], "modified": "2018-02-09T21:15:14", "id": "SUSE-SU-2018:0416-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00015.html", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-02-07T20:55:06", "description": "The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.114 to receive\n various security and bugfixes.\n\n The following security bugs were fixed:\n\n - CVE-2017-5715: Systems with microprocessors utilizing speculative\n execution and indirect branch prediction may allow unauthorized\n disclosure of information to an attacker with local user access via a\n side-channel analysis (bnc#1068032).\n\n The previous fix using CPU Microcode has been complemented by building\n the Linux Kernel with return trampolines aka "retpolines".\n\n - CVE-2017-15129: A use-after-free vulnerability was found in network\n namespaces code affecting the Linux kernel in the function\n get_net_ns_by_id() in net/core/net_namespace.c did not check for the\n net::count value after it has found a peer network in netns_ids idr,\n which could lead to double free and memory corruption. This\n vulnerability could allow an unprivileged local user to induce kernel\n memory corruption on the system, leading to a crash. Due to the nature\n of the flaw, privilege escalation cannot be fully ruled out, although it\n is thought to be unlikely (bnc#1074839).\n - CVE-2017-17712: The raw_sendmsg() function in net/ipv4/raw.c in the\n Linux kernel has a race condition in inet->hdrincl that leads to\n uninitialized stack pointer usage; this allowed a local user to execute\n code and gain privileges (bnc#1073229).\n - CVE-2017-17862: kernel/bpf/verifier.c in the Linux kernel ignored\n unreachable code, even though it would still be processed by JIT\n compilers. This behavior, also considered an improper branch-pruning\n logic issue, could possibly be used by local users for denial of service\n (bnc#1073928).\n - CVE-2017-17864: kernel/bpf/verifier.c in the Linux kernel mishandled\n states_equal comparisons between the pointer data type and the\n UNKNOWN_VALUE data type, which allowed local users to obtain potentially\n sensitive address information, aka a "pointer leak (bnc#1073928).\n - CVE-2017-18017: The tcpmss_mangle_packet function in\n net/netfilter/xt_TCPMSS.c in the Linux kernel allowed remote attackers\n to cause a denial of service (use-after-free and memory corruption) or\n possibly have unspecified other impact by leveraging the presence of\n xt_TCPMSS in an iptables action (bnc#1074488).\n - CVE-2018-5332: In the Linux kernel the rds_message_alloc_sgs() function\n did not validate a value that is used during DMA page allocation,\n leading to a heap-based out-of-bounds write (related to the\n rds_rdma_extra_size function in net/rds/rdma.c) (bnc#1075621).\n - CVE-2018-5333: In the Linux kernel the rds_cmsg_atomic function in\n net/rds/rdma.c mishandled cases where page pinning fails or an invalid\n address is supplied, leading to an rds_atomic_free_op NULL pointer\n dereference (bnc#1075617).\n - CVE-2018-1000004: In the Linux kernel a race condition vulnerability\n existed in the sound system, this can lead to a deadlock and denial of\n service condition (bnc#1076017).\n\n The following non-security bugs were fixed:\n\n - 8021q: fix a memory leak for VLAN 0 device (bnc#1012382).\n - acpi / scan: Prefer devices without _HID/_CID for _ADR matching\n (bnc#1012382).\n - af_key: fix buffer overread in parse_exthdrs() (bnc#1012382).\n - af_key: fix buffer overread in verify_address_len() (bnc#1012382).\n - afs: Adjust mode bits processing (bnc#1012382).\n - afs: Connect up the CB.ProbeUuid (bnc#1012382).\n - afs: Fix afs_kill_pages() (bnc#1012382).\n - afs: Fix missing put_page() (bnc#1012382).\n - afs: Fix page leak in afs_write_begin() (bnc#1012382).\n - afs: Fix the maths in afs_fs_store_data() (bnc#1012382).\n - afs: Flush outstanding writes when an fd is closed (bnc#1012382).\n - afs: Migrate vlocation fields to 64-bit (bnc#1012382).\n - afs: Populate and use client modification time (bnc#1012382).\n - afs: Populate group ID from vnode status (bnc#1012382).\n - afs: Prevent callback expiry timer overflow (bnc#1012382).\n - alpha: fix build failures (bnc#1012382).\n - alsa: aloop: Fix inconsistent format due to incomplete rule\n (bsc#1031717).\n - alsa: aloop: Fix racy hw constraints adjustment (bsc#1031717).\n - alsa: aloop: Release cable upon open error path (bsc#1031717).\n - alsa: hda - Add HP ZBook 15u G3 Conexant CX20724 GPIO mute leds\n (bsc#1031717).\n - alsa: hda - Add MIC_NO_PRESENCE fixup for 2 HP machines (bsc#1031717).\n - alsa: hda - Add mute led support for HP EliteBook 840 G3 (bsc#1031717).\n - alsa: hda - Add mute led support for HP ProBook 440 G4 (bsc#1031717).\n - alsa: hda - add support for docking station for HP 820 G2 (bsc#1031717).\n - alsa: hda - add support for docking station for HP 840 G3 (bsc#1031717).\n - alsa: hda - Apply headphone noise quirk for another Dell XPS 13 variant\n (bsc#1031717).\n - alsa: hda - Apply the existing quirk to iMac 14,1 (bsc#1031717).\n - alsa: hda - change the location for one mic on a Lenovo machine\n (bsc#1031717).\n - alsa: hda: Drop useless WARN_ON() (bsc#1031717).\n - alsa: hda - Fix click noises on Samsung Ativ Book 8 (bsc#1031717).\n - alsa: hda - fix headset mic detection issue on a Dell machine\n (bsc#1031717).\n - alsa: hda - fix headset mic problem for Dell machines with alc274\n (bsc#1031717).\n - alsa: hda - Fix headset microphone detection for ASUS N551 and N751\n (bsc#1031717).\n - alsa: hda - Fix mic regression by ASRock mobo fixup (bsc#1031717).\n - alsa: hda - Fix missing COEF init for ALC225/295/299 (bsc#1031717).\n - alsa: hda - Fix surround output pins for ASRock B150M mobo (bsc#1031717).\n - alsa: hda - On-board speaker fixup on ACER Veriton (bsc#1031717).\n - alsa: hda/realtek - Add ALC256 HP depop function (bsc#1031717).\n - alsa: hda/realtek - Add default procedure for suspend and resume state\n (bsc#1031717).\n - alsa: hda/realtek - Add support for Acer Aspire E5-475 headset mic\n (bsc#1031717).\n - alsa: hda/realtek - Add support for ALC1220 (bsc#1031717).\n - alsa: hda/realtek - Add support for headset MIC for ALC622 (bsc#1031717).\n - alsa: hda/realtek - ALC891 headset mode for Dell (bsc#1031717).\n - alsa: hda/realtek - change the location for one of two front microphones\n (bsc#1031717).\n - alsa: hda/realtek - Enable jack detection function for Intel ALC700\n (bsc#1031717).\n - alsa: hda/realtek - Fix ALC275 no sound issue (bsc#1031717).\n - alsa: hda/realtek - Fix Dell AIO LineOut issue (bsc#1031717).\n - alsa: hda/realtek - Fix headset and mic on several Asus laptops with\n ALC256 (bsc#1031717).\n - alsa: hda/realtek - Fix headset mic and speaker on Asus X441SA/X441UV\n (bsc#1031717).\n - alsa: hda/realtek - fix headset mic detection for MSI MS-B120\n (bsc#1031717).\n - alsa: hda/realtek - Fix headset mic on several Asus laptops with ALC255\n (bsc#1031717).\n - alsa: hda/realtek - Fix pincfg for Dell XPS 13 9370 (bsc#1031717).\n - alsa: hda/realtek - Fix speaker support for Asus AiO ZN270IE\n (bsc#1031717).\n - alsa: hda/realtek - Fix typo of pincfg for Dell quirk (bsc#1031717).\n - alsa: hda/realtek - New codec device ID for ALC1220 (bsc#1031717).\n - alsa: hda/realtek - New codecs support for ALC215/ALC285/ALC289\n (bsc#1031717).\n - alsa: hda/realtek - New codec support for ALC257 (bsc#1031717).\n - alsa: hda/realtek - New codec support of ALC1220 (bsc#1031717).\n - alsa: hda/realtek - No loopback on ALC225/ALC295 codec (bsc#1031717).\n - alsa: hda/realtek - Remove ALC285 device ID (bsc#1031717).\n - alsa: hda/realtek - Support Dell headset mode for ALC3271 (bsc#1031717).\n - alsa: hda/realtek - Support headset mode for ALC234/ALC274/ALC294\n (bsc#1031717).\n - alsa: hda/realtek - There is no loopback mixer in the ALC234/274/294\n (bsc#1031717).\n - alsa: hda/realtek - Update headset mode for ALC225 (bsc#1031717).\n - alsa: hda/realtek - Update headset mode for ALC298 (bsc#1031717).\n - alsa: hda - Skip Realtek SKU check for Lenovo machines (bsc#1031717).\n - alsa: pcm: Abort properly at pending signal in OSS read/write loops\n (bsc#1031717).\n - alsa: pcm: Add missing error checks in OSS emulation plugin builder\n (bsc#1031717).\n - alsa: pcm: Allow aborting mutex lock at OSS read/write loops\n (bsc#1031717).\n - alsa: pcm: prevent UAF in snd_pcm_info (bsc#1031717).\n - alsa: pcm: Remove incorrect snd_BUG_ON() usages (bsc#1031717).\n - alsa: pcm: Remove yet superfluous WARN_ON() (bsc#1031717).\n - alsa: rawmidi: Avoid racy info ioctl via ctl device (bsc#1031717).\n - alsa: seq: Remove spurious WARN_ON() at timer check (bsc#1031717).\n - alsa: usb-audio: Add check return value for usb_string() (bsc#1031717).\n - alsa: usb-audio: Fix out-of-bound error (bsc#1031717).\n - alsa: usb-audio: Fix the missing ctl name suffix at parsing SU\n (bsc#1031717).\n - arc: uaccess: dont use "l" gcc inline asm constraint modifier\n (bnc#1012382).\n - arm64: Add skeleton to harden the branch predictor against aliasing\n attacks (bsc#1068032).\n - arm64: Add trace_hardirqs_off annotation in ret_to_user (bsc#1068032).\n - arm64: Branch predictor hardening for Cavium ThunderX2 (bsc#1068032).\n - arm64/cpufeature: do not use mutex in bringup path (bsc#1068032).\n - arm64: cpufeature: Pass capability structure to ->enable callback\n (bsc#1068032).\n - arm64: cputype: Add MIDR values for Cavium ThunderX2 CPUs (bsc#1068032).\n - arm64: cputype: Add missing MIDR values for Cortex-A72 and Cortex-A75\n (bsc#1068032).\n - arm64: debug: remove unused local_dbg_{enable, disable} macros\n (bsc#1068032).\n - arm64: Define cputype macros for Falkor CPU (bsc#1068032).\n - arm64: Disable TTBR0_EL1 during normal kernel execution (bsc#1068032).\n - arm64: Do not force KPTI for CPUs that are not vulnerable (bsc#1076187).\n - arm64: do not pull uaccess.h into *.S (bsc#1068032).\n - arm64: Enable CONFIG_ARM64_SW_TTBR0_PAN (bsc#1068032).\n - arm64: entry: Add exception trampoline page for exceptions from EL0\n (bsc#1068032).\n - arm64: entry: Add fake CPU feature for unmapping the kernel at EL0\n (bsc#1068032).\n - arm64: entry: Explicitly pass exception level to kernel_ventry macro\n (bsc#1068032).\n - arm64: entry: Hook up entry trampoline to exception vectors\n (bsc#1068032).\n - arm64: entry: remove pointless SPSR mode check (bsc#1068032).\n - arm64: entry.S convert el0_sync (bsc#1068032).\n - arm64: entry.S: convert el1_sync (bsc#1068032).\n - arm64: entry.S: convert elX_irq (bsc#1068032).\n - arm64: entry.S: move SError handling into a C function for future\n expansion (bsc#1068032).\n - arm64: entry.S: Remove disable_dbg (bsc#1068032).\n - arm64: erratum: Work around Falkor erratum #E1003 in trampoline code\n (bsc#1068032).\n - arm64: explicitly mask all exceptions (bsc#1068032).\n - arm64: factor out entry stack manipulation (bsc#1068032).\n - arm64: factor out PAGE_* and CONT_* definitions (bsc#1068032).\n - arm64: Factor out PAN enabling/disabling into separate uaccess_* macros\n (bsc#1068032).\n - arm64: Factor out TTBR0_EL1 post-update workaround into a specific asm\n macro (bsc#1068032).\n - arm64: factor work_pending state machine to C (bsc#1068032).\n - arm64: fpsimd: Prevent registers leaking from dead tasks (bnc#1012382).\n - arm64: Handle el1 synchronous instruction aborts cleanly (bsc#1068032).\n - arm64: Handle faults caused by inadvertent user access with PAN enabled\n (bsc#1068032).\n - arm64: head.S: get rid of x25 and x26 with 'global' scope (bsc#1068032).\n - arm64: Implement branch predictor hardening for affected Cortex-A CPUs\n (bsc#1068032).\n - arm64: Implement branch predictor hardening for Falkor (bsc#1068032).\n - arm64: Initialise high_memory global variable earlier (bnc#1012382).\n - arm64: introduce an order for exceptions (bsc#1068032).\n - arm64: introduce mov_q macro to move a constant into a 64-bit register\n (bsc#1068032).\n - arm64: Introduce uaccess_{disable,enable} functionality based on\n TTBR0_EL1 (bsc#1068032).\n - arm64: kaslr: Put kernel vectors address in separate data page\n (bsc#1068032).\n - arm64: Kconfig: Add CONFIG_UNMAP_KERNEL_AT_EL0 (bsc#1068032).\n - arm64: Kconfig: Reword UNMAP_KERNEL_AT_EL0 kconfig entry (bsc#1068032).\n - arm64: kill ESR_LNX_EXEC (bsc#1068032).\n - arm64: kpti: Fix the interaction between ASID switching and software PAN\n (bsc#1068032).\n - arm64: kvm: Fix SMCCC handling of unimplemented SMC/HVC calls\n (bsc#1076232).\n - arm64: kvm: fix VTTBR_BADDR_MASK BUG_ON off-by-one (bnc#1012382).\n - arm64: kvm: Make PSCI_VERSION a fast path (bsc#1068032).\n - arm64: kvm: Use per-CPU vector when BP hardening is enabled\n (bsc#1068032).\n - arm64: Mask all exceptions during kernel_exit (bsc#1068032).\n - arm64: mm: Add arm64_kernel_unmapped_at_el0 helper (bsc#1068032).\n - arm64: mm: Allocate ASIDs in pairs (bsc#1068032).\n - arm64: mm: Fix and re-enable ARM64_SW_TTBR0_PAN (bsc#1068032).\n - arm64: mm: hardcode rodata=true (bsc#1068032).\n - arm64: mm: Introduce TTBR_ASID_MASK for getting at the ASID in the TTBR\n (bsc#1068032).\n - arm64: mm: Invalidate both kernel and user ASIDs when performing TLBI\n (bsc#1068032).\n - arm64: mm: Map entry trampoline into trampoline and kernel page tables\n (bsc#1068032).\n - arm64: mm: Move ASID from TTBR0 to TTBR1 (bsc#1068032).\n - arm64: mm: Remove pre_ttbr0_update_workaround for Falkor erratum #E1003\n (bsc#1068032).\n - arm64: mm: Rename post_ttbr0_update_workaround (bsc#1068032).\n - arm64: mm: Temporarily disable ARM64_SW_TTBR0_PAN (bsc#1068032).\n - arm64: mm: Use non-global mappings for kernel space (bsc#1068032).\n - arm64: Move BP hardening to check_and_switch_context (bsc#1068032).\n - arm64: Move post_ttbr_update_workaround to C code (bsc#1068032).\n - arm64: Move the async/fiq helpers to explicitly set process context\n flags (bsc#1068032).\n - arm64: SW PAN: Point saved ttbr0 at the zero page when switching to\n init_mm (bsc#1068032).\n - arm64: SW PAN: Update saved ttbr0 value on enter_lazy_tlb (bsc#1068032).\n - arm64: swp emulation: bound LL/SC retries before rescheduling\n (bsc#1068032).\n - arm64: sysreg: Fix unprotected macro argmuent in write_sysreg\n (bsc#1068032).\n - arm64: Take into account ID_AA64PFR0_EL1.CSV3 (bsc#1068032).\n - arm64: thunderx2: remove branch predictor hardening References:\n bsc#1076232 This causes undefined instruction abort on the smc call from\n guest kernel. Disable until kvm is fixed.\n - arm64: tls: Avoid unconditional zeroing of tpidrro_el0 for native tasks\n (bsc#1068032).\n - arm64: Turn on KPTI only on CPUs that need it (bsc#1076187).\n - arm64: use alternative auto-nop (bsc#1068032).\n - arm64: use RET instruction for exiting the trampoline (bsc#1068032).\n - arm64: xen: Enable user access before a privcmd hvc call (bsc#1068032).\n - arm/arm64: kvm: Make default HYP mappings non-excutable (bsc#1068032).\n - arm: avoid faulting on qemu (bnc#1012382).\n - arm: BUG if jumping to usermode address in kernel mode (bnc#1012382).\n - arm-ccn: perf: Prevent module unload while PMU is in use (bnc#1012382).\n - arm: dma-mapping: disallow dma_get_sgtable() for non-kernel managed\n memory (bnc#1012382).\n - arm: dts: am335x-evmsk: adjust mmc2 param to allow suspend (bnc#1012382).\n - arm: dts: kirkwood: fix pin-muxing of MPP7 on OpenBlocks A7\n (bnc#1012382).\n - arm: dts: omap3: logicpd-torpedo-37xx-devkit: Fix MMC1 cd-gpio\n (bnc#1012382).\n - arm: dts: ti: fix PCI bus dtc warnings (bnc#1012382).\n - arm: kprobes: Align stack to 8-bytes in test code (bnc#1012382).\n - arm: kprobes: Fix the return address of multiple kretprobes\n (bnc#1012382).\n - arm: kvm: Fix VTTBR_BADDR_MASK BUG_ON off-by-one (bnc#1012382).\n - arm: OMAP1: DMA: Correct the number of logical channels (bnc#1012382).\n - arm: OMAP2+: Fix device node reference counts (bnc#1012382).\n - arm: OMAP2+: gpmc-onenand: propagate error on initialization failure\n (bnc#1012382).\n - arm: OMAP2+: Release device node after it is no longer needed\n (bnc#1012382).\n - asm-prototypes: Clear any CPP defines before declaring the functions\n (git-fixes).\n - asn.1: check for error from ASN1_OP_END__ACT actions (bnc#1012382).\n - asn.1: fix out-of-bounds read when parsing indefinite length item\n (bnc#1012382).\n - asoc: fsl_ssi: AC'97 ops need regmap, clock and cleaning up on failure\n (bsc#1031717).\n - asoc: twl4030: fix child-node lookup (bsc#1031717).\n - asoc: wm_adsp: Fix validation of firmware and coeff lengths\n (bsc#1031717).\n - ath9k: fix tx99 potential info leak (bnc#1012382).\n - atm: horizon: Fix irq release error (bnc#1012382).\n - audit: ensure that 'audit=1' actually enables audit for PID 1\n (bnc#1012382).\n - axonram: Fix gendisk handling (bnc#1012382).\n - backlight: pwm_bl: Fix overflow condition (bnc#1012382).\n - bcache: add a comment in journal bucket reading (bsc#1076110).\n - bcache: Avoid nested function definition (bsc#1076110).\n - bcache: bch_allocator_thread() is not freezable (bsc#1076110).\n - bcache: bch_writeback_thread() is not freezable (bsc#1076110).\n - bcache: check return value of register_shrinker (bsc#1076110).\n - bcache: documentation formatting, edited for clarity, stripe alignment\n notes (bsc#1076110).\n - bcache: documentation updates and corrections (bsc#1076110).\n - bcache: Do not reinvent the wheel but use existing llist API\n (bsc#1076110).\n - bcache: do not write back data if reading it failed (bsc#1076110).\n - bcache: explicitly destroy mutex while exiting (bnc#1012382).\n - bcache: fix a comments typo in bch_alloc_sectors() (bsc#1076110).\n - bcache: Fix building error on MIPS (bnc#1012382).\n - bcache: fix sequential large write IO bypass (bsc#1076110).\n - bcache: fix wrong cache_misses statistics (bnc#1012382).\n - bcache: gc does not work when triggering by manual command (bsc#1076110,\n bsc#1038078).\n - bcache: implement PI controller for writeback rate (bsc#1076110).\n - bcache: increase the number of open buckets (bsc#1076110).\n - bcache: only permit to recovery read error when cache device is clean\n (bnc#1012382 bsc#1043652).\n - bcache: partition support: add 16 minors per bcacheN device\n (bsc#1076110, bsc#1019784).\n - bcache: rearrange writeback main thread ratelimit (bsc#1076110).\n - bcache: recover data from backing when data is clean (bnc#1012382\n bsc#1043652).\n - bcache: Remove redundant set_capacity (bsc#1076110).\n - bcache: remove unused parameter (bsc#1076110).\n - bcache: rewrite multiple partitions support (bsc#1076110, bsc#1038085).\n - bcache: safeguard a dangerous addressing in closure_queue (bsc#1076110).\n - bcache: silence static checker warning (bsc#1076110).\n - bcache: smooth writeback rate control (bsc#1076110).\n - bcache.txt: standardize document format (bsc#1076110).\n - bcache: update bio->bi_opf bypass/writeback REQ_ flag hints\n (bsc#1076110).\n - bcache: update bucket_in_use in real time (bsc#1076110).\n - bcache: Update continue_at() documentation (bsc#1076110).\n - bcache: use kmalloc to allocate bio in bch_data_verify() (bsc#1076110).\n - bcache: use llist_for_each_entry_safe() in __closure_wake_up()\n (bsc#1076110).\n - bcache: writeback rate clamping: make 32 bit safe (bsc#1076110).\n - bcache: writeback rate shouldn't artifically clamp (bsc#1076110).\n - be2net: restore properly promisc mode after queues reconfiguration\n (bsc#963844 FATE#320192).\n - block: wake up all tasks blocked in get_request() (bnc#1012382).\n - bluetooth: btusb: driver to enable the usb-wakeup feature (bnc#1012382).\n - bnx2x: do not rollback VF MAC/VLAN filters we did not configure\n (bnc#1012382).\n - bnx2x: fix possible overrun of VFPF multicast addresses array\n (bnc#1012382).\n - bnx2x: prevent crash when accessing PTP with interface down\n (bnc#1012382).\n - btrfs: add missing memset while reading compressed inline extents\n (bnc#1012382).\n - btrfs: clear space cache inode generation always (bnc#1012382).\n - btrfs: embed extent_changeset::range_changed to the structure (dependent\n patch, bsc#1031395).\n - btrfs: qgroup: Fix qgroup reserved space underflow by only freeing\n reserved ranges (bsc#1031395).\n - btrfs: qgroup: Fix qgroup reserved space underflow caused by buffered\n write and quotas being enabled (bsc#1031395).\n - btrfs: qgroup: Introduce extent changeset for qgroup reserve functions\n (dependent patch, bsc#1031395).\n - btrfs: qgroup: Return actually freed bytes for qgroup release or free\n data (bsc#1031395).\n - btrfs: qgroup-test: Fix backport error in qgroup selftest (just to make\n CONFIG_BTRFS_FS_RUN_SANITY_TESTS pass compile).\n - btrfs: ulist: make the finalization function public (dependent patch,\n bsc#1031395).\n - btrfs: ulist: rename ulist_fini to ulist_release (dependent patch,\n bsc#1031395).\n - can: af_can: canfd_rcv(): replace WARN_ONCE by pr_warn_once\n (bnc#1012382).\n - can: af_can: can_rcv(): replace WARN_ONCE by pr_warn_once (bnc#1012382).\n - can: ems_usb: cancel urb on -EPIPE and -EPROTO (bnc#1012382).\n - can: esd_usb2: cancel urb on -EPIPE and -EPROTO (bnc#1012382).\n - can: gs_usb: fix return value of the "set_bittiming" callback\n (bnc#1012382).\n - can: kvaser_usb: cancel urb on -EPIPE and -EPROTO (bnc#1012382).\n - can: kvaser_usb: Fix comparison bug in kvaser_usb_read_bulk_callback()\n (bnc#1012382).\n - can: kvaser_usb: free buf in error paths (bnc#1012382).\n - can: kvaser_usb: ratelimit errors if incomplete messages are received\n (bnc#1012382).\n - can: peak: fix potential bug in packet fragmentation (bnc#1012382).\n - can: ti_hecc: Fix napi poll return value for repoll (bnc#1012382).\n - can: usb_8dev: cancel urb on -EPIPE and -EPROTO (bnc#1012382).\n - cdc-acm: apply quirk for card reader (bsc#1060279).\n - cdrom: factor out common open_for_* code (bsc#1048585).\n - cdrom: wait for tray to close (bsc#1048585).\n - ceph: more accurate statfs (bsc#1077068).\n - clk: imx6: refine hdmi_isfr's parent to make HDMI work on i.MX6 SoCs w/o\n VPU (bnc#1012382).\n - clk: mediatek: add the option for determining PLL source clock\n (bnc#1012382).\n - clk: tegra: Fix cclk_lp divisor register (bnc#1012382).\n - config: arm64: enable HARDEN_BRANCH_PREDICTOR\n - config: arm64: enable UNMAP_KERNEL_AT_EL0\n - cpuidle: fix broadcast control when broadcast can not be entered\n (bnc#1012382).\n - cpuidle: powernv: Pass correct drv->cpumask for registration\n (bnc#1012382).\n - cpuidle: Validate cpu_dev in cpuidle_add_sysfs() (bnc#1012382).\n - crypto: algapi - fix NULL dereference in crypto_remove_spawns()\n (bnc#1012382).\n - crypto: chacha20poly1305 - validate the digest size (bnc#1012382).\n - crypto: chelsio - select CRYPTO_GF128MUL (bsc#1048325).\n - crypto: crypto4xx - increase context and scatter ring buffer elements\n (bnc#1012382).\n - crypto: deadlock between crypto_alg_sem/rtnl_mutex/genl_mutex\n (bnc#1012382).\n - crypto: mcryptd - protect the per-CPU queue with a lock (bnc#1012382).\n - crypto: n2 - cure use after free (bnc#1012382).\n - crypto: pcrypt - fix freeing pcrypt instances (bnc#1012382).\n - crypto: s5p-sss - Fix completing crypto request in IRQ handler\n (bnc#1012382).\n - crypto: tcrypt - fix buffer lengths in test_aead_speed() (bnc#1012382).\n - cxl: Check if vphb exists before iterating over AFU devices\n (bsc#1066223).\n - dax: Pass detailed error code from __dax_fault() (bsc#1072484).\n - dccp: do not restart ccid2_hc_tx_rto_expire() if sk in closed state\n (bnc#1012382).\n - delay: add poll_event_interruptible (bsc#1048585).\n - dlm: fix malfunction of dlm_tool caused by debugfs changes (bsc#1077704).\n - dmaengine: dmatest: move callback wait queue to thread context\n (bnc#1012382).\n - dmaengine: Fix array index out of bounds warning in __get_unmap_pool()\n (bnc#1012382).\n - dmaengine: pl330: fix double lock (bnc#1012382).\n - dmaengine: ti-dma-crossbar: Correct am335x/am43xx mux value type\n (bnc#1012382).\n - dm btree: fix serious bug in btree_split_beneath() (bnc#1012382).\n - dm bufio: fix shrinker scans when (nr_to_scan < retain_target)\n (bnc#1012382).\n - dm thin metadata: THIN_MAX_CONCURRENT_LOCKS should be 6 (bnc#1012382).\n - drivers/firmware: Expose psci_get_version through psci_ops structure\n (bsc#1068032).\n - drm/amd/amdgpu: fix console deadlock if late init failed (bnc#1012382).\n - drm: extra printk() wrapper macros (bnc#1012382).\n - drm/exynos/decon5433: set STANDALONE_UPDATE_F on output enablement\n (bnc#1012382).\n - drm/exynos: gem: Drop NONCONTIG flag for buffers allocated without IOMMU\n (bnc#1012382).\n - drm/omap: fix dmabuf mmap for dma_alloc'ed buffers (bnc#1012382).\n - drm/radeon: fix atombios on big endian (bnc#1012382).\n - drm/radeon: reinstate oland workaround for sclk (bnc#1012382).\n - drm/radeon/si: add dpm quirk for Oland (bnc#1012382).\n - drm/vmwgfx: Potential off by one in vmw_view_add() (bnc#1012382).\n - dynamic-debug-howto: fix optional/omitted ending line number to be LARGE\n instead of 0 (bnc#1012382).\n - edac, i5000, i5400: Fix definition of NRECMEMB register (bnc#1012382).\n - edac, i5000, i5400: Fix use of MTR_DRAM_WIDTH macro (bnc#1012382).\n - edac, sb_edac: Fix missing break in switch (bnc#1012382).\n - eeprom: at24: check at24_read/write arguments (bnc#1012382).\n - efi/esrt: Cleanup bad memory map log messages (bnc#1012382).\n - efi: Move some sysfs files to be read-only by root (bnc#1012382).\n - eventpoll.h: add missing epoll event masks (bnc#1012382).\n - ext4: fix crash when a directory's i_size is too small (bnc#1012382).\n - ext4: Fix ENOSPC handling in DAX page fault handle (bsc#1072484).\n - ext4: fix fdatasync(2) after fallocate(2) operation (bnc#1012382).\n - fbdev: controlfb: Add missing modes to fix out of bounds access\n (bnc#1012382).\n - Fix EX_SIZE. We do not have the patches that shave off parts of the\n exception data.\n - Fix mishandling of cases with MSR not being present (writing to MSR even\n though _state == -1).\n - Fix return value from ib[rs|pb]_enabled()\n - Fixup hang when calling 'nvme list' on all paths down (bsc#1070052).\n - fjes: Fix wrong netdevice feature flags (bnc#1012382).\n - flow_dissector: properly cap thoff field (bnc#1012382).\n - fm10k: ensure we process SM mbx when processing VF mbx (bnc#1012382).\n - fork: clear thread stack upon allocation (bsc#1077560).\n - fscache: Fix the default for fscache_maybe_release_page() (bnc#1012382).\n - futex: Prevent overflow by strengthen input validation (bnc#1012382).\n - gcov: disable for COMPILE_TEST (bnc#1012382).\n - gfs2: Take inode off order_write list when setting jdata flag\n (bnc#1012382).\n - gpio: altera: Use handle_level_irq when configured as a level_high\n (bnc#1012382).\n - hid: chicony: Add support for another ASUS Zen AiO keyboard\n (bnc#1012382).\n - hid: xinmo: fix for out of range for THT 2P arcade controller\n (bnc#1012382).\n - hrtimer: Reset hrtimer cpu base proper on CPU hotplug (bnc#1012382).\n - hv: kvp: Avoid reading past allocated blocks from KVP file (bnc#1012382).\n - hwmon: (asus_atk0110) fix uninitialized data access (bnc#1012382).\n - i40iw: Account for IPv6 header when setting MSS (bsc#1024376\n FATE#321249).\n - i40iw: Allocate a sdbuf per CQP WQE (bsc#1024376 FATE#321249).\n - i40iw: Cleanup AE processing (bsc#1024376 FATE#321249).\n - i40iw: Clear CQP Head/Tail during initialization (bsc#1024376\n FATE#321249).\n - i40iw: Correct ARP index mask (bsc#1024376 FATE#321249).\n - i40iw: Do not allow posting WR after QP is flushed (bsc#1024376\n FATE#321249).\n - i40iw: Do not free sqbuf when event is I40IW_TIMER_TYPE_CLOSE\n (bsc#1024376 FATE#321249).\n - i40iw: Do not generate CQE for RTR on QP flush (bsc#1024376 FATE#321249).\n - i40iw: Do not retransmit MPA request after it is ACKed (bsc#1024376\n FATE#321249).\n - i40iw: Fixes for static checker warnings (bsc#1024376 FATE#321249).\n - i40iw: Ignore AE source field in AEQE for some AEs (bsc#1024376\n FATE#321249).\n - i40iw: Move cqp_cmd_head init to CQP initialization (bsc#1024376\n FATE#321249).\n - i40iw: Move exception_lan_queue to VSI structure (bsc#1024376\n FATE#321249).\n - i40iw: Move MPA request event for loopback after connect (bsc#1024376\n FATE#321249).\n - i40iw: Notify user of established connection after QP in RTS\n (bsc#1024376 FATE#321249).\n - i40iw: Reinitialize IEQ on MTU change (bsc#1024376 FATE#321249).\n - ib/hfi1: Fix misspelling in comment (bsc#973818, fate#319242).\n - ib/hfi1: Prevent kernel QP post send hard lockups (bsc#973818\n FATE#319242).\n - ib/ipoib: Fix lockdep issue found on ipoib_ib_dev_heavy_flush\n (git-fixes).\n - ib/ipoib: Fix race condition in neigh creation (bsc#1022595 FATE#322350).\n - ib/ipoib: Grab rtnl lock on heavy flush when calling ndo_open/stop\n (bnc#1012382).\n - ib/mlx4: Increase maximal message size under UD QP (bnc#1012382).\n - ib/mlx5: Assign send CQ and recv CQ of UMR QP (bnc#1012382).\n - ib/mlx5: Serialize access to the VMA list (bsc#1015342 FATE#321688\n bsc#1015343 FATE#321689).\n - ibmvnic: Allocate and request vpd in init_resources (bsc#1076872).\n - ibmvnic: Do not handle RX interrupts when not up (bsc#1075066).\n - ibmvnic: Fix IP offload control buffer (bsc#1076899).\n - ibmvnic: Fix IPv6 packet descriptors (bsc#1076899).\n - ibmvnic: Fix pending MAC address changes (bsc#1075627).\n - ibmvnic: Modify buffer size and number of queues on failover\n (bsc#1076872).\n - ibmvnic: Revert to previous mtu when unsupported value requested\n (bsc#1076872).\n - ibmvnic: Wait for device response when changing MAC (bsc#1078681).\n - ib/rdmavt: restore IRQs on error path in rvt_create_ah() (bsc#973818,\n fate#319242).\n - ib/srpt: Disable RDMA access by the initiator (bnc#1012382).\n - ib/srpt: Fix ACL lookup during login (bsc#1024296 FATE#321265).\n - ib/uverbs: Fix command checking as part of ib_uverbs_ex_modify_qp()\n (FATE#321231 FATE#321473 FATE#322153 FATE#322149).\n - igb: check memory allocation failure (bnc#1012382).\n - ima: fix hash algorithm initialization (bnc#1012382).\n - inet: frag: release spinlock before calling icmp_send() (bnc#1012382).\n - input: 88pm860x-ts - fix child-node lookup (bnc#1012382).\n - input: elantech - add new icbody type 15 (bnc#1012382).\n - input: i8042 - add TUXEDO BU1406 (N24_25BU) to the nomux list\n (bnc#1012382).\n - input: trackpoint - force 3 buttons if 0 button is reported\n (bnc#1012382).\n - input: twl4030-vibra - fix sibling-node lookup (bnc#1012382).\n - input: twl6040-vibra - fix child-node lookup (bnc#1012382).\n - input: twl6040-vibra - fix DT node memory management (bnc#1012382).\n - intel_th: pci: Add Gemini Lake support (bnc#1012382).\n - iommu/arm-smmu-v3: Do not free page table ops twice (bnc#1012382).\n - iommu/vt-d: Fix scatterlist offset handling (bnc#1012382).\n - ip6_gre: remove the incorrect mtu limit for ipgre tap (bsc#1022912\n FATE#321246).\n - ip6_tunnel: disable dst caching if tunnel is dual-stack (bnc#1012382).\n - ip_gre: remove the incorrect mtu limit for ipgre tap (bsc#1022912\n FATE#321246).\n - ipmi: Stop timers before cleaning up the module (bnc#1012382).\n - ipv4: Fix use-after-free when flushing FIB tables (bnc#1012382).\n - ipv4: igmp: guard against silly MTU values (bnc#1012382).\n - ipv4: Make neigh lookup keys for loopback/point-to-point devices be\n INADDR_ANY (bnc#1012382).\n - ipv6: Fix getsockopt() for sockets with default IPV6_AUTOFLOWLABEL\n (bnc#1012382).\n - ipv6: fix possible mem leaks in ipv6_make_skb() (bnc#1012382).\n - ipv6: fix udpv6 sendmsg crash caused by too small MTU (bnc#1012382).\n - ipv6: ip6_make_skb() needs to clear cork.base.dst (git-fixes).\n - ipv6: mcast: better catch silly mtu values (bnc#1012382).\n - ipv6: reorder icmpv6_init() and ip6_mr_init() (bnc#1012382).\n - ipvlan: fix ipv6 outbound device (bnc#1012382).\n - ipvlan: remove excessive packet scrubbing (bsc#1070799).\n - irda: vlsi_ir: fix check for DMA mapping errors (bnc#1012382).\n - irqchip/crossbar: Fix incorrect type of register size (bnc#1012382).\n - iscsi_iser: Re-enable 'iser_pi_guard' module parameter (bsc#1062129).\n - iscsi-target: fix memory leak in lio_target_tiqn_addtpg() (bnc#1012382).\n - iscsi-target: Make TASK_REASSIGN use proper se_cmd->cmd_kref\n (bnc#1012382).\n - isdn: kcapi: avoid uninitialized data (bnc#1012382).\n - iser-target: Fix possible use-after-free in connection establishment\n error (FATE#321732).\n - iw_cxgb4: Only validate the MSN for successful completions (bnc#1012382).\n - iw_cxgb4: reflect the original WR opcode in drain cqes (bsc#321658\n FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).\n - iw_cxgb4: when flushing, complete all wrs in a chain (bsc#321658\n FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).\n - ixgbe: fix use of uninitialized padding (bnc#1012382).\n - jump_label: Invoke jump_label_test() via early_initcall() (bnc#1012382).\n - kabi fix for new hash_cred function (bsc#1012917).\n - kabi: Keep KVM stable after enable s390 wire up bpb feature\n (bsc#1076805).\n - kABI: protect struct bpf_map (kabi).\n - kABI: protect struct ipv6_pinfo (kabi).\n - kABI: protect struct t10_alua_tg_pt_gp (kabi).\n - kABI: protect struct usbip_device (kabi).\n - kabi/severities: arm64: ignore cpu capability array\n - kabi/severities: do not care about stuff_RSB\n - kaiser: Set _PAGE_NX only if supported (bnc#1012382).\n - kaiser: Set _PAGE_NX only if supported (bnc#1012382).\n - kbuild: add '-fno-stack-check' to kernel build options (bnc#1012382).\n - kbuild: modversions for EXPORT_SYMBOL() for asm (bsc#1074621\n bsc#1068032).\n - kbuild: pkg: use --transform option to prefix paths in tar (bnc#1012382).\n - kdb: Fix handling of kallsyms_symbol_next() return value (bnc#1012382).\n - kernel/acct.c: fix the acct->needcheck check in check_free_space()\n (bnc#1012382).\n - kernel: make groups_sort calling a responsibility group_info allocators\n (bnc#1012382).\n - kernel/signal.c: protect the SIGNAL_UNKILLABLE tasks from\n !sig_kernel_only() signals (bnc#1012382).\n - kernel/signal.c: protect the traced SIGNAL_UNKILLABLE tasks from SIGKILL\n (bnc#1012382).\n - kernel/signal.c: remove the no longer needed SIGNAL_UNKILLABLE check in\n complete_signal() (bnc#1012382).\n - keys: add missing permission check for request_key() destination\n (bnc#1012382).\n - kprobes/x86: Disable preemption in ftrace-based jprobes (bnc#1012382).\n - kpti: Rename to PAGE_TABLE_ISOLATION (bnc#1012382).\n - kpti: Report when enabled (bnc#1012382).\n - kvm: Fix stack-out-of-bounds read in write_mmio (bnc#1012382).\n - kvm: nVMX: reset nested_run_pending if the vCPU is going to be reset\n (bnc#1012382).\n - kvm: nVMX: VMCLEAR should not cause the vCPU to shut down (bnc#1012382).\n - kvm: pci-assign: do not map smm memory slot pages in vt-d page tables\n (bnc#1012382).\n - kvm: s390: Enable all facility bits that are known good for passthrough\n (bsc#1076805).\n - kvm: s390: wire up bpb feature (bsc#1076805).\n - kvm: VMX: Fix enable VPID conditions (bnc#1012382).\n - kvm: VMX: remove I/O port 0x80 bypass on Intel hosts (bnc#1012382).\n - kvm: vmx: Scrub hardware GPRs at VM-exit (bnc#1012382 bsc#1068032).\n - kvm: x86: Add memory barrier on vmcs field lookup (bnc#1012382).\n - kvm: x86: correct async page present tracepoint (bnc#1012382).\n - kvm: x86: Exit to user-mode on #UD intercept when emulator requires\n (bnc#1012382).\n - kvm: X86: Fix load RFLAGS w/o the fixed bit (bnc#1012382).\n - kvm: x86: fix RSM when PCID is non-zero (bnc#1012382).\n - kvm: x86: inject exceptions produced by x86_decode_insn (bnc#1012382).\n - kvm: x86: pvclock: Handle first-time write to pvclock-page contains\n random junk (bnc#1012382).\n - l2tp: cleanup l2tp_tunnel_delete calls (bnc#1012382).\n - lan78xx: Fix failure in USB Full Speed (bnc#1012382).\n - libata: apply MAX_SEC_1024 to all LITEON EP1 series devices\n (bnc#1012382).\n - libata: drop WARN from protocol error in ata_sff_qc_issue()\n (bnc#1012382).\n - lib/genalloc.c: make the avail variable an atomic_long_t (bnc#1012382).\n - macvlan: Only deliver one copy of the frame to the macvlan interface\n (bnc#1012382).\n - md: more open-coded offset_in_page() (bsc#1076110).\n - media: dvb: i2c transfers over usb cannot be done from stack\n (bnc#1012382).\n - mfd: cros ec: spi: Do not send first message too soon (bnc#1012382).\n - mfd: twl4030-audio: Fix sibling-node lookup (bnc#1012382).\n - mfd: twl6040: Fix child-node lookup (bnc#1012382).\n - mlxsw: reg: Fix SPVMLR max record count (bnc#1012382).\n - mlxsw: reg: Fix SPVM max record count (bnc#1012382).\n - mm: avoid returning VM_FAULT_RETRY from ->page_mkwrite handlers\n (bnc#1012382).\n - mmc: core: Do not leave the block driver in a suspended state\n (bnc#1012382).\n - mmc: mediatek: Fixed bug where clock frequency could be set wrong\n (bnc#1012382).\n - mm: drop unused pmdp_huge_get_and_clear_notify() (bnc#1012382).\n - mm: Handle 0 flags in _calc_vm_trans() macro (bnc#1012382).\n - mm/mprotect: add a cond_resched() inside change_pmd_range()\n (bnc#1077871, bnc#1078002).\n - mm/vmstat: Make NR_TLB_REMOTE_FLUSH_RECEIVED available even on UP\n (bnc#1012382).\n - module: Add retpoline tag to VERMAGIC (bnc#1012382).\n - module: set __jump_table alignment to 8 (bnc#1012382).\n - more bio_map_user_iov() leak fixes (bnc#1012382).\n - mtd: nand: Fix writing mtdoops to nand flash (bnc#1012382).\n - net: Allow neigh contructor functions ability to modify the primary_key\n (bnc#1012382).\n - net/appletalk: Fix kernel memory disclosure (bnc#1012382).\n - net: bcmgenet: correct MIB access of UniMAC RUNT counters (bnc#1012382).\n - net: bcmgenet: correct the RBUF_OVFL_CNT and RBUF_ERR_CNT MIB values\n (bnc#1012382).\n - net: bcmgenet: power down internal phy if open or resume fails\n (bnc#1012382).\n - net: bcmgenet: Power up the internal PHY before probing the MII\n (bnc#1012382).\n - net: bcmgenet: reserved phy revisions must be checked first\n (bnc#1012382).\n - net: bridge: fix early call to br_stp_change_bridge_id and plug newlink\n leaks (bnc#1012382).\n - net: core: fix module type in sock_diag_bind (bnc#1012382).\n - net: Do not allow negative values for busy_read and busy_poll sysctl\n interfaces (bnc#1012382).\n - net: fec: fix multicast filtering hardware setup (bnc#1012382).\n - netfilter: bridge: honor frag_max_size when refragmenting (bnc#1012382).\n - netfilter: do not track fragmented packets (bnc#1012382).\n - netfilter: ipvs: Fix inappropriate output of procfs (bnc#1012382).\n - netfilter: nfnetlink_queue: fix secctx memory leak (bnc#1012382).\n - netfilter: nfnetlink_queue: fix timestamp attribute (bsc#1074134).\n - netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash\n table (bnc#1012382).\n - netfilter: nfnl_cthelper: Fix memory leak (bnc#1012382).\n - netfilter: nfnl_cthelper: fix runtime expectation policy updates\n (bnc#1012382).\n - net: Fix double free and memory corruption in get_net_ns_by_id()\n (bnc#1012382).\n - net: igmp: fix source address check for IGMPv3 reports (bnc#1012382).\n - net: igmp: Use correct source address on IGMPv3 reports (bnc#1012382).\n - net: initialize msg.msg_flags in recvfrom (bnc#1012382).\n - net: ipv4: fix for a race condition in raw_sendmsg (bnc#1012382).\n - netlink: add a start callback for starting a netlink dump (bnc#1012382).\n - net/mac80211/debugfs.c: prevent build failure with CONFIG_UBSAN=y\n (bnc#1012382).\n - net/mlx5: Avoid NULL pointer dereference on steering cleanup\n (bsc#1015342 FATE#321688 bsc#1015343 FATE#321689).\n - net/mlx5: Cleanup IRQs in case of unload failure (bsc#966170 FATE#320225\n bsc#966172 FATE#320226).\n - net/mlx5e: Add refcount to VXLAN structure (bsc#966170 FATE#320225\n bsc#966172 FATE#320226).\n - net/mlx5e: Fix ETS BW check (bsc#966170 FATE#320225 bsc#966172\n FATE#320226).\n - net/mlx5e: Fix features check of IPv6 traffic (bsc#966170 FATE#320225\n bsc#966172 FATE#320226).\n - net/mlx5e: Fix fixpoint divide exception in mlx5e_am_stats_compare\n (bsc#1015342).\n - net/mlx5e: Fix possible deadlock of VXLAN lock (bsc#966170 FATE#320225\n bsc#966172 FATE#320226).\n - net/mlx5e: Prevent possible races in VXLAN control flow (bsc#966170\n FATE#320225 bsc#966172 FATE#320226).\n - net/mlx5: Fix error flow in CREATE_QP command (bsc#1015342 FATE#321688\n bsc#1015343 FATE#321689).\n - net/mlx5: Fix rate limit packet pacing naming and struct (bsc#1015342\n FATE#321688 bsc#1015343 FATE#321689).\n - net/mlx5: Stay in polling mode when command EQ destroy fails (bsc#966170\n FATE#320225 bsc#966172 FATE#320226).\n - net: mvmdio: disable/unprepare clocks in EPROBE_DEFER case (bnc#1012382).\n - net: mvneta: clear interface link status on port disable (bnc#1012382).\n - net: mvneta: eliminate wrong call to handle rx descriptor error\n (fate#319899).\n - net: mvneta: use proper rxq_number in loop on rx queues (fate#319899).\n - net/packet: fix a race in packet_bind() and packet_notifier()\n (bnc#1012382).\n - net: phy: at803x: Change error to EINVAL for invalid MAC (bnc#1012382).\n - net: phy: micrel: ksz9031: reconfigure autoneg after phy autoneg\n workaround (bnc#1012382).\n - net: qdisc_pkt_len_init() should be more robust (bnc#1012382).\n - net: qmi_wwan: add Sierra EM7565 1199:9091 (bnc#1012382).\n - net: qmi_wwan: Add USB IDs for MDM6600 modem on Motorola Droid 4\n (bnc#1012382).\n - net: reevalulate autoflowlabel setting after sysctl setting\n (bnc#1012382).\n - net: Resend IGMP memberships upon peer notification (bnc#1012382).\n - net: sctp: fix array overrun read on sctp_timer_tbl (bnc#1012382).\n - net: stmmac: enable EEE in MII, GMII or RGMII only (bnc#1012382).\n - net: systemport: Pad packet before inserting TSB (bnc#1012382).\n - net: systemport: Utilize skb_put_padto() (bnc#1012382).\n - net: tcp: close sock if net namespace is exiting (bnc#1012382).\n - net: wimax/i2400m: fix NULL-deref at probe (bnc#1012382).\n - nfsd: auth: Fix gid sorting when rootsquash enabled (bnc#1012382).\n - nfsd: Fix another OPEN stateid race (bnc#1012382).\n - nfsd: fix nfsd_minorversion(.., NFSD_AVAIL) (bnc#1012382).\n - nfsd: fix nfsd_reset_versions for NFSv4 (bnc#1012382).\n - nfsd: Fix stateid races between OPEN and CLOSE (bnc#1012382).\n - nfsd: Make init_open_stateid() a bit more whole (bnc#1012382).\n - nfs: Do not take a reference on fl->fl_file for LOCK operation\n (bnc#1012382).\n - nfs: Fix a typo in nfs_rename() (bnc#1012382).\n - nfs: improve shinking of access cache (bsc#1012917).\n - nfsv4.1 respect server's max size in CREATE_SESSION (bnc#1012382).\n - nfsv4: Fix client recovery when server reboots multiple times\n (bnc#1012382).\n - nohz: Prevent a timer interrupt storm in tick_nohz_stop_sched_tick()\n (bnc#1012382).\n - n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD)\n (bnc#1012382).\n - nvme_fc: correct hang in nvme_ns_remove() (bsc#1075811).\n - nvme_fc: fix rogue admin cmds stalling teardown (bsc#1075811).\n - nvme-pci: Remove watchdog timer (bsc#1066163).\n - openrisc: fix issue handling 8 byte get_user calls (bnc#1012382).\n - packet: fix crash in fanout_demux_rollover() (bnc#1012382).\n - parisc: Fix alignment of pa_tlb_lock in assembly on 32-bit SMP kernel\n (bnc#1012382).\n - parisc: Hide Diva-built-in serial aux and graphics card (bnc#1012382).\n - partially revert tipc improve link resiliency when rps is activated\n (bsc#1068038).\n - pci/AER: Report non-fatal errors only to the affected endpoint\n (bnc#1012382).\n - pci: Avoid bus reset if bridge itself is broken (bnc#1012382).\n - pci: Create SR-IOV virtfn/physfn links before attaching driver\n (bnc#1012382).\n - pci: Detach driver before procfs & sysfs teardown on device remove\n (bnc#1012382).\n - pci/PME: Handle invalid data when reading Root Status (bnc#1012382).\n - pci / PM: Force devices to D0 in pci_pm_thaw_noirq() (bnc#1012382).\n - perf symbols: Fix symbols__fixup_end heuristic for corner cases\n (bnc#1012382).\n - perf test attr: Fix ignored test case result (bnc#1012382).\n - phy: work around 'phys' references to usb-nop-xceiv devices\n (bnc#1012382).\n - pinctrl: adi2: Fix Kconfig build problem (bnc#1012382).\n - pinctrl: st: add irq_request/release_resources callbacks (bnc#1012382).\n - pipe: avoid round_pipe_size() nr_pages overflow on 32-bit (bnc#1012382).\n - powerpc/64: Add macros for annotating the destination of rfid/hrfid\n (bsc#1068032, bsc#1075087).\n - powerpc/64: Convert fast_exception_return to use RFI_TO_USER/KERNEL\n (bsc#1068032, bsc#1075087).\n - powerpc/64: Convert the syscall exit path to use RFI_TO_USER/KERNEL\n (bsc#1068032, bsc#1075087).\n - powerpc/64s: Add EX_SIZE definition for paca exception save areas\n (bsc#1068032, bsc#1075087).\n - powerpc/64s: Add support for RFI flush of L1-D cache (bsc#1068032,\n bsc#1075087).\n - powerpc/64s: Allow control of RFI flush via debugfs (bsc#1068032,\n bsc#1075087).\n - powerpc/64s: Convert slb_miss_common to use RFI_TO_USER/KERNEL\n (bsc#1068032, bsc#1075087).\n - powerpc/64s: Simple RFI macro conversions (bsc#1068032, bsc#1075087).\n - powerpc/64s: Support disabling RFI flush with no_rfi_flush and nopti\n (bsc#1068032, bsc#1075087).\n - powerpc/64s: Wire up cpu_show_meltdown() (bsc#1068032).\n - powerpc/asm: Allow including ppc_asm.h in asm files (bsc#1068032,\n bsc#1075087).\n - powerpc/ipic: Fix status get and status clear (bnc#1012382).\n - powerpc/perf: Dereference BHRB entries safely (bsc#1066223).\n - powerpc/perf/hv-24x7: Fix incorrect comparison in memord (bnc#1012382).\n - powerpc/powernv: Check device-tree for RFI flush settings (bsc#1068032,\n bsc#1075087).\n - powerpc/powernv/cpufreq: Fix the frequency read by /proc/cpuinfo\n (bnc#1012382).\n - powerpc/powernv/ioda2: Gracefully fail if too many TCE levels requested\n (bnc#1012382).\n - powerpc/pseries: include linux/types.h in asm/hvcall.h (bsc#1068032,\n bsc#1075087).\n - powerpc/pseries: Introduce H_GET_CPU_CHARACTERISTICS (bsc#1068032,\n bsc#1075087).\n - powerpc/pseries: Query hypervisor for RFI flush settings (bsc#1068032,\n bsc#1075087).\n - powerpc/pseries/rfi-flush: Call setup_rfi_flush() after LPM migration\n (bsc#1068032, bsc#1075087).\n - powerpc/rfi-flush: Add DEBUG_RFI config option (bsc#1068032,\n bsc#1075087).\n - powerpc/rfi-flush: Make setup_rfi_flush() not __init (bsc#1068032,\n bsc#1075087).\n - powerpc/rfi-flush: Move RFI flush fields out of the paca (unbreak kABI)\n (bsc#1068032, bsc#1075087).\n - powerpc/rfi-flush: Move the logic to avoid a redo into the sysfs code\n (bsc#1068032, bsc#1075087).\n - powerpc/rfi-flush: prevent crash when changing flush type to fallback\n after system boot (bsc#1068032, bsc#1075087).\n - ppp: Destroy the mutex when cleanup (bnc#1012382).\n - pppoe: take ->needed_headroom of lower device into account on xmit\n (bnc#1012382).\n - pti: unbreak EFI (bsc#1074709).\n - r8152: fix the list rx_done may be used without initialization\n (bnc#1012382).\n - r8152: prevent the driver from transmitting packets with carrier off\n (bnc#1012382).\n - r8169: fix memory corruption on retrieval of hardware statistics\n (bnc#1012382).\n - raid5: Set R5_Expanded on parity devices as well as data (bnc#1012382).\n - ravb: Remove Rx overflow log messages (bnc#1012382).\n - rbd: set max_segments to USHRT_MAX (bnc#1012382).\n - rdma/cma: Avoid triggering undefined behavior (bnc#1012382).\n - rdma/i40iw: Remove MSS change support (bsc#1024376 FATE#321249).\n - rds: Fix NULL pointer dereference in __rds_rdma_map (bnc#1012382).\n - rds: Heap OOB write in rds_message_alloc_sgs() (bnc#1012382).\n - rds: null pointer dereference in rds_atomic_free_op (bnc#1012382).\n - Re-enable fixup detection by CPU type in case hypervisor call fails.\n - regulator: core: Rely on regulator_dev_release to free constraints\n (bsc#1074847).\n - regulator: da9063: Return an error code on probe failure (bsc#1074847).\n - regulator: pwm: Fix regulator ramp delay for continuous mode\n (bsc#1074847).\n - regulator: Try to resolve regulators supplies on registration\n (bsc#1074847).\n - Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature"\n (bnc#1012382).\n - Revert "drm/armada: Fix compile fail" (bnc#1012382).\n - Revert "drm/radeon: dont switch vt on suspend" (bnc#1012382).\n - Revert "ipsec: Fix aborted xfrm policy dump crash" (kabi).\n - Revert "kaiser: vmstat show NR_KAISERTABLE as nr_overhead" (kabi).\n - Revert "lib/genalloc.c: make the avail variable an atomic_long_t" (kabi).\n - Revert "module: Add retpoline tag to VERMAGIC" (bnc#1012382 kabi).\n - Revert "module: Add retpoline tag to VERMAGIC" (kabi).\n - Revert "netlink: add a start callback for starting a netlink dump"\n (kabi).\n - Revert "ocfs2: should wait dio before inode lock in ocfs2_setattr()"\n (bnc#1012382).\n - Revert "Re-enable fixup detection by CPU type in case hypervisor call\n fails." The firmware update is required for the existing instructions to\n also do the cache flush.\n - Revert "s390/kbuild: enable modversions for symbols exported from asm"\n (bnc#1012382).\n - Revert "sched/deadline: Use the revised wakeup rule for suspending\n constrained dl tasks" (kabi).\n - Revert "scsi: libsas: align sata_device's rps_resp on a cacheline"\n (kabi).\n - Revert "spi: SPI_FSL_DSPI should depend on HAS_DMA" (bnc#1012382).\n - Revert "userfaultfd: selftest: vm: allow to build in vm/ directory"\n (bnc#1012382).\n - Revert "x86/efi: Build our own page table structures" (bnc#1012382).\n - Revert "x86/efi: Hoist page table switching code into efi_call_virt()"\n (bnc#1012382).\n - Revert "x86/mm/pat: Ensure cpa->pfn only contains page frame numbers"\n (bnc#1012382).\n - rfi-flush: Make DEBUG_RFI a CONFIG option (bsc#1068032, bsc#1075087).\n - ring-buffer: Mask out the info bits when returning buffer page length\n (bnc#1012382).\n - route: also update fnhe_genid when updating a route cache (bnc#1012382).\n - route: update fnhe_expires for redirect when the fnhe exists\n (bnc#1012382).\n - rtc: cmos: Initialize hpet timer before irq is registered (bsc#1077592).\n - rtc: pcf8563: fix output clock rate (bnc#1012382).\n - rtc: pl031: make interrupt optional (bnc#1012382).\n - rtc: set the alarm to the next expiring timer (bnc#1012382).\n - s390: always save and restore all registers on context switch\n (bnc#1012382).\n - s390/cpuinfo: show facilities as reported by stfle (bnc#1076847,\n LTC#163740).\n - s390: fix compat system call table (bnc#1012382).\n - s390/pci: do not require AIS facility (bnc#1012382).\n - s390/qeth: no ETH header for outbound AF_IUCV (LTC#156276 bnc#1012382\n bnc#1053472).\n - s390/runtime instrumentation: simplify task exit handling (bnc#1012382).\n - sch_dsmark: fix invalid skb_cow() usage (bnc#1012382).\n - sched/deadline: Make sure the replenishment timer fires in the next\n period (bnc#1012382).\n - sched/deadline: Throttle a constrained deadline task activated after the\n deadline (bnc#1012382).\n - sched/deadline: Use deadline instead of period when calculating overflow\n (bnc#1012382).\n - sched/deadline: Use the revised wakeup rule for suspending constrained\n dl tasks (bnc#1012382).\n - sched/deadline: Zero out positive runtime after throttling constrained\n tasks (git-fixes).\n - sched/rt: Do not pull from current CPU if only one CPU to pull\n (bnc#1022476).\n - scsi: bfa: integer overflow in debugfs (bnc#1012382).\n - scsi: cxgb4i: fix Tx skb leak (bnc#1012382).\n - scsi: handle ABORTED_COMMAND on Fujitsu ETERNUS (bsc#1069138).\n - scsi: hpsa: cleanup sas_phy structures in sysfs when unloading\n (bnc#1012382).\n - scsi: hpsa: destroy sas transport properties before scsi_host\n (bnc#1012382).\n - scsi: libsas: align sata_device's rps_resp on a cacheline (bnc#1012382).\n - scsi: lpfc: Use after free in lpfc_rq_buf_free() (bsc#1037838).\n - scsi: mpt3sas: Fix IO error occurs on pulling out a drive from RAID1\n volume created on two SATA drive (bnc#1012382).\n - scsi: sd: change allow_restart to bool in sysfs interface (bnc#1012382).\n - scsi: sd: change manage_start_stop to bool in sysfs interface\n (bnc#1012382).\n - scsi: sg: disable SET_FORCE_LOW_DMA (bnc#1012382).\n - scsi: sr: wait for the medium to become ready (bsc#1048585).\n - sctp: do not allow the v4 socket to bind a v4mapped v6 address\n (bnc#1012382).\n - sctp: do not free asoc when it is already dead in sctp_sendmsg\n (bnc#1012382).\n - sctp: Replace use of sockets_allocated with specified macro\n (bnc#1012382).\n - sctp: return error if the asoc has been peeled off in\n sctp_wait_for_sndbuf (bnc#1012382).\n - sctp: use the right sk after waking up from wait_buf sleep (bnc#1012382).\n - selftest/powerpc: Fix false failures for skipped tests (bnc#1012382).\n - selftests/x86: Add test_vsyscall (bnc#1012382).\n - selftests/x86/ldt_get: Add a few additional tests for limits\n (bnc#1012382).\n - serial: 8250_pci: Add Amazon PCI serial device ID (bnc#1012382).\n - serial: 8250: Preserve DLD[7:4] for PORT_XR17V35X (bnc#1012382).\n - series.conf: move core networking (including netfilter) into sorted\n section\n - series.conf: whitespace cleanup\n - Set supported_modules_check 1 (bsc#1072163).\n - sfc: do not warn on successful change of MAC (bnc#1012382).\n - sh_eth: fix SH7757 GEther initialization (bnc#1012382).\n - sh_eth: fix TSU resource handling (bnc#1012382).\n - sit: update frag_off info (bnc#1012382).\n - sock: free skb in skb_complete_tx_timestamp on error (bnc#1012382).\n - sparc64/mm: set fields in deferred pages (bnc#1012382).\n - spi_ks8995: fix "BUG: key accdaa28 not in .data!" (bnc#1012382).\n - spi: sh-msiof: Fix DMA transfer size check (bnc#1012382).\n - spi: xilinx: Detect stall with Unknown commands (bnc#1012382).\n - staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl\n (bnc#1012382).\n - sunrpc: add auth_unix hash_cred() function (bsc#1012917).\n - sunrpc: add generic_auth hash_cred() function (bsc#1012917).\n - sunrpc: add hash_cred() function to rpc_authops struct (bsc#1012917).\n - sunrpc: add RPCSEC_GSS hash_cred() function (bsc#1012917).\n - sunrpc: Fix rpc_task_begin trace point (bnc#1012382).\n - sunrpc: replace generic auth_cred hash with auth-specific function\n (bsc#1012917).\n - sunrpc: use supplimental groups in auth hash (bsc#1012917).\n - sunxi-rsb: Include OF based modalias in device uevent (bnc#1012382).\n - sysfs/cpu: Add vulnerability folder (bnc#1012382).\n - sysfs/cpu: Fix typos in vulnerability documentation (bnc#1012382).\n - sysfs: spectre_v2, handle spec_ctrl (bsc#1075994 bsc#1075091).\n - sysrq : fix Show Regs call trace on ARM (bnc#1012382).\n - target: Avoid early CMD_T_PRE_EXECUTE failures during ABORT_TASK\n (bnc#1012382).\n - target/file: Do not return error for UNMAP if length is zero\n (bnc#1012382).\n - target: fix ALUA transition timeout handling (bnc#1012382).\n - target:fix condition return in core_pr_dump_initiator_port()\n (bnc#1012382).\n - target: fix race during implicit transition work flushes (bnc#1012382).\n - target/iscsi: Fix a race condition in iscsit_add_reject_from_cmd()\n (bnc#1012382).\n - target: Use system workqueue for ALUA transitions (bnc#1012382).\n - tcp: correct memory barrier usage in tcp_check_space() (bnc#1012382).\n - tcp: fix under-evaluated ssthresh in TCP Vegas (bnc#1012382).\n - tcp md5sig: Use skb's saddr when replying to an incoming segment\n (bnc#1012382).\n - tcp: __tcp_hdrlen() helper (bnc#1012382).\n - tg3: Fix rx hang on MTU change with 5717/5719 (bnc#1012382).\n - thermal/drivers/step_wise: Fix temperature regulation misbehavior\n (bnc#1012382).\n - thermal: hisilicon: Handle return value of clk_prepare_enable\n (bnc#1012382).\n - tipc: fix cleanup at module unload (bnc#1012382).\n - tipc: fix memory leak in tipc_accept_from_sock() (bnc#1012382).\n - tipc: improve link resiliency when rps is activated (bsc#1068038).\n - tracing: Allocate mask_str buffer dynamically (bnc#1012382).\n - tracing: Fix converting enum's from the map in trace_event_eval_update()\n (bnc#1012382).\n - tracing: Fix crash when it fails to alloc ring buffer (bnc#1012382).\n - tracing: Fix possible double free on failure of allocating trace buffer\n (bnc#1012382).\n - tracing: Remove extra zeroing out of the ring buffer page (bnc#1012382).\n - tty fix oops when rmmod 8250 (bnc#1012382).\n - uas: Always apply US_FL_NO_ATA_1X quirk to Seagate devices (bnc#1012382).\n - uas: ignore UAS for Norelsys NS1068(X) chips (bnc#1012382).\n - udf: Avoid overflow when session starts at large offset (bnc#1012382).\n - um: link vmlinux with -no-pie (bnc#1012382).\n - usb: Add device quirk for Logitech HD Pro Webcam C925e (bnc#1012382).\n - usb: add RESET_RESUME for ELSA MicroLink 56K (bnc#1012382).\n - usb: core: Add type-specific length check of BOS descriptors\n (bnc#1012382).\n - usb: core: prevent malicious bNumInterfaces overflow (bnc#1012382).\n - usb: devio: Prevent integer overflow in proc_do_submiturb()\n (bnc#1012382).\n - usb: Fix off by one in type-specific length check of BOS SSP capability\n (git-fixes).\n - usb: fix usbmon BUG trigger (bnc#1012382).\n - usb: gadget: configs: plug memory leak (bnc#1012382).\n - usb: gadget: ffs: Forbid usb_ep_alloc_request from sleeping\n (bnc#1012382).\n - usb: gadgetfs: Fix a potential memory leak in 'dev_config()'\n (bnc#1012382).\n - usb: gadget: f_uvc: Sanity check wMaxPacketSize for SuperSpeed\n (bnc#1012382).\n - usb: gadget: udc: remove pointer dereference after free (bnc#1012382).\n - usb: hub: Cycle HUB power when initialization fails (bnc#1012382).\n - usb: Increase usbfs transfer limit (bnc#1012382).\n - usbip: Fix implicit fallthrough warning (bnc#1012382).\n - usbip: Fix potential format overflow in userspace tools (bnc#1012382).\n - usbip: fix stub_rx: get_pipe() to validate endpoint number (bnc#1012382).\n - usbip: fix stub_rx: harden CMD_SUBMIT path to handle malicious input\n (bnc#1012382).\n - usbip: fix stub_send_ret_submit() vulnerability to null transfer_buffer\n (bnc#1012382).\n - usbip: fix usbip bind writing random string after command in match_busid\n (bnc#1012382).\n - usbip: prevent leaking socket pointer address in messages (bnc#1012382).\n - usbip: prevent vhci_hcd driver from leaking a socket pointer address\n (bnc#1012382).\n - usbip: remove kernel addresses from usb device and urb debug msgs\n (bnc#1012382).\n - usbip: stub: stop printing kernel pointer addresses in messages\n (bnc#1012382).\n - usbip: vhci: stop printing kernel pointer addresses in messages\n (bnc#1012382).\n - usb: misc: usb3503: make sure reset is low for at least 100us\n (bnc#1012382).\n - usb: musb: da8xx: fix babble condition handling (bnc#1012382).\n - usb: phy: isp1301: Add OF device ID table (bnc#1012382).\n - usb: phy: isp1301: Fix build warning when CONFIG_OF is disabled\n (git-fixes).\n - usb: phy: tahvo: fix error handling in tahvo_usb_probe() (bnc#1012382).\n - usb: quirks: Add no-lpm quirk for KY-688 USB 3.1 Type-C Hub\n (bnc#1012382).\n - usb: serial: cp210x: add IDs for LifeScan OneTouch Verio IQ\n (bnc#1012382).\n - usb: serial: cp210x: add new device ID ELV ALC 8xxx (bnc#1012382).\n - usb: serial: ftdi_sio: add id for Airbus DS P8GR (bnc#1012382).\n - usb: serial: option: adding support for YUGA CLM920-NC5 (bnc#1012382).\n - usb: serial: option: add Quectel BG96 id (bnc#1012382).\n - usb: serial: option: add support for Telit ME910 PID 0x1101\n (bnc#1012382).\n - usb: serial: qcserial: add Sierra Wireless EM7565 (bnc#1012382).\n - usb: uas and storage: Add US_FL_BROKEN_FUA for another JMicron JMS567 ID\n (bnc#1012382).\n - usb: usbfs: Filter flags passed in from user space (bnc#1012382).\n - usb: usbip: Fix possible deadlocks reported by lockdep (bnc#1012382).\n - usb: xhci: Add XHCI_TRUST_TX_LENGTH for Renesas uPD720201 (bnc#1012382).\n - usb: xhci: fix panic in xhci_free_virt_devices_depth_first (bnc#1012382).\n - userfaultfd: selftest: vm: allow to build in vm/ directory (bnc#1012382).\n - userfaultfd: shmem: __do_fault requires VM_FAULT_NOPAGE (bnc#1012382).\n - video: fbdev: au1200fb: Release some resources if a memory allocation\n fails (bnc#1012382).\n - video: fbdev: au1200fb: Return an error code if a memory allocation\n fails (bnc#1012382).\n - virtio: release virtio index when fail to device_register (bnc#1012382).\n - vmxnet3: repair memory leak (bnc#1012382).\n - vsyscall: Fix permissions for emulate mode with KAISER/PTI (bnc#1012382).\n - vt6655: Fix a possible sleep-in-atomic bug in vt6655_suspend\n (bnc#1012382).\n - vti6: Do not report path MTU below IPV6_MIN_MTU (bnc#1012382).\n - vti6: fix device register to report IFLA_INFO_KIND (bnc#1012382).\n - workqueue: trigger WARN if queue_delayed_work() is called with NULL @wq\n (bnc#1012382).\n - writeback: fix memory leak in wb_queue_work() (bnc#1012382).\n - x.509: fix buffer overflow detection in sprint_oid() (bsc#1075078).\n - x509: fix printing uninitialized stack memory when OID is empty\n (bsc#1075078).\n - x.509: reject invalid BIT STRING for subjectPublicKey (bnc#1012382).\n - x86/acpi: Handle SCI interrupts above legacy space gracefully\n (bsc#1068984).\n - x86/acpi: Reduce code duplication in mp_override_legacy_irq()\n (bsc#1068984).\n - x86/alternatives: Add missing '\\n' at end of ALTERNATIVE inline asm\n (bnc#1012382).\n - x86/alternatives: Fix optimize_nops() checking (bnc#1012382).\n - x86/apic/vector: Fix off by one in error path (bnc#1012382).\n - x86/asm/32: Make sync_core() handle missing CPUID on all 32-bit kernels\n (bnc#1012382).\n - x86/boot: Fix early command-line parsing when matching at end\n (bsc#1068032).\n - x86/cpu: Factor out application of forced CPU caps (bnc#1012382).\n - x86/cpufeatures: Add X86_BUG_CPU_INSECURE (bnc#1012382).\n - x86/cpufeatures: Add X86_BUG_SPECTRE_V[12] (bnc#1012382).\n - x86/cpufeatures: Make CPU bugs sticky (bnc#1012382).\n - x86/cpu: Implement CPU vulnerabilites sysfs functions (bnc#1012382).\n - x86/cpu: Merge bugs.c and bugs_64.c (bnc#1012382).\n - x86/cpu: Rename Merrifield2 to Moorefield (bsc#985025).\n - x86/cpu: Rename "WESTMERE2" family to "NEHALEM_G" (bsc#985025).\n - x86/cpu, x86/pti: Do not enable PTI on AMD processors (bnc#1012382).\n - x86/Documentation: Add PTI description (bnc#1012382).\n - x86/efi-bgrt: Replace early_memremap() with memremap() (bnc#1012382).\n - x86/efi: Build our own page table structures (fate#320512).\n - x86/efi: Hoist page table switching code into efi_call_virt()\n (fate#320512).\n - x86/entry: Use SYSCALL_DEFINE() macros for sys_modify_ldt()\n (bnc#1012382).\n - x86/hpet: Prevent might sleep splat on resume (bnc#1012382).\n - x86/kasan: Clear kasan_zero_page after TLB flush (bnc#1012382).\n - x86/kasan: Write protect kasan zero shadow (bnc#1012382).\n - x86/microcode/intel: Extend BDW late-loading further with LLC size check\n (bnc#1012382).\n - x86/microcode/intel: Extend BDW late-loading with a revision check\n (bnc#1012382).\n - x86/mm/32: Move setup_clear_cpu_cap(X86_FEATURE_PCID) earlier\n (git-fixes).\n - x86/mm: Disable PCID on 32-bit kernels (bnc#1012382).\n - x86/mm/pat: Ensure cpa->pfn only contains page frame numbers\n (fate#320588).\n - x86/PCI: Make broadcom_postcore_init() check acpi_disabled (bnc#1012382).\n - x86/pti: Document fix wrong index (bnc#1012382).\n - x86/pti/efi: broken conversion from efi to kernel page table\n (bnc#1012382).\n - x86/pti: Rename BUG_CPU_INSECURE to BUG_CPU_MELTDOWN (bnc#1012382).\n - x86/retpolines/spec_ctrl: disable IBRS on !SKL if retpolines are active\n (bsc#1068032).\n - x86/smpboot: Remove stale TLB flush invocations (bnc#1012382).\n - x86/spectre_v2: fix ordering in IBRS initialization (bsc#1075994\n bsc#1075091).\n - x86/spectre_v2: nospectre_v2 means nospec too (bsc#1075994 bsc#1075091).\n - x86/tlb: Drop the _GPL from the cpu_tlbstate export (bnc#1012382).\n - x86/vm86/32: Switch to flush_tlb_mm_range() in mark_screen_rdonly()\n (bnc#1012382).\n - xen-netfront: avoid crashing on resume after a failure in\n talk_to_netback() (bnc#1012382).\n - xen-netfront: Improve error handling during initialization (bnc#1012382).\n - xfrm: Copy policy family in clone_policy (bnc#1012382).\n - xfs: add configurable error support to metadata buffers (bsc#1068569).\n - xfs: add configuration handlers for specific errors (bsc#1068569).\n - xfs: add configuration of error failure speed (bsc#1068569).\n - xfs: add "fail at unmount" error handling configuration (bsc#1068569).\n - xfs: Add infrastructure needed for error propagation during buffer IO\n failure (bsc#1068569).\n - xfs: address kabi for xfs buffer retry infrastructure (kabi).\n - xfs: configurable error behavior via sysfs (bsc#1068569).\n - xfs: fix incorrect extent state in xfs_bmap_add_extent_unwritten_real\n (bnc#1012382).\n - xfs: fix log block underflow during recovery cycle verification\n (bnc#1012382).\n - xfs: fix up inode32/64 (re)mount handling (bsc#1069160).\n - xfs: introduce metadata IO error class (bsc#1068569).\n - xfs: introduce table-based init for error behaviors (bsc#1068569).\n - xfs: Properly retry failed inode items in case of error during buffer\n writeback (bsc#1068569).\n - xfs: remove xfs_trans_ail_delete_bulk (bsc#1068569).\n - xhci: Do not add a virt_dev to the devs array before it's fully\n allocated (bnc#1012382).\n - xhci: Fix ring leak in failure path of xhci_alloc_virt_device()\n (bnc#1012382).\n - xhci: plat: Register shutdown for xhci_plat (bnc#1012382).\n - zram: set physical queue limits to avoid array out of bounds accesses\n (bnc#1012382).\n - x86/microcode/intel: Fix BDW late-loading revision check (bnc#1012382).\n\n", "cvss3": {}, "published": "2018-02-07T18:08:53", "type": "suse", "title": "Security update for the Linux Kernel (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17862", "CVE-2017-15129", "CVE-2017-17712", "CVE-2017-5715", "CVE-2018-5332", "CVE-2017-18017", "CVE-2017-17864"], "modified": "2018-02-07T18:08:53", "id": "SUSE-SU-2018:0383-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00008.html", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-02-20T03:17:11", "description": "The SUSE Linux Enterprise 12 SP2 Realtime kernel was updated to 4.4.114 to\n receive various security and bugfixes.\n\n\n The following security bugs were fixed:\n\n - CVE-2017-5715: Systems with microprocessors utilizing speculative\n execution and indirect branch prediction may allow unauthorized\n disclosure of information to an attacker with local user access via a\n side-channel analysis (bnc#1068032).\n\n The previous fix using CPU Microcode has been complemented by building\n the Linux Kernel with return trampolines aka "retpolines".\n\n - CVE-2018-5333: In the Linux kernel the rds_cmsg_atomic function in\n net/rds/rdma.c mishandled cases where page pinning fails or an invalid\n address is supplied, leading to an rds_atomic_free_op NULL pointer\n dereference (bnc#1075617).\n - CVE-2018-5332: In the Linux kernel the rds_message_alloc_sgs() function\n did not validate a value that is used during DMA page allocation,\n leading to a heap-based out-of-bounds write (related to the\n rds_rdma_extra_size function in net/rds/rdma.c) (bnc#1075621).\n - CVE-2017-17862: kernel/bpf/verifier.c in the Linux kernel ignores\n unreachable code, even though it would still be processed by JIT\n compilers. This behavior, also considered an improper branch-pruning\n logic issue, could possibly be used by local users for denial of service\n (bnc#1073928).\n - CVE-2017-17864: kernel/bpf/verifier.c in the Linux kernel mishandled\n states_equal comparisons between the pointer data type and the\n UNKNOWN_VALUE data type, which allowed local users to obtain potentially\n sensitive address information, aka a "pointer leak (bnc#1073928).\n - CVE-2017-17712: The raw_sendmsg() function in net/ipv4/raw.c in the\n Linux kernel has a race condition in inet->hdrincl that leads to\n uninitialized stack pointer usage; this allowed a local user to execute\n code and gain privileges (bnc#1073229 1073230).\n - CVE-2017-15129: A use-after-free vulnerability was found in network\n namespaces code affecting the Linux kernel The function\n get_net_ns_by_id() in net/core/net_namespace.c did not check for the\n net::count value after it has found a peer network in netns_ids idr,\n which could lead to double free and memory corruption. This\n vulnerability could allow an unprivileged local user to induce kernel\n memory corruption on the system, leading to a crash. Due to the nature\n of the flaw, privilege escalation cannot be fully ruled out, although it\n is thought to be unlikely (bnc#1074839).\n - CVE-2017-18017: The tcpmss_mangle_packet function in\n net/netfilter/xt_TCPMSS.c in the Linux kernel allowed remote attackers\n to cause a denial of service (use-after-free and memory corruption) or\n possibly have unspecified other impact by leveraging the presence of\n xt_TCPMSS in an iptables action (bnc#1074488).\n - CVE-2018-1000004: In the Linux kernel a race condition vulnerability\n exists in the sound system, this can lead to a deadlock and denial of\n service condition (bnc#1076017).\n\n The following non-security bugs were fixed:\n\n - 509: fix printing uninitialized stack memory when OID is empty\n (bsc#1075078).\n - 8021q: fix a memory leak for VLAN 0 device (bnc#1012382).\n - acpi / scan: Prefer devices without _HID/_CID for _ADR matching\n (bnc#1012382).\n - af_key: fix buffer overread in parse_exthdrs() (bnc#1012382).\n - af_key: fix buffer overread in verify_address_len() (bnc#1012382).\n - afs: Adjust mode bits processing (bnc#1012382).\n - afs: Connect up the CB.ProbeUuid (bnc#1012382).\n - afs: Fix afs_kill_pages() (bnc#1012382).\n - afs: Fix missing put_page() (bnc#1012382).\n - afs: Fix page leak in afs_write_begin() (bnc#1012382).\n - afs: Fix the maths in afs_fs_store_data() (bnc#1012382).\n - afs: Flush outstanding writes when an fd is closed (bnc#1012382).\n - afs: Migrate vlocation fields to 64-bit (bnc#1012382).\n - afs: Populate and use client modification time (bnc#1012382).\n - afs: Populate group ID from vnode status (bnc#1012382).\n - afs: Prevent callback expiry timer overflow (bnc#1012382).\n - alpha: fix build failures (bnc#1012382).\n - alsa: aloop: Fix inconsistent format due to incomplete rule\n (bsc#1031717).\n - alsa: aloop: Fix racy hw constraints adjustment (bsc#1031717).\n - alsa: aloop: Release cable upon open error path (bsc#1031717).\n - alsa: hda - Apply headphone noise quirk for another Dell XPS 13 variant\n (bsc#1031717).\n - alsa: hda - Apply the existing quirk to iMac 14,1 (bsc#1031717).\n - alsa: pcm: Abort properly at pending signal in OSS read/write loops\n (bsc#1031717).\n - alsa: pcm: Add missing error checks in OSS emulation plugin builder\n (bsc#1031717).\n - alsa: pcm: Allow aborting mutex lock at OSS read/write loops\n (bsc#1031717).\n - alsa: pcm: Remove incorrect snd_BUG_ON() usages (bsc#1031717).\n - alsa: pcm: Remove yet superfluous WARN_ON() (bsc#1031717).\n - arc: uaccess: dont use "l" gcc inline asm constraint modifier\n (bnc#1012382).\n - arm64: Add hypervisor safe helper for checking constant capabilities\n (bsc#1068032).\n - arm64: Add macros to read/write system registers (bsc#1068032).\n - arm64: add macro to extract ESR_ELx.EC (bsc#1068032).\n - arm64: Add skeleton to harden the branch predictor against aliasing\n attacks (bsc#1068032).\n - arm64: Add trace_hardirqs_off annotation in ret_to_user (bsc#1068032).\n - arm64: alternative: add auto-nop infrastructure (bsc#1068032).\n - arm64: barriers: introduce nops and __nops macros for NOP sequences\n (bsc#1068032).\n - arm64: cpu_errata: Allow an erratum to be match for all revisions of a\n core (bsc#1068032).\n - arm64: cpufeature: Add scope for capability check (bsc#1068032).\n - arm64/cpufeature: do not use mutex in bringup path (bsc#1068032).\n - arm64: cpufeature: Pass capability structure to ->enable callback\n (bsc#1068032).\n - arm64: debug: remove unused local_dbg_{enable, disable} macros\n (bsc#1068032).\n - arm64: Disable kpti for non broadcast TLB HW (bsc#1068032).\n - arm64: Disable TTBR0_EL1 during normal kernel execution (bsc#1068032).\n - arm64: do not pull uaccess.h into *.S (bsc#1068032).\n - arm64: Enable CONFIG_ARM64_SW_TTBR0_PAN (bsc#1068032).\n - arm64: entry: Add exception trampoline page for exceptions from EL0\n (bsc#1068032).\n - arm64: entry: Add fake CPU feature for unmapping the kernel at EL0\n (bsc#1068032).\n - arm64: entry: Explicitly pass exception level to kernel_ventry macro\n (bsc#1068032).\n - arm64: entry: Hook up entry trampoline to exception vectors\n (bsc#1068032).\n - arm64: entry: remove pointless SPSR mode check (bsc#1068032).\n - arm64: entry.S convert el0_sync (bsc#1068032).\n - arm64: entry.S: convert el1_sync (bsc#1068032).\n - arm64: entry.S: convert elX_irq (bsc#1068032).\n - arm64: entry.S: move SError handling into a C function for future\n expansion (bsc#1068032).\n - arm64: entry.S: Remove disable_dbg (bsc#1068032).\n - arm64: explicitly mask all exceptions (bsc#1068032).\n - arm64: factor out entry stack manipulation (bsc#1068032).\n - arm64: factor out PAGE_* and CONT_* definitions (bsc#1068032).\n - arm64: Factor out PAN enabling/disabling into separate uaccess_* macros\n (bsc#1068032).\n - arm64: Factor out TTBR0_EL1 post-update workaround into a specific asm\n macro (bsc#1068032).\n - arm64: factor work_pending state machine to C (bsc#1068032).\n - arm64: Fix circular include of asm/lse.h through linux/jump_label.h\n (bsc#1068032).\n - arm64: Fix compilation (bsc#1068032).\n - arm64: fpsimd: Prevent registers leaking from dead tasks (bnc#1012382).\n - arm64: Handle el1 synchronous instruction aborts cleanly (bsc#1068032).\n - arm64: head.S: get rid of x25 and x26 with 'global' scope (bsc#1068032).\n - arm64: Implement branch predictor hardening for affected Cortex-A CPUs\n (bsc#1068032).\n - arm64: Initialise high_memory global variable earlier (bnc#1012382).\n - arm64: introduce an order for exceptions (bsc#1068032).\n - arm64: introduce mov_q macro to move a constant into a 64-bit register\n (bsc#1068032).\n - arm64: Introduce uaccess_{disable,enable} functionality based on\n TTBR0_EL1 (bsc#1068032).\n - arm64: kaslr: Put kernel vectors address in separate data page\n (bsc#1068032).\n - arm64: Kconfig: Add CONFIG_UNMAP_KERNEL_AT_EL0 (bsc#1068032).\n - arm64: Kconfig: Reword UNMAP_KERNEL_AT_EL0 kconfig entry (bsc#1068032).\n - arm64: kill ESR_LNX_EXEC (bsc#1068032).\n - arm64: kpti: Fix the interaction between ASID switching and software PAN\n (bsc#1068032).\n - arm64: kvm: Fix SMCCC handling of unimplemented SMC/HVC calls\n (bnc#1012382).\n - arm64: kvm: fix VTTBR_BADDR_MASK BUG_ON off-by-one (bnc#1012382).\n - arm64: kvm: Survive unknown traps from guests (bnc#1012382).\n - arm64: kvm: Use per-CPU vector when BP hardening is enabled\n (bsc#1068032).\n - arm64: Mask all exceptions during kernel_exit (bsc#1068032).\n - arm64: mm: Add arm64_kernel_unmapped_at_el0 helper (bsc#1068032).\n - arm64: mm: Allocate ASIDs in pairs (bsc#1068032).\n - arm64: mm: Fix and re-enable ARM64_SW_TTBR0_PAN (bsc#1068032).\n - arm64: mm: hardcode rodata=true (bsc#1068032).\n - arm64: mm: Introduce TTBR_ASID_MASK for getting at the ASID in the TTBR\n (bsc#1068032).\n - arm64: mm: Invalidate both kernel and user ASIDs when performing TLBI\n (bsc#1068032).\n - arm64: mm: Map entry trampoline into trampoline and kernel page tables\n (bsc#1068032).\n - arm64: mm: Move ASID from TTBR0 to TTBR1 (bsc#1068032).\n - arm64: mm: Rename post_ttbr0_update_workaround (bsc#1068032).\n - arm64: mm: Temporarily disable ARM64_SW_TTBR0_PAN (bsc#1068032).\n - arm64: mm: Use non-global mappings for kernel space (bsc#1068032).\n - arm64: Move BP hardening to check_and_switch_context (bsc#1068032).\n - arm64: Move post_ttbr_update_workaround to C code (bsc#1068032).\n - arm64: Move the async/fiq helpers to explicitly set process context\n flags (bsc#1068032).\n - arm64: Store struct thread_info in sp_el0 (bsc#1068032).\n - arm64: SW PAN: Point saved ttbr0 at the zero page when switching to\n init_mm (bsc#1068032).\n - arm64: SW PAN: Update saved ttbr0 value on enter_lazy_tlb (bsc#1068032).\n - arm64: swp emulation: bound LL/SC retries before rescheduling\n (bsc#1068032).\n - arm64: sysreg: allow write_sysreg to use XZR (bsc#1068032).\n - arm64: sysreg: Fix unprotected macro argmuent in write_sysreg\n (bsc#1068032).\n - arm64: Take into account ID_AA64PFR0_EL1.CSV3 (bsc#1068032).\n - arm64: tlbflush.h: add __tlbi() macro (bsc#1068032).\n - arm64: tls: Avoid unconditional zeroing of tpidrro_el0 for native tasks\n (bsc#1068032).\n - arm64: use alternative auto-nop (bsc#1068032).\n - arm64: use RET instruction for exiting the trampoline (bsc#1068032).\n - arm64: Use static keys for CPU features (bsc#1068032).\n - arm64: xen: Enable user access before a privcmd hvc call (bsc#1068032).\n - arm: avoid faulting on qemu (bnc#1012382).\n - arm: BUG if jumping to usermode address in kernel mode (bnc#1012382).\n - arm-ccn: perf: Prevent module unload while PMU is in use (bnc#1012382).\n - arm: dma-mapping: disallow dma_get_sgtable() for non-kernel managed\n memory (bnc#1012382).\n - arm: dts: am335x-evmsk: adjust mmc2 param to allow suspend (bnc#1012382).\n - arm: dts: kirkwood: fix pin-muxing of MPP7 on OpenBlocks A7\n (bnc#1012382).\n - arm: dts: ti: fix pci bus dtc warnings (bnc#1012382).\n - arm: kprobes: Align stack to 8-bytes in test code (bnc#1012382).\n - arm: kprobes: Fix the return address of multiple kretprobes\n (bnc#1012382).\n - arm: kvm: Fix VTTBR_BADDR_MASK BUG_ON off-by-one (bnc#1012382).\n - arm: kvm: Survive unknown traps from guests (bnc#1012382).\n - arm: OMAP1: DMA: Correct the number of logical channels (bnc#1012382).\n - arm: OMAP2+: Fix device node reference counts (bnc#1012382).\n - arm: OMAP2+: gpmc-onenand: propagate error on initialization failure\n (bnc#1012382).\n - arm: OMAP2+: Release device node after it is no longer needed\n (bnc#1012382).\n - asm-prototypes: Clear any CPP defines before declaring the functions\n (git-fixes).\n - asn.1: check for error from ASN1_OP_END__ACT actions (bnc#1012382).\n - asn.1: fix out-of-bounds read when parsing indefinite length item\n (bnc#1012382).\n - ath9k: fix tx99 potential info leak (bnc#1012382).\n - atm: horizon: Fix irq release error (bnc#1012382).\n - audit: ensure that 'audit=1' actually enables audit for PID 1\n (bnc#1012382).\n - axonram: Fix gendisk handling (bnc#1012382).\n - backlight: pwm_bl: Fix overflow condition (bnc#1012382).\n - bcache: add a comment in journal bucket reading (bsc#1076110).\n - bcache: Avoid nested function definition (bsc#1076110).\n - bcache: check return value of register_shrinker (bsc#1076110).\n - bcache: debug: avoid accessing .bi_io_vec directly (bsc#1076110).\n - bcache: documentation formatting, edited for clarity, stripe alignment\n notes (bsc#1076110).\n - bcache: documentation updates and corrections (bsc#1076110).\n - bcache: Do not reinvent the wheel but use existing llist API\n (bsc#1076110).\n - bcache: do not write back data if reading it failed (bsc#1076110).\n - bcache: explicitly destroy mutex while exiting (bnc#1012382).\n - bcache: fix a comments typo in bch_alloc_sectors() (bsc#1076110).\n - bcache: fix sequential large write IO bypass (bsc#1076110).\n - bcache: fix wrong cache_misses statistics (bnc#1012382).\n - bcache: gc does not work when triggering by manual command (bsc#1076110,\n bsc#1038078).\n - bcache: implement PI controller for writeback rate (bsc#1076110).\n - bcache: increase the number of open buckets (bsc#1076110).\n - bcache: only permit to recovery read error when cache device is clean\n (bnc#1012382 bsc#1043652).\n - bcache: partition support: add 16 minors per bcacheN device\n (bsc#1076110).\n - bcache: pr_err: more meaningful error message when nr_stripes is invalid\n (bsc#1076110).\n - bcache: rearrange writeback main thread ratelimit (bsc#1076110).\n - bcache: recover data from backing when data is clean (bnc#1012382\n bsc#1043652).\n - bcache: register_bcache(): call blkdev_put() when cache_alloc() fails\n (bsc#1076110).\n - bcache: Remove deprecated create_workqueue (bsc#1076110).\n - bcache: Remove redundant block_size assignment (bsc#1076110).\n - bcache: Remove redundant parameter for cache_alloc() (bsc#1076110).\n - bcache: Remove redundant set_capacity (bsc#1076110).\n - bcache: remove unused parameter (bsc#1076110).\n - bcache: rewrite multiple partitions support (bsc#1076110, bsc#1038085,\n bsc#1019784).\n - bcache: safeguard a dangerous addressing in closure_queue (bsc#1076110).\n - bcache: silence static checker warning (bsc#1076110).\n - bcache: smooth writeback rate control (bsc#1076110).\n - bcache: switch to using blk_queue_write_cache() (bsc#1076110).\n - bcache.txt: standardize document format (bsc#1076110).\n - bcache: update bio->bi_opf bypass/writeback REQ_ flag hints\n (bsc#1076110).\n - bcache: update bucket_in_use in real time (bsc#1076110).\n - bcache: Update continue_at() documentation (bsc#1076110).\n - bcache: update document info (bsc#1076110).\n - bcache: use kmalloc to allocate bio in bch_data_verify() (bsc#1076110).\n - bcache: use llist_for_each_entry_safe() in __closure_wake_up()\n (bsc#1076110).\n - bcache: writeback rate clamping: make 32 bit safe (bsc#1076110).\n - bcache: writeback rate shouldn't artifically clamp (bsc#1076110).\n - be2net: restore properly promisc mode after queues reconfiguration\n (bsc#963844 FATE#320192).\n - block: export bio_free_pages to other modules (bsc#1076110).\n - block: wake up all tasks blocked in get_request() (bnc#1012382).\n - bluetooth: btusb: driver to enable the usb-wakeup feature (bnc#1012382).\n - bnx2x: do not rollback VF MAC/VLAN filters we did not configure\n (bnc#1012382).\n - bnx2x: fix possible overrun of VFPF multicast addresses array\n (bnc#1012382).\n - bnx2x: prevent crash when accessing PTP with interface down\n (bnc#1012382).\n - btrfs: account for pinned bytes in should_alloc_chunk (bsc#1066842).\n - btrfs: add missing memset while reading compressed inline extents\n (bnc#1012382).\n - can: af_can: canfd_rcv(): replace WARN_ONCE by pr_warn_once\n (bnc#1012382).\n - can: af_can: can_rcv(): replace WARN_ONCE by pr_warn_once (bnc#1012382).\n - can: ems_usb: cancel urb on -EPIPE and -EPROTO (bnc#1012382).\n - can: esd_usb2: cancel urb on -EPIPE and -EPROTO (bnc#1012382).\n - can: gs_usb: fix return value of the "set_bittiming" callback\n (bnc#1012382).\n - can: kvaser_usb: cancel urb on -EPIPE and -EPROTO (bnc#1012382).\n - can: kvaser_usb: Fix comparison bug in kvaser_usb_read_bulk_callback()\n (bnc#1012382).\n - can: kvaser_usb: free buf in error paths (bnc#1012382).\n - can: kvaser_usb: ratelimit errors if incomplete messages are received\n (bnc#1012382).\n - can: peak: fix potential bug in packet fragmentation (bnc#1012382).\n - can: ti_hecc: Fix napi poll return value for repoll (bnc#1012382).\n - can: usb_8dev: cancel urb on -EPIPE and -EPROTO (bnc#1012382).\n - cdc-acm: apply quirk for card reader (bsc#1060279).\n - cdrom: factor out common open_for_* code (bsc#1048585).\n - cdrom: wait for tray to close (bsc#1048585).\n - ceph: drop negative child dentries before try pruning inode's alias\n (bnc#1012382).\n - ceph: more accurate statfs (bsc#1077068).\n - clk: imx6: refine hdmi_isfr's parent to make HDMI work on i.MX6 SoCs w/o\n VPU (bnc#1012382).\n - clk: mediatek: add the option for determining PLL source clock\n (bnc#1012382).\n - clk: tegra: Fix cclk_lp divisor register (bnc#1012382).\n - cpuidle: fix broadcast control when broadcast can not be entered\n (bnc#1012382).\n - cpuidle: powernv: Pass correct drv->cpumask for registration\n (bnc#1012382).\n - cpuidle: Validate cpu_dev in cpuidle_add_sysfs() (bnc#1012382).\n - crypto: algapi - fix NULL dereference in crypto_remove_spawns()\n (bnc#1012382).\n - crypto: chacha20poly1305 - validate the digest size (bnc#1012382).\n - crypto: crypto4xx - increase context and scatter ring buffer elements\n (bnc#1012382).\n - crypto: deadlock between crypto_alg_sem/rtnl_mutex/genl_mutex\n (bnc#1012382).\n - crypto: mcryptd - protect the per-CPU queue with a lock (bnc#1012382).\n - crypto: n2 - cure use after free (bnc#1012382).\n - crypto: pcrypt - fix freeing pcrypt instances (bnc#1012382).\n - crypto: s5p-sss - Fix completing crypto request in IRQ handler\n (bnc#1012382).\n - crypto: tcrypt - fix buffer lengths in test_aead_speed() (bnc#1012382).\n - cxl: Check if vphb exists before iterating over AFU devices\n (bsc#1066223).\n - dax: Pass detailed error code from __dax_fault() (bsc#1072484).\n - dccp: do not restart ccid2_hc_tx_rto_expire() if sk in closed state\n (bnc#1012382).\n - delay: add poll_event_interruptible (bsc#1048585).\n - dmaengine: dmatest: move callback wait queue to thread context\n (bnc#1012382).\n - dmaengine: Fix array index out of bounds warning in __get_unmap_pool()\n (bnc#1012382).\n - dmaengine: pl330: fix double lock (bnc#1012382).\n - dmaengine: ti-dma-crossbar: Correct am335x/am43xx mux value type\n (bnc#1012382).\n - dm btree: fix serious bug in btree_split_beneath() (bnc#1012382).\n - dm bufio: fix shrinker scans when (nr_to_scan < retain_target)\n (bnc#1012382).\n - dm thin metadata: THIN_MAX_CONCURRENT_LOCKS should be 6 (bnc#1012382).\n - drivers: base: cacheinfo: fix boot error message when acpi is enabled\n (bnc#1012382).\n - drivers: base: cacheinfo: fix x86 with CONFIG_OF enabled (bnc#1012382).\n - drivers/firmware: Expose psci_get_version through psci_ops structure\n (bsc#1068032).\n - drivers/md/bcache/util.h: remove duplicate inclusion of blkdev.h\n (bsc#1076110).\n - drivers: net: xgene: Fix hardware checksum setting (bsc#1078526).\n - drm/amd/amdgpu: fix console deadlock if late init failed (bnc#1012382).\n - drm: extra printk() wrapper macros (bnc#1012382).\n - drm/exynos/decon5433: set STANDALONE_UPDATE_F on output enablement\n (bnc#1012382).\n - drm/exynos: gem: Drop NONCONTIG flag for buffers allocated without IOMMU\n (bnc#1012382).\n - drm/omap: fix dmabuf mmap for dma_alloc'ed buffers (bnc#1012382).\n - drm/radeon: reinstate oland workaround for sclk (bnc#1012382).\n - drm/radeon/si: add dpm quirk for Oland (bnc#1012382).\n - drm/vmwgfx: Potential off by one in vmw_view_add() (bnc#1012382).\n - dynamic-debug-howto: fix optional/omitted ending line number to be LARGE\n instead of 0 (bnc#1012382).\n - edac, i5000, i5400: Fix definition of NRECMEMB register (bnc#1012382).\n - edac, i5000, i5400: Fix use of MTR_DRAM_WIDTH macro (bnc#1012382).\n - edac, sb_edac: Fix missing break in switch (bnc#1012382).\n - efi/esrt: Cleanup bad memory map log messages (bnc#1012382).\n - efi: Move some sysfs files to be read-only by root (bnc#1012382).\n - eventpoll.h: add missing epoll event masks (bnc#1012382).\n - ext4: fix crash when a directory's i_size is too small (bnc#1012382).\n - ext4: Fix ENOSPC handling in DAX page fault handle (bsc#1072484).\n - ext4: fix fdatasync(2) after fallocate(2) operation (bnc#1012382).\n - fbdev: controlfb: Add missing modes to fix out of bounds access\n (bnc#1012382).\n - Fix build error in vma.c (bnc#1012382).\n - fjes: Fix wrong netdevice feature flags (bnc#1012382).\n - flow_dissector: properly cap thoff field (bnc#1012382).\n - fm10k: ensure we process SM mbx when processing VF mbx (bnc#1012382).\n - fork: clear thread stack upon allocation (bsc#1077560). Conflicts:\n series.conf\n - fscache: Fix the default for fscache_maybe_release_page() (bnc#1012382).\n - futex: Prevent overflow by strengthen input validation (bnc#1012382).\n - gcov: disable for COMPILE_TEST (bnc#1012382).\n - gfs2: Take inode off order_write list when setting jdata flag\n (bnc#1012382).\n - gpio: altera: Use handle_level_irq when configured as a level_high\n (bnc#1012382).\n - hid: chicony: Add support for another ASUS Zen AiO keyboard\n (bnc#1012382).\n - hid: xinmo: fix for out of range for THT 2P arcade controller\n (bnc#1012382).\n - hrtimer: Reset hrtimer cpu base proper on CPU hotplug (bnc#1012382).\n - hv: kvp: Avoid reading past allocated blocks from KVP file (bnc#1012382).\n - hwmon: (asus_atk0110) fix uninitialized data access (bnc#1012382).\n - i40e: Do not enable NAPI on q_vectors that have no rings (bnc#1012382).\n - ib/hfi1: Correct defered count after processing qp_wait_list (git-fixes).\n - ib/hfi1: Fix rnr_timer addition (git-fixes).\n - ib/hfi1: Handle kzalloc failure in init_pervl_scs (git-fixes).\n - ib/hfi1: Move iowait_init() to priv allocate (git-fixes).\n - ib/hfi1: Prevent kernel QP post send hard lockups (git-fixes).\n - ib/hfi1: Reset QSFP on every run through channel tuning (git-fixes).\n - ib/ipoib: Fix lockdep issue found on ipoib_ib_dev_heavy_flush\n (git-fixes).\n - ib/ipoib: Grab rtnl lock on heavy flush when calling ndo_open/stop\n (bnc#1012382).\n - ib/mlx4: Increase maximal message size under UD QP (bnc#1012382).\n - ib/mlx5: Assign send CQ and recv CQ of UMR QP (bnc#1012382).\n - ibmvnic: Allocate and request vpd in init_resources (bsc#1076872).\n - ibmvnic: Do not handle RX interrupts when not up (bsc#1075066).\n - ibmvnic: Fix IP offload control buffer (bsc#1076899).\n - ibmvnic: Fix IPv6 packet descriptors (bsc#1076899).\n - ibmvnic: Fix pending MAC address changes (bsc#1075627).\n - ibmvnic: Modify buffer size and number of queues on failover\n (bsc#1076872).\n - ibmvnic: Revert to previous mtu when unsupported value requested\n (bsc#1076872).\n - ibmvnic: Wait for device response when changing MAC (bsc#1078681).\n - ib/qib: Remove qpt_mask global (git-fixes).\n - ib/rdmavt: restore IRQs on error path in rvt_create_ah() (git-fixes).\n - ib/srpt: Disable RDMA access by the initiator (bnc#1012382).\n - igb: check memory allocation failure (bnc#1012382).\n - ima: fix hash algorithm initialization (bnc#1012382).\n - inet: frag: release spinlock before calling icmp_send() (bnc#1012382).\n - input: 88pm860x-ts - fix child-node lookup (bnc#1012382).\n - input: elantech - add new icbody type 15 (bnc#1012382).\n - input: i8042 - add TUXEDO BU1406 (N24_25BU) to the nomux list\n (bnc#1012382).\n - input: trackpoint - force 3 buttons if 0 button is reported\n (bnc#1012382).\n - input: twl4030-vibra - fix sibling-node lookup (bnc#1012382).\n - input: twl6040-vibra - fix child-node lookup (bnc#1012382).\n - input: twl6040-vibra - fix DT node memory management (bnc#1012382).\n - intel_th: pci: Add Gemini Lake support (bnc#1012382).\n - iommu/arm-smmu-v3: Do not free page table ops twice (bnc#1012382).\n - iommu/vt-d: Fix scatterlist offset handling (bnc#1012382).\n - ip6_tunnel: disable dst caching if tunnel is dual-stack (bnc#1012382).\n - ipmi: Stop timers before cleaning up the module (bnc#1012382).\n - ipv4: Fix use-after-free when flushing FIB tables (bnc#1012382).\n - ipv4: igmp: guard against silly MTU values (bnc#1012382).\n - ipv4: Make neigh lookup keys for loopback/point-to-point devices be\n INADDR_ANY (bnc#1012382).\n - ipv6: Fix getsockopt() for sockets with default IPV6_AUTOFLOWLABEL\n (bnc#1012382).\n - ipv6: fix possible mem leaks in ipv6_make_skb() (bnc#1012382).\n - ipv6: fix udpv6 sendmsg crash caused by too small MTU (bnc#1012382).\n - ipv6: ip6_make_skb() needs to clear cork.base.dst (git-fixes).\n - ipv6: mcast: better catch silly mtu values (bnc#1012382).\n - ipv6: reorder icmpv6_init() and ip6_mr_init() (bnc#1012382).\n - ipvlan: fix ipv6 outbound device (bnc#1012382).\n - ipvlan: remove excessive packet scrubbing (bsc#1070799).\n - irda: vlsi_ir: fix check for DMA mapping errors (bnc#1012382).\n - irqchip/crossbar: Fix incorrect type of register size (bnc#1012382).\n - iscsi-target: fix memory leak in lio_target_tiqn_addtpg() (bnc#1012382).\n - iscsi-target: Make TASK_REASSIGN use proper se_cmd->cmd_kref\n (bnc#1012382).\n - isdn: kcapi: avoid uninitialized data (bnc#1012382).\n - iw_cxgb4: Only validate the MSN for successful completions (bnc#1012382).\n - ixgbe: fix use of uninitialized padding (bnc#1012382).\n - jump_label: Invoke jump_label_test() via early_initcall() (bnc#1012382).\n - jump_label: Make it possible for arches to invoke jump_label_init()\n earlier (bsc#1068032).\n - jump_labels: Allow array initialisers (bsc#1068032).\n - Kabi: Keep KVM stable after enable s390 wire up bpb feature\n (bsc#1076806).\n - kABI: protect struct bpf_map (kabi).\n - kABI: protect struct ipv6_pinfo (kabi).\n - kABI: protect struct t10_alua_tg_pt_gp (kabi).\n - kABI: protect struct usbip_device (kabi).\n - kabi/severities: do not care about stuff_RSB\n - kaiser: Set _PAGE_NX only if supported (bnc#1012382).\n - kaiser: Set _PAGE_NX only if supported (bnc#1012382).\n - kbuild: add '-fno-stack-check' to kernel build options (bnc#1012382).\n - kbuild: modversions for EXPORT_SYMBOL() for asm (bsc#1074621\n bsc#1068032).\n - kbuild: pkg: use --transform option to prefix paths in tar (bnc#1012382).\n - kdb: Fix handling of kallsyms_symbol_next() return value (bnc#1012382).\n - kernel/acct.c: fix the acct->needcheck check in check_free_space()\n (bnc#1012382).\n - kernel: make groups_sort calling a responsibility group_info allocators\n (bnc#1012382).\n - kernel/signal.c: protect the SIGNAL_UNKILLABLE tasks from\n !sig_kernel_only() signals (bnc#1012382).\n - kernel/signal.c: protect the traced SIGNAL_UNKILLABLE tasks from SIGKILL\n (bnc#1012382).\n - kernel/signal.c: remove the no longer needed SIGNAL_UNKILLABLE check in\n complete_signal() (bnc#1012382).\n - keys: add missing permission check for request_key() destination\n (bnc#1012382).\n - kprobes/x86: Disable preemption in ftrace-based jprobes (bnc#1012382).\n - kpti: Rename to PAGE_TABLE_ISOLATION (bnc#1012382).\n - kpti: Report when enabled (bnc#1012382).\n - kvm: arm/arm64: Fix occasional warning from the timer work function\n (bnc#1012382 bsc#988524).\n - kvm: Fix stack-out-of-bounds read in write_mmio (bnc#1012382).\n - kvm: nVMX: reset nested_run_pending if the vCPU is going to be reset\n (bnc#1012382).\n - kvm: nVMX: VMCLEAR should not cause the vCPU to shut down (bnc#1012382).\n - kvm: pci-assign: do not map smm memory slot pages in vt-d page tables\n (bnc#1012382).\n - kvm: s390: Enable all facility bits that are known good for passthrough\n (bsc#1076806).\n - kvm: s390: wire up bpb feature (bsc#1076806).\n - kvm: VMX: Fix enable VPID conditions (bnc#1012382).\n - kvm: VMX: remove I/O port 0x80 bypass on Intel hosts (bnc#1012382).\n - kvm: vmx: Scrub hardware GPRs at VM-exit (bnc#1012382).\n - kvm: x86: Add memory barrier on vmcs field lookup (bnc#1012382).\n - kvm: x86: correct async page present tracepoint (bnc#1012382).\n - kvm: X86: Fix load RFLAGS w/o the fixed bit (bnc#1012382).\n - kvm: x86: fix RSM when pciD is non-zero (bnc#1012382).\n - l2tp: cleanup l2tp_tunnel_delete calls (bnc#1012382).\n - lan78xx: Fix failure in USB Full Speed (bnc#1012382).\n - libata: apply MAX_SEC_1024 to all LITEON EP1 series devices\n (bnc#1012382).\n - libata: drop WARN from protocol error in ata_sff_qc_issue()\n (bnc#1012382).\n - lib/genalloc.c: make the avail variable an atomic_long_t (bnc#1012382).\n - macvlan: Only deliver one copy of the frame to the macvlan interface\n (bnc#1012382).\n - md-cluster: free md_cluster_info if node leave cluster (bnc#1012382).\n - media: dvb: i2c transfers over usb cannot be done from stack\n (bnc#1012382).\n - mfd: cros ec: spi: Do not send first message too soon (bnc#1012382).\n - mfd: twl4030-audio: Fix sibling-node lookup (bnc#1012382).\n - mfd: twl6040: Fix child-node lookup (bnc#1012382).\n - MIPS: Also verify sizeof `elf_fpreg_t' with PTRACE_SETREGSET\n (bnc#1012382).\n - MIPS: AR7: ensure the port type's FCR value is used (bnc#1012382).\n - MIPS: Consistently handle buffer counter with PTRACE_SETREGSET\n (bnc#1012382).\n - MIPS: Disallow outsized PTRACE_SETREGSET NT_PRFPREG regset accesses\n (bnc#1012382).\n - MIPS: Factor out NT_PRFPREG regset access helpers (bnc#1012382).\n - MIPS: Fix an FCSR access API regression with NT_PRFPREG and MSA\n (bnc#1012382).\n - MIPS: Guard against any partial write attempt with PTRACE_SETREGSET\n (bnc#1012382).\n - MIPS: math-emu: Fix final emulation phase for certain instructions\n (bnc#1012382).\n - MIPS: Validate PR_SET_FP_MODE prctl(2) requests against the ABI of the\n task (bnc#1012382).\n - mlxsw: reg: Fix SPVMLR max record count (bnc#1012382).\n - mlxsw: reg: Fix SPVM max record count (bnc#1012382).\n - mm: avoid returning VM_FAULT_RETRY from ->page_mkwrite handlers\n (bnc#1012382).\n - mmc: mediatek: Fixed bug where clock frequency could be set wrong\n (bnc#1012382).\n - mm: drop unused pmdp_huge_get_and_clear_notify() (bnc#1012382).\n - mm: Handle 0 flags in _calc_vm_trans() macro (bnc#1012382).\n - mm: Introduce lm_alias (bsc#1068032).\n - mm/mmap.c: do not blow on PROT_NONE MAP_FIXED holes in the stack\n (bnc#1012382).\n - mm/mprotect: add a cond_resched() inside change_pmd_range()\n (bnc#1077871).\n - mm/vmstat: Make NR_TLB_REMOTE_FLUSH_RECEIVED available even on UP\n (bnc#1012382).\n - module: set __jump_table alignment to 8 (bnc#1012382).\n - more bio_map_user_iov() leak fixes (bnc#1012382).\n - net: Allow neigh contructor functions ability to modify the primary_key\n (bnc#1012382).\n - net/appletalk: Fix kernel memory disclosure (bnc#1012382).\n - net: bcmgenet: correct MIB access of UniMAC RUNT counters (bnc#1012382).\n - net: bcmgenet: correct the RBUF_OVFL_CNT and RBUF_ERR_CNT MIB values\n (bnc#1012382).\n - net: bcmgenet: power down internal phy if open or resume fails\n (bnc#1012382).\n - net: bcmgenet: Power up the internal PHY before probing the MII\n (bnc#1012382).\n - net: bcmgenet: reserved phy revisions must be checked first\n (bnc#1012382).\n - net: bridge: fix early call to br_stp_change_bridge_id and plug newlink\n leaks (bnc#1012382).\n - net: core: fix module type in sock_diag_bind (bnc#1012382).\n - net: Do not allow negative values for busy_read and busy_poll sysctl\n interfaces (bnc#1012382).\n - net: fec: fix multicast filtering hardware setup (bnc#1012382).\n - netfilter: bridge: honor frag_max_size when refragmenting (bnc#1012382).\n - netfilter: do not track fragmented packets (bnc#1012382).\n - netfilter: ipvs: Fix inappropriate output of procfs (bnc#1012382).\n - netfilter: nfnetlink_queue: fix secctx memory leak (bnc#1012382).\n - netfilter: nfnetlink_queue: fix timestamp attribute (bsc#1074134).\n - netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash\n table (bnc#1012382).\n - netfilter: nfnl_cthelper: Fix memory leak (bnc#1012382).\n - netfilter: nfnl_cthelper: fix runtime expectation policy updates\n (bnc#1012382).\n - net: Fix double free and memory corruption in get_net_ns_by_id()\n (bnc#1012382).\n - net: igmp: fix source address check for IGMPv3 reports (bnc#1012382).\n - net: igmp: Use correct source address on IGMPv3 reports (bnc#1012382).\n - net: initialize msg.msg_flags in recvfrom (bnc#1012382).\n - net: ipv4: fix for a race condition in raw_sendmsg (bnc#1012382).\n - net/mac80211/debugfs.c: prevent build failure with CONFIG_UBSAN=y\n (bnc#1012382).\n - net: mvmdio: disable/unprepare clocks in EPROBE_DEFER case (bnc#1012382).\n - net: mvneta: clear interface link status on port disable (bnc#1012382).\n - net/packet: fix a race in packet_bind() and packet_notifier()\n (bnc#1012382).\n - net: phy: at803x: Change error to EINVAL for invalid MAC (bnc#1012382).\n - net: phy: micrel: ksz9031: reconfigure autoneg after phy autoneg\n workaround (bnc#1012382).\n - net: qdisc_pkt_len_init() should be more robust (bnc#1012382).\n - net: qmi_wwan: add Sierra EM7565 1199:9091 (bnc#1012382).\n - net: qmi_wwan: Add USB IDs for MDM6600 modem on Motorola Droid 4\n (bnc#1012382).\n - net: reevalulate autoflowlabel setting after sysctl setting\n (bnc#1012382).\n - net: Resend IGMP memberships upon peer notification (bnc#1012382).\n - net: sctp: fix array overrun read on sctp_timer_tbl (bnc#1012382).\n - net: stmmac: enable EEE in MII, GMII or RGMII only (bnc#1012382).\n - net: systemport: Pad packet before inserting TSB (bnc#1012382).\n - net: systemport: Utilize skb_put_padto() (bnc#1012382).\n - net: tcp: close sock if net namespace is exiting (bnc#1012382).\n - net: wimax/i2400m: fix NULL-deref at probe (bnc#1012382).\n - nfsd: auth: Fix gid sorting when rootsquash enabled (bnc#1012382).\n - nfsd: fix nfsd_minorversion(.., NFSD_AVAIL) (bnc#1012382).\n - nfsd: fix nfsd_reset_versions for NFSv4 (bnc#1012382).\n - nfs: Do not take a reference on fl->fl_file for LOCK operation\n (bnc#1012382).\n - nfs: Fix a typo in nfs_rename() (bnc#1012382).\n - nfsv4.1 respect server's max size in CREATE_SESSION (bnc#1012382).\n - nfsv4: Fix client recovery when server reboots multiple times\n (bnc#1012382).\n - nohz: Prevent a timer interrupt storm in tick_nohz_stop_sched_tick()\n (bnc#1012382).\n - n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD)\n (bnc#1012382).\n - openrisc: fix issue handling 8 byte get_user calls (bnc#1012382).\n - packet: fix crash in fanout_demux_rollover() (bnc#1012382).\n - parisc: Fix alignment of pa_tlb_lock in assembly on 32-bit SMP kernel\n (bnc#1012382).\n - parisc: Hide Diva-built-in serial aux and graphics card (bnc#1012382).\n - partially revert tipc improve link resiliency when rps is activated\n (bsc#1068038).\n - pci/aer: Report non-fatal errors only to the affected endpoint\n (bnc#1012382).\n - pci: Avoid bus reset if bridge itself is broken (bnc#1012382).\n - pci: Create SR-IOV virtfn/physfn links before attaching driver\n (bnc#1012382).\n - pci: Detach driver before procfs & sysfs teardown on device remove\n (bnc#1012382).\n - pci/pme: Handle invalid data when reading Root Status (bnc#1012382).\n - pci / pm: Force devices to D0 in pci_pm_thaw_noirq() (bnc#1012382).\n - perf symbols: Fix symbols__fixup_end heuristic for corner cases\n (bnc#1012382).\n - perf test attr: Fix ignored test case result (bnc#1012382).\n - perf: xgene: Add APM X-Gene SoC Performance Monitoring Unit driver\n (bsc#1036737).\n - perf: xgene: Add support for SoC PMU version 3 (bsc#1076809).\n - perf: xgene: Include module.h (bsc#1076809).\n - perf: xgene: Move PMU leaf functions into function pointer structure\n (bsc#1076809).\n - perf: xgene: Parse PMU subnode from the match table (bsc#1076809).\n - perf: xgene: Remove unnecessary managed resources cleanup (bsc#1076809).\n - phy: work around 'phys' references to usb-nop-xceiv devices\n (bnc#1012382).\n - pinctrl: adi2: Fix Kconfig build problem (bnc#1012382).\n - pinctrl: st: add irq_request/release_resources callbacks (bnc#1012382).\n - pipe: avoid round_pipe_size() nr_pages overflow on 32-bit (bnc#1012382).\n - powerpc/64: Add macros for annotating the destination of rfid/hrfid\n (bsc#1068032, bsc#1075087).\n - powerpc/64: Convert fast_exception_return to use RFI_TO_USER/KERNEL\n (bsc#1068032, bsc#1075087).\n - powerpc/64: Convert the syscall exit path to use RFI_TO_USER/KERNEL\n (bsc#1068032, bsc#1075087).\n - powerpc/64s: Add EX_SIZE definition for paca exception save areas\n (bsc#1068032, bsc#1075087).\n - powerpc/64s: Add support for RFI flush of L1-D cache (bsc#1068032,\n bsc#1075087).\n - powerpc/64s: Allow control of RFI flush via debugfs (bsc#1068032,\n bsc#1075087).\n - powerpc/64s: Convert slb_miss_common to use RFI_TO_USER/KERNEL\n (bsc#1068032, bsc#1075087).\n - powerpc/64s: Simple RFI macro conversions (bsc#1068032, bsc#1075087).\n - powerpc/64s: Support disabling RFI flush with no_rfi_flush and nopti\n (bsc#1068032, bsc#1075087).\n - powerpc/64s: Wire up cpu_show_meltdown() (bsc#1068032).\n - powerpc/asm: Allow including ppc_asm.h in asm files (bsc#1068032,\n bsc#1075087).\n - powerpc/ipic: Fix status get and status clear (bnc#1012382).\n - powerpc/perf: Dereference BHRB entries safely (bsc#1066223).\n - powerpc/perf/hv-24x7: Fix incorrect comparison in memord (bnc#1012382).\n - powerpc/powernv: Check device-tree for RFI flush settings (bsc#1068032,\n bsc#1075087).\n - powerpc/powernv/cpufreq: Fix the frequency read by /proc/cpuinfo\n (bnc#1012382).\n - powerpc/powernv/ioda2: Gracefully fail if too many TCE levels requested\n (bnc#1012382).\n - powerpc/pseries: include linux/types.h in asm/hvcall.h (bsc#1068032,\n bsc#1075087).\n - powerpc/pseries: Introduce H_GET_CPU_CHARACTERISTICS (bsc#1068032,\n bsc#1075087).\n - powerpc/pseries: Query hypervisor for RFI flush settings (bsc#1068032,\n bsc#1075087).\n - powerpc/pseries/rfi-flush: Call setup_rfi_flush() after LPM migration\n (bsc#1068032, bsc#1075087).\n - powerpc/pseries: rfi-flush: Call setup_rfi_flush() after LPM migration\n (bsc#1068032, bsc#1075087).\n - powerpc/rfi-flush: Add DEBUG_RFI config option (bsc#1068032,\n bsc#1075087).\n - powerpc/rfi-flush: Make setup_rfi_flush() not __init (bsc#1068032,\n bsc#1075087).\n - powerpc/rfi-flush: Move RFI flush fields out of the paca (unbreak kABI)\n (bsc#1068032, bsc#1075087).\n - powerpc/rfi-flush: Move the logic to avoid a redo into the sysfs code\n (bsc#1068032, bsc#1075087).\n - powerpc/rfi-flush: prevent crash when changing flush type to fallback\n after system boot (bsc#1068032, bsc#1075087).\n - ppp: Destroy the mutex when cleanup (bnc#1012382).\n - pppoe: take ->needed_headroom of lower device into account on xmit\n (bnc#1012382).\n - pti: unbreak EFI (bsc#1074709).\n - r8152: fix the list rx_done may be used without initialization\n (bnc#1012382).\n - r8152: prevent the driver from transmitting packets with carrier off\n (bnc#1012382).\n - r8169: fix memory corruption on retrieval of hardware statistics\n (bnc#1012382).\n - raid5: Set R5_Expanded on parity devices as well as data (bnc#1012382).\n - ravb: Remove Rx overflow log messages (bnc#1012382).\n - rbd: set max_segments to USHRT_MAX (bnc#1012382).\n - rdma/cma: Avoid triggering undefined behavior (bnc#1012382).\n - rdma/iser: Fix possible mr leak on device removal event (bnc#1012382).\n - rds: Fix NULL pointer dereference in __rds_rdma_map (bnc#1012382).\n - rds: Heap OOB write in rds_message_alloc_sgs() (bnc#1012382).\n - rds: null pointer dereference in rds_atomic_free_op (bnc#1012382).\n - regulator: core: Rely on regulator_dev_release to free constraints\n (bsc#1074847).\n - regulator: da9063: Return an error code on probe failure (bsc#1074847).\n - regulator: pwm: Fix regulator ramp delay for continuous mode\n (bsc#1074847).\n - regulator: Try to resolve regulators supplies on registration\n (bsc#1074847).\n - Revert "arm64: alternatives: add enable parameter to conditional asm\n macros" (bsc#1068032).\n - Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature"\n (bnc#1012382).\n - Revert "drm/armada: Fix compile fail" (bnc#1012382).\n - Revert "kaiser: vmstat show NR_KAISERTABLE as nr_overhead" (kabi).\n - Revert "lib/genalloc.c: make the avail variable an atomic_long_t" (kabi).\n - Revert "module: Add retpoline tag to VERMAGIC" (bnc#1012382 kabi).\n - Revert "ocfs2: should wait dio before inode lock in ocfs2_setattr()"\n (bnc#1012382).\n - Revert "s390/kbuild: enable modversions for symbols exported from asm"\n (bnc#1012382).\n - Revert "sched/deadline: Use the revised wakeup rule for suspending\n constrained dl tasks" (kabi).\n - Revert "scsi: libsas: align sata_device's rps_resp on a cacheline"\n (kabi).\n - Revert "spi: SPI_FSL_DSPI should depend on HAS_DMA" (bnc#1012382).\n - Revert "userfaultfd: selftest: vm: allow to build in vm/ directory"\n (bnc#1012382).\n - Revert "x86/efi: Build our own page table structures" (bnc#1012382).\n - Revert "x86/efi: Hoist page table switching code into efi_call_virt()"\n (bnc#1012382).\n - Revert "x86/mm/pat: Ensure cpa->pfn only contains page frame numbers"\n (bnc#1012382).\n - rfi-flush: Make DEBUG_RFI a CONFIG option (bsc#1068032, bsc#1075087).\n - ring-buffer: Mask out the info bits when returning buffer page length\n (bnc#1012382).\n - route: also update fnhe_genid when updating a route cache (bnc#1012382).\n - route: update fnhe_expires for redirect when the fnhe exists\n (bnc#1012382).\n - rtc: cmos: Initialize hpet timer before irq is registered (bsc#1077592).\n - rtc: pcf8563: fix output clock rate (bnc#1012382).\n - rtc: pl031: make interrupt optional (bnc#1012382).\n - rtc: set the alarm to the next expiring timer (bnc#1012382).\n - s390: always save and restore all registers on context switch\n (bnc#1012382).\n - s390: fix compat system call table (bnc#1012382).\n - s390/pci: do not require AIS facility (bnc#1012382).\n - s390/qeth: no ETH header for outbound AF_IUCV (bnc#1012382).\n - s390/runtime instrumentation: simplify task exit handling (bnc#1012382).\n - sch_dsmark: fix invalid skb_cow() usage (bnc#1012382).\n - sched/deadline: Make sure the replenishment timer fires in the next\n period (bnc#1012382).\n - sched/deadline: Throttle a constrained deadline task activated after the\n deadline (bnc#1012382).\n - sched/deadline: Use deadline instead of period when calculating overflow\n (bnc#1012382).\n - sched/deadline: Use the revised wakeup rule for suspending constrained\n dl tasks (bnc#1012382).\n - sched/deadline: Zero out positive runtime after throttling constrained\n tasks (git-fixes).\n - scsi: bfa: integer overflow in debugfs (bnc#1012382).\n - scsi: check for device state in __scsi_remove_target() (bsc#1072589).\n - scsi: cxgb4i: fix Tx skb leak (bnc#1012382).\n - scsi: fixup kernel warning during rmmod() (bsc#1052360).\n - scsi: hpsa: cleanup sas_phy structures in sysfs when unloading\n (bnc#1012382).\n - scsi: hpsa: destroy sas transport properties before scsi_host\n (bnc#1012382).\n - scsi: libsas: align sata_device's rps_resp on a cacheline (bnc#1012382).\n - scsi: lpfc: Fix crash during Hardware error recovery on SLI3 adapters\n (bnc#1012382).\n - scsi: lpfc: Fix PT2PT PRLI reject (bnc#1012382).\n - scsi: lpfc: Fix secure firmware updates (bnc#1012382).\n - scsi: lpfc: PLOGI failures during NPIV testing (bnc#1012382).\n - scsi: mpt3sas: Fix IO error occurs on pulling out a drive from RAID1\n volume created on two SATA drive (bnc#1012382).\n - scsi: sd: change allow_restart to bool in sysfs interface (bnc#1012382).\n - scsi: sd: change manage_start_stop to bool in sysfs interface\n (bnc#1012382).\n - scsi: sg: disable SET_FORCE_LOW_DMA (bnc#1012382).\n - scsi: sr: wait for the medium to become ready (bsc#1048585).\n - sctp: do not allow the v4 socket to bind a v4mapped v6 address\n (bnc#1012382).\n - sctp: do not free asoc when it is already dead in sctp_sendmsg\n (bnc#1012382).\n - sctp: Replace use of sockets_allocated with specified macro\n (bnc#1012382).\n - sctp: return error if the asoc has been peeled off in\n sctp_wait_for_sndbuf (bnc#1012382).\n - sctp: use the right sk after waking up from wait_buf sleep (bnc#1012382).\n - selftest/powerpc: Fix false failures for skipped tests (bnc#1012382).\n - selftests/x86: Add test_vsyscall (bnc#1012382).\n - selftests/x86/ldt_get: Add a few additional tests for limits\n (bnc#1012382).\n - serial: 8250_pci: Add Amazon pci serial device ID (bnc#1012382).\n - serial: 8250: Preserve DLD[7:4] for PORT_XR17V35X (bnc#1012382).\n - Set supported_modules_check 1 (bsc#1072163).\n - sfc: do not warn on successful change of MAC (bnc#1012382).\n - sh_eth: fix SH7757 GEther initialization (bnc#1012382).\n - sh_eth: fix TSU resource handling (bnc#1012382).\n - sit: update frag_off info (bnc#1012382).\n - sock: free skb in skb_complete_tx_timestamp on error (bnc#1012382).\n - sparc64/mm: set fields in deferred pages (bnc#1012382).\n - spi_ks8995: fix "BUG: key accdaa28 not in .data!" (bnc#1012382).\n - spi: sh-msiof: Fix DMA transfer size check (bnc#1012382).\n - spi: xilinx: Detect stall with Unknown commands (bnc#1012382).\n - staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl\n (bnc#1012382).\n - sunrpc: Fix rpc_task_begin trace point (bnc#1012382).\n - sunxi-rsb: Include OF based modalias in device uevent (bnc#1012382).\n - sysfs/cpu: Add vulnerability folder (bnc#1012382).\n - sysfs/cpu: Fix typos in vulnerability documentation (bnc#1012382).\n - sysfs: spectre_v2, handle spec_ctrl (bsc#1075994 bsc#1075091).\n - sysrq : fix Show Regs call trace on ARM (bnc#1012382).\n - target: Avoid early CMD_T_PRE_EXECUTE failures during ABORT_TASK\n (bnc#1012382).\n - target/file: Do not return error for UNMAP if length is zero\n (bnc#1012382).\n - target: fix ALUA transition timeout handling (bnc#1012382).\n - target:fix condition return in core_pr_dump_initiator_port()\n (bnc#1012382).\n - target: fix race during implicit transition work flushes (bnc#1012382).\n - target/iscsi: Fix a race condition in iscsit_add_reject_from_cmd()\n (bnc#1012382).\n - target: Use system workqueue for ALUA transitions (bnc#1012382).\n - tcp: correct memory barrier usage in tcp_check_space() (bnc#1012382).\n - tcp: fix under-evaluated ssthresh in TCP Vegas (bnc#1012382).\n - tcp md5sig: Use skb's saddr when replying to an incoming segment\n (bnc#1012382).\n - tcp: __tcp_hdrlen() helper (bnc#1012382).\n - tg3: Fix rx hang on MTU change with 5717/5719 (bnc#1012382).\n - thermal/drivers/step_wise: Fix temperature regulation misbehavior\n (bnc#1012382).\n - thermal: hisilicon: Handle return value of clk_prepare_enable\n (bnc#1012382).\n - tipc: fix cleanup at module unload (bnc#1012382).\n - tipc: fix memory leak in tipc_accept_from_sock() (bnc#1012382).\n - tipc: improve link resiliency when rps is activated (bsc#1068038).\n - tracing: Allocate mask_str buffer dynamically (bnc#1012382).\n - tracing: Fix converting enum's from the map in trace_event_eval_update()\n (bnc#1012382).\n - tracing: Fix crash when it fails to alloc ring buffer (bnc#1012382).\n - tracing: Fix possible double free on failure of allocating trace buffer\n (bnc#1012382).\n - tracing: Remove extra zeroing out of the ring buffer page (bnc#1012382).\n - tty fix oops when rmmod 8250 (bnc#1012382).\n - uas: Always apply US_FL_NO_ATA_1X quirk to Seagate devices (bnc#1012382).\n - uas: ignore UAS for Norelsys NS1068(X) chips (bnc#1012382).\n - udf: Avoid overflow when session starts at large offset (bnc#1012382).\n - um: link vmlinux with -no-pie (bnc#1012382).\n - usb: Add device quirk for Logitech HD Pro Webcam C925e (bnc#1012382).\n - usb: add RESET_RESUME for ELSA MicroLink 56K (bnc#1012382).\n - USB: core: Add type-specific length check of BOS descriptors\n (bnc#1012382).\n - USB: core: prevent malicious bNumInterfaces overflow (bnc#1012382).\n - USB: devio: Prevent integer overflow in proc_do_submiturb()\n (bnc#1012382).\n - USB: Fix off by one in type-specific length check of BOS SSP capability\n (git-fixes).\n - USB: fix usbmon BUG trigger (bnc#1012382).\n - usb: gadget: configs: plug memory leak (bnc#1012382).\n - usb: gadget: ffs: Forbid usb_ep_alloc_request from sleeping\n (bnc#1012382).\n - USB: gadgetfs: Fix a potential memory leak in 'dev_config()'\n (bnc#1012382).\n - usb: gadget: f_uvc: Sanity check wMaxPacketSize for SuperSpeed\n (bnc#1012382).\n - usb: gadget: udc: remove pointer dereference after free (bnc#1012382).\n - usb: hub: Cycle HUB power when initialization fails (bnc#1012382).\n - USB: Increase usbfs transfer limit (bnc#1012382).\n - usbip: Fix implicit fallthrough warning (bnc#1012382).\n - usbip: Fix potential format overflow in userspace tools (bnc#1012382).\n - usbip: fix stub_rx: get_pipe() to validate endpoint number (bnc#1012382).\n - usbip: fix stub_rx: harden CMD_SUBMIT path to handle malicious input\n (bnc#1012382).\n - usbip: fix stub_send_ret_submit() vulnerability to null transfer_buffer\n (bnc#1012382).\n - usbip: fix usbip bind writing random string after command in match_busid\n (bnc#1012382).\n - usbip: prevent leaking socket pointer address in messages (bnc#1012382).\n - usbip: prevent vhci_hcd driver from leaking a socket pointer address\n (bnc#1012382).\n - usbip: remove kernel addresses from usb device and urb debug msgs\n (bnc#1012382).\n - usbip: stub: stop printing kernel pointer addresses in messages\n (bnc#1012382).\n - usbip: vhci: stop printing kernel pointer addresses in messages\n (bnc#1012382).\n - usb: misc: usb3503: make sure reset is low for at least 100us\n (bnc#1012382).\n - usb: musb: da8xx: fix babble condition handling (bnc#1012382).\n - usb: phy: isp1301: Add OF device ID table (bnc#1012382).\n - usb: phy: isp1301: Fix build warning when CONFIG_OF is disabled\n (git-fixes).\n - usb: phy: tahvo: fix error handling in tahvo_usb_probe() (bnc#1012382).\n - usb: quirks: Add no-lpm quirk for KY-688 USB 3.1 Type-C Hub\n (bnc#1012382).\n - USB: serial: cp210x: add IDs for LifeScan OneTouch Verio IQ\n (bnc#1012382).\n - USB: serial: cp210x: add new device ID ELV ALC 8xxx (bnc#1012382).\n - USB: serial: ftdi_sio: add id for Airbus DS P8GR (bnc#1012382).\n - USB: serial: option: adding support for YUGA CLM920-NC5 (bnc#1012382).\n - USB: serial: option: add Quectel BG96 id (bnc#1012382).\n - USB: serial: option: add support for Telit ME910 PID 0x1101\n (bnc#1012382).\n - USB: serial: qcserial: add Sierra Wireless EM7565 (bnc#1012382).\n - USB: uas and storage: Add US_FL_BROKEN_FUA for another JMicron JMS567 ID\n (bnc#1012382).\n - USB: usbfs: Filter flags passed in from user space (bnc#1012382).\n - usb: usbip: Fix possible deadlocks reported by lockdep (bnc#1012382).\n - usb: xhci: Add XHCI_TRUST_TX_LENGTH for Renesas uPD720201 (bnc#1012382).\n - usb: xhci: fix panic in xhci_free_virt_devices_depth_first (bnc#1012382).\n - userfaultfd: selftest: vm: allow to build in vm/ directory (bnc#1012382).\n - userfaultfd: shmem: __do_fault requires VM_FAULT_NOPAGE (bnc#1012382).\n - video: fbdev: au1200fb: Release some resources if a memory allocation\n fails (bnc#1012382).\n - video: fbdev: au1200fb: Return an error code if a memory allocation\n fails (bnc#1012382).\n - virtio: release virtio index when fail to device_register (bnc#1012382).\n - vmxnet3: repair memory leak (bnc#1012382).\n - vsyscall: Fix permissions for emulate mode with KAISER/PTI (bnc#1012382).\n - vt6655: Fix a possible sleep-in-atomic bug in vt6655_suspend\n (bnc#1012382).\n - vti6: Do not report path MTU below IPV6_MIN_MTU (bnc#1012382).\n - vti6: fix device register to report IFLA_INFO_KIND (bnc#1012382).\n - workqueue: trigger WARN if queue_delayed_work() is called with NULL @wq\n (bnc#1012382).\n - writeback: fix memory leak in wb_queue_work() (bnc#1012382).\n - X.509: fix buffer overflow detection in sprint_oid() (bsc#1075078).\n - X.509: reject invalid BIT STRING for subjectPublicKey (bnc#1012382).\n - x86/acpi: Handle SCI interrupts above legacy space gracefully\n (bsc#1068984).\n - x86/acpi: Reduce code duplication in mp_override_legacy_irq()\n (bsc#1068984).\n - x86/alternatives: Add missing '\\n' at end of ALTERNATIVE inline asm\n (bnc#1012382).\n - x86/alternatives: Fix optimize_nops() checking (bnc#1012382).\n - x86/apic/vector: Fix off by one in error path (bnc#1012382).\n - x86/asm/32: Make sync_core() handle missing CPUID on all 32-bit kernels\n (bnc#1012382).\n - x86/boot: Fix early command-line parsing when matching at end\n (bsc#1068032).\n - x86/cpu: Factor out application of forced CPU caps (bnc#1012382).\n - x86/cpufeatures: Add X86_BUG_CPU_INSECURE (bnc#1012382).\n - x86/cpufeatures: Add X86_BUG_SPECTRE_V[12] (bnc#1012382).\n - x86/cpufeatures: Make CPU bugs sticky (bnc#1012382).\n - x86/cpu: Implement CPU vulnerabilites sysfs functions (bnc#1012382).\n - x86/cpu: Merge bugs.c and bugs_64.c (bnc#1012382).\n - x86/cpu, x86/pti: Do not enable PTI on AMD processors (bnc#1012382).\n - x86/Documentation: Add PTI description (bnc#1012382).\n - x86/entry: Use SYSCALL_DEFINE() macros for sys_modify_ldt()\n (bnc#1012382).\n - x86/hpet: Prevent might sleep splat on resume (bnc#1012382).\n - x86/kasan: Clear kasan_zero_page after TLB flush (bnc#1012382).\n - x86/kasan: Write protect kasan zero shadow (bnc#1012382).\n - x86/microcode/intel: Extend BDW late-loading further with LLC size check\n (bnc#1012382).\n - x86/microcode/intel: Extend BDW late-loading with a revision check\n (bnc#1012382).\n - x86/microcode/intel: Fix BDW late-loading revision check (bnc#1012382).\n - x86/mm/32: Move setup_clear_cpu_cap(X86_FEATURE_PCID) earlier\n (git-fixes).\n - x86/mm: Disable pciD on 32-bit kernels (bnc#1012382).\n - x86/PCI: Make broadcom_postcore_init() check acpi_disabled (bnc#1012382).\n - x86/pti: Document fix wrong index (bnc#1012382).\n - x86/pti/efi: broken conversion from efi to kernel page table\n (bnc#1012382).\n - x86/pti: Rename BUG_CPU_INSECURE to BUG_CPU_MELTDOWN (bnc#1012382).\n - x86/retpolines/spec_ctrl: disable IBRS on !SKL if retpolines are active\n (bsc#1068032).\n - x86/smpboot: Remove stale TLB flush invocations (bnc#1012382).\n - x86/spectre_v2: fix ordering in IBRS initialization (bsc#1075994\n bsc#1075091).\n - x86/spectre_v2: nospectre_v2 means nospec too (bsc#1075994 bsc#1075091).\n - x86/tlb: Drop the _GPL from the cpu_tlbstate export (bnc#1012382).\n - x86/vm86/32: Switch to flush_tlb_mm_range() in mark_screen_rdonly()\n (bnc#1012382).\n - xen-netfront: avoid crashing on resume after a failure in\n talk_to_netback() (bnc#1012382).\n - xen-netfront: Improve error handling during initialization (bnc#1012382).\n - xfrm: Copy policy family in clone_policy (bnc#1012382).\n - xfs: add configurable error support to metadata buffers (bsc#1068569).\n - xfs: add configuration handlers for specific errors (bsc#1068569).\n - xfs: add configuration of error failure speed (bsc#1068569).\n - xfs: add "fail at unmount" error handling configuration (bsc#1068569).\n - xfs: Add infrastructure needed for error propagation during buffer IO\n failure (bsc#1068569).\n - xfs: address kabi for xfs buffer retry infrastructure (kabi).\n - xfs: configurable error behavior via sysfs (bsc#1068569).\n - xfs: fix incorrect extent state in xfs_bmap_add_extent_unwritten_real\n (bnc#1012382).\n - xfs: fix log block underflow during recovery cycle verification\n (bnc#1012382).\n - xfs: fix up inode32/64 (re)mount handling (bsc#1069160).\n - xfs: introduce metadata IO error class (bsc#1068569).\n - xfs: introduce table-based init for error behaviors (bsc#1068569).\n - xfs: Properly retry failed inode items in case of error during buffer\n writeback (bsc#1068569).\n - xfs: remove xfs_trans_ail_delete_bulk (bsc#1068569).\n - xhci: Do not add a virt_dev to the devs array before it's fully\n allocated (bnc#1012382).\n - xhci: Fix ring leak in failure path of xhci_alloc_virt_device()\n (bnc#1012382).\n - xhci: plat: Register shutdown for xhci_plat (bnc#1012382).\n - zram: set physical queue limits to avoid array out of bounds accesses\n (bnc#1012382).\n\n", "cvss3": {}, "published": "2018-02-20T00:08:58", "type": "suse", "title": "Security update for the Linux Kernel (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17862", "CVE-2017-15129", "CVE-2017-17712", "CVE-2017-5715", "CVE-2018-5332", "CVE-2017-18017", "CVE-2017-17864"], "modified": "2018-02-20T00:08:58", "id": "SUSE-SU-2018:0482-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00038.html", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-02-09T18:54:49", "description": "The openSUSE Leap 42.3 kernel was updated to 4.4.114 to receive various\n security and bugfixes.\n\n The following security bugs were fixed:\n\n - CVE-2017-5715: Systems with microprocessors utilizing speculative\n execution and indirect branch prediction may allow unauthorized\n disclosure\n of information to an attacker with local user access via a side-channel\n analysis (bnc#1068032).\n\n The previous fix using CPU Microcode has been complemented by building\n the Linux Kernel with return trampolines aka "retpolines".\n\n - CVE-2018-5333: In the Linux kernel the rds_cmsg_atomic function in\n net/rds/rdma.c mishandled cases where page pinning fails or an invalid\n address is supplied, leading to an rds_atomic_free_op NULL pointer\n dereference (bnc#1075617).\n - CVE-2018-5332: In the Linux kernel the rds_message_alloc_sgs() function\n did not validate a value that is used during DMA page allocation,\n leading to a heap-based out-of-bounds write (related to the\n rds_rdma_extra_size function in net/rds/rdma.c) (bnc#1075621).\n - CVE-2017-17862: kernel/bpf/verifier.c in the Linux kernel ignores\n unreachable code, even though it would still be processed by JIT\n compilers. This behavior, also considered an improper branch-pruning\n logic issue, could possibly be used by local users for denial of service\n (bnc#1073928).\n - CVE-2017-17864: kernel/bpf/verifier.c in the Linux kernel mishandled\n states_equal comparisons between the pointer data type and the\n UNKNOWN_VALUE data type, which allowed local users to obtain potentially\n sensitive address information, aka a "pointer leak (bnc#1073928).\n - CVE-2017-17712: The raw_sendmsg() function in net/ipv4/raw.c in the\n Linux kernel had a race condition in inet->hdrincl that lead to\n uninitialized stack pointer usage; this allowed a local user to execute\n code and gain privileges (bnc#1073229 1073230).\n - CVE-2017-15129: A use-after-free vulnerability was found in network\n namespaces code affecting the Linux kernel The function\n get_net_ns_by_id() in net/core/net_namespace.c did not check for the\n net::count value after it has found a peer network in netns_ids idr,\n which could lead to double free and memory corruption. This\n vulnerability could allow an unprivileged local user to induce kernel\n memory corruption on the system, leading to a crash. Due to the nature\n of the flaw, privilege escalation cannot be fully ruled out, although it\n is thought to be unlikely (bnc#1074839).\n - CVE-2017-18017: The tcpmss_mangle_packet function in\n net/netfilter/xt_TCPMSS.c in the Linux kernel allowed remote attackers\n to cause a denial of service (use-after-free and memory corruption)\n or possibly have unspecified other impact by leveraging the presence of\n xt_TCPMSS in an iptables action (bnc#1074488).\n - CVE-2018-1000004: In the Linux kernel versions a race condition\n vulnerability existed in the sound system, this can lead to a deadlock\n and denial of service condition (bnc#1076017).\n\n The following non-security bugs were fixed:\n\n - 509: fix printing uninitialized stack memory when OID is empty\n (bsc#1075078).\n - 8021q: fix a memory leak for VLAN 0 device (bnc#1012382).\n - acpi / scan: Prefer devices without _HID/_CID for _ADR matching\n (bnc#1012382).\n - af_key: fix buffer overread in parse_exthdrs() (bnc#1012382).\n - af_key: fix buffer overread in verify_address_len() (bnc#1012382).\n - afs: Adjust mode bits processing (bnc#1012382).\n - afs: Connect up the CB.ProbeUuid (bnc#1012382).\n - afs: Fix afs_kill_pages() (bnc#1012382).\n - afs: Fix missing put_page() (bnc#1012382).\n - afs: Fix page leak in afs_write_begin() (bnc#1012382).\n - afs: Fix the maths in afs_fs_store_data() (bnc#1012382).\n - afs: Flush outstanding writes when an fd is closed (bnc#1012382).\n - afs: Migrate vlocation fields to 64-bit (bnc#1012382).\n - afs: Populate and use client modification time (bnc#1012382).\n - afs: Populate group ID from vnode status (bnc#1012382).\n - afs: Prevent callback expiry timer overflow (bnc#1012382).\n - alpha: fix build failures (bnc#1012382).\n - alsa: aloop: Fix inconsistent format due to incomplete rule\n (bsc#1031717).\n - alsa: aloop: Fix racy hw constraints adjustment (bsc#1031717).\n - alsa: aloop: Release cable upon open error path (bsc#1031717).\n - alsa: hda - Apply headphone noise quirk for another Dell XPS 13 variant\n (bsc#1031717).\n - alsa: hda - Apply the existing quirk to iMac 14,1 (bsc#1031717).\n - alsa: pcm: Abort properly at pending signal in OSS read/write loops\n (bsc#1031717).\n - alsa: pcm: Add missing error checks in OSS emulation plugin builder\n (bsc#1031717).\n - alsa: pcm: Allow aborting mutex lock at OSS read/write loops\n (bsc#1031717).\n - alsa: pcm: Remove incorrect snd_BUG_ON() usages (bsc#1031717).\n - alsa: pcm: Remove yet superfluous WARN_ON() (bsc#1031717).\n - arc: uaccess: dont use "l" gcc inline asm constraint modifier\n (bnc#1012382).\n - arm64: Add skeleton to harden the branch predictor against aliasing\n attacks (bsc#1068032).\n - arm64: Add trace_hardirqs_off annotation in ret_to_user (bsc#1068032).\n - arm64: Branch predictor hardening for Cavium ThunderX2 (bsc#1068032).\n - arm64/cpufeature: do not use mutex in bringup path (bsc#1068032).\n - arm64: cpufeature: Pass capability structure to ->enable callback\n (bsc#1068032).\n - arm64: cputype: Add MIDR values for Cavium ThunderX2 CPUs (bsc#1068032).\n - arm64: cputype: Add missing MIDR values for Cortex-A72 and Cortex-A75\n (bsc#1068032).\n - arm64: debug: remove unused local_dbg_{enable, disable} macros\n (bsc#1068032).\n - arm64: Define cputype macros for Falkor CPU (bsc#1068032).\n - arm64: Disable TTBR0_EL1 during normal kernel execution (bsc#1068032).\n - arm64: Do not force KPTI for CPUs that are not vulnerable (bsc#1076187).\n - arm64: do not pull uaccess.h into *.S (bsc#1068032).\n - arm64: Enable CONFIG_ARM64_SW_TTBR0_PAN (bsc#1068032).\n - arm64: entry: Add exception trampoline page for exceptions from EL0\n (bsc#1068032).\n - arm64: entry: Add fake CPU feature for unmapping the kernel at EL0\n (bsc#1068032).\n - arm64: entry: Explicitly pass exception level to kernel_ventry macro\n (bsc#1068032).\n - arm64: entry: Hook up entry trampoline to exception vectors\n (bsc#1068032).\n - arm64: entry: remove pointless SPSR mode check (bsc#1068032).\n - arm64: entry.S convert el0_sync (bsc#1068032).\n - arm64: entry.S: convert el1_sync (bsc#1068032).\n - arm64: entry.S: convert elX_irq (bsc#1068032).\n - arm64: entry.S: move SError handling into a C function for future\n expansion (bsc#1068032).\n - arm64: entry.S: Remove disable_dbg (bsc#1068032).\n - arm64: erratum: Work around Falkor erratum #E1003 in trampoline code\n (bsc#1068032).\n - arm64: explicitly mask all exceptions (bsc#1068032).\n - arm64: factor out entry stack manipulation (bsc#1068032).\n - arm64: factor out PAGE_* and CONT_* definitions (bsc#1068032).\n - arm64: Factor out PAN enabling/disabling into separate uaccess_* macros\n (bsc#1068032).\n - arm64: Factor out TTBR0_EL1 post-update workaround into a specific asm\n macro (bsc#1068032).\n - arm64: factor work_pending state machine to C (bsc#1068032).\n - arm64: fpsimd: Prevent registers leaking from dead tasks (bnc#1012382).\n - arm64: Handle el1 synchronous instruction aborts cleanly (bsc#1068032).\n - arm64: Handle faults caused by inadvertent user access with PAN enabled\n (bsc#1068032).\n - arm64: head.S: get rid of x25 and x26 with 'global' scope (bsc#1068032).\n - arm64: Implement branch predictor hardening for affected Cortex-A CPUs\n (bsc#1068032).\n - arm64: Implement branch predictor hardening for Falkor (bsc#1068032).\n - arm64: Initialise high_memory global variable earlier (bnc#1012382).\n - arm64: introduce an order for exceptions (bsc#1068032).\n - arm64: introduce mov_q macro to move a constant into a 64-bit register\n (bsc#1068032).\n - arm64: Introduce uaccess_{disable,enable} functionality based on\n TTBR0_EL1 (bsc#1068032).\n - arm64: kaslr: Put kernel vectors address in separate data page\n (bsc#1068032).\n - arm64: Kconfig: Add CONFIG_UNMAP_KERNEL_AT_EL0 (bsc#1068032).\n - arm64: Kconfig: Reword UNMAP_KERNEL_AT_EL0 kconfig entry (bsc#1068032).\n - arm64: kill ESR_LNX_EXEC (bsc#1068032).\n - arm64: kpti: Fix the interaction between ASID switching and software PAN\n (bsc#1068032).\n - arm64: KVM: Fix SMCCC handling of unimplemented SMC/HVC calls\n (bsc#1076232).\n - arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one (bnc#1012382).\n - arm64: KVM: Make PSCI_VERSION a fast path (bsc#1068032).\n - arm64: KVM: Use per-CPU vector when BP hardening is enabled\n (bsc#1068032).\n - arm64: Mask all exceptions during kernel_exit (bsc#1068032).\n - arm64: mm: Add arm64_kernel_unmapped_at_el0 helper (bsc#1068032).\n - arm64: mm: Allocate ASIDs in pairs (bsc#1068032).\n - arm64: mm: Fix and re-enable ARM64_SW_TTBR0_PAN (bsc#1068032).\n - arm64: mm: hardcode rodata=true (bsc#1068032).\n - arm64: mm: Introduce TTBR_ASID_MASK for getting at the ASID in the TTBR\n (bsc#1068032).\n - arm64: mm: Invalidate both kernel and user ASIDs when performing TLBI\n (bsc#1068032).\n - arm64: mm: Map entry trampoline into trampoline and kernel page tables\n (bsc#1068032).\n - arm64: mm: Move ASID from TTBR0 to TTBR1 (bsc#1068032).\n - arm64: mm: Remove pre_ttbr0_update_workaround for Falkor erratum #E1003\n (bsc#1068032).\n - arm64: mm: Rename post_ttbr0_update_workaround (bsc#1068032).\n - arm64: mm: Temporarily disable ARM64_SW_TTBR0_PAN (bsc#1068032).\n - arm64: mm: Use non-global mappings for kernel space (bsc#1068032).\n - arm64: Move BP hardening to check_and_switch_context (bsc#1068032).\n - arm64: Move post_ttbr_update_workaround to C code (bsc#1068032).\n - arm64: Move the async/fiq helpers to explicitly set process context\n flags (bsc#1068032).\n - arm64: SW PAN: Point saved ttbr0 at the zero page when switching to\n init_mm (bsc#1068032).\n - arm64: SW PAN: Update saved ttbr0 value on enter_lazy_tlb (bsc#1068032).\n - arm64: swp emulation: bound LL/SC retries before rescheduling\n (bsc#1068032).\n - arm64: sysreg: Fix unprotected macro argmuent in write_sysreg\n (bsc#1068032).\n - arm64: Take into account ID_AA64PFR0_EL1.CSV3 (bsc#1068032).\n - arm64: thunderx2: remove branch predictor hardening References:\n bsc#1076232 This causes undefined instruction abort on the smc call from\n guest kernel. Disable until kvm is fixed.\n - arm64: tls: Avoid unconditional zeroing of tpidrro_el0 for native tasks\n (bsc#1068032).\n - arm64: Turn on KPTI only on CPUs that need it (bsc#1076187).\n - arm64: use alternative auto-nop (bsc#1068032).\n - arm64: use RET instruction for exiting the trampoline (bsc#1068032).\n - arm64: xen: Enable user access before a privcmd hvc call (bsc#1068032).\n - arm/arm64: KVM: Make default HYP mappings non-excutable (bsc#1068032).\n - arm: avoid faulting on qemu (bnc#1012382).\n - arm: BUG if jumping to usermode address in kernel mode (bnc#1012382).\n - arm-ccn: perf: Prevent module unload while PMU is in use (bnc#1012382).\n - arm: dma-mapping: disallow dma_get_sgtable() for non-kernel managed\n memory (bnc#1012382).\n - arm: dts: am335x-evmsk: adjust mmc2 param to allow suspend (bnc#1012382).\n - arm: dts: kirkwood: fix pin-muxing of MPP7 on OpenBlocks A7\n (bnc#1012382).\n - arm: dts: ti: fix PCI bus dtc warnings (bnc#1012382).\n - arm: kprobes: Align stack to 8-bytes in test code (bnc#1012382).\n - arm: kprobes: Fix the return address of multiple kretprobes\n (bnc#1012382).\n - arm: KVM: Fix VTTBR_BADDR_MASK BUG_ON off-by-one (bnc#1012382).\n - arm: OMAP1: DMA: Correct the number of logical channels (bnc#1012382).\n - arm: OMAP2+: Fix device node reference counts (bnc#1012382).\n - arm: OMAP2+: gpmc-onenand: propagate error on initialization failure\n (bnc#1012382).\n - arm: OMAP2+: Release device node after it is no longer needed\n (bnc#1012382).\n - asm-prototypes: Clear any CPP defines before declaring the functions\n (git-fixes).\n - asn.1: check for error from ASN1_OP_END__ACT actions (bnc#1012382).\n - asn.1: fix out-of-bounds read when parsing indefinite length item\n (bnc#1012382).\n - ath9k: fix tx99 potential info leak (bnc#1012382).\n - atm: horizon: Fix irq release error (bnc#1012382).\n - audit: ensure that 'audit=1' actually enables audit for PID 1\n (bnc#1012382).\n - axonram: Fix gendisk handling (bnc#1012382).\n - backlight: pwm_bl: Fix overflow condition (bnc#1012382).\n - bcache: add a comment in journal bucket reading (bsc#1076110).\n - bcache: Avoid nested function definition (bsc#1076110).\n - bcache: bch_allocator_thread() is not freezable (bsc#1076110).\n - bcache: bch_writeback_thread() is not freezable (bsc#1076110).\n - bcache: check return value of register_shrinker (bsc#1076110).\n - bcache: documentation formatting, edited for clarity, stripe alignment\n notes (bsc#1076110).\n - bcache: documentation updates and corrections (bsc#1076110).\n - bcache: Do not reinvent the wheel but use existing llist API\n (bsc#1076110).\n - bcache: do not write back data if reading it failed (bsc#1076110).\n - bcache: explicitly destroy mutex while exiting (bnc#1012382).\n - bcache: fix a comments typo in bch_alloc_sectors() (bsc#1076110).\n - bcache: fix sequential large write IO bypass (bsc#1076110).\n - bcache: fix wrong cache_misses statistics (bnc#1012382).\n - bcache: gc does not work when triggering by manual command (bsc#1076110,\n bsc#1038078).\n - bcache: implement PI controller for writeback rate (bsc#1076110).\n - bcache: increase the number of open buckets (bsc#1076110).\n - bcache: only permit to recovery read error when cache device is clean\n (bnc#1012382 bsc#1043652).\n - bcache: partition support: add 16 minors per bcacheN device\n (bsc#1076110, bsc#1019784).\n - bcache: rearrange writeback main thread ratelimit (bsc#1076110).\n - bcache: recover data from backing when data is clean (bnc#1012382\n bsc#1043652).\n - bcache: Remove redundant set_capacity (bsc#1076110).\n - bcache: remove unused parameter (bsc#1076110).\n - bcache: rewrite multiple partitions support (bsc#1076110, bsc#1038085).\n - bcache: safeguard a dangerous addressing in closure_queue (bsc#1076110).\n - bcache: silence static checker warning (bsc#1076110).\n - bcache: smooth writeback rate control (bsc#1076110).\n - bcache.txt: standardize document format (bsc#1076110).\n - bcache: update bio->bi_opf bypass/writeback REQ_ flag hints\n (bsc#1076110).\n - bcache: update bucket_in_use in real time (bsc#1076110).\n - bcache: Update continue_at() documentation (bsc#1076110).\n - bcache: use kmalloc to allocate bio in bch_data_verify() (bsc#1076110).\n - bcache: use llist_for_each_entry_safe() in __closure_wake_up()\n (bsc#1076110).\n - bcache: writeback rate clamping: make 32 bit safe (bsc#1076110).\n - bcache: writeback rate shouldn't artifically clamp (bsc#1076110).\n - be2net: restore properly promisc mode after queues reconfiguration\n (bsc#963844 FATE#320192).\n - block: wake up all tasks blocked in get_request() (bnc#1012382).\n - bluetooth: btusb: driver to enable the usb-wakeup feature (bnc#1012382).\n - bnx2x: do not rollback VF MAC/VLAN filters we did not configure\n (bnc#1012382).\n - bnx2x: fix possible overrun of VFPF multicast addresses array\n (bnc#1012382).\n - bnx2x: prevent crash when accessing PTP with interface down\n (bnc#1012382).\n - btrfs: add missing memset while reading compressed inline extents\n (bnc#1012382).\n - can: af_can: canfd_rcv(): replace WARN_ONCE by pr_warn_once\n (bnc#1012382).\n - can: af_can: can_rcv(): replace WARN_ONCE by pr_warn_once (bnc#1012382).\n - can: ems_usb: cancel urb on -EPIPE and -EPROTO (bnc#1012382).\n - can: esd_usb2: cancel urb on -EPIPE and -EPROTO (bnc#1012382).\n - can: gs_usb: fix return value of the "set_bittiming" callback\n (bnc#1012382).\n - can: kvaser_usb: cancel urb on -EPIPE and -EPROTO (bnc#1012382).\n - can: kvaser_usb: Fix comparison bug in kvaser_usb_read_bulk_callback()\n (bnc#1012382).\n - can: kvaser_usb: free buf in error paths (bnc#1012382).\n - can: kvaser_usb: ratelimit errors if incomplete messages are received\n (bnc#1012382).\n - can: peak: fix potential bug in packet fragmentation (bnc#1012382).\n - can: ti_hecc: Fix napi poll return value for repoll (bnc#1012382).\n - can: usb_8dev: cancel urb on -EPIPE and -EPROTO (bnc#1012382).\n - cdc-acm: apply quirk for card reader (bsc#1060279).\n - cdrom: factor out common open_for_* code (bsc#1048585).\n - cdrom: wait for tray to close (bsc#1048585).\n - ceph: more accurate statfs (bsc#1077068).\n - clk: imx6: refine hdmi_isfr's parent to make HDMI work on i.MX6 SoCs w/o\n VPU (bnc#1012382).\n - clk: mediatek: add the option for determining PLL source clock\n (bnc#1012382).\n - clk: tegra: Fix cclk_lp divisor register (bnc#1012382).\n - config: arm64: enable HARDEN_BRANCH_PREDICTOR\n - config: arm64: enable UNMAP_KERNEL_AT_EL0\n - cpuidle: fix broadcast control when broadcast can not be entered\n (bnc#1012382).\n - cpuidle: powernv: Pass correct drv->cpumask for registration\n (bnc#1012382).\n - cpuidle: Validate cpu_dev in cpuidle_add_sysfs() (bnc#1012382).\n - crypto: algapi - fix NULL dereference in crypto_remove_spawns()\n (bnc#1012382).\n - crypto: chacha20poly1305 - validate the digest size (bnc#1012382).\n - crypto: chelsio - select CRYPTO_GF128MUL (bsc#1048325).\n - crypto: crypto4xx - increase context and scatter ring buffer elements\n (bnc#1012382).\n - crypto: deadlock between crypto_alg_sem/rtnl_mutex/genl_mutex\n (bnc#1012382).\n - crypto: mcryptd - protect the per-CPU queue with a lock (bnc#1012382).\n - crypto: n2 - cure use after free (bnc#1012382).\n - crypto: pcrypt - fix freeing pcrypt instances (bnc#1012382).\n - crypto: s5p-sss - Fix completing crypto request in IRQ handler\n (bnc#1012382).\n - crypto: tcrypt - fix buffer lengths in test_aead_speed() (bnc#1012382).\n - cxl: Check if vphb exists before iterating over AFU devices\n (bsc#1066223).\n - dax: Pass detailed error code from __dax_fault() (bsc#1072484).\n - dccp: do not restart ccid2_hc_tx_rto_expire() if sk in closed state\n (bnc#1012382).\n - delay: add poll_event_interruptible (bsc#1048585).\n - dlm: fix malfunction of dlm_tool caused by debugfs changes (bsc#1077704).\n - dmaengine: dmatest: move callback wait queue to thread context\n (bnc#1012382).\n - dmaengine: Fix array index out of bounds warning in __get_unmap_pool()\n (bnc#1012382).\n - dmaengine: pl330: fix double lock (bnc#1012382).\n - dmaengine: ti-dma-crossbar: Correct am335x/am43xx mux value type\n (bnc#1012382).\n - dm btree: fix serious bug in btree_split_beneath() (bnc#1012382).\n - dm bufio: fix shrinker scans when (nr_to_scan < retain_target)\n (bnc#1012382).\n - dm thin metadata: THIN_MAX_CONCURRENT_LOCKS should be 6 (bnc#1012382).\n - drivers/firmware: Expose psci_get_version through psci_ops structure\n (bsc#1068032).\n - drm/amd/amdgpu: fix console deadlock if late init failed (bnc#1012382).\n - drm: extra printk() wrapper macros (bnc#1012382).\n - drm/exynos/decon5433: set STANDALONE_UPDATE_F on output enablement\n (bnc#1012382).\n - drm/exynos: gem: Drop NONCONTIG flag for buffers allocated without IOMMU\n (bnc#1012382).\n - drm/omap: fix dmabuf mmap for dma_alloc'ed buffers (bnc#1012382).\n - drm/radeon: reinstate oland workaround for sclk (bnc#1012382).\n - drm/radeon/si: add dpm quirk for Oland (bnc#1012382).\n - drm/vmwgfx: Potential off by one in vmw_view_add() (bnc#1012382).\n - dynamic-debug-howto: fix optional/omitted ending line number to be LARGE\n instead of 0 (bnc#1012382).\n - edac, i5000, i5400: Fix definition of NRECMEMB register (bnc#1012382).\n - edac, i5000, i5400: Fix use of MTR_DRAM_WIDTH macro (bnc#1012382).\n - edac, sb_edac: Fix missing break in switch (bnc#1012382).\n - efi/esrt: Cleanup bad memory map log messages (bnc#1012382).\n - efi: Move some sysfs files to be read-only by root (bnc#1012382).\n - eventpoll.h: add missing epoll event masks (bnc#1012382).\n - ext4: fix crash when a directory's i_size is too small (bnc#1012382).\n - ext4: Fix ENOSPC handling in DAX page fault handle (bsc#1072484).\n - ext4: fix fdatasync(2) after fallocate(2) operation (bnc#1012382).\n - fbdev: controlfb: Add missing modes to fix out of bounds access\n (bnc#1012382).\n - Fix build error in vma.c (bnc#1012382).\n - Fixup hang when calling 'nvme list' on all paths down (bsc#1070052).\n - fjes: Fix wrong netdevice feature flags (bnc#1012382).\n - flow_dissector: properly cap thoff field (bnc#1012382).\n - fm10k: ensure we process SM mbx when processing VF mbx (bnc#1012382).\n - fork: clear thread stack upon allocation (bsc#1077560).\n - fscache: Fix the default for fscache_maybe_release_page() (bnc#1012382).\n - futex: Prevent overflow by strengthen input validation (bnc#1012382).\n - gcov: disable for COMPILE_TEST (bnc#1012382).\n - gfs2: Take inode off order_write list when setting jdata flag\n (bnc#1012382).\n - gpio: altera: Use handle_level_irq when configured as a level_high\n (bnc#1012382).\n - hid: chicony: Add support for another ASUS Zen AiO keyboard\n (bnc#1012382).\n - hid: xinmo: fix for out of range for THT 2P arcade controller\n (bnc#1012382).\n - hrtimer: Reset hrtimer cpu base proper on CPU hotplug (bnc#1012382).\n - hv: kvp: Avoid reading past allocated blocks from KVP file (bnc#1012382).\n - hwmon: (asus_atk0110) fix uninitialized data access (bnc#1012382).\n - i40iw: Account for IPv6 header when setting MSS (bsc#1024376\n FATE#321249).\n - i40iw: Allocate a sdbuf per CQP WQE (bsc#1024376 FATE#321249).\n - i40iw: Cleanup AE processing (bsc#1024376 FATE#321249).\n - i40iw: Clear CQP Head/Tail during initialization (bsc#1024376\n FATE#321249).\n - i40iw: Correct ARP index mask (bsc#1024376 FATE#321249).\n - i40iw: Correct Q1/XF object count equation (bsc#969476 FATE#319648\n bsc#969477 FATE#319816).\n - i40iw: Do not allow posting WR after QP is flushed (bsc#1024376\n FATE#321249).\n - i40iw: Do not free sqbuf when event is I40IW_TIMER_TYPE_CLOSE\n (bsc#1024376 FATE#321249).\n - i40iw: Do not generate CQE for RTR on QP flush (bsc#1024376 FATE#321249).\n - i40iw: Do not retransmit MPA request after it is ACKed (bsc#1024376\n FATE#321249).\n - i40iw: Fixes for static checker warnings (bsc#1024376 FATE#321249).\n - i40iw: Fix sequence number for the first partial FPDU (bsc#969476\n FATE#319648 bsc#969477 FATE#319816).\n - i40iw: Fix the connection ORD value for loopback (bsc#969476 FATE#319648\n bsc#969477 FATE#319816).\n - i40iw: Ignore AE source field in AEQE for some AEs (bsc#1024376\n FATE#321249).\n - i40iw: Move cqp_cmd_head init to CQP initialization (bsc#1024376\n FATE#321249).\n - i40iw: Move exception_lan_queue to VSI structure (bsc#1024376\n FATE#321249).\n - i40iw: Move MPA request event for loopback after connect (bsc#1024376\n FATE#321249).\n - i40iw: Notify user of established connection after QP in RTS\n (bsc#1024376 FATE#321249).\n - i40iw: Reinitialize IEQ on MTU change (bsc#1024376 FATE#321249).\n - i40iw: Remove limit on re-posting AEQ entries to HW (bsc#969476\n FATE#319648 bsc#969477 FATE#319816).\n - i40iw: Selectively teardown QPs on IP addr change event (bsc#1024376\n FATE#321249).\n - i40iw: Validate correct IRD/ORD connection parameters (bsc#969476\n FATE#319648 bsc#969477 FATE#319816).\n - ib/hfi1: Fix misspelling in comment (bsc#973818, fate#319242).\n - ib/hfi1: Prevent kernel QP post send hard lockups (bsc#973818\n FATE#319242).\n - ib/ipoib: Fix lockdep issue found on ipoib_ib_dev_heavy_flush\n (git-fixes).\n - ib/ipoib: Fix race condition in neigh creation (bsc#1022595 FATE#322350).\n - ib/ipoib: Grab rtnl lock on heavy flush when calling ndo_open/stop\n (bnc#1012382).\n - ib/mlx4: Increase maximal message size under UD QP (bnc#1012382).\n - ib/mlx5: Assign send CQ and recv CQ of UMR QP (bnc#1012382).\n - ib/mlx5: Serialize access to the VMA list (bsc#1015342 FATE#321688\n bsc#1015343 FATE#321689).\n - ibmvnic: Allocate and request vpd in init_resources (bsc#1076872).\n - ibmvnic: Do not handle RX interrupts when not up (bsc#1075066).\n - ibmvnic: fix firmware version when no firmware level has been provided\n by the VIOS server (bsc#1079038).\n - ibmvnic: Fix IP offload control buffer (bsc#1076899).\n - ibmvnic: Fix IPv6 packet descriptors (bsc#1076899).\n - ibmvnic: Fix pending MAC address changes (bsc#1075627).\n - ibmvnic: Modify buffer size and number of queues on failover\n (bsc#1076872).\n - ibmvnic: Revert to previous mtu when unsupported value requested\n (bsc#1076872).\n - ibmvnic: Wait for device response when changing MAC (bsc#1078681).\n - ib/qib: Fix comparison error with qperf compare/swap test (FATE#321231\n FATE#321473).\n - ib/rdmavt: restore IRQs on error path in rvt_create_ah() (bsc#973818,\n fate#319242).\n - ib/srpt: Disable RDMA access by the initiator (bnc#1012382).\n - ib/srpt: Fix ACL lookup during login (bsc#1024296 FATE#321265).\n - igb: check memory allocation failure (bnc#1012382).\n - ima: fix hash algorithm initialization (bnc#1012382).\n - inet: frag: release spinlock before calling icmp_send() (bnc#1012382).\n - input: 88pm860x-ts - fix child-node lookup (bnc#1012382).\n - input: elantech - add new icbody type 15 (bnc#1012382).\n - input: i8042 - add TUXEDO BU1406 (N24_25BU) to the nomux list\n (bnc#1012382).\n - input: trackpoint - force 3 buttons if 0 button is reported\n (bnc#1012382).\n - input: twl4030-vibra - fix sibling-node lookup (bnc#1012382).\n - input: twl6040-vibra - fix child-node lookup (bnc#1012382).\n - input: twl6040-vibra - fix DT node memory management (bnc#1012382).\n - intel_th: pci: Add Gemini Lake support (bnc#1012382).\n - iommu/arm-smmu-v3: Do not free page table ops twice (bnc#1012382).\n - iommu/vt-d: Fix scatterlist offset handling (bnc#1012382).\n - ip6_gre: remove the incorrect mtu limit for ipgre tap (bsc#1022912\n FATE#321246).\n - ip6_tunnel: disable dst caching if tunnel is dual-stack (bnc#1012382).\n - ipmi: Stop timers before cleaning up the module (bnc#1012382).\n - ipv4: Fix use-after-free when flushing FIB tables (bnc#1012382).\n - ipv4: igmp: guard against silly MTU values (bnc#1012382).\n - ipv4: Make neigh lookup keys for loopback/point-to-point devices be\n INADDR_ANY (bnc#1012382).\n - ipv6: Fix getsockopt() for sockets with default IPV6_AUTOFLOWLABEL\n (bnc#1012382).\n - ipv6: fix possible mem leaks in ipv6_make_skb() (bnc#1012382).\n - ipv6: fix udpv6 sendmsg crash caused by too small MTU (bnc#1012382).\n - ipv6: ip6_make_skb() needs to clear cork.base.dst (git-fixes).\n - ipv6: mcast: better catch silly mtu values (bnc#1012382).\n - ipv6: reorder icmpv6_init() and ip6_mr_init() (bnc#1012382).\n - ipvlan: fix ipv6 outbound device (bnc#1012382).\n - ipvlan: remove excessive packet scrubbing (bsc#1070799).\n - irda: vlsi_ir: fix check for DMA mapping errors (bnc#1012382).\n - irqchip/crossbar: Fix incorrect type of register size (bnc#1012382).\n - iscsi_iser: Re-enable 'iser_pi_guard' module parameter (bsc#1062129).\n - iscsi-target: fix memory leak in lio_target_tiqn_addtpg() (bnc#1012382).\n - iscsi-target: Make TASK_REASSIGN use proper se_cmd->cmd_kref\n (bnc#1012382).\n - isdn: kcapi: avoid uninitialized data (bnc#1012382).\n - iser-target: Fix possible use-after-free in connection establishment\n error (FATE#321732).\n - iw_cxgb4: Only validate the MSN for successful completions (bnc#1012382).\n - ixgbe: fix use of uninitialized padding (bnc#1012382).\n - jump_label: Invoke jump_label_test() via early_initcall() (bnc#1012382).\n - kabi: Keep KVM stable after enable s390 wire up bpb feature\n (bsc#1076805).\n - kABI: protect struct bpf_map (kabi).\n - kABI: protect struct ipv6_pinfo (kabi).\n - kABI: protect struct t10_alua_tg_pt_gp (kabi).\n - kABI: protect struct usbip_device (kabi).\n - kabi/severities: arm64: ignore cpu capability array\n - kabi/severities: do not care about stuff_RSB\n - kaiser: Set _PAGE_NX only if supported (bnc#1012382).\n - kaiser: Set _PAGE_NX only if supported (bnc#1012382).\n - kbuild: add '-fno-stack-check' to kernel build options (bnc#1012382).\n - kbuild: modversions for EXPORT_SYMBOL() for asm (bsc#1074621\n bsc#1068032).\n - kbuild: pkg: use --transform option to prefix paths in tar (bnc#1012382).\n - kdb: Fix handling of kallsyms_symbol_next() return value (bnc#1012382).\n - kernel/acct.c: fix the acct->needcheck check in check_free_space()\n (bnc#1012382).\n - kernel: make groups_sort calling a responsibility group_info allocators\n (bnc#1012382).\n - kernel/signal.c: protect the SIGNAL_UNKILLABLE tasks from\n !sig_kernel_only() signals (bnc#1012382).\n - kernel/signal.c: protect the traced SIGNAL_UNKILLABLE tasks from SIGKILL\n (bnc#1012382).\n - kernel/signal.c: remove the no longer needed SIGNAL_UNKILLABLE check in\n complete_signal() (bnc#1012382).\n - keys: add missing permission check for request_key() destination\n (bnc#1012382).\n - kprobes/x86: Disable preemption in ftrace-based jprobes (bnc#1012382).\n - kpti: Rename to PAGE_TABLE_ISOLATION (bnc#1012382).\n - kpti: Report when enabled (bnc#1012382).\n - kvm: Fix stack-out-of-bounds read in write_mmio (bnc#1012382).\n - kvm: nVMX: reset nested_run_pending if the vCPU is going to be reset\n (bnc#1012382).\n - kvm: nVMX: VMCLEAR should not cause the vCPU to shut down (bnc#1012382).\n - kvm: pci-assign: do not map smm memory slot pages in vt-d page tables\n (bnc#1012382).\n - kvm: s390: Enable all facility bits that are known good for passthrough\n (bsc#1076805).\n - kvm: s390: wire up bpb feature (bsc#1076805).\n - kvm: VMX: Fix enable VPID conditions (bnc#1012382).\n - kvm: VMX: remove I/O port 0x80 bypass on Intel hosts (bnc#1012382).\n - kvm: vmx: Scrub hardware GPRs at VM-exit (bnc#1012382 bsc#1068032).\n - kvm: x86: Add memory barrier on vmcs field lookup (bnc#1012382).\n - kvm: x86: correct async page present tracepoint (bnc#1012382).\n - kvm: X86: Fix load RFLAGS w/o the fixed bit (bnc#1012382).\n - kvm: x86: fix RSM when PCID is non-zero (bnc#1012382).\n - l2tp: cleanup l2tp_tunnel_delete calls (bnc#1012382).\n - lan78xx: Fix failure in USB Full Speed (bnc#1012382).\n - libata: apply MAX_SEC_1024 to all LITEON EP1 series devices\n (bnc#1012382).\n - libata: drop WARN from protocol error in ata_sff_qc_issue()\n (bnc#1012382).\n - lib/genalloc.c: make the avail variable an atomic_long_t (bnc#1012382).\n - macvlan: Only deliver one copy of the frame to the macvlan interface\n (bnc#1012382).\n - md: more open-coded offset_in_page() (bsc#1076110).\n - media: dvb: i2c transfers over usb cannot be done from stack\n (bnc#1012382).\n - mfd: cros ec: spi: Do not send first message too soon (bnc#1012382).\n - mfd: twl4030-audio: Fix sibling-node lookup (bnc#1012382).\n - mfd: twl6040: Fix child-node lookup (bnc#1012382).\n - mlxsw: reg: Fix SPVMLR max record count (bnc#1012382).\n - mlxsw: reg: Fix SPVM max record count (bnc#1012382).\n - mm: avoid returning VM_FAULT_RETRY from ->page_mkwrite handlers\n (bnc#1012382).\n - mmc: mediatek: Fixed bug where clock frequency could be set wrong\n (bnc#1012382).\n - mm: drop unused pmdp_huge_get_and_clear_notify() (bnc#1012382).\n - mm: Handle 0 flags in _calc_vm_trans() macro (bnc#1012382).\n - mm/mprotect: add a cond_resched() inside change_pmd_range()\n (bnc#1077871, bnc#1078002).\n - mm/vmstat: Make NR_TLB_REMOTE_FLUSH_RECEIVED available even on UP\n (bnc#1012382).\n - module: Add retpoline tag to VERMAGIC (bnc#1012382).\n - module: set __jump_table alignment to 8 (bnc#1012382).\n - more bio_map_user_iov() leak fixes (bnc#1012382).\n - net: Allow neigh contructor functions ability to modify the primary_key\n (bnc#1012382).\n - net/appletalk: Fix kernel memory disclosure (bnc#1012382).\n - net: bcmgenet: correct MIB access of UniMAC RUNT counters (bnc#1012382).\n - net: bcmgenet: correct the RBUF_OVFL_CNT and RBUF_ERR_CNT MIB values\n (bnc#1012382).\n - net: bcmgenet: power down internal phy if open or resume fails\n (bnc#1012382).\n - net: bcmgenet: Power up the internal PHY before probing the MII\n (bnc#1012382).\n - net: bcmgenet: reserved phy revisions must be checked first\n (bnc#1012382).\n - net: bridge: fix early call to br_stp_change_bridge_id and plug newlink\n leaks (bnc#1012382).\n - net: core: fix module type in sock_diag_bind (bnc#1012382).\n - net: Do not allow negative values for busy_read and busy_poll sysctl\n interfaces (bnc#1012382).\n - net: fec: fix multicast filtering hardware setup (bnc#1012382).\n - netfilter: bridge: honor frag_max_size when refragmenting (bnc#1012382).\n - netfilter: do not track fragmented packets (bnc#1012382).\n - netfilter: ipvs: Fix inappropriate output of procfs (bnc#1012382).\n - netfilter: nfnetlink_queue: fix secctx memory leak (bnc#1012382).\n - netfilter: nfnetlink_queue: fix timestamp attribute (bsc#1074134).\n - netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash\n table (bnc#1012382).\n - netfilter: nfnl_cthelper: Fix memory leak (bnc#1012382).\n - netfilter: nfnl_cthelper: fix runtime expectation policy updates\n (bnc#1012382).\n - net: Fix double free and memory corruption in get_net_ns_by_id()\n (bnc#1012382).\n - net: igmp: fix source address check for IGMPv3 reports (bnc#1012382).\n - net: igmp: Use correct source address on IGMPv3 reports (bnc#1012382).\n - net: initialize msg.msg_flags in recvfrom (bnc#1012382).\n - net: ipv4: fix for a race condition in raw_sendmsg (bnc#1012382).\n - net/mac80211/debugfs.c: prevent build failure with CONFIG_UBSAN=y\n (bnc#1012382).\n - net/mlx5: Avoid NULL pointer dereference on steering cleanup\n (bsc#1015342 FATE#321688 bsc#1015343 FATE#321689).\n - net/mlx5: Cleanup IRQs in case of unload failure (bsc#966170 FATE#320225\n bsc#966172 FATE#320226).\n - net/mlx5e: Add refcount to VXLAN structure (bsc#966170 FATE#320225\n bsc#966172 FATE#320226).\n - net/mlx5e: Fix features check of IPv6 traffic (bsc#966170 FATE#320225\n bsc#966172 FATE#320226).\n - net/mlx5e: Fix fixpoint divide exception in mlx5e_am_stats_compare\n (bsc#1015342).\n - net/mlx5e: Fix possible deadlock of VXLAN lock (bsc#966170 FATE#320225\n bsc#966172 FATE#320226).\n - net/mlx5e: Prevent possible races in VXLAN control flow (bsc#966170\n FATE#320225 bsc#966172 FATE#320226).\n - net/mlx5: Fix rate limit packet pacing naming and struct (bsc#1015342\n FATE#321688 bsc#1015343 FATE#321689).\n - net/mlx5: Stay in polling mode when command EQ destroy fails (bsc#966170\n FATE#320225 bsc#966172 FATE#320226).\n - net: mvmdio: disable/unprepare clocks in EPROBE_DEFER case (bnc#1012382).\n - net: mvneta: clear interface link status on port disable (bnc#1012382).\n - net: mvneta: eliminate wrong call to handle rx descriptor error\n (fate#319899).\n - net: mvneta: use proper rxq_number in loop on rx queues (fate#319899).\n - net/packet: fix a race in packet_bind() and packet_notifier()\n (bnc#1012382).\n - net: phy: at803x: Change error to EINVAL for invalid MAC (bnc#1012382).\n - net: phy: micrel: ksz9031: reconfigure autoneg after phy autoneg\n workaround (bnc#1012382).\n - net: qdisc_pkt_len_init() should be more robust (bnc#1012382).\n - net: qmi_wwan: add Sierra EM7565 1199:9091 (bnc#1012382).\n - net: qmi_wwan: Add USB IDs for MDM6600 modem on Motorola Droid 4\n (bnc#1012382).\n - net: reevalulate autoflowlabel setting after sysctl setting\n (bnc#1012382).\n - net: Resend IGMP memberships upon peer notification (bnc#1012382).\n - net: sctp: fix array overrun read on sctp_timer_tbl (bnc#1012382).\n - net: stmmac: enable EEE in MII, GMII or RGMII only (bnc#1012382).\n - net: systemport: Pad packet before inserting TSB (bnc#1012382).\n - net: systemport: Utilize skb_put_padto() (bnc#1012382).\n - net: tcp: close sock if net namespace is exiting (bnc#1012382).\n - net: wimax/i2400m: fix NULL-deref at probe (bnc#1012382).\n - nfs: Add a cond_resched() to nfs_commit_release_pages() (bsc#1077779).\n - nfsd: auth: Fix gid sorting when rootsquash enabled (bnc#1012382).\n - nfsd: fix nfsd_minorversion(.., NFSD_AVAIL) (bnc#1012382).\n - nfsd: fix nfsd_reset_versions for NFSv4 (bnc#1012382).\n - nfs: Do not take a reference on fl->fl_file for LOCK operation\n (bnc#1012382).\n - nfs: Fix a typo in nfs_rename() (bnc#1012382).\n - nfsv4.1 respect server's max size in CREATE_SESSION (bnc#1012382).\n - nfsv4: Fix client recovery when server reboots multiple times\n (bnc#1012382).\n - nohz: Prevent a timer interrupt storm in tick_nohz_stop_sched_tick()\n (bnc#1012382).\n - n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD)\n (bnc#1012382).\n - nvme_fc: correct hang in nvme_ns_remove() (bsc#1075811).\n - nvme_fc: fix rogue admin cmds stalling teardown (bsc#1075811).\n - nvme-fc: merge error on sles12sp3 for reset_work (bsc#1079195).\n - nvme-pci: Remove watchdog timer (bsc#1066163).\n - openrisc: fix issue handling 8 byte get_user calls (bnc#1012382).\n - packet: fix crash in fanout_demux_rollover() (bnc#1012382).\n - parisc: Fix alignment of pa_tlb_lock in assembly on 32-bit SMP kernel\n (bnc#1012382).\n - parisc: Hide Diva-built-in serial aux and graphics card (bnc#1012382).\n - partially revert tipc improve link resiliency when rps is activated\n (bsc#1068038).\n - pci/AER: Report non-fatal errors only to the affected endpoint\n (bnc#1012382).\n - pci: Avoid bus reset if bridge itself is broken (bnc#1012382).\n - pci: Create SR-IOV virtfn/physfn links before attaching driver\n (bnc#1012382).\n - pci: Detach driver before procfs & sysfs teardown on device remove\n (bnc#1012382).\n - pci/PME: Handle invalid data when reading Root Status (bnc#1012382).\n - pci / PM: Force devices to D0 in pci_pm_thaw_noirq() (bnc#1012382).\n - perf symbols: Fix symbols__fixup_end heuristic for corner cases\n (bnc#1012382).\n - perf test attr: Fix ignored test case result (bnc#1012382).\n - phy: work around 'phys' references to usb-nop-xceiv devices\n (bnc#1012382).\n - pinctrl: adi2: Fix Kconfig build problem (bnc#1012382).\n - pinctrl: st: add irq_request/release_resources callbacks (bnc#1012382).\n - pipe: avoid round_pipe_size() nr_pages overflow on 32-bit (bnc#1012382).\n - powerpc/64: Add macros for annotating the destination of rfid/hrfid\n (bsc#1068032, bsc#1075087).\n - powerpc/64: Convert fast_exception_return to use RFI_TO_USER/KERNEL\n (bsc#1068032, bsc#1075087).\n - powerpc/64: Convert the syscall exit path to use RFI_TO_USER/KERNEL\n (bsc#1068032, bsc#1075087).\n - powerpc/64s: Add EX_SIZE definition for paca exception save areas\n (bsc#1068032, bsc#1075087).\n - powerpc/64s: Add support for RFI flush of L1-D cache (bsc#1068032,\n bsc#1075087).\n - powerpc/64s: Allow control of RFI flush via debugfs (bsc#1068032,\n bsc#1075087).\n - powerpc/64s: Convert slb_miss_common to use RFI_TO_USER/KERNEL\n (bsc#1068032, bsc#1075087).\n - powerpc/64s: Simple RFI macro conversions (bsc#1068032, bsc#1075087).\n - powerpc/64s: Support disabling RFI flush with no_rfi_flush and nopti\n (bsc#1068032, bsc#1075087).\n - powerpc/64s: Wire up cpu_show_meltdown() (bsc#1068032).\n - powerpc/asm: Allow including ppc_asm.h in asm files (bsc#1068032,\n bsc#1075087).\n - powerpc/ipic: Fix status get and status clear (bnc#1012382).\n - powerpc/perf: Dereference BHRB entries safely (bsc#1066223).\n - powerpc/perf/hv-24x7: Fix incorrect comparison in memord (bnc#1012382).\n - powerpc/powernv: Check device-tree for RFI flush settings (bsc#1068032,\n bsc#1075087).\n - powerpc/powernv/cpufreq: Fix the frequency read by /proc/cpuinfo\n (bnc#1012382).\n - powerpc/powernv/ioda2: Gracefully fail if too many TCE levels requested\n (bnc#1012382).\n - powerpc/pseries: include linux/types.h in asm/hvcall.h (bsc#1068032,\n bsc#1075087).\n - powerpc/pseries: Introduce H_GET_CPU_CHARACTERISTICS (bsc#1068032,\n bsc#1075087).\n - powerpc/pseries: Query hypervisor for RFI flush settings (bsc#1068032,\n bsc#1075087).\n - powerpc/pseries/rfi-flush: Call setup_rfi_flush() after LPM migration\n (bsc#1068032, bsc#1075087).\n - powerpc/pseries: rfi-flush: Call setup_rfi_flush() after LPM migration\n (bsc#1068032, bsc#1075087).\n - powerpc/rfi-flush: Add DEBUG_RFI config option (bsc#1068032,\n bsc#1075087).\n - powerpc/rfi-flush: Make setup_rfi_flush() not __init (bsc#1068032,\n bsc#1075087).\n - powerpc/rfi-flush: Move RFI flush fields out of the paca (unbreak kABI)\n (bsc#1068032, bsc#1075087).\n - powerpc/rfi-flush: Move the logic to avoid a redo into the sysfs code\n (bsc#1068032, bsc#1075087).\n - powerpc/rfi-flush: prevent crash when changing flush type to fallback\n after system boot (bsc#1068032, bsc#1075087).\n - ppp: Destroy the mutex when cleanup (bnc#1012382).\n - pppoe: take ->needed_headroom of lower device into account on xmit\n (bnc#1012382).\n - pti: unbreak EFI (bsc#1074709).\n - r8152: fix the list rx_done may be used without initialization\n (bnc#1012382).\n - r8152: prevent the driver from transmitting packets with carrier off\n (bnc#1012382).\n - r8169: fix memory corruption on retrieval of hardware statistics\n (bnc#1012382).\n - raid5: Set R5_Expanded on parity devices as well as data (bnc#1012382).\n - ravb: Remove Rx overflow log messages (bnc#1012382).\n - rbd: set max_segments to USHRT_MAX (bnc#1012382).\n - rdma/cma: Avoid triggering undefined behavior (bnc#1012382).\n - rdma/i40iw: Remove MSS change support (bsc#1024376 FATE#321249).\n - rds: Fix NULL pointer dereference in __rds_rdma_map (bnc#1012382).\n - rds: Heap OOB write in rds_message_alloc_sgs() (bnc#1012382).\n - rds: null pointer dereference in rds_atomic_free_op (bnc#1012382).\n - regulator: core: Rely on regulator_dev_release to free constraints\n (bsc#1074847).\n - regulator: da9063: Return an error code on probe failure (bsc#1074847).\n - regulator: pwm: Fix regulator ramp delay for continuous mode\n (bsc#1074847).\n - regulator: Try to resolve regulators supplies on registration\n (bsc#1074847).\n - Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature"\n (bnc#1012382).\n - Revert "drm/armada: Fix compile fail" (bnc#1012382).\n - Revert "kaiser: vmstat show NR_KAISERTABLE as nr_overhead" (kabi).\n - Revert "lib/genalloc.c: make the avail variable an atomic_long_t" (kabi).\n - Revert "module: Add retpoline tag to VERMAGIC" (bnc#1012382 kabi).\n - Revert "module: Add retpoline tag to VERMAGIC" (kabi).\n - Revert "ocfs2: should wait dio before inode lock in ocfs2_setattr()"\n (bnc#1012382).\n - Revert "s390/kbuild: enable modversions for symbols exported from asm"\n (bnc#1012382).\n - Revert "sched/deadline: Use the revised wakeup rule for suspending\n constrained dl tasks" (kabi).\n - Revert "scsi: libsas: align sata_device's rps_resp on a cacheline"\n (kabi).\n - Revert "spi: SPI_FSL_DSPI should depend on HAS_DMA" (bnc#1012382).\n - Revert "userfaultfd: selftest: vm: allow to build in vm/ directory"\n (bnc#1012382).\n - Revert "x86/efi: Build our own page table structures" (bnc#1012382).\n - Revert "x86/efi: Hoist page table switching code into efi_call_virt()"\n (bnc#1012382).\n - Revert "x86/mm/pat: Ensure cpa->pfn only contains page frame numbers"\n (bnc#1012382).\n - rfi-flush: Make DEBUG_RFI a CONFIG option (bsc#1068032, bsc#1075087).\n - ring-buffer: Mask out the info bits when returning buffer page length\n (bnc#1012382).\n - route: also update fnhe_genid when updating a route cache (bnc#1012382).\n - route: update fnhe_expires for redirect when the fnhe exists\n (bnc#1012382).\n - rtc: cmos: Initialize hpet timer before irq is registered (bsc#1077592).\n - rtc: pcf8563: fix output clock rate (bnc#1012382).\n - rtc: pl031: make interrupt optional (bnc#1012382).\n - rtc: set the alarm to the next expiring timer (bnc#1012382).\n - s390: always save and restore all registers on context switch\n (bnc#1012382).\n - s390/cpuinfo: show facilities as reported by stfle (bnc#1076847,\n LTC#163740).\n - s390: fix compat system call table (bnc#1012382).\n - s390/pci: do not require AIS facility (bnc#1012382).\n - s390/qeth: no ETH header for outbound AF_IUCV (LTC#156276 bnc#1012382\n bnc#1053472).\n - s390/runtime instrumentation: simplify task exit handling (bnc#1012382).\n - sch_dsmark: fix invalid skb_cow() usage (bnc#1012382).\n - sched/deadline: Make sure the replenishment timer fires in the next\n period (bnc#1012382).\n - sched/deadline: Throttle a constrained deadline task activated after the\n deadline (bnc#1012382).\n - sched/deadline: Use deadline instead of period when calculating overflow\n (bnc#1012382).\n - sched/deadline: Use the revised wakeup rule for suspending constrained\n dl tasks (bnc#1012382).\n - sched/deadline: Zero out positive runtime after throttling constrained\n tasks (git-fixes).\n - scsi: bfa: integer overflow in debugfs (bnc#1012382).\n - scsi: cxgb4i: fix Tx skb leak (bnc#1012382).\n - scsi: handle ABORTED_COMMAND on Fujitsu ETERNUS (bsc#1069138).\n - scsi: hpsa: cleanup sas_phy structures in sysfs when unloading\n (bnc#1012382).\n - scsi: hpsa: destroy sas transport properties before scsi_host\n (bnc#1012382).\n - scsi: libsas: align sata_device's rps_resp on a cacheline (bnc#1012382).\n - scsi: lpfc: Use after free in lpfc_rq_buf_free() (bsc#1037838).\n - scsi: mpt3sas: Fix IO error occurs on pulling out a drive from RAID1\n volume created on two SATA drive (bnc#1012382).\n - scsi: sd: change allow_restart to bool in sysfs interface (bnc#1012382).\n - scsi: sd: change manage_start_stop to bool in sysfs interface\n (bnc#1012382).\n - scsi: sg: disable SET_FORCE_LOW_DMA (bnc#1012382).\n - scsi: sr: wait for the medium to become ready (bsc#1048585).\n - sctp: do not allow the v4 socket to bind a v4mapped v6 address\n (bnc#1012382).\n - sctp: do not free asoc when it is already dead in sctp_sendmsg\n (bnc#1012382).\n - sctp: Replace use of sockets_allocated with specified macro\n (bnc#1012382).\n - sctp: return error if the asoc has been peeled off in\n sctp_wait_for_sndbuf (bnc#1012382).\n - sctp: use the right sk after waking up from wait_buf sleep (bnc#1012382).\n - selftest/powerpc: Fix false failures for skipped tests (bnc#1012382).\n - selftests/x86: Add test_vsyscall (bnc#1012382).\n - selftests/x86/ldt_get: Add a few additional tests for limits\n (bnc#1012382).\n - serial: 8250_pci: Add Amazon PCI serial device ID (bnc#1012382).\n - serial: 8250: Preserve DLD[7:4] for PORT_XR17V35X (bnc#1012382).\n - series.conf: move core networking (including netfilter) into sorted\n section\n - series.conf: whitespace cleanup\n - Set supported_modules_check 1 (bsc#1072163).\n - sfc: do not warn on successful change of MAC (bnc#1012382).\n - sh_eth: fix SH7757 GEther initialization (bnc#1012382).\n - sh_eth: fix TSU resource handling (bnc#1012382).\n - sit: update frag_off info (bnc#1012382).\n - sock: free skb in skb_complete_tx_timestamp on error (bnc#1012382).\n - sparc64/mm: set fields in deferred pages (bnc#1012382).\n - spi_ks8995: fix "BUG: key accdaa28 not in .data!" (bnc#1012382).\n - spi: sh-msiof: Fix DMA transfer size check (bnc#1012382).\n - spi: xilinx: Detect stall with Unknown commands (bnc#1012382).\n - staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl\n (bnc#1012382).\n - sunrpc: Fix rpc_task_begin trace point (bnc#1012382).\n - sunxi-rsb: Include OF based modalias in device uevent (bnc#1012382).\n - sysfs/cpu: Add vulnerability folder (bnc#1012382).\n - sysfs/cpu: Fix typos in vulnerability documentation (bnc#1012382).\n - sysfs: spectre_v2, handle spec_ctrl (bsc#1075994 bsc#1075091).\n - sysrq : fix Show Regs call trace on ARM (bnc#1012382).\n - target: Avoid early CMD_T_PRE_EXECUTE failures during ABORT_TASK\n (bnc#1012382).\n - target/file: Do not return error for UNMAP if length is zero\n (bnc#1012382).\n - target: fix ALUA transition timeout handling (bnc#1012382).\n - target:fix condition return in core_pr_dump_initiator_port()\n (bnc#1012382).\n - target: fix race during implicit transition work flushes (bnc#1012382).\n - target/iscsi: Fix a race condition in iscsit_add_reject_from_cmd()\n (bnc#1012382).\n - target: Use system workqueue for ALUA transitions (bnc#1012382).\n - tcp: correct memory barrier usage in tcp_check_space() (bnc#1012382).\n - tcp: fix under-evaluated ssthresh in TCP Vegas (bnc#1012382).\n - tcp md5sig: Use skb's saddr when replying to an incoming segment\n (bnc#1012382).\n - tcp: __tcp_hdrlen() helper (bnc#1012382).\n - tg3: Fix rx hang on MTU change with 5717/5719 (bnc#1012382).\n - thermal/drivers/step_wise: Fix temperature regulation misbehavior\n (bnc#1012382).\n - thermal: hisilicon: Handle return value of clk_prepare_enable\n (bnc#1012382).\n - tipc: fix cleanup at module unload (bnc#1012382).\n - tipc: fix memory leak in tipc_accept_from_sock() (bnc#1012382).\n - tipc: improve link resiliency when rps is activated (bsc#1068038).\n - tracing: Allocate mask_str buffer dynamically (bnc#1012382).\n - tracing: Fix converting enum's from the map in trace_event_eval_update()\n (bnc#1012382).\n - tracing: Fix crash when it fails to alloc ring buffer (bnc#1012382).\n - tracing: Fix possible double free on failure of allocating trace buffer\n (bnc#1012382).\n - tracing: Remove extra zeroing out of the ring buffer page (bnc#1012382).\n - tty fix oops when rmmod 8250 (bnc#1012382).\n - uas: Always apply US_FL_NO_ATA_1X quirk to Seagate devices (bnc#1012382).\n - uas: ignore UAS for Norelsys NS1068(X) chips (bnc#1012382).\n - udf: Avoid overflow when session starts at large offset (bnc#1012382).\n - um: link vmlinux with -no-pie (bnc#1012382).\n - usb: Add device quirk for Logitech HD Pro Webcam C925e (bnc#1012382).\n - usb: add RESET_RESUME for ELSA MicroLink 56K (bnc#1012382).\n - usb: core: Add type-specific length check of BOS descriptors\n (bnc#1012382).\n - usb: core: prevent malicious bNumInterfaces overflow (bnc#1012382).\n - usb: devio: Prevent integer overflow in proc_do_submiturb()\n (bnc#1012382).\n - usb: Fix off by one in type-specific length check of BOS SSP capability\n (git-fixes).\n - usb: fix usbmon BUG trigger (bnc#1012382).\n - usb: gadget: configs: plug memory leak (bnc#1012382).\n - usb: gadget: ffs: Forbid usb_ep_alloc_request from sleeping\n (bnc#1012382).\n - usb: gadgetfs: Fix a potential memory leak in 'dev_config()'\n (bnc#1012382).\n - usb: gadget: f_uvc: Sanity check wMaxPacketSize for SuperSpeed\n (bnc#1012382).\n - usb: gadget: udc: remove pointer dereference after free (bnc#1012382).\n - usb: hub: Cycle HUB power when initialization fails (bnc#1012382).\n - usb: Increase usbfs transfer limit (bnc#1012382).\n - usbip: Fix implicit fallthrough warning (bnc#1012382).\n - usbip: Fix potential format overflow in userspace tools (bnc#1012382).\n - usbip: fix stub_rx: get_pipe() to validate endpoint number (bnc#1012382).\n - usbip: fix stub_rx: harden CMD_SUBMIT path to handle malicious input\n (bnc#1012382).\n - usbip: fix stub_send_ret_submit() vulnerability to null transfer_buffer\n (bnc#1012382).\n - usbip: fix usbip bind writing random string after command in match_busid\n (bnc#1012382).\n - usbip: prevent leaking socket pointer address in messages (bnc#1012382).\n - usbip: prevent vhci_hcd driver from leaking a socket pointer address\n (bnc#1012382).\n - usbip: remove kernel addresses from usb device and urb debug msgs\n (bnc#1012382).\n - usbip: stub: stop printing kernel pointer addresses in messages\n (bnc#1012382).\n - usbip: vhci: stop printing kernel pointer addresses in messages\n (bnc#1012382).\n - usb: misc: usb3503: make sure reset is low for at least 100us\n (bnc#1012382).\n - usb: musb: da8xx: fix babble condition handling (bnc#1012382).\n - usb: phy: isp1301: Add OF device ID table (bnc#1012382).\n - usb: phy: isp1301: Fix build warning when CONFIG_OF is disabled\n (git-fixes).\n - usb: phy: tahvo: fix error handling in tahvo_usb_probe() (bnc#1012382).\n - usb: quirks: Add no-lpm quirk for KY-688 USB 3.1 Type-C Hub\n (bnc#1012382).\n - usb: serial: cp210x: add IDs for LifeScan OneTouch Verio IQ\n (bnc#1012382).\n - usb: serial: cp210x: add new device ID ELV ALC 8xxx (bnc#1012382).\n - usb: serial: ftdi_sio: add id for Airbus DS P8GR (bnc#1012382).\n - usb: serial: option: adding support for YUGA CLM920-NC5 (bnc#1012382).\n - usb: serial: option: add Quectel BG96 id (bnc#1012382).\n - usb: serial: option: add support for Telit ME910 PID 0x1101\n (bnc#1012382).\n - usb: serial: qcserial: add Sierra Wireless EM7565 (bnc#1012382).\n - usb: uas and storage: Add US_FL_BROKEN_FUA for another JMicron JMS567 ID\n (bnc#1012382).\n - usb: usbfs: Filter flags passed in from user space (bnc#1012382).\n - usb: usbip: Fix possible deadlocks reported by lockdep (bnc#1012382).\n - usb: xhci: Add XHCI_TRUST_TX_LENGTH for Renesas uPD720201 (bnc#1012382).\n - usb: xhci: fix panic in xhci_free_virt_devices_depth_first (bnc#1012382).\n - userfaultfd: selftest: vm: allow to build in vm/ directory (bnc#1012382).\n - userfaultfd: shmem: __do_fault requires VM_FAULT_NOPAGE (bnc#1012382).\n - video: fbdev: au1200fb: Release some resources if a memory allocation\n fails (bnc#1012382).\n - video: fbdev: au1200fb: Return an error code if a memory allocation\n fails (bnc#1012382).\n - virtio: release virtio index when fail to device_register (bnc#1012382).\n - vmxnet3: repair memory leak (bnc#1012382).\n - vsyscall: Fix permissions for emulate mode with KAISER/PTI (bnc#1012382).\n - vt6655: Fix a possible sleep-in-atomic bug in vt6655_suspend\n (bnc#1012382).\n - vti6: Do not report path MTU below IPV6_MIN_MTU (bnc#1012382).\n - vti6: fix device register to report IFLA_INFO_KIND (bnc#1012382).\n - workqueue: trigger WARN if queue_delayed_work() is called with NULL @wq\n (bnc#1012382).\n - writeback: fix memory leak in wb_queue_work() (bnc#1012382).\n - x.509: fix buffer overflow detection in sprint_oid() (bsc#1075078).\n - x.509: reject invalid BIT STRING for subjectPublicKey (bnc#1012382).\n - x86/acpi: Handle SCI interrupts above legacy space gracefully\n (bsc#1068984).\n - x86/acpi: Reduce code duplication in mp_override_legacy_irq()\n (bsc#1068984).\n - x86/alternatives: Add missing '\\n' at end of ALTERNATIVE inline asm\n (bnc#1012382).\n - x86/alternatives: Fix optimize_nops() checking (bnc#1012382).\n - x86/apic/vector: Fix off by one in error path (bnc#1012382).\n - x86/asm/32: Make sync_core() handle missing CPUID on all 32-bit kernels\n (bnc#1012382).\n - x86/boot: Fix early command-line parsing when matching at end\n (bsc#1068032).\n - x86/cpu: Factor out application of forced CPU caps (bnc#1012382).\n - x86/cpufeatures: Add X86_BUG_CPU_INSECURE (bnc#1012382).\n - x86/cpufeatures: Add X86_BUG_SPECTRE_V[12] (bnc#1012382).\n - x86/cpufeatures: Make CPU bugs sticky (bnc#1012382).\n - x86/cpu: Implement CPU vulnerabilites sysfs functions (bnc#1012382).\n - x86/cpu: Merge bugs.c and bugs_64.c (bnc#1012382).\n - x86/cpu: Rename Merrifield2 to Moorefield (bsc#985025).\n - x86/cpu: Rename "WESTMERE2" family to "NEHALEM_G" (bsc#985025).\n - x86/cpu, x86/pti: Do not enable PTI on AMD processors (bnc#1012382).\n - x86/Documentation: Add PTI description (bnc#1012382).\n - x86/efi: Build our own page table structures (fate#320512).\n - x86/efi: Hoist page table switching code into efi_call_virt()\n (fate#320512).\n - x86/entry: Use SYSCALL_DEFINE() macros for sys_modify_ldt()\n (bnc#1012382).\n - x86/hpet: Prevent might sleep splat on resume (bnc#1012382).\n - x86/kasan: Clear kasan_zero_page after TLB flush (bnc#1012382).\n - x86/kasan: Write protect kasan zero shadow (bnc#1012382).\n - x86/microcode/intel: Extend BDW late-loading further with LLC size check\n (bnc#1012382).\n - x86/microcode/intel: Extend BDW late-loading with a revision check\n (bnc#1012382).\n - x86/microcode/intel: Fix BDW late-loading revision check (bnc#1012382).\n - x86/mm/32: Move setup_clear_cpu_cap(X86_FEATURE_PCID) earlier\n (git-fixes).\n - x86/mm: Disable PCID on 32-bit kernels (bnc#1012382).\n - x86/mm/pat: Ensure cpa->pfn only contains page frame numbers\n (fate#320588).\n - x86/PCI: Make broadcom_postcore_init() check acpi_disabled (bnc#1012382).\n - x86/pti: Document fix wrong index (bnc#1012382).\n - x86/pti/efi: broken conversion from efi to kernel page table\n (bnc#1012382).\n - x86/pti: Rename BUG_CPU_INSECURE to BUG_CPU_MELTDOWN (bnc#1012382).\n - x86/retpolines/spec_ctrl: disable IBRS on !SKL if retpolines are active\n (bsc#1068032).\n - x86/smpboot: Remove stale TLB flush invocations (bnc#1012382).\n - x86/spectre_v2: fix ordering in IBRS initialization (bsc#1075994\n bsc#1075091).\n - x86/spectre_v2: nospectre_v2 means nospec too (bsc#1075994 bsc#1075091).\n - x86/tlb: Drop the _GPL from the cpu_tlbstate export (bnc#1012382).\n - x86/vm86/32: Switch to flush_tlb_mm_range() in mark_screen_rdonly()\n (bnc#1012382).\n - xen-netfront: avoid crashing on resume after a failure in\n talk_to_netback() (bnc#1012382).\n - xen-netfront: Improve error handling during initialization (bnc#1012382).\n - xfrm: Copy policy family in clone_policy (bnc#1012382).\n - xfs: add configurable error support to metadata buffers (bsc#1068569).\n - xfs: add configuration handlers for specific errors (bsc#1068569).\n - xfs: add configuration of error failure speed (bsc#1068569).\n - xfs: add "fail at unmount" error handling configuration (bsc#1068569).\n - xfs: Add infrastructure needed for error propagation during buffer IO\n failure (bsc#1068569).\n - xfs: address kabi for xfs buffer retry infrastructure (kabi).\n - xfs: configurable error behavior via sysfs (bsc#1068569).\n - xfs: fix incorrect extent state in xfs_bmap_add_extent_unwritten_real\n (bnc#1012382).\n - xfs: fix log block underflow during recovery cycle verification\n (bnc#1012382).\n - xfs: fix up inode32/64 (re)mount handling (bsc#1069160).\n - xfs: introduce metadata IO error class (bsc#1068569).\n - xfs: introduce table-based init for error behaviors (bsc#1068569).\n - xfs: Properly retry failed inode items in case of error during buffer\n writeback (bsc#1068569).\n - xfs: reinit btree pointer on attr tree inactivation walk (bsc#1078787).\n - xfs: remove xfs_trans_ail_delete_bulk (bsc#1068569).\n - xfs: validate sb_logsunit is a multiple of the fs blocksize\n (bsc#1077513).\n - xhci: Do not add a virt_dev to the devs array before it's fully\n allocated (bnc#1012382).\n - xhci: Fix ring leak in failure path of xhci_alloc_virt_device()\n (bnc#1012382).\n - xhci: plat: Register shutdown for xhci_plat (bnc#1012382).\n - zram: set physical queue limits to avoid array out of bounds accesses\n (bnc#1012382).\n\n", "cvss3": {}, "published": "2018-02-09T15:09:34", "type": "suse", "title": "Security update for the Linux Kernel (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17862", "CVE-2017-15129", "CVE-2017-17712", "CVE-2017-5715", "CVE-2018-5332", "CVE-2017-18017", "CVE-2017-17864"], "modified": "2018-02-09T15:09:34", "id": "OPENSUSE-SU-2018:0408-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.html", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-04-19T17:23:06", "description": "The SUSE Linux Enterprise 12 SP3 Realtime kernel was updated to 4.4.120 to\n receive various security and bugfixes.\n\n The following security bugs were fixed:\n\n - CVE-2017-5715: Systems with microprocessors utilizing speculative\n execution and indirect branch prediction may allow unauthorized\n disclosure of information to an attacker with local user access via a\n side-channel analysis (bnc#1068032).\n\n The previous fix using CPU Microcode has been complemented by building\n the Linux Kernel with return trampolines aka "retpolines".\n\n - CVE-2017-13166: An elevation of privilege vulnerability in the v4l2\n video driver. (bnc#1072865).\n - CVE-2017-15129: A use-after-free vulnerability was found in network\n namespaces code affecting the Linux kernel. The function\n get_net_ns_by_id() in net/core/net_namespace.c did not check for the\n net::count value after it has found a peer network in netns_ids idr,\n which could lead to double free and memory corruption. This\n vulnerability could allow an unprivileged local user to induce kernel\n memory corruption on the system, leading to a crash. Due to the nature\n of the flaw, privilege escalation cannot be fully ruled out, although it\n is thought to be unlikely (bnc#1074839).\n - CVE-2017-15951: The KEYS subsystem in the Linux kernel did not correctly\n synchronize the actions of updating versus finding a key in the\n "negative" state to avoid a race condition, which allowed local users to\n cause a denial of service or possibly have unspecified other impact via\n crafted system calls (bnc#1065615).\n - CVE-2017-16912: The "get_pipe()" function (drivers/usb/usbip/stub_rx.c)\n in the Linux Kernel allowed attackers to cause a denial of service\n (out-of-bounds read) via a specially crafted USB over IP packet\n (bnc#1078673).\n - CVE-2017-16913: The "stub_recv_cmd_submit()" function\n (drivers/usb/usbip/stub_rx.c) in the Linux Kernel when handling\n CMD_SUBMIT packets allowed attackers to cause a denial of service\n (arbitrary memory allocation) via a specially crafted USB over IP packet\n (bnc#1078672).\n - CVE-2017-17712: The raw_sendmsg() function in net/ipv4/raw.c in the\n Linux kernel has a race condition in inet->hdrincl that leads to\n uninitialized stack pointer usage; this allowed a local user to execute\n code and gain privileges (bnc#1073229 1073230).\n - CVE-2017-17862: kernel/bpf/verifier.c in the Linux kernel ignores\n unreachable code, even though it would still be processed by JIT\n compilers. This behavior, also considered an improper branch-pruning\n logic issue, could possibly be used by local users for denial of service\n (bnc#1073928).\n - CVE-2017-17864: kernel/bpf/verifier.c in the Linux kernel mishandled\n states_equal comparisons between the pointer data type and the\n UNKNOWN_VALUE data type, which allowed local users to obtain potentially\n sensitive address information, aka a "pointer leak (bnc#1073928).\n - CVE-2017-17975: Use-after-free in the usbtv_probe function in\n drivers/media/usb/usbtv/usbtv-core.c allowed attackers to cause a denial\n of service (system crash) or possibly have unspecified other impact by\n triggering failure of audio registration, because a kfree of the usbtv\n data structure occurs during a usbtv_video_free call, but the\n usbtv_video_fail label's code attempts to both access and free this data\n structure (bnc#1074426).\n - CVE-2017-18017: The tcpmss_mangle_packet function in\n net/netfilter/xt_TCPMSS.c in the Linux kernel allowed remote attackers\n to cause a denial of service (use-after-free and memory corruption) or\n possibly have unspecified other impact by leveraging the presence of\n xt_TCPMSS in an iptables action (bnc#1074488).\n - CVE-2017-18174: In the Linux kernel the amd_gpio_remove function in\n drivers/pinctrl/pinctrl-amd.c calls the pinctrl_unregister function,\n leading to a double free (bnc#1080533).\n - CVE-2017-18208: The madvise_willneed function in mm/madvise.c allowed\n local users to cause a denial of service (infinite loop) by triggering\n use of MADVISE_WILLNEED for a DAX mapping (bnc#1083494).\n - CVE-2018-1000004: In the Linux kernel a race condition vulnerability\n existed in the sound system, which could lead to a deadlock and denial\n of service condition (bnc#1076017).\n - CVE-2018-1000026: Linux kernel version contained a insufficient input\n validation vulnerability in bnx2x network card driver that can result in\n DoS: Network card firmware assertion takes card off-line. This attack\n appear to be exploitable via an attacker that must pass a very large,\n specially crafted packet to the bnx2x card. This can be done from an\n untrusted guest VM. (bnc#1079384).\n - CVE-2018-5332: In the Linux kernel through 4.14.13, the\n rds_message_alloc_sgs() function did not validate a value that is used\n during DMA page allocation, leading to a heap-based out-of-bounds write\n (related to the rds_rdma_extra_size function in net/rds/rdma.c)\n (bnc#1075621).\n - CVE-2018-5333: In the Linux kernel through 4.14.13, the rds_cmsg_atomic\n function in net/rds/rdma.c mishandled cases where page pinning fails or\n an invalid address is supplied, leading to an rds_atomic_free_op NULL\n pointer dereference (bnc#1075617).\n - CVE-2018-8087: Memory leak in the hwsim_new_radio_nl function in\n drivers/net/wireless/mac80211_hwsim.c allowed local users to cause a\n denial of service (memory consumption) by triggering an out-of-array\n error case (bnc#1085053).\n - CVE-2017-16644: The hdpvr_probe function in\n drivers/media/usb/hdpvr/hdpvr-core.c allowed local users to cause a\n denial of service (improper error handling and system crash) or possibly\n have unspecified other impact via a crafted USB device (bnc#1067118).\n\n The following non-security bugs were fixed:\n\n - 509: fix printing uninitialized stack memory when OID is empty\n (bsc#1075078).\n - 8021q: fix a memory leak for VLAN 0 device (bnc#1012382).\n - acpi / bus: Leave modalias empty for devices which are not present\n (bnc#1012382).\n - acpi, nfit: fix health event notification (FATE#321135, FATE#321217,\n FATE#321256, FATE#321391, FATE#321393).\n - acpi, nfit: fix register dimm error handling (FATE#321135, FATE#321217,\n FATE#321256, FATE#321391, FATE#321393).\n - acpi: sbshc: remove raw pointer from printk() message (bnc#1012382).\n - acpi / scan: Prefer devices without _HID/_CID for _ADR matching\n (bnc#1012382).\n - Add delay-init quirk for Corsair K70 RGB keyboards (bnc#1012382).\n - add ip6_make_flowinfo helper (bsc#1042286).\n - af_key: fix buffer overread in parse_exthdrs() (bnc#1012382).\n - af_key: fix buffer overread in verify_address_len() (bnc#1012382).\n - afs: Adjust mode bits processing (bnc#1012382).\n - afs: Connect up the CB.ProbeUuid (bnc#1012382).\n - afs: Fix afs_kill_pages() (bnc#1012382).\n - afs: Fix missing put_page() (bnc#1012382).\n - afs: Fix page leak in afs_write_begin() (bnc#1012382).\n - afs: Fix the maths in afs_fs_store_data() (bnc#1012382).\n - afs: Flush outstanding writes when an fd is closed (bnc#1012382).\n - afs: Migrate vlocation fields to 64-bit (bnc#1012382).\n - afs: Populate and use client modification time (bnc#1012382).\n - afs: Populate group ID from vnode status (bnc#1012382).\n - afs: Prevent callback expiry timer overflow (bnc#1012382).\n - ahci: Add Intel Cannon Lake PCH-H PCI ID (bnc#1012382).\n - ahci: Add PCI ids for Intel Bay Trail, Cherry Trail and Apollo Lake AHCI\n (bnc#1012382).\n - ahci: Annotate PCI ids for mobile Intel chipsets as such (bnc#1012382).\n - alpha: fix build failures (bnc#1012382).\n - alpha: fix crash if pthread_create races with signal delivery\n (bnc#1012382).\n - alpha: fix reboot on Avanti platform (bnc#1012382).\n - alsa: aloop: Fix inconsistent format due to incomplete rule\n (bsc#1031717).\n - alsa: aloop: Fix racy hw constraints adjustment (bsc#1031717).\n - alsa: aloop: Release cable upon open error path (bsc#1031717).\n - alsa: hda - Apply headphone noise quirk for another Dell XPS 13 variant\n (bsc#1031717).\n - alsa: hda - Apply the existing quirk to iMac 14,1 (bsc#1031717).\n - alsa: hda/ca0132 - fix possible NULL pointer use (bnc#1012382).\n - alsa: hda - Fix headset mic detection problem for two Dell machines\n (bnc#1012382).\n - alsa: hda/realtek - Add headset mode support for Dell laptop\n (bsc#1031717).\n - alsa: hda/realtek: PCI quirk for Fujitsu U7x7 (bnc#1012382).\n - alsa: hda - Reduce the suspend time consumption for ALC256 (bsc#1031717).\n - alsa: hda - Use IS_REACHABLE() for dependency on input (bsc#1031717).\n - alsa: pcm: Abort properly at pending signal in OSS read/write loops\n (bsc#1031717).\n - alsa: pcm: Add missing error checks in OSS emulation plugin builder\n (bsc#1031717).\n - alsa: pcm: Allow aborting mutex lock at OSS read/write loops\n (bsc#1031717).\n - alsa: pcm: Remove incorrect snd_BUG_ON() usages (bsc#1031717).\n - alsa: pcm: Remove yet superfluous WARN_ON() (bsc#1031717).\n - alsa: seq: Fix racy pool initializations (bnc#1012382).\n - alsa: seq: Fix regression by incorrect ioctl_mutex usages (bnc#1012382).\n - alsa: usb-audio: add implicit fb quirk for Behringer UFX1204\n (bnc#1012382).\n - alsa: usb-audio: Fix UAC2 get_ctl request with a RANGE attribute\n (bnc#1012382).\n - amd-xgbe: Fix unused suspend handlers build warning (bnc#1012382).\n - arc: uaccess: dont use "l" gcc inline asm constraint modifier\n (bnc#1012382).\n - arm64: add PTE_ADDR_MASK (bsc#1068032).\n - arm64: Add skeleton to harden the branch predictor against aliasing\n attacks (bsc#1068032).\n - arm64: Add trace_hardirqs_off annotation in ret_to_user (bsc#1068032).\n - arm64: barrier: Add CSDB macros to control data-value prediction\n (bsc#1068032).\n - arm64: Branch predictor hardening for Cavium ThunderX2 (bsc#1068032).\n - arm64/cpufeature: do not use mutex in bringup path (bsc#1068032).\n - arm64: cpufeature: Pass capability structure to ->enable callback\n (bsc#1068032).\n - arm64: cputype: Add MIDR values for Cavium ThunderX2 CPUs (bsc#1068032).\n - arm64: cputype: Add missing MIDR values for Cortex-A72 and Cortex-A75\n (bsc#1068032).\n - arm64: debug: remove unused local_dbg_{enable, disable} macros\n (bsc#1068032).\n - arm64: define BUG() instruction without CONFIG_BUG (bnc#1012382).\n - arm64: Define cputype macros for Falkor CPU (bsc#1068032).\n - arm64: Disable TTBR0_EL1 during normal kernel execution (bsc#1068032).\n - arm64: Disable unhandled signal log messages by default (bnc#1012382).\n - arm64: Do not force KPTI for CPUs that are not vulnerable (bsc#1076187).\n - arm64: do not pull uaccess.h into *.S (bsc#1068032).\n - arm64: dts: add #cooling-cells to CPU nodes (bnc#1012382).\n - arm64: Enable CONFIG_ARM64_SW_TTBR0_PAN (bsc#1068032).\n - arm64: entry: Add exception trampoline page for exceptions from EL0\n (bsc#1068032).\n - arm64: entry: Add fake CPU feature for unmapping the kernel at EL0\n (bsc#1068032).\n - arm64: entry: Apply BP hardening for high-priority synchronous\n exceptions (bsc#1068032).\n - arm64: entry: Apply BP hardening for suspicious interrupts from EL0\n (bsc#1068032).\n - arm64: entry: Ensure branch through syscall table is bounded under\n speculation (bsc#1068032).\n - arm64: entry: Explicitly pass exception level to kernel_ventry macro\n (bsc#1068032).\n - arm64: entry: Hook up entry trampoline to exception vectors\n (bsc#1068032).\n - arm64: entry: remove pointless SPSR mode check (bsc#1068032).\n - arm64: entry: Reword comment about post_ttbr_update_workaround\n (bsc#1068032).\n - arm64: entry.S convert el0_sync (bsc#1068032).\n - arm64: entry.S: convert el1_sync (bsc#1068032).\n - arm64: entry.S: convert elX_irq (bsc#1068032).\n - arm64: entry.S: move SError handling into a C function for future\n expansion (bsc#1068032).\n - arm64: entry.S: Remove disable_dbg (bsc#1068032).\n - arm64: erratum: Work around Falkor erratum #E1003 in trampoline code\n (bsc#1068032).\n - arm64: explicitly mask all exceptions (bsc#1068032).\n - arm64: factor out entry stack manipulation (bsc#1068032).\n - arm64: factor out PAGE_* and CONT_* definitions (bsc#1068032).\n - arm64: Factor out PAN enabling/disabling into separate uaccess_* macros\n (bsc#1068032).\n - arm64: Factor out TTBR0_EL1 post-update workaround into a specific asm\n macro (bsc#1068032).\n - arm64: factor work_pending state machine to C (bsc#1068032).\n - arm64: Force KPTI to be disabled on Cavium ThunderX (bsc#1068032).\n - arm64: fpsimd: Prevent registers leaking from dead tasks (bnc#1012382).\n - arm64: futex: Mask __user pointers prior to dereference (bsc#1068032).\n - arm64: Handle el1 synchronous instruction aborts cleanly (bsc#1068032).\n - arm64: Handle faults caused by inadvertent user access with PAN enabled\n (bsc#1068032).\n - arm64: head.S: get rid of x25 and x26 with 'global' scope (bsc#1068032).\n - arm64: idmap: Use "awx" flags for .idmap.text .pushsection directives\n (bsc#1068032).\n - arm64: Implement array_index_mask_nospec() (bsc#1068032).\n - arm64: Implement branch predictor hardening for affected Cortex-A CPUs\n (bsc#1068032).\n - arm64: Implement branch predictor hardening for Falkor (bsc#1068032).\n - arm64: Initialise high_memory global variable earlier (bnc#1012382).\n - arm64: introduce an order for exceptions (bsc#1068032).\n - arm64: introduce mov_q macro to move a constant into a 64-bit register\n (bsc#1068032).\n - arm64: Introduce uaccess_{disable,enable} functionality based on\n TTBR0_EL1 (bsc#1068032).\n - arm64: kaslr: Put kernel vectors address in separate data page\n (bsc#1068032).\n - arm64: Kconfig: Add CONFIG_UNMAP_KERNEL_AT_EL0 (bsc#1068032).\n - arm64: Kconfig: Reword UNMAP_KERNEL_AT_EL0 kconfig entry (bsc#1068032).\n - arm64: Kconfig: select COMPAT_BINFMT_ELF only when BINFMT_ELF is set\n (bnc#1012382).\n - arm64: kill ESR_LNX_EXEC (bsc#1068032).\n - arm64: kpti: Add ->enable callback to remap swapper using nG mappings\n (bsc#1068032).\n - arm64: kpti: Fix the interaction between ASID switching and software PAN\n (bsc#1068032).\n - arm64: kpti: Make use of nG dependent on arm64_kernel_unmapped_at_el0()\n (bsc#1068032).\n - arm64: kvm: Fix SMCCC handling of unimplemented SMC/HVC calls\n (bsc#1076232).\n - arm64: kvm: fix VTTBR_BADDR_MASK BUG_ON off-by-one (bnc#1012382).\n - arm64: kvm: Make PSCI_VERSION a fast path (bsc#1068032).\n - arm64: kvm: Use per-CPU vector when BP hardening is enabled\n (bsc#1068032).\n - arm64: Make USER_DS an inclusive limit (bsc#1068032).\n - arm64: Mask all exceptions during kernel_exit (bsc#1068032).\n - arm64: mm: Add arm64_kernel_unmapped_at_el0 helper (bsc#1068032).\n - arm64: mm: Allocate ASIDs in pairs (bsc#1068032).\n - arm64: mm: Fix and re-enable ARM64_SW_TTBR0_PAN (bsc#1068032).\n - arm64: mm: hardcode rodata=true (bsc#1068032).\n - arm64: mm: Introduce TTBR_ASID_MASK for getting at the ASID in the TTBR\n (bsc#1068032).\n - arm64: mm: Invalidate both kernel and user ASIDs when performing TLBI\n (bsc#1068032).\n - arm64: mm: Map entry trampoline into trampoline and kernel page tables\n (bsc#1068032).\n - arm64: mm: Move ASID from TTBR0 to TTBR1 (bsc#1068032).\n - arm64: mm: Permit transitioning from Global to Non-Global without BBM\n (bsc#1068032).\n - arm64: mm: Remove pre_ttbr0_update_workaround for Falkor erratum #E1003\n (bsc#1068032).\n - arm64: mm: Rename post_ttbr0_update_workaround (bsc#1068032).\n - arm64: mm: Temporarily disable ARM64_SW_TTBR0_PAN (bsc#1068032).\n - arm64: mm: Use non-global mappings for kernel space (bsc#1068032).\n - arm64: Move BP hardening to check_and_switch_context (bsc#1068032).\n - arm64: Move post_ttbr_update_workaround to C code (bsc#1068032).\n - arm64: move TASK_* definitions to <asm/processor.h> (bsc#1068032).\n - arm64: Move the async/fiq helpers to explicitly set process context\n flags (bsc#1068032).\n - arm64: Run enable method for errata work arounds on late CPUs\n (bsc#1085045).\n - arm64: SW PAN: Point saved ttbr0 at the zero page when switching to\n init_mm (bsc#1068032).\n - arm64: SW PAN: Update saved ttbr0 value on enter_lazy_tlb (bsc#1068032).\n - arm64: swp emulation: bound LL/SC retries before rescheduling\n (bsc#1068032).\n - arm64: sysreg: Fix unprotected macro argmuent in write_sysreg\n (bsc#1068032).\n - arm64: Take into account ID_AA64PFR0_EL1.CSV3 (bsc#1068032).\n - arm64: thunderx2: remove branch predictor hardening References:\n bsc#1076232 This causes undefined instruction abort on the smc call from\n guest kernel. Disable until kvm is fixed.\n - arm64: tls: Avoid unconditional zeroing of tpidrro_el0 for native tasks\n (bsc#1068032).\n - arm64: Turn on KPTI only on CPUs that need it (bsc#1076187).\n - arm64: uaccess: Do not bother eliding access_ok checks in __{get,\n put}_user (bsc#1068032).\n - arm64: uaccess: Mask __user pointers for __arch_{clear, copy_*}_user\n (bsc#1068032).\n - arm64: uaccess: Prevent speculative use of the current addr_limit\n (bsc#1068032).\n - arm64: use alternative auto-nop (bsc#1068032).\n - arm64: Use pointer masking to limit uaccess speculation (bsc#1068032).\n - arm64: use RET instruction for exiting the trampoline (bsc#1068032).\n - arm64: xen: Enable user access before a privcmd hvc call (bsc#1068032).\n - arm: 8731/1: Fix csum_partial_copy_from_user() stack mismatch\n (bnc#1012382).\n - arm: AM33xx: PRM: Remove am33xx_pwrdm_read_prev_pwrst function\n (bnc#1012382).\n - arm/arm64: kvm: Make default HYP mappings non-excutable (bsc#1068032).\n - arm: avoid faulting on qemu (bnc#1012382).\n - arm: BUG if jumping to usermode address in kernel mode (bnc#1012382).\n - arm-ccn: perf: Prevent module unload while PMU is in use (bnc#1012382).\n - arm: dma-mapping: disallow dma_get_sgtable() for non-kernel managed\n memory (bnc#1012382).\n - arm: dts: am335x-evmsk: adjust mmc2 param to allow suspend (bnc#1012382).\n - arm: dts: am4372: Correct the interrupts_properties of McASP\n (bnc#1012382).\n - arm: dts: Fix omap4 hang with GPS connected to USB by using wakeupgen\n (bnc#1012382).\n - arm: dts: kirkwood: fix pin-muxing of MPP7 on OpenBlocks A7\n (bnc#1012382).\n - arm: dts: ls1021a: fix incorrect clock references (bnc#1012382).\n - arm: dts: s5pv210: add interrupt-parent for ohci (bnc#1012382).\n - arm: dts: STi: Add gpio polarity for "hdmi,hpd-gpio" property\n (bnc#1012382).\n - arm: dts: ti: fix PCI bus dtc warnings (bnc#1012382).\n - arm: kprobes: Align stack to 8-bytes in test code (bnc#1012382).\n - arm: kprobes: Fix the return address of multiple kretprobes\n (bnc#1012382).\n - arm: kvm: Fix SMCCC handling of unimplemented SMC/HVC calls\n (bnc#1012382).\n - arm: kvm: Fix VTTBR_BADDR_MASK BUG_ON off-by-one (bnc#1012382).\n - arm: OMAP1: DMA: Correct the number of logical channels (bnc#1012382).\n - arm: OMAP2+: Fix device node reference counts (bnc#1012382).\n - arm: OMAP2+: Fix SRAM virt to phys translation for\n save_secure_ram_context (bnc#1012382).\n - arm: OMAP2+: gpmc-onenand: propagate error on initialization failure\n (bnc#1012382).\n - arm: omap2: hide omap3_save_secure_ram on non-OMAP3 builds (git-fixes).\n - arm: OMAP2+: Release device node after it is no longer needed\n (bnc#1012382).\n - arm: pxa/tosa-bt: add MODULE_LICENSE tag (bnc#1012382).\n - arm: spear13xx: Fix dmas cells (bnc#1012382).\n - arm: spear13xx: Fix spics gpio controller's warning (bnc#1012382).\n - arm: spear600: Add missing interrupt-parent of rtc (bnc#1012382).\n - arm: tegra: select USB_ULPI from EHCI rather than platform (bnc#1012382).\n - asm-prototypes: Clear any CPP defines before declaring the functions\n (git-fixes).\n - asn.1: check for error from ASN1_OP_END__ACT actions (bnc#1012382).\n - asn.1: fix out-of-bounds read when parsing indefinite length item\n (bnc#1012382).\n - ASoC: au1x: Fix timeout tests in au1xac97c_ac97_read() (bsc#1031717).\n - ASoC: Intel: Kconfig: fix build when ACPI is not enabled (bnc#1012382).\n - ASoC: Intel: sst: Fix the return value of 'sst_send_byte_stream_mrfld()'\n (bsc#1031717).\n - ASoC: mediatek: add i2c dependency (bnc#1012382).\n - ASoC: nuc900: Fix a loop timeout test (bsc#1031717).\n - asoc: pcm512x: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE\n (bnc#1012382).\n - ASoC: rockchip: disable clock on error (bnc#1012382).\n - asoc: rsnd: avoid duplicate free_irq() (bnc#1012382).\n - asoc: rsnd: do not call free_irq() on Parent SSI (bnc#1012382).\n - asoc: simple-card: Fix misleading error message (bnc#1012382).\n - ASoC: ux500: add MODULE_LICENSE tag (bnc#1012382).\n - ata: ahci_xgene: free structure returned by acpi_get_object_info()\n (bsc#1082979).\n - ata: pata_artop: remove redundant initialization of pio (bsc#1082979).\n - ata: sata_dwc_460ex: remove incorrect locking (bsc#1082979).\n - ath9k: fix tx99 potential info leak (bnc#1012382).\n - atm: horizon: Fix irq release error (bnc#1012382).\n - audit: ensure that 'audit=1' actually enables audit for PID 1\n (bnc#1012382).\n - axonram: Fix gendisk handling (bnc#1012382).\n - b2c2: flexcop: avoid unused function warnings (bnc#1012382).\n - backlight: pwm_bl: Fix overflow condition (bnc#1012382).\n - bcache: add a comment in journal bucket reading (bsc#1076110).\n - bcache: Avoid nested function definition (bsc#1076110).\n - bcache: bch_allocator_thread() is not freezable (bsc#1076110).\n - bcache: bch_writeback_thread() is not freezable (bsc#1076110).\n - bcache: check return value of register_shrinker (bsc#1076110).\n - bcache: documentation formatting, edited for clarity, stripe alignment\n notes (bsc#1076110).\n - bcache: documentation updates and corrections (bsc#1076110).\n - bcache: Do not reinvent the wheel but use existing llist API\n (bsc#1076110).\n - bcache: do not write back data if reading it failed (bsc#1076110).\n - bcache: explicitly destroy mutex while exiting (bnc#1012382).\n - bcache: fix a comments typo in bch_alloc_sectors() (bsc#1076110).\n - bcache: fix sequential large write IO bypass (bsc#1076110).\n - bcache: fix wrong cache_misses statistics (bnc#1012382).\n - bcache: gc does not work when triggering by manual command (bsc#1076110,\n bsc#1038078).\n - bcache: implement PI controller for writeback rate (bsc#1076110).\n - bcache: increase the number of open buckets (bsc#1076110).\n - bcache: only permit to recovery read error when cache device is clean\n (bnc#1012382 bsc#1043652).\n - bcache: partition support: add 16 minors per bcacheN device\n (bsc#1076110, bsc#1019784).\n - bcache: rearrange writeback main thread ratelimit (bsc#1076110).\n - bcache: recover data from backing when data is clean (bnc#1012382\n bsc#1043652).\n - bcache: Remove redundant set_capacity (bsc#1076110).\n - bcache: remove unused parameter (bsc#1076110).\n - bcache: rewrite multiple partitions support (bsc#1076110, bsc#1038085).\n - bcache: safeguard a dangerous addressing in closure_queue (bsc#1076110).\n - bcache: silence static checker warning (bsc#1076110).\n - bcache: smooth writeback rate control (bsc#1076110).\n - bcache.txt: standardize document format (bsc#1076110).\n - bcache: update bio->bi_opf bypass/writeback REQ_ flag hints\n (bsc#1076110).\n - bcache: update bucket_in_use in real time (bsc#1076110).\n - bcache: Update continue_at() documentation (bsc#1076110).\n - bcache: use kmalloc to allocate bio in bch_data_verify() (bsc#1076110).\n - bcache: use llist_for_each_entry_safe() in __closure_wake_up()\n (bsc#1076110).\n - bcache: writeback rate clamping: make 32 bit safe (bsc#1076110).\n - bcache: writeback rate shouldn't artifically clamp (bsc#1076110).\n - be2net: restore properly promisc mode after queues reconfiguration\n (bsc#963844 FATE#320192).\n - binder: add missing binder_unlock() (bnc#1012382).\n - binder: check for binder_thread allocation failure in binder_poll()\n (bnc#1012382).\n - binfmt_elf: compat: avoid unused function warning (bnc#1012382).\n - blacklist acb1feab320e powerpc/64: Do not trace irqs-off at interrupt\n return to soft-disabled context\n - blacklist.conf: Blacklist 9d25e3cc83d731ae4eeb017fd07562fde3f80bef\n Exynos IOMMU is not enabled in any config.\n - blacklist.conf: blacklist d207af2eab3f8668b95ad02b21930481c42806fd\n - blacklist.conf: blacklist too intrusive patches (bsc#1082979)\n - blacklist.conf: commit fd5f7cde1b85d4c8e09 ("printk: Never set\n console_may_schedule in console_trylock()")\n - blacklist.conf: da391d640c528bc5bb227ea5b39c882b75ac3167 Comment-only fix\n - blk-mq: add warning to __blk_mq_run_hw_queue() for ints disabled\n (bsc#1084772).\n - blk-mq: stop 'delayed_run_work' in blk_mq_stop_hw_queue() (bsc#1084967).\n - blk-mq: turn WARN_ON in __blk_mq_run_hw_queue into printk (bsc#1084772).\n - blktrace: fix unlocked registration of tracepoints (bnc#1012382).\n - block: fix an error code in add_partition() (bsc#1082979).\n - block: Fix __bio_integrity_endio() documentation (bsc#1082979).\n - block: wake up all tasks blocked in get_request() (bnc#1012382).\n - bluetooth: btsdio: Do not bind to non-removable BCM43341 (bnc#1012382).\n - bluetooth: btusb: driver to enable the usb-wakeup feature (bnc#1012382).\n - bluetooth: btusb: Restore QCA Rome suspend/resume fix with a "rewritten"\n version (bnc#1012382).\n - bnx2x: do not rollback VF MAC/VLAN filters we did not configure\n (bnc#1012382).\n - bnx2x: fix possible overrun of VFPF multicast addresses array\n (bnc#1012382).\n - bnx2x: Improve reliability in case of nested PCI errors (bnc#1012382).\n - bnx2x: prevent crash when accessing PTP with interface down\n (bnc#1012382).\n - bnxt_en: Fix the 'Invalid VF' id check in bnxt_vf_ndo_prep routine\n (bnc#1012382).\n - bpf: arsh is not supported in 32 bit alu thus reject it (bnc#1012382).\n - bpf: avoid false sharing of map refcount with max_entries (bnc#1012382).\n - bpf: fix 32-bit divide by zero (bnc#1012382).\n - bpf: fix bpf_tail_call() x64 JIT (bnc#1012382).\n - bpf: fix divides by zero (bnc#1012382).\n - bpf: introduce BPF_JIT_ALWAYS_ON config (bnc#1012382).\n - bpf: reject stores into ctx via st and xadd (bnc#1012382).\n - bridge: implement missing ndo_uninit() (bsc#1042286).\n - bridge: move bridge multicast cleanup to ndo_uninit (bsc#1042286).\n - btrfs: add missing memset while reading compressed inline extents\n (bnc#1012382).\n - btrfs: copy fsid to super_block s_uuid (bsc#1080774).\n - btrfs: fix crash due to not cleaning up tree log block's dirty bits\n (bnc#1012382).\n - btrfs: fix deadlock in run_delalloc_nocow (bnc#1012382).\n - btrfs: fix deadlock when writing out space cache (bnc#1012382).\n - btrfs: Fix possible off-by-one in btrfs_search_path_in_tree\n (bnc#1012382).\n - btrfs: Fix quota reservation leak on preallocated files (bsc#1079989).\n - btrfs: fix unexpected -EEXIST when creating new inode (bnc#1012382).\n - btrfs: Handle btrfs_set_extent_delalloc failure in fixup worker\n (bnc#1012382).\n - can: af_can: canfd_rcv(): replace WARN_ONCE by pr_warn_once\n (bnc#1012382).\n - can: af_can: can_rcv(): replace WARN_ONCE by pr_warn_once (bnc#1012382).\n - can: ems_usb: cancel urb on -EPIPE and -EPROTO (bnc#1012382).\n - can: esd_usb2: cancel urb on -EPIPE and -EPROTO (bnc#1012382).\n - can: flex_can: Correct the checking for frame length in\n flexcan_start_xmit() (bnc#1012382).\n - can: gs_usb: fix return value of the "set_bittiming" callback\n (bnc#1012382).\n - can: kvaser_usb: cancel urb on -EPIPE and -EPROTO (bnc#1012382).\n - can: kvaser_usb: Fix comparison bug in kvaser_usb_read_bulk_callback()\n (bnc#1012382).\n - can: kvaser_usb: free buf in error paths (bnc#1012382).\n - can: kvaser_usb: ratelimit errors if incomplete messages are received\n (bnc#1012382).\n - can: peak: fix potential bug in packet fragmentation (bnc#1012382).\n - can: ti_hecc: Fix napi poll return value for repoll (bnc#1012382).\n - can: usb_8dev: cancel urb on -EPIPE and -EPROTO (bnc#1012382).\n - cdc-acm: apply quirk for card reader (bsc#1060279).\n - cdrom: factor out common open_for_* code (bsc#1048585).\n - cdrom: turn off autoclose by default (bsc#1080813).\n - cdrom: wait for tray to close (bsc#1048585).\n - ceph: fix incorrect snaprealm when adding caps (bsc#1081735).\n - ceph: fix un-balanced fsc->writeback_count update (bsc#1081735).\n - ceph: more accurate statfs (bsc#1077068).\n - cfg80211: check dev_set_name() return value (bnc#1012382).\n - cfg80211: fix cfg80211_beacon_dup (bnc#1012382).\n - cifs: dump IPC tcon in debug proc file (bsc#1071306).\n - cifs: Fix autonegotiate security settings mismatch (bnc#1012382).\n - cifs: Fix missing put_xid in cifs_file_strict_mmap (bnc#1012382).\n - cifs: make IPC a regular tcon (bsc#1071306).\n - cifs: use tcon_ipc instead of use_ipc parameter of SMB2_ioctl\n (bsc#1071306).\n - cifs: zero sensitive data when freeing (bnc#1012382).\n - clk: fix a panic error caused by accessing NULL pointer (bnc#1012382).\n - clk: imx6: refine hdmi_isfr's parent to make HDMI work on i.MX6 SoCs w/o\n VPU (bnc#1012382).\n - clk: mediatek: add the option for determining PLL source clock\n (bnc#1012382).\n - clk: tegra: Fix cclk_lp divisor register (bnc#1012382).\n - config: arm64: enable HARDEN_BRANCH_PREDICTOR\n - config: arm64: enable UNMAP_KERNEL_AT_EL0\n - console/dummy: leave .con_font_get set to NULL (bnc#1012382).\n - cpufreq: Add Loongson machine dependencies (bnc#1012382).\n - cpuidle: fix broadcast control when broadcast can not be entered\n (bnc#1012382).\n - cpuidle: powernv: Pass correct drv->cpumask for registration\n (bnc#1012382).\n - cpuidle: Validate cpu_dev in cpuidle_add_sysfs() (bnc#1012382).\n - crypto: aesni - handle zero length dst buffer (bnc#1012382).\n - crypto: af_alg - whitelist mask and type (bnc#1012382).\n - crypto: algapi - fix NULL dereference in crypto_remove_spawns()\n (bnc#1012382).\n - crypto: caam - fix endless loop when DECO acquire fails (bnc#1012382).\n - crypto: chacha20poly1305 - validate the digest size (bnc#1012382).\n - crypto: chelsio - select CRYPTO_GF128MUL (bsc#1048325).\n - crypto: cryptd - pass through absence of ->setkey() (bnc#1012382).\n - crypto: crypto4xx - increase context and scatter ring buffer elements\n (bnc#1012382).\n - crypto: deadlock between crypto_alg_sem/rtnl_mutex/genl_mutex\n (bnc#1012382).\n - crypto: hash - introduce crypto_hash_alg_has_setkey() (bnc#1012382).\n - crypto: mcryptd - protect the per-CPU queue with a lock (bnc#1012382).\n - crypto: n2 - cure use after free (bnc#1012382).\n - crypto: pcrypt - fix freeing pcrypt instances (bnc#1012382).\n - crypto: poly1305 - remove ->setkey() method (bnc#1012382).\n - crypto: s5p-sss - Fix completing crypto request in IRQ handler\n (bnc#1012382).\n - crypto: s5p-sss - Fix kernel Oops in AES-ECB mode (bnc#1012382).\n - crypto: tcrypt - fix buffer lengths in test_aead_speed() (bnc#1012382).\n - crypto: tcrypt - fix S/G table for test_aead_speed() (bnc#1012382).\n - crypto: x86/twofish-3way - Fix %rbp usage (bnc#1012382).\n - cw1200: fix bogus maybe-uninitialized warning (bnc#1012382).\n - cxl: Check if vphb exists before iterating over AFU devices\n (bsc#1066223).\n - dax: Pass detailed error code from __dax_fault() (bsc#1072484).\n - dccp: do not restart ccid2_hc_tx_rto_expire() if sk in closed state\n (bnc#1012382).\n - dccp: limit sk_filter trim to payload (bsc#1042286).\n - Deadly BUG_ON() had not been removed after all, merely relocated.\n (bnc#1083056)\n - delay: add poll_event_interruptible (bsc#1048585).\n - dell-wmi, dell-laptop: depends DMI (bnc#1012382).\n - direct-io: Fix sleep in atomic due to sync AIO (bsc#1084888).\n - dlm: fix double list_del() (bsc#1082795).\n - dlm: fix malfunction of dlm_tool caused by debugfs changes (bsc#1077704).\n - dlm: fix NULL pointer dereference in send_to_sock() (bsc#1082795).\n - dmaengine: at_hdmac: fix potential NULL pointer dereference in\n atc_prep_dma_interleaved (bnc#1012382).\n - dmaengine: dmatest: fix container_of member in dmatest_callback\n (bnc#1012382).\n - dmaengine: dmatest: move callback wait queue to thread context\n (bnc#1012382).\n - dmaengine: Fix array index out of bounds warning in __get_unmap_pool()\n (bnc#1012382).\n - dmaengine: ioat: Fix error handling path (bnc#1012382).\n - dmaengine: jz4740: disable/unprepare clk if probe fails (bnc#1012382).\n - dmaengine: pl330: fix double lock (bnc#1012382).\n - dmaengine: ti-dma-crossbar: Correct am335x/am43xx mux value type\n (bnc#1012382).\n - dmaengine: zx: fix build warning (bnc#1012382).\n - dm btree: fix serious bug in btree_split_beneath() (bnc#1012382).\n - dm bufio: fix shrinker scans when (nr_to_scan < retain_target)\n (bnc#1012382).\n - dm: correctly handle chained bios in dec_pending() (bnc#1012382).\n - dm thin metadata: THIN_MAX_CONCURRENT_LOCKS should be 6 (bnc#1012382).\n - dn_getsockoptdecnet: move nf_{get/set}sockopt outside sock lock\n (bnc#1012382).\n - do not put symlink bodies in pagecache into highmem (bnc#1012382).\n - dpt_i2o: fix build warning (bnc#1012382).\n - driver-core: use 'dev' argument in dev_dbg_ratelimited stub\n (bnc#1012382).\n - drivers/firmware: Expose psci_get_version through psci_ops structure\n (bsc#1068032).\n - drivers: hv: balloon: Correctly update onlined page count (fate#315887,\n bsc#1082632).\n - drivers: hv: balloon: Initialize last_post_time on startup (fate#315887,\n bsc#1082632).\n - drivers: hv: balloon: Show the max dynamic memory assigned (fate#315887,\n bsc#1082632).\n - drivers: hv: kvp: Use MAX_ADAPTER_ID_SIZE for translating adapter id\n (fate#315887, bsc#1082632).\n - drivers: hv: Turn off write permission on the hypercall page\n (fate#315887, bsc#1082632).\n - drivers: hv: vmbus: Fix rescind handling (fate#315887, bsc#1082632).\n - drivers: hv: vmbus: Fix rescind handling issues (fate#315887,\n bsc#1082632).\n - drivers/net: fix eisa_driver probe section mismatch (bnc#1012382).\n - drm/amd/amdgpu: fix console deadlock if late init failed (bnc#1012382).\n - drm/amdgpu: Avoid leaking PM domain on driver unbind (v2) (bnc#1012382).\n - drm/amdgpu: Fix SDMA load/unload sequence on HWS disabled mode\n (bnc#1012382).\n - drm/amdkfd: Fix SDMA oversubsription handling (bnc#1012382).\n - drm/amdkfd: Fix SDMA ring buffer size calculation (bnc#1012382).\n - drm/armada: fix leak of crtc structure (bnc#1012382).\n - drm/edid: Add 6 bpc quirk for CPT panel in Asus UX303LA (bnc#1012382).\n - drm: extra printk() wrapper macros (bnc#1012382).\n - drm/exynos/decon5433: set STANDALONE_UPDATE_F on output enablement\n (bnc#1012382).\n - drm/exynos: gem: Drop NONCONTIG flag for buffers allocated without IOMMU\n (bnc#1012382).\n - drm/gma500: remove helper function (bnc#1012382).\n - drm/gma500: Sanity-check pipe index (bnc#1012382).\n - drm/nouveau: hide gcc-4.9 -Wmaybe-uninitialized (bnc#1012382).\n - drm/nouveau/pci: do a msi rearm on init (bnc#1012382).\n - drm/omap: fix dmabuf mmap for dma_alloc'ed buffers (bnc#1012382).\n - drm/radeon: adjust tested variable (bnc#1012382).\n - drm/radeon: reinstate oland workaround for sclk (bnc#1012382).\n - drm/radeon/si: add dpm quirk for Oland (bnc#1012382).\n - drm: rcar-du: Fix race condition when disabling planes at CRTC stop\n (bnc#1012382).\n - drm: rcar-du: Use the VBK interrupt for vblank events (bnc#1012382).\n - drm: Require __GFP_NOFAIL for the legacy drm_modeset_lock_all\n (bnc#1012382).\n - drm/ttm: check the return value of kzalloc (bnc#1012382).\n - drm/vmwgfx: Potential off by one in vmw_view_add() (bnc#1012382).\n - drm/vmwgfx: use *_32_bits() macros (bnc#1012382).\n - dynamic-debug-howto: fix optional/omitted ending line number to be LARGE\n instead of 0 (bnc#1012382).\n - e1000: fix disabling already-disabled warning (bnc#1012382).\n - edac, i5000, i5400: Fix definition of NRECMEMB register (bnc#1012382).\n - edac, i5000, i5400: Fix use of MTR_DRAM_WIDTH macro (bnc#1012382).\n - edac, octeon: Fix an uninitialized variable warning (bnc#1012382).\n - edac, sb_edac: Fix missing break in switch (bnc#1012382).\n - efi/esrt: Cleanup bad memory map log messages (bnc#1012382).\n - efi: Move some sysfs files to be read-only by root (bnc#1012382).\n - em28xx: only use mt9v011 if camera support is enabled (bnc#1012382).\n - enable DST_CACHE in non-vanilla configs except s390x/zfcpdump\n - eventpoll.h: add missing epoll event masks (bnc#1012382).\n - ext4: correct documentation for grpid mount option (bnc#1012382).\n - ext4: do not unnecessarily allocate buffer in recently_deleted()\n (bsc#1080344).\n - ext4: fix crash when a directory's i_size is too small (bnc#1012382).\n - ext4: Fix data exposure after failed AIO DIO (bsc#1069135 bsc#1082864).\n - ext4: Fix ENOSPC handling in DAX page fault handle (bsc#1072484).\n - ext4: fix fdatasync(2) after fallocate(2) operation (bnc#1012382).\n - ext4: save error to disk in __ext4_grp_locked_error() (bnc#1012382).\n - f2fs: fix a bug caused by NULL extent tree (bsc#1082478).\n - fbdev: auo_k190x: avoid unused function warnings (bnc#1012382).\n - fbdev: controlfb: Add missing modes to fix out of bounds access\n (bnc#1012382).\n - fbdev: s6e8ax0: avoid unused function warnings (bnc#1012382).\n - fbdev: sis: enforce selection of at least one backend (bnc#1012382).\n - fbdev: sm712fb: avoid unused function warnings (bnc#1012382).\n - Fix build error in vma.c (bnc#1012382).\n - Fixup hang when calling 'nvme list' on all paths down (bsc#1070052).\n - fjes: Fix wrong netdevice feature flags (bnc#1012382).\n - flow_dissector: properly cap thoff field (bnc#1012382).\n - fm10k: ensure we process SM mbx when processing VF mbx (bnc#1012382).\n - fork: clear thread stack upon allocation (bsc#1077560).\n - fs: Avoid invalidation in interrupt context in dio_complete()\n (bsc#1073407 bsc#1069135).\n - fscache: Fix the default for fscache_maybe_release_page() (bnc#1012382).\n - fs: Fix page cache inconsistency when mixing buffered and AIO DIO\n (bsc#1073407 bsc#1069135).\n - fs: invalidate page cache after end_io() in dio completion (bsc#1073407\n bsc#1069135).\n - ftrace: Remove incorrect setting of glob search field (bnc#1012382).\n - futex: Prevent overflow by strengthen input validation (bnc#1012382).\n - gcov: disable for COMPILE_TEST (bnc#1012382).\n - geneve: fix populating tclass in geneve_get_v6_dst (bsc#1042286).\n - genirq/msi: Add stubs for get_cached_msi_msg/pci_write_msi_msg\n (bnc#1012382).\n - genirq/msi: Fix populating multiple interrupts (bsc#1085047).\n - genirq: Restore trigger settings in irq_modify_status() (bsc#1085056).\n - genksyms: Fix segfault with invalid declarations (bnc#1012382).\n - gfs2: Take inode off order_write list when setting jdata flag\n (bnc#1012382).\n - gianfar: fix a flooded alignment reports because of padding issue\n (bnc#1012382).\n - go7007: add MEDIA_CAMERA_SUPPORT dependency (bnc#1012382).\n - gpio: altera: Use handle_level_irq when configured as a level_high\n (bnc#1012382).\n - gpio: ath79: add missing MODULE_DESCRIPTION/LICENSE (bnc#1012382).\n - gpio: intel-mid: Fix build warning when !CONFIG_PM (bnc#1012382).\n - gpio: iop: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE (bnc#1012382).\n - gpio: xgene: mark PM functions as __maybe_unused (bnc#1012382).\n - grace: replace BUG_ON by WARN_ONCE in exit_net hook (bnc#1012382).\n - gre: build header correctly for collect metadata tunnels (bsc#1042286).\n - gre: do not assign header_ops in collect metadata mode (bsc#1042286).\n - gre: do not keep the GRE header around in collect medata mode\n (bsc#1042286).\n - gre: reject GUE and FOU in collect metadata mode (bsc#1042286).\n - hdpvr: hide unused variable (bnc#1012382).\n - hid: chicony: Add support for another ASUS Zen AiO keyboard\n (bnc#1012382).\n - hid: quirks: Fix keyboard + touchpad on Toshiba Click Mini not working\n (bnc#1012382).\n - hid: xinmo: fix for out of range for THT 2P arcade controller\n (bnc#1012382).\n - hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close\n (bnc#1012382).\n - hrtimer: Ensure POSIX compliance (relative CLOCK_REALTIME hrtimers)\n (bnc#1012382).\n - hrtimer: Reset hrtimer cpu base proper on CPU hotplug (bnc#1012382).\n - hv: kvp: Avoid reading past allocated blocks from KVP file (bnc#1012382).\n - hv_netvsc: Add ethtool handler to set and get TCP hash levels\n (fate#315887, bsc#1082632).\n - hv_netvsc: Add ethtool handler to set and get UDP hash levels\n (fate#315887, bsc#1082632).\n - hv_netvsc: Add initialization of tx_table in netvsc_device_add()\n (fate#315887, bsc#1082632).\n - hv_netvsc: Change the hash level variable to bit flags (fate#315887,\n bsc#1082632).\n - hv_netvsc: Clean up an unused parameter in rndis_filter_set_rss_param()\n (fate#315887, bsc#1082632).\n - hv_netvsc: Clean up unused parameter from netvsc_get_hash()\n (fate#315887, bsc#1082632).\n - hv_netvsc: Clean up unused parameter from netvsc_get_rss_hash_opts()\n (fate#315887, bsc#1082632).\n - hv_netvsc: copy_to_send buf can be void (fate#315887, bsc#1082632).\n - hv_netvsc: do not need local xmit_more (fate#315887, bsc#1082632).\n - hv_netvsc: drop unused macros (fate#315887, bsc#1082632).\n - hv_netvsc: empty current transmit aggregation if flow blocked\n (fate#315887, bsc#1082632).\n - hv_netvsc: Fix rndis_filter_close error during netvsc_remove\n (fate#315887, bsc#1082632).\n - hv_netvsc: fix send buffer failure on MTU change (fate#315887,\n bsc#1082632).\n - hv_netvsc: Fix the channel limit in netvsc_set_rxfh() (fate#315887,\n bsc#1082632).\n - hv_netvsc: Fix the real number of queues of non-vRSS cases (fate#315887,\n bsc#1082632).\n - hv_netvsc: Fix the receive buffer size limit (fate#315887, bsc#1082632).\n - hv_netvsc: Fix the TX/RX buffer default sizes (fate#315887, bsc#1082632).\n - hv_netvsc: hide warnings about uninitialized/missing rndis device\n (fate#315887, bsc#1082632).\n - hv_netvsc: make const array ver_list static, reduces object code size\n (fate#315887, bsc#1082632).\n - hv_netvsc: optimize initialization of RNDIS header (fate#315887,\n bsc#1082632).\n - hv_netvsc: pass netvsc_device to receive callback (fate#315887,\n bsc#1082632).\n - hv_netvsc: remove open_cnt reference count (fate#315887, bsc#1082632).\n - hv_netvsc: Rename ind_table to rx_table (fate#315887, bsc#1082632).\n - hv_netvsc: Rename tx_send_table to tx_table (fate#315887, bsc#1082632).\n - hv_netvsc: replace divide with mask when computing padding (fate#315887,\n bsc#1082632).\n - hv_netvsc: report stop_queue and wake_queue (fate#315887, bsc#1082632).\n - hv_netvsc: simplify function args in receive status path (fate#315887,\n bsc#1082632).\n - hv_netvsc: Simplify the limit check in netvsc_set_channels()\n (fate#315887, bsc#1082632).\n - hv_netvsc: track memory allocation failures in ethtool stats\n (fate#315887, bsc#1082632).\n - hv: preserve kabi by keeping hv_do_hypercall (bnc#1082632).\n - hwmon: (asus_atk0110) fix uninitialized data access (bnc#1012382).\n - hwmon: (pmbus) Use 64bit math for DIRECT format values (bnc#1012382).\n - hwrng: exynos - use __maybe_unused to hide pm functions (bnc#1012382).\n - hyper-v: trace vmbus_ongpadl_created() (fate#315887, bsc#1082632).\n - hyper-v: trace vmbus_ongpadl_torndown() (fate#315887, bsc#1082632).\n - hyper-v: trace vmbus_on_message() (fate#315887, bsc#1082632).\n - hyper-v: trace vmbus_on_msg_dpc() (fate#315887, bsc#1082632).\n - hyper-v: trace vmbus_onoffer() (fate#315887, bsc#1082632).\n - hyper-v: trace vmbus_onoffer_rescind() (fate#315887, bsc#1082632).\n - hyper-v: trace vmbus_onopen_result() (fate#315887, bsc#1082632).\n - hyper-v: trace vmbus_onversion_response() (fate#315887, bsc#1082632).\n - hyper-v: Use fast hypercall for HVCALL_SIGNAL_EVENT (fate#315887,\n bsc#1082632).\n - i2c: remove __init from i2c_register_board_info() (bnc#1012382).\n - i40iw: Account for IPv6 header when setting MSS (bsc#1024376\n FATE#321249).\n - i40iw: Allocate a sdbuf per CQP WQE (bsc#1024376 FATE#321249).\n - i40iw: Cleanup AE processing (bsc#1024376 FATE#321249).\n - i40iw: Clear CQP Head/Tail during initialization (bsc#1024376\n FATE#321249).\n - i40iw: Correct ARP index mask (bsc#1024376 FATE#321249).\n - i40iw: Correct Q1/XF object count equation (bsc#969476 FATE#319648\n bsc#969477 FATE#319816).\n - i40iw: Do not allow posting WR after QP is flushed (bsc#1024376\n FATE#321249).\n - i40iw: Do not free sqbuf when event is I40IW_TIMER_TYPE_CLOSE\n (bsc#1024376 FATE#321249).\n - i40iw: Do not generate CQE for RTR on QP flush (bsc#1024376 FATE#321249).\n - i40iw: Do not retransmit MPA request after it is ACKed (bsc#1024376\n FATE#321249).\n - i40iw: Fixes for static checker warnings (bsc#1024376 FATE#321249).\n - i40iw: Fix sequence number for the first partial FPDU (bsc#969476\n FATE#319648 bsc#969477 FATE#319816).\n - i40iw: Fix the connection ORD value for loopback (bsc#969476 FATE#319648\n bsc#969477 FATE#319816).\n - i40iw: Ignore AE source field in AEQE for some AEs (bsc#1024376\n FATE#321249).\n - i40iw: Move cqp_cmd_head init to CQP initialization (bsc#1024376\n FATE#321249).\n - i40iw: Move exception_lan_queue to VSI structure (bsc#1024376\n FATE#321249).\n - i40iw: Move MPA request event for loopback after connect (bsc#1024376\n FATE#321249).\n - i40iw: Notify user of established connection after QP in RTS\n (bsc#1024376 FATE#321249).\n - i40iw: Reinitialize IEQ on MTU change (bsc#1024376 FATE#321249).\n - i40iw: Remove limit on re-posting AEQ entries to HW (bsc#969476\n FATE#319648 bsc#969477 FATE#319816).\n - i40iw: Selectively teardown QPs on IP addr change event (bsc#1024376\n FATE#321249).\n - i40iw: Validate correct IRD/ORD connection parameters (bsc#969476\n FATE#319648 bsc#969477 FATE#319816).\n - ib/hfi1: Fix for potential refcount leak in hfi1_open_file()\n (FATE#321231 FATE#321473).\n - ib/hfi1: Fix misspelling in comment (bsc#973818, fate#319242).\n - ib/hfi1: Prevent kernel QP post send hard lockups (bsc#973818\n FATE#319242).\n - ib/ipoib: Fix lockdep issue found on ipoib_ib_dev_heavy_flush\n (git-fixes).\n - ib/ipoib: Fix race condition in neigh creation (bsc#1022595 FATE#322350).\n - ib/ipoib: Grab rtnl lock on heavy flush when calling ndo_open/stop\n (bnc#1012382).\n - ib/iser: Handle lack of memory management extentions correctly\n (bsc#1082979).\n - ib/mlx4: Fix incorrectly releasing steerable UD QPs when have only ETH\n ports (bnc#1012382).\n - ib/mlx4: Fix mlx4_ib_alloc_mr error flow (bnc#1012382).\n - ib/mlx4: Increase maximal message size under UD QP (bnc#1012382).\n - ib/mlx5: Assign send CQ and recv CQ of UMR QP (bnc#1012382).\n - ib/mlx5: Serialize access to the VMA list (bsc#1015342 FATE#321688\n bsc#1015343 FATE#321689).\n - ibmvnic: Account for VLAN header length in TX buffers (bsc#1085239).\n - ibmvnic: Account for VLAN tag in L2 Header descriptor (bsc#1085239).\n - ibmvnic: Allocate and request vpd in init_resources (bsc#1076872).\n - ibmvnic: Allocate max queues stats buffers (bsc#1081498).\n - ibmvnic: Allocate statistics buffers during probe (bsc#1082993).\n - ibmvnic: Check for NULL skb's in NAPI poll routine (bsc#1081134,\n git-fixes).\n - ibmvnic: Clean RX pool buffers during device close (bsc#1081134).\n - ibmvnic: Clean up device close (bsc#1084610).\n - ibmvnic: Correct goto target for tx irq initialization failure\n (bsc#1082223).\n - ibmvnic: Do not attempt to login if RX or TX queues are not allocated\n (bsc#1082993).\n - ibmvnic: Do not disable device during failover or partition migration\n (bsc#1084610).\n - ibmvnic: Do not handle RX interrupts when not up (bsc#1075066).\n - ibmvnic: Ensure that buffers are NULL after free (bsc#1080014).\n - ibmvnic: Fix early release of login buffer (bsc#1081134, git-fixes).\n - ibmvnic: fix empty firmware version and errors cleanup (bsc#1079038).\n - ibmvnic: fix firmware version when no firmware level has been provided\n by the VIOS server (bsc#1079038).\n - ibmvnic: Fix IP offload control buffer (bsc#1076899).\n - ibmvnic: Fix IPv6 packet descriptors (bsc#1076899).\n - ibmvnic: Fix login buffer memory leaks (bsc#1081134).\n - ibmvnic: Fix NAPI structures memory leak (bsc#1081134).\n - ibmvnic: Fix pending MAC address changes (bsc#1075627).\n - ibmvnic: Fix recent errata commit (bsc#1085239).\n - ibmvnic: Fix rx queue cleanup for non-fatal resets (bsc#1080014).\n - ibmvnic: Fix TX descriptor tracking again (bsc#1082993).\n - ibmvnic: Fix TX descriptor tracking (bsc#1081491).\n - ibmvnic: Free and re-allocate scrqs when tx/rx scrqs change\n (bsc#1081498).\n - ibmvnic: Free RX socket buffer in case of adapter error (bsc#1081134).\n - ibmvnic: Generalize TX pool structure (bsc#1085224).\n - ibmvnic: Handle TSO backing device errata (bsc#1085239).\n - ibmvnic: Harden TX/RX pool cleaning (bsc#1082993).\n - ibmvnic: Improve TX buffer accounting (bsc#1085224).\n - ibmvnic: Keep track of supplementary TX descriptors (bsc#1081491).\n - ibmvnic: Make napi usage dynamic (bsc#1081498).\n - ibmvnic: Modify buffer size and number of queues on failover\n (bsc#1076872).\n - ibmvnic: Move active sub-crq count settings (bsc#1081498).\n - ibmvnic: Pad small packets to minimum MTU size (bsc#1085239).\n - ibmvnic: queue reset when CRQ gets closed during reset (bsc#1080263).\n - ibmvnic: Remove skb->protocol checks in ibmvnic_xmit (bsc#1080384).\n - ibmvnic: Rename active queue count variables (bsc#1081498).\n - ibmvnic: Reorganize device close (bsc#1084610).\n - ibmvnic: Report queue stops and restarts as debug output (bsc#1082993).\n - ibmvnic: Reset long term map ID counter (bsc#1080364).\n - ibmvnic: Revert to previous mtu when unsupported value requested\n (bsc#1076872).\n - ibmvnic: Split counters for scrq/pools/napi (bsc#1082223).\n - ibmvnic: Update and clean up reset TX pool routine (bsc#1085224).\n - ibmvnic: Update release RX pool routine (bsc#1085224).\n - ibmvnic: Update TX and TX completion routines (bsc#1085224).\n - ibmvnic: Update TX pool initialization routine (bsc#1085224).\n - ibmvnic: Wait for device response when changing MAC (bsc#1078681).\n - ibmvnic: Wait until reset is complete to set carrier on (bsc#1081134).\n - ib/qib: Fix comparison error with qperf compare/swap test (FATE#321231\n FATE#321473).\n - ib/rdmavt: restore IRQs on error path in rvt_create_ah() (bsc#973818,\n fate#319242).\n - ib/srpt: Disable RDMA access by the initiator (bnc#1012382).\n - ib/srpt: Fix ACL lookup during login (bsc#1024296 FATE#321265).\n - ib/srpt: Remove an unused structure member (bsc#1082979).\n - idle: i7300: add PCI dependency (bnc#1012382).\n - igb: check memory allocation failure (bnc#1012382).\n - igb: Free IRQs when device is hotplugged (bnc#1012382).\n - iio: adc: axp288: remove redundant duplicate const on\n axp288_adc_channels (bnc#1012382).\n - iio: adis_lib: Initialize trigger before requesting interrupt\n (bnc#1012382).\n - iio: buffer: check if a buffer has been set up when poll is called\n (bnc#1012382).\n - ima: fix hash algorithm initialization (bnc#1012382).\n - inet: frag: release spinlock before calling icmp_send() (bnc#1012382).\n - input: 88pm860x-ts - fix child-node lookup (bnc#1012382).\n - input: elantech - add new icbody type 15 (bnc#1012382).\n - input: i8042 - add TUXEDO BU1406 (N24_25BU) to the nomux list\n (bnc#1012382).\n - input: tca8418_keypad - hide gcc-4.9 -Wmaybe-uninitialized warning\n (bnc#1012382).\n - input: tca8418_keypad - remove double read of key event register\n (git-fixes).\n - input: trackpoint - force 3 buttons if 0 button is reported\n (bnc#1012382).\n - input: twl4030-vibra - fix sibling-node lookup (bnc#1012382).\n - input: twl6040-vibra - fix child-node lookup (bnc#1012382).\n - input: twl6040-vibra - fix DT node memory management (bnc#1012382).\n - intel_th: pci: Add Gemini Lake support (bnc#1012382).\n - iommu/amd: Add align parameter to alloc_irq_index() (bsc#975772).\n - iommu/amd: Enforce alignment for MSI IRQs (bsc#975772).\n - iommu/amd: Fix alloc_irq_index() increment (bsc#975772).\n - iommu/amd: Limit the IOVA page range to the specified addresses\n (fate#321026).\n - iommu/arm-smmu-v3: Cope with duplicated Stream IDs (bsc#1084926).\n - iommu/arm-smmu-v3: Do not free page table ops twice (bnc#1012382).\n - iommu/iova: Fix underflow bug in __alloc_and_insert_iova_range\n (bsc#1084928).\n - iommu/vt-d: Fix scatterlist offset handling (bnc#1012382).\n - iommu/vt-d: Use domain instead of cache fetching (bsc#975772).\n - ip6_gre: remove the incorrect mtu limit for ipgre tap (bsc#1022912\n FATE#321246).\n - ip6mr: fix stale iterator (bnc#1012382).\n - ip6_tunnel: disable dst caching if tunnel is dual-stack (bnc#1012382).\n - ipc/msg: introduce msgctl(MSG_STAT_ANY) (bsc#1072689).\n - ipc/sem: introduce semctl(SEM_STAT_ANY) (bsc#1072689).\n - ipc/shm: introduce shmctl(SHM_STAT_ANY) (bsc#1072689).\n - ipmi: Stop timers before cleaning up the module (bnc#1012382).\n - ip_tunnel: fix preempt warning in ip tunnel creation/updating\n (bnc#1012382).\n - ip_tunnel: replace dst_cache with generic implementation (bnc#1012382).\n - ipv4: allow local fragmentation in ip_finish_output_gso() (bsc#1042286).\n - ipv4: fix checksum annotation in udp4_csum_init (bsc#1042286).\n - ipv4: Fix use-after-free when flushing FIB tables (bnc#1012382).\n - ipv4: igmp: guard against silly MTU values (bnc#1012382).\n - ipv4: ipconfig: avoid unused ic_proto_used symbol (bnc#1012382).\n - ipv4: Make neigh lookup keys for loopback/point-to-point devices be\n INADDR_ANY (bnc#1012382).\n - ipv4: update comment to document GSO fragmentation cases (bsc#1042286).\n - ipv6: datagram: Refactor dst lookup and update codes to a new function\n (bsc#1042286).\n - ipv6: datagram: Refactor flowi6 init codes to a new function\n (bsc#1042286).\n - ipv6: datagram: Update dst cache of a connected datagram sk during pmtu\n update (bsc#1042286).\n - ipv6: fix checksum annotation in udp6_csum_init (bsc#1042286).\n - ipv6: Fix getsockopt() for sockets with default IPV6_AUTOFLOWLABEL\n (bnc#1012382).\n - ipv6: fix possible mem leaks in ipv6_make_skb() (bnc#1012382).\n - ipv6: fix udpv6 sendmsg crash caused by too small MTU (bnc#1012382).\n - ipv6: icmp6: Allow icmp messages to be looped back (bnc#1012382).\n - ipv6/ila: fix nlsize calculation for lwtunnel (bsc#1042286).\n - ipv6: ip6_make_skb() needs to clear cork.base.dst (git-fixes).\n - ipv6: mcast: better catch silly mtu values (bnc#1012382).\n - ipv6: remove unused in6_addr struct (bsc#1042286).\n - ipv6: reorder icmpv6_init() and ip6_mr_init() (bnc#1012382).\n - ipv6: tcp: fix endianness annotation in tcp_v6_send_response\n (bsc#1042286).\n - ipv6: udp: Do a route lookup and update during release_cb (bsc#1042286).\n - ipvlan: Add the skb->mark as flow4's member to lookup route\n (bnc#1012382).\n - ipvlan: fix ipv6 outbound device (bnc#1012382).\n - ipvlan: fix multicast processing (bsc#1042286).\n - ipvlan: fix various issues in ipvlan_process_multicast() (bsc#1042286).\n - ipvlan: remove excessive packet scrubbing (bsc#1070799).\n - irda: vlsi_ir: fix check for DMA mapping errors (bnc#1012382).\n - irqchip/crossbar: Fix incorrect type of register size (bnc#1012382).\n - irqchip/gic-v3: Use wmb() instead of smb_wmb() in gic_raise_softirq()\n (bnc#1012382).\n - iscsi_iser: Re-enable 'iser_pi_guard' module parameter (bsc#1062129).\n - iscsi-target: fix memory leak in lio_target_tiqn_addtpg() (bnc#1012382).\n - iscsi-target: Make TASK_REASSIGN use proper se_cmd->cmd_kref\n (bnc#1012382).\n - isdn: eicon: reduce stack size of sig_ind function (bnc#1012382).\n - isdn: icn: remove a #warning (bnc#1012382).\n - isdn: kcapi: avoid uninitialized data (bnc#1012382).\n - isdn: sc: work around type mismatch warning (bnc#1012382).\n - iser-target: Fix possible use-after-free in connection establishment\n error (FATE#321732).\n - iw_cxgb4: Only validate the MSN for successful completions (bnc#1012382).\n - ixgbe: fix use of uninitialized padding (bnc#1012382).\n - jffs2: Fix use-after-free bug in jffs2_iget()'s error handling path\n (git-fixes).\n - jump_label: Invoke jump_label_test() via early_initcall() (bnc#1012382).\n - Kabi: Keep KVM stable after enable s390 wire up bpb feature\n (bsc#1076805).\n - kABI: protect struct bpf_map (kabi).\n - kABI: protect struct cpuinfo_x86 (kabi).\n - kABI: protect struct ethtool_link_settings (bsc#1085050).\n - kABI: protect struct ip_tunnel and reintroduce ip_tunnel_dst_reset_all\n (kabi).\n - kABI: protect struct ipv6_pinfo (kabi).\n - kABI: protect struct t10_alua_tg_pt_gp (kabi).\n - kABI: protect struct usbip_device (kabi).\n - kABI: reintroduce crypto_poly1305_setkey (kabi).\n - kabi: restore kabi after "net: replace dst_cache ip6_tunnel\n implementation with the generic one" (bsc#1082897).\n - kabi: restore nft_set_elem_destroy() signature (bsc#1042286).\n - kabi: restore rhashtable_insert_slow() signature (bsc#1042286).\n - kabi/severities: add sclp to KABI ignore list\n - kabi/severities: add __x86_indirect_thunk_rsp\n - kabi/severities: arm64: ignore cpu capability array\n - kabi/severities: as per bsc#1068569 we can ignore XFS kabi The gods have\n spoken, let there be light.\n - kabi/severities: do not care about stuff_RSB\n - kabi/severities: Ignore kvm for KABI severities\n - kabi: uninline sk_receive_skb() (bsc#1042286).\n - kaiser: fix compile error without vsyscall (bnc#1012382).\n - kaiser: fix intel_bts perf crashes (bnc#1012382).\n - kaiser: Set _PAGE_NX only if supported (bnc#1012382).\n - kasan: rework Kconfig settings (bnc#1012382).\n - kbuild: add '-fno-stack-check' to kernel build options (bnc#1012382).\n - kbuild: modversions for EXPORT_SYMBOL() for asm (bsc#1074621\n bsc#1068032).\n - kbuild: pkg: use --transform option to prefix paths in tar (bnc#1012382).\n - kdb: Fix handling of kallsyms_symbol_next() return value (bnc#1012382).\n - kernel/acct.c: fix the acct->needcheck check in check_free_space()\n (bnc#1012382).\n - kernel/async.c: revert "async: simplify lowest_in_progress()"\n (bnc#1012382).\n - kernel: fix rwlock implementation (bnc#1079886, LTC#164371).\n - kernel: make groups_sort calling a responsibility group_info allocators\n (bnc#1012382).\n - kernel/signal.c: protect the SIGNAL_UNKILLABLE tasks from\n !sig_kernel_only() signals (bnc#1012382).\n - kernel/signal.c: protect the traced SIGNAL_UNKILLABLE tasks from SIGKILL\n (bnc#1012382).\n - kernel/signal.c: remove the no longer needed SIGNAL_UNKILLABLE check in\n complete_signal() (bnc#1012382).\n - kernfs: fix regression in kernfs_fop_write caused by wrong type\n (bnc#1012382).\n - keys: add missing permission check for request_key() destination\n (bnc#1012382).\n - keys: encrypted: fix buffer overread in valid_master_desc()\n (bnc#1012382).\n - kmemleak: add scheduling point to kmemleak_scan() (bnc#1012382).\n - kprobes/x86: Disable preemption in ftrace-based jprobes (bnc#1012382).\n - kpti: Rename to PAGE_TABLE_ISOLATION (bnc#1012382).\n - kpti: Report when enabled (bnc#1012382).\n - kvm: add X86_LOCAL_APIC dependency (bnc#1012382).\n - kvm: ARM64: fix phy counter access failure in guest (bsc#1085015).\n - kvm: arm/arm64: Check pagesize when allocating a hugepage at Stage 2\n (bsc#1079029).\n - kvm: Fix stack-out-of-bounds read in write_mmio (bnc#1012382).\n - kvm: nVMX: Fix kernel panics induced by illegal INVEPT/INVVPID types\n (bnc#1012382).\n - kvm: nVMX: Fix races when sending nested PI while dest enters/leaves L2\n (bnc#1012382).\n - kvm: nVMX: invvpid handling improvements (bnc#1012382).\n - kvm: nVMX: kmap() can't fail (bnc#1012382).\n - kvm: nVMX: reset nested_run_pending if the vCPU is going to be reset\n (bnc#1012382).\n - kvm: nVMX: VMCLEAR should not cause the vCPU to shut down (bnc#1012382).\n - kvm: nVMX: vmx_complete_nested_posted_interrupt() can't fail\n (bnc#1012382).\n - kvm: pci-assign: do not map smm memory slot pages in vt-d page tables\n (bnc#1012382).\n - kvm: PPC: Book3S PR: Fix svcpu copying with preemption enabled\n (bsc#1066223).\n - kvm: s390: Add operation exception interception handler (FATE#324070,\n LTC#158959).\n - kvm: s390: Add sthyi emulation (FATE#324070, LTC#158959).\n - kvm: s390: Enable all facility bits that are known good for passthrough\n (bsc#1076805).\n - kvm: s390: Enable all facility bits that are known good for passthrough\n (FATE#324071, LTC#158956).\n - kvm: s390: Extend diag 204 fields (FATE#324070, LTC#158959).\n - kvm: s390: Fix STHYI buffer alignment for diag224 (FATE#324070,\n LTC#158959).\n - kvm: s390: instruction-execution-protection support (LTC#162428).\n - kvm: s390: Introduce BCD Vector Instructions to the guest (FATE#324072,\n LTC#158953).\n - kvm: s390: Introduce Vector Enhancements facility 1 to the guest\n (FATE#324072, LTC#158953).\n - kvm: s390: Limit sthyi execution (FATE#324070, LTC#158959).\n - kvm: s390: Populate mask of non-hypervisor managed facility bits\n (FATE#324071, LTC#158956).\n - kvm: s390: wire up bpb feature (bsc#1076805).\n - kvm: VMX: clean up declaration of VPID/EPT invalidation types\n (bnc#1012382).\n - kvm: VMX: Fix enable VPID conditions (bnc#1012382).\n - kvm: VMX: Fix rflags cache during vCPU reset (bnc#1012382).\n - kvm: VMX: Make indirect call speculation safe (bnc#1012382).\n - kvm: VMX: remove I/O port 0x80 bypass on Intel hosts (bnc#1012382).\n - kvm: vmx: Scrub hardware GPRs at VM-exit (bnc#1012382 bsc#1068032).\n - kvm: x86: Add memory barrier on vmcs field lookup (bnc#1012382).\n - kvm: x86: correct async page present tracepoint (bnc#1012382).\n - kvm: x86: Do not re-execute instruction when not passing CR2 value\n (bnc#1012382).\n - kvm: x86: emulator: Return to user-mode on L1 CPL=0 emulation failure\n (bnc#1012382).\n - kvm: x86: fix escape of guest dr6 to the host (bnc#1012382).\n - kvm: X86: Fix load RFLAGS w/o the fixed bit (bnc#1012382).\n - kvm: X86: Fix operand/address-size during instruction decoding\n (bnc#1012382).\n - kvm: x86: fix RSM when PCID is non-zero (bnc#1012382).\n - kvm: x86: ioapic: Clear Remote IRR when entry is switched to\n edge-triggered (bnc#1012382).\n - kvm: x86: ioapic: Fix level-triggered EOI and IOAPIC reconfigure race\n (bnc#1012382).\n - kvm: x86: ioapic: Preserve read-only values in the redirection table\n (bnc#1012382).\n - kvm: x86: Make indirect calls in emulator speculation safe (bnc#1012382).\n - kvm/x86: Reduce retpoline performance impact in\n slot_handle_level_range(), by always inlining iterator helper methods\n (bnc#1012382).\n - l2tp: cleanup l2tp_tunnel_delete calls (bnc#1012382).\n - l2tp: fix use-after-free during module unload (bsc#1042286).\n - lan78xx: Fix failure in USB Full Speed (bnc#1012382).\n - led: core: Fix brightness setting when setting delay_off=0 (bnc#1012382).\n - leds: do not overflow sysfs buffer in led_trigger_show (bsc#1080464).\n - libata: apply MAX_SEC_1024 to all LITEON EP1 series devices\n (bnc#1012382).\n - libata: drop WARN from protocol error in ata_sff_qc_issue()\n (bnc#1012382).\n - libceph: check kstrndup() return value (bsc#1081735).\n - lib/genalloc.c: make the avail variable an atomic_long_t (bnc#1012382).\n - lib/mpi: Fix umul_ppmm() for MIPS64r6 (bnc#1012382).\n - lib/uuid.c: introduce a few more generic helpers (fate#315887,\n bsc#1082632).\n - lib/uuid.c: use correct offset in uuid parser (fate#315887, bsc#1082632).\n - livepatch: introduce shadow variable API (bsc#1082299 fate#313296).\n Shadow variables support.\n - livepatch: __kgr_shadow_get_or_alloc() is local to shadow.c (bsc#1082299\n fate#313296). Shadow variables support.\n - lockd: fix "list_add double add" caused by legacy signal interface\n (bnc#1012382).\n - loop: fix concurrent lo_open/lo_release (bnc#1012382).\n - mac80211: fix the update of path metric for RANN frame (bnc#1012382).\n - mac80211: mesh: drop frames appearing to be from us (bnc#1012382).\n - macvlan: Only deliver one copy of the frame to the macvlan interface\n (bnc#1012382).\n - Make DST_CACHE a silent config option (bnc#1012382).\n - mdio-sun4i: Fix a memory leak (bnc#1012382).\n - md: more open-coded offset_in_page() (bsc#1076110).\n - md/raid1: Use a new variable to count flighting sync\n requests(bsc#1083048)\n - media: cxusb, dib0700: ignore XC2028_I2C_FLUSH (bnc#1012382).\n - media: dvb: i2c transfers over usb cannot be done from stack\n (bnc#1012382).\n - media: dvb-usb-v2: lmedm04: Improve logic checking of warm start\n (bnc#1012382).\n - media: dvb-usb-v2: lmedm04: move ts2020 attach to dm04_lme2510_tuner\n (bnc#1012382).\n - media: r820t: fix r820t_write_reg for KASAN (bnc#1012382).\n - media: s5k6aa: describe some function parameters (bnc#1012382).\n - media: soc_camera: soc_scale_crop: add missing\n MODULE_DESCRIPTION/AUTHOR/LICENSE (bnc#1012382).\n - media: ts2020: avoid integer overflows on 32 bit machines (bnc#1012382).\n - media: usbtv: add a new usbid (bnc#1012382).\n - media: v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF\n (bnc#1012382).\n - media: v4l2-compat-ioctl32.c: avoid sizeof(type) (bnc#1012382).\n - media: v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32\n (bnc#1012382).\n - media: v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32\n (bnc#1012382).\n - media: v4l2-compat-ioctl32.c: do not copy back the result for certain\n errors (bnc#1012382).\n - media: v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type\n (bnc#1012382).\n - media: v4l2-compat-ioctl32.c: fix ctrl_is_pointer (bnc#1012382).\n - media: v4l2-compat-ioctl32.c: fix the indentation (bnc#1012382).\n - media: v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs\n (bnc#1012382).\n - media: v4l2-compat-ioctl32.c: move 'helper' functions to\n __get/put_v4l2_format32 (bnc#1012382).\n - media: v4l2-compat-ioctl32: Copy v4l2_window->global_alpha (bnc#1012382).\n - media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic\n (bnc#1012382).\n - media: v4l2-ioctl.c: do not copy back the result for -ENOTTY\n (bnc#1012382).\n - mfd: cros ec: spi: Do not send first message too soon (bnc#1012382).\n - mfd: twl4030-audio: Fix sibling-node lookup (bnc#1012382).\n - mfd: twl6040: Fix child-node lookup (bnc#1012382).\n - MIPS: Also verify sizeof `elf_fpreg_t' with PTRACE_SETREGSET\n (bnc#1012382).\n - MIPS: AR7: ensure the port type's FCR value is used (bnc#1012382).\n - MIPS: Consistently handle buffer counter with PTRACE_SETREGSET\n (bnc#1012382).\n - MIPS: Disallow outsized PTRACE_SETREGSET NT_PRFPREG regset accesses\n (bnc#1012382).\n - MIPS: Factor out NT_PRFPREG regset access helpers (bnc#1012382).\n - MIPS: Fix an FCSR access API regression with NT_PRFPREG and MSA\n (bnc#1012382).\n - MIPS: Guard against any partial write attempt with PTRACE_SETREGSET\n (bnc#1012382).\n - MIPS: math-emu: Fix final emulation phase for certain instructions\n (bnc#1012382).\n - MIPS: Validate PR_SET_FP_MODE prctl(2) requests against the ABI of the\n task (bnc#1012382).\n - mlxsw: reg: Fix SPVMLR max record count (bnc#1012382).\n - mlxsw: reg: Fix SPVM max record count (bnc#1012382).\n - mm: avoid returning VM_FAULT_RETRY from ->page_mkwrite handlers\n (bnc#1012382).\n - mmc: bcm2835: Do not overwrite max frequency unconditionally\n (bsc#983145, git-fixes).\n - mmc: mediatek: Fixed bug where clock frequency could be set wrong\n (bnc#1012382).\n - mm: drop unused pmdp_huge_get_and_clear_notify() (bnc#1012382).\n - mm/early_ioremap: Fix boot hang with earlyprintk=efi,keep (bnc#1012382).\n - mm: Handle 0 flags in _calc_vm_trans() macro (bnc#1012382).\n - mm: hide a #warning for COMPILE_TEST (bnc#1012382).\n - mm/kmemleak.c: make cond_resched() rate-limiting more efficient\n (git-fixes).\n - mm/mprotect: add a cond_resched() inside change_pmd_range()\n (bnc#1077871, bnc#1078002).\n - mm: pin address_space before dereferencing it while isolating an LRU\n page (bnc#1081500).\n - mm,vmscan: Make unregister_shrinker() no-op if register_shrinker()\n failed (bnc#1012382).\n - mm/vmstat: Make NR_TLB_REMOTE_FLUSH_RECEIVED available even on UP\n (bnc#1012382).\n - mn10300/misalignment: Use SIGSEGV SEGV_MAPERR to report a failed user\n copy (bnc#1012382).\n - modsign: hide openssl output in silent builds (bnc#1012382).\n - module: Add retpoline tag to VERMAGIC (bnc#1012382).\n - module/retpoline: Warn about missing retpoline in module (bnc#1012382).\n - module: set __jump_table alignment to 8 (bnc#1012382).\n - more bio_map_user_iov() leak fixes (bnc#1012382).\n - mpt3sas: Do not mark fw_event workqueue as WQ_MEM_RECLAIM (bsc#1078583).\n - mptfusion: hide unused seq_mpt_print_ioc_summary function (bnc#1012382).\n - mtd: cfi: convert inline functions to macros (bnc#1012382).\n - mtd: cfi: enforce valid geometry configuration (bnc#1012382).\n - mtd: ichxrom: maybe-uninitialized with gcc-4.9 (bnc#1012382).\n - mtd: maps: add __init attribute (bnc#1012382).\n - mtd: nand: brcmnand: Disable prefetch by default (bnc#1012382).\n - mtd: nand: denali_pci: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE\n (bnc#1012382).\n - mtd: nand: Fix nand_do_read_oob() return value (bnc#1012382).\n - mtd: nand: gpmi: Fix failure when a erased page has a bitflip at BBM\n (bnc#1012382).\n - mtd: nand: sunxi: Fix ECC strength choice (bnc#1012382).\n - mtd: sh_flctl: pass FIFO as physical address (bnc#1012382).\n - mvpp2: fix multicast address filter (bnc#1012382).\n - ncpfs: fix unused variable warning (bnc#1012382).\n - ncr5380: shut up gcc indentation warning (bnc#1012382).\n - net: add dst_cache support (bnc#1012382).\n - net: Allow neigh contructor functions ability to modify the primary_key\n (bnc#1012382).\n - net/appletalk: Fix kernel memory disclosure (bnc#1012382).\n - net: arc_emac: fix arc_emac_rx() error paths (bnc#1012382).\n - net: avoid skb_warn_bad_offload on IS_ERR (bnc#1012382).\n - net: bcmgenet: correct MIB access of UniMAC RUNT counters (bnc#1012382).\n - net: bcmgenet: correct the RBUF_OVFL_CNT and RBUF_ERR_CNT MIB values\n (bnc#1012382).\n - net: bcmgenet: power down internal phy if open or resume fails\n (bnc#1012382).\n - net: bcmgenet: Power up the internal PHY before probing the MII\n (bnc#1012382).\n - net: bcmgenet: reserved phy revisions must be checked first\n (bnc#1012382).\n - net: bridge: fix early call to br_stp_change_bridge_id and plug newlink\n leaks (bnc#1012382).\n - net: cdc_ncm: initialize drvflags before usage (bnc#1012382).\n - net: core: fix module type in sock_diag_bind (bnc#1012382).\n - net: Do not allow negative values for busy_read and busy_poll sysctl\n interfaces (bnc#1012382).\n - net: dst_cache_per_cpu_dst_set() can be static (bnc#1012382).\n - net: ena: add detection and recovery mechanism for handling\n missed/misrouted MSI-X (bsc#1083548).\n - net: ena: add new admin define for future support of IPv6 RSS\n (bsc#1083548).\n - net: ena: add power management ops to the ENA driver (bsc#1083548).\n - net: ena: add statistics for missed tx packets (bsc#1083548).\n - net: ena: fix error handling in ena_down() sequence (bsc#1083548).\n - net: ena: fix race condition between device reset and link up setup\n (bsc#1083548).\n - net: ena: fix rare kernel crash when bar memory remap fails\n (bsc#1083548).\n - net: ena: fix wrong max Tx/Rx queues on ethtool (bsc#1083548).\n - net: ena: improve ENA driver boot time (bsc#1083548).\n - net: ena: increase ena driver version to 1.3.0 (bsc#1083548).\n - net: ena: increase ena driver version to 1.5.0 (bsc#1083548).\n - net: ena: reduce the severity of some printouts (bsc#1083548).\n - net: ena: remove legacy suspend suspend/resume support (bsc#1083548).\n - net: ena: Remove redundant unlikely() (bsc#1083548).\n - net: ena: unmask MSI-X only after device initialization is completed\n (bsc#1083548).\n - net: ethernet: cavium: Correct Cavium Thunderx NIC driver names\n accordingly to module name (bsc#1085011).\n - net: ethernet: xilinx: Mark XILINX_LL_TEMAC broken on 64-bit\n (bnc#1012382).\n - net: ethtool: Add back transceiver type (bsc#1085050).\n - net: ethtool: remove error check for legacy setting transceiver type\n (bsc#1085050).\n - net: fec: fix multicast filtering hardware setup (bnc#1012382).\n - netfilter: bridge: honor frag_max_size when refragmenting (bnc#1012382).\n - netfilter: do not track fragmented packets (bnc#1012382).\n - netfilter: drop outermost socket lock in getsockopt() (bnc#1012382).\n - netfilter: ebtables: CONFIG_COMPAT: do not trust userland offsets\n (bsc#1085107).\n - netfilter: ebtables: fix erroneous reject of last rule (bsc#1085107).\n - netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in\n clusterip_tg_check() (bnc#1012382).\n - netfilter: ipvs: avoid unused variable warnings (bnc#1012382).\n - netfilter: ipvs: Fix inappropriate output of procfs (bnc#1012382).\n - netfilter: nfnetlink_queue: fix secctx memory leak (bnc#1012382).\n - netfilter: nfnetlink_queue: fix timestamp attribute (bsc#1074134).\n - netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash\n table (bnc#1012382).\n - netfilter: nfnl_cthelper: Fix memory leak (bnc#1012382).\n - netfilter: nfnl_cthelper: fix runtime expectation policy updates\n (bnc#1012382).\n - netfilter: nf_queue: Make the queue_handler pernet (bnc#1012382).\n - netfilter: nf_tables: fix a wrong check to skip the inactive rules\n (bsc#1042286).\n - netfilter: nf_tables: fix inconsistent element expiration calculation\n (bsc#1042286).\n - netfilter: nf_tables: fix *leak* when expr clone fail (bsc#1042286).\n - netfilter: nf_tables: fix race when create new element in dynset\n (bsc#1042286).\n - netfilter: on sockopt() acquire sock lock only in the required scope\n (bnc#1012382).\n - netfilter: tee: select NF_DUP_IPV6 unconditionally (bsc#1042286).\n - netfilter: x_tables: avoid out-of-bounds reads in\n xt_request_find_{match|target} (bnc#1012382).\n - netfilter: x_tables: fix int overflow in xt_alloc_table_info()\n (bnc#1012382).\n - netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert\n (bnc#1012382).\n - netfilter: xt_socket: fix transparent match for IPv6 request sockets\n (bsc#1042286).\n - net: Fix double free and memory corruption in get_net_ns_by_id()\n (bnc#1012382).\n - net: gianfar_ptp: move set_fipers() to spinlock protecting area\n (bnc#1012382).\n - net: hns: add ACPI mode support for ethtool -p (bsc#1084041).\n - net: hp100: remove unnecessary #ifdefs (bnc#1012382).\n - net: igmp: add a missing rcu locking section (bnc#1012382).\n - net: igmp: fix source address check for IGMPv3 reports (bnc#1012382).\n - net: igmp: Use correct source address on IGMPv3 reports (bnc#1012382).\n - net: initialize msg.msg_flags in recvfrom (bnc#1012382).\n - net: ipv4: fix for a race condition in raw_sendmsg (bnc#1012382).\n - net/ipv4: Introduce IPSKB_FRAG_SEGS bit to inet_skb_parm.flags\n (bsc#1042286).\n - netlink: fix nla_put_{u8,u16,u32} for KASAN (bnc#1012382).\n - net/mac80211/debugfs.c: prevent build failure with CONFIG_UBSAN=y\n (bnc#1012382).\n - net/mlx5: Avoid NULL pointer dereference on steering cleanup\n (bsc#1015342 FATE#321688 bsc#1015343 FATE#321689).\n - net/mlx5: Cleanup IRQs in case of unload failure (bsc#966170 FATE#320225\n bsc#966172 FATE#320226).\n - net/mlx5e: Add refcount to VXLAN structure (bsc#966170 FATE#320225\n bsc#966172 FATE#320226).\n - net/mlx5e: Fix features check of IPv6 traffic (bsc#966170 FATE#320225\n bsc#966172 FATE#320226).\n - net/mlx5e: Fix fixpoint divide exception in mlx5e_am_stats_compare\n (bsc#1015342).\n - net/mlx5e: Fix loopback self test when GRO is off (bsc#1015342\n FATE#321688 bsc#1015343 FATE#321689).\n - net/mlx5e: Fix possible deadlock of VXLAN lock (bsc#966170 FATE#320225\n bsc#966172 FATE#320226).\n - net/mlx5e: Fix wrong delay calculation for overflow check scheduling\n (bsc#966170 FATE#320225 bsc#966172 FATE#320226).\n - net/mlx5e: Prevent possible races in VXLAN control flow (bsc#966170\n FATE#320225 bsc#966172 FATE#320226).\n - net/mlx5e: Verify inline header size do not exceed SKB linear size\n (bsc#1015342 FATE#321688 bsc#1015343 FATE#321689).\n - net/mlx5: Fix rate limit packet pacing naming and struct (bsc#1015342\n FATE#321688 bsc#1015343 FATE#321689).\n - net/mlx5: Stay in polling mode when command EQ destroy fails (bsc#966170\n FATE#320225 bsc#966172 FATE#320226).\n - net/mlx5: Use 128B cacheline size for 128B or larger cachelines\n (bsc#1015342 FATE#321688 bsc#1015343 FATE#321689).\n - net: mvmdio: disable/unprepare clocks in EPROBE_DEFER case (bnc#1012382).\n - net: mvneta: clear interface link status on port disable (bnc#1012382).\n - net: mvneta: eliminate wrong call to handle rx descriptor error\n (fate#319899).\n - net: mvneta: use proper rxq_number in loop on rx queues (fate#319899).\n - net/packet: fix a race in packet_bind() and packet_notifier()\n (bnc#1012382).\n - net: phy: at803x: Change error to EINVAL for invalid MAC (bnc#1012382).\n - net: phy: Keep reporting transceiver type (bsc#1085050).\n - net: phy: micrel: ksz9031: reconfigure autoneg after phy autoneg\n workaround (bnc#1012382).\n - net: qdisc_pkt_len_init() should be more robust (bnc#1012382).\n - net: qmi_wwan: add Sierra EM7565 1199:9091 (bnc#1012382).\n - net: qmi_wwan: Add USB IDs for MDM6600 modem on Motorola Droid 4\n (bnc#1012382).\n - net: reevalulate autoflowlabel setting after sysctl setting\n (bnc#1012382).\n - net: replace dst_cache ip6_tunnel implementation with the generic one\n (bnc#1012382).\n - net: Resend IGMP memberships upon peer notification (bnc#1012382).\n - net_sched: red: Avoid devision by zero (bnc#1012382).\n - net_sched: red: Avoid illegal values (bnc#1012382).\n - net: sctp: fix array overrun read on sctp_timer_tbl (bnc#1012382).\n - net/smc: fix NULL pointer dereference on sock_create_kern() error path\n (bsc#1082979).\n - net: stmmac: enable EEE in MII, GMII or RGMII only (bnc#1012382).\n - net: systemport: Pad packet before inserting TSB (bnc#1012382).\n - net: systemport: Utilize skb_put_padto() (bnc#1012382).\n - net: tcp: close sock if net namespace is exiting (bnc#1012382).\n - netvsc: allow controlling send/recv buffer size (fate#315887,\n bsc#1082632).\n - netvsc: allow driver to be removed even if VF is present (fate#315887,\n bsc#1082632).\n - netvsc: check error return when restoring channels and mtu (fate#315887,\n bsc#1082632).\n - netvsc: cleanup datapath switch (fate#315887, bsc#1082632).\n - netvsc: do not signal host twice if empty (fate#315887, bsc#1082632).\n - netvsc: fix deadlock betwen link status and removal (fate#315887,\n bsc#1082632).\n - netvsc: increase default receive buffer size (fate#315887, bsc#1082632).\n - netvsc: keep track of some non-fatal overload conditions (fate#315887,\n bsc#1082632).\n - netvsc: no need to allocate send/receive on numa node (fate#315887,\n bsc#1082632).\n - netvsc: propagate MAC address change to VF slave (fate#315887,\n bsc#1082632).\n - netvsc: remove unnecessary cast of void pointer (fate#315887,\n bsc#1082632).\n - netvsc: remove unnecessary check for NULL hdr (fate#315887, bsc#1082632).\n - netvsc: whitespace cleanup (fate#315887, bsc#1082632).\n - net: vxlan: lwt: Fix vxlan local traffic (bsc#1042286).\n - net: vxlan: lwt: Use source ip address during route lookup (bsc#1042286).\n - net: wimax/i2400m: fix NULL-deref at probe (bnc#1012382).\n - nfs: Add a cond_resched() to nfs_commit_release_pages() (bsc#1077779).\n - nfs: commit direct writes even if they fail partially (bnc#1012382).\n - nfsd: auth: Fix gid sorting when rootsquash enabled (bnc#1012382).\n - nfsd: check for use of the closed special stateid (bnc#1012382).\n - nfsd: CLOSE SHOULD return the invalid special stateid for NFSv4.x (x>0)\n (bnc#1012382).\n - nfsd: Ensure we check stateid validity in the seqid operation checks\n (bnc#1012382).\n - NFSD: fix nfsd_minorversion(.., NFSD_AVAIL) (bnc#1012382).\n - NFSD: fix nfsd_reset_versions for NFSv4 (bnc#1012382).\n - nfs: Do not convert nfs_idmap_cache_timeout to jiffies (git-fixes).\n - nfs: Do not take a reference on fl->fl_file for LOCK operation\n (bnc#1012382).\n - nfs: fix a deadlock in nfs client initialization (bsc#1074198).\n - NFS: Fix a typo in nfs_rename() (bnc#1012382).\n - nfs/pnfs: fix nfs_direct_req ref leak when i/o falls back to the mds\n (bnc#1012382).\n - nfs: reject request for id_legacy key without auxdata (bnc#1012382).\n - nfs: Trunking detection should handle ERESTARTSYS/EINTR (bsc#1074198).\n - NFSv4.1 respect server's max size in CREATE_SESSION (bnc#1012382).\n - NFSv4: Fix client recovery when server reboots multiple times\n (bnc#1012382).\n - nohz: Prevent a timer interrupt storm in tick_nohz_stop_sched_tick()\n (bnc#1012382).\n - n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD)\n (bnc#1012382).\n - nvme_fc: cleanup io completion (bsc#1079609).\n - nvme_fc: correct abort race condition on resets (bsc#1079609).\n - nvme_fc: correct hang in nvme_ns_remove() (bsc#1075811).\n - nvme_fc: fix abort race on teardown with lld reject (bsc#1083750).\n - nvme_fc: fix ctrl create failures racing with workq items (bsc#1076982).\n - nvme_fc: fix rogue admin cmds stalling teardown (bsc#1075811).\n - nvme_fc: io timeout should defer abort to ctrl reset (bsc#1085054).\n - nvme-fc: kick admin requeue list on disconnect (bsc#1077241).\n - nvme-fc: merge error on sles12sp3 for reset_work (bsc#1079195).\n - nvme_fc: minor fixes on sqsize (bsc#1076760).\n - nvme_fc: on remoteport reuse, set new nport_id and role (bsc#1076760).\n - nvme_fc: rework sqsize handling (bsc#1076760).\n - nvme: Fix managing degraded controllers (bnc#1012382).\n - nvme: Fix setting logical block format when revalidating (bsc#1079313).\n - nvme: only start KATO if the controller is live (bsc#1083387).\n - nvme-pci: clean up CMB initialization (bsc#1082979).\n - nvme-pci: clean up SMBSZ bit definitions (bsc#1082979).\n - nvme-pci: consistencly use ctrl->device for logging (bsc#1082979).\n - nvme-pci: fix typos in comments (bsc#1082979).\n - nvme-pci: Remap CMB SQ entries on every controller reset (bsc#1082979).\n - nvme-pci: Remove watchdog timer (bsc#1066163).\n - nvme-pci: Use PCI bus address for data/queues in CMB (bsc#1082979).\n - nvme: Quirks for PM1725 controllers (bsc#1082979).\n - nvme_rdma: clear NVME_RDMA_Q_LIVE bit if reconnect fails (bsc#1083770).\n - nvme-rdma: fix concurrent reset and reconnect (bsc#1082979).\n - nvme: remove nvme_revalidate_ns (bsc#1079313).\n - ocfs2: return error when we attempt to access a dirty bh in jbd2\n (bsc#1070404).\n - openrisc: fix issue handling 8 byte get_user calls (bnc#1012382).\n - openvswitch: fix the incorrect flow action alloc size (bnc#1012382).\n - ovl: fix failure to fsync lower dir (bnc#1012382).\n - ovs/geneve: fix rtnl notifications on iface deletion (bsc#1042286).\n - ovs/gre: fix rtnl notifications on iface deletion (bsc#1042286).\n - ovs/gre,geneve: fix error path when creating an iface (bsc#1042286).\n - ovs/vxlan: fix rtnl notifications on iface deletion (bsc#1042286).\n - packet: fix crash in fanout_demux_rollover() (bnc#1012382).\n - parisc: Fix alignment of pa_tlb_lock in assembly on 32-bit SMP kernel\n (bnc#1012382).\n - parisc: Hide Diva-built-in serial aux and graphics card (bnc#1012382).\n - partially revert tipc improve link resiliency when rps is activated\n (bsc#1068038).\n - PCI/AER: Report non-fatal errors only to the affected endpoint\n (bnc#1012382).\n - pci/ASPM: Do not retrain link if ASPM not possible (bnc#1071892).\n - PCI: Avoid bus reset if bridge itself is broken (bnc#1012382).\n - PCI: Create SR-IOV virtfn/physfn links before attaching driver\n (bnc#1012382).\n - PCI: Detach driver before procfs & sysfs teardown on device remove\n (bnc#1012382).\n - pci: hv: Do not sleep in compose_msi_msg() (fate#315887, bsc#1082632).\n - pci: keystone: Fix interrupt-controller-node lookup (bnc#1012382).\n - pci/MSI: Fix msi_desc->affinity memory leak when freeing MSI IRQs\n (bsc#1082979).\n - PCI/PME: Handle invalid data when reading Root Status (bnc#1012382).\n - PCI / PM: Force devices to D0 in pci_pm_thaw_noirq() (bnc#1012382).\n - perf bench numa: Fixup discontiguous/sparse numa nodes (bnc#1012382).\n - perf symbols: Fix symbols__fixup_end heuristic for corner cases\n (bnc#1012382).\n - perf test attr: Fix ignored test case result (bnc#1012382).\n - perf top: Fix window dimensions change handling (bnc#1012382).\n - perf/x86: Shut up false-positive -Wmaybe-uninitialized warning\n (bnc#1012382).\n - phy: work around 'phys' references to usb-nop-xceiv devices\n (bnc#1012382).\n - pinctrl: adi2: Fix Kconfig build problem (bnc#1012382).\n - pinctrl: st: add irq_request/release_resources callbacks (bnc#1012382).\n - pinctrl: sunxi: Fix A80 interrupt pin bank (bnc#1012382).\n - pipe: avoid round_pipe_size() nr_pages overflow on 32-bit (bnc#1012382).\n - pktcdvd: Fix pkt_setup_dev() error path (bnc#1012382).\n - platform/x86: intel_mid_thermal: Fix suspend handlers unused warning\n (bnc#1012382).\n - pm / devfreq: Propagate error from devfreq_add_device() (bnc#1012382).\n - pm / wakeirq: Fix unbalanced IRQ enable for wakeirq (bsc#1031717).\n - posix-timer: Properly check sigevent->sigev_notify (bnc#1012382).\n - power: bq27xxx_battery: mark some symbols __maybe_unused (bnc#1012382).\n - powerpc/64: Add macros for annotating the destination of rfid/hrfid\n (bsc#1068032, bsc#1075087).\n - powerpc/64: Convert fast_exception_return to use RFI_TO_USER/KERNEL\n (bsc#1068032, bsc#1075087).\n - powerpc/64: Convert the syscall exit path to use RFI_TO_USER/KERNEL\n (bsc#1068032, bsc#1075087).\n - powerpc/64: Fix flush_(d|i)cache_range() called from modules\n (FATE#315275 LTC#103998 bnc#1012382 bnc#863764).\n - powerpc/64s: Add EX_SIZE definition for paca exception save areas\n (bsc#1068032, bsc#1075087).\n - powerpc/64s: Add support for RFI flush of L1-D cache (bsc#1068032,\n bsc#1075087).\n - powerpc/64s: Allow control of RFI flush via debugfs (bsc#1068032,\n bsc#1075087).\n - powerpc/64s: Convert slb_miss_common to use RFI_TO_USER/KERNEL\n (bsc#1068032, bsc#1075087).\n - powerpc/64s: Fix RFI flush dependency on HARDLOCKUP_DETECTOR\n (bnc#1012382).\n - powerpc/64s: Improve RFI L1-D cache flush fallback (bsc#1068032,\n bsc#1075087).\n - powerpc/64s: Simple RFI macro conversions (bsc#1068032, bsc#1075087).\n - powerpc/64s: Support disabling RFI flush with no_rfi_flush and nopti\n (bsc#1068032, bsc#1075087).\n - powerpc/64s: Wire up cpu_show_meltdown() (bsc#1068032).\n - powerpc/asm: Allow including ppc_asm.h in asm files (bsc#1068032,\n bsc#1075087).\n - powerpc: Do not preempt_disable() in show_cpuinfo() (bsc#1066223).\n - powerpc/ipic: Fix status get and status clear (bnc#1012382).\n - powerpc/numa: Ensure nodes initialized for hotplug (FATE#322022,\n bsc#1081514).\n - powerpc/numa: Invalidate numa_cpu_lookup_table on cpu remove\n (bsc#1081512).\n - powerpc/numa: Use ibm,max-associativity-domains to discover possible\n nodes (FATE#322022, bsc#1081514).\n - powerpc/perf: Dereference BHRB entries safely (bsc#1066223).\n - powerpc/perf: Fix oops when grouping different pmu events (bnc#1012382).\n - powerpc/perf/hv-24x7: Fix incorrect comparison in memord (bnc#1012382).\n - powerpc/powernv: Check device-tree for RFI flush settings (bsc#1068032,\n bsc#1075087).\n - powerpc/powernv/cpufreq: Fix the frequency read by /proc/cpuinfo\n (bnc#1012382).\n - powerpc/powernv: Fix MCE handler to avoid trashing CR0/CR1 registers\n (bsc#1066223).\n - powerpc/powernv/ioda2: Gracefully fail if too many TCE levels requested\n (bnc#1012382).\n - powerpc/powernv: Move IDLE_STATE_ENTER_SEQ macro to cpuidle.h\n (bsc#1066223).\n - powerpc/powernv: Support firmware disable of RFI flush (bsc#1068032,\n bsc#1075087).\n - powerpc/pseries: Fix cpu hotplug crash with memoryless nodes\n (FATE#322022, bsc#1081514).\n - powerpc/pseries: include linux/types.h in asm/hvcall.h (bsc#1068032,\n bsc#1075087).\n - powerpc/pseries: Introduce H_GET_CPU_CHARACTERISTICS (bsc#1068032,\n bsc#1075087).\n - powerpc/pseries: Query hypervisor for RFI flush settings (bsc#1068032,\n bsc#1075087).\n - powerpc/pseries: rfi-flush: Call setup_rfi_flush() after LPM migration\n (bsc#1068032, bsc#1075087).\n - powerpc/pseries/rfi-flush: Call setup_rfi_flush() after LPM migration\n (bsc#1068032, bsc#1075087).\n - powerpc/pseries: Support firmware disable of RFI flush (bsc#1068032,\n bsc#1075087).\n - powerpc/rfi-flush: Add DEBUG_RFI config option (bsc#1068032,\n bsc#1075087).\n - powerpc/rfi-flush: Make setup_rfi_flush() not __init (bsc#1068032,\n bsc#1075087).\n - powerpc/rfi-flush: Move RFI flush fields out of the paca (unbreak kABI)\n (bsc#1068032, bsc#1075087).\n - powerpc/rfi-flush: Move the logic to avoid a redo into the sysfs code\n (bsc#1068032, bsc#1075087).\n - powerpc/rfi-flush: prevent crash when changing flush type to fallback\n after system boot (bsc#1068032, bsc#1075087).\n - powerpc: Simplify module TOC handling (bnc#1012382).\n - power: reset: zx-reboot: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE\n (bnc#1012382).\n - ppp: Destroy the mutex when cleanup (bnc#1012382).\n - pppoe: take ->needed_headroom of lower device into account on xmit\n (bnc#1012382).\n - profile: hide unused functions when !CONFIG_PROC_FS (bnc#1012382).\n - Provide a function to create a NUL-terminated string from unterminated\n data (bnc#1012382).\n - pwc: hide unused label (bnc#1012382).\n - qla2xxx: Add changes for devloss timeout in driver (bsc#1084427).\n - qla2xxx: Add FC-NVMe abort processing (bsc#1084427).\n - qla2xxx: asynchronous pci probing (bsc#1034503).\n - qla2xxx: Cleanup code to improve FC-NVMe error handling (bsc#1084427).\n - qla2xxx: Convert QLA_TGT_ABTS to TARGET_SCF_LOOKUP_LUN_FROM_TAG\n (bsc#1043726,FATE#324770).\n - qla2xxx: do not check login_state if no loop id is assigned\n (bsc#1081681).\n - qla2xxx: ensure async flags are reset correctly (bsc#1081681).\n - qla2xxx: Fix Async GPN_FT for FCP and FC-NVMe scan (bsc#1084427).\n - qla2xxx: Fix FC-NVMe IO abort during driver reset (bsc#1084427).\n - qla2xxx: Fix incorrect tcm_qla2xxx_free_cmd use during TMR ABORT (v2)\n (bsc#1043726,FATE#324770).\n - qla2xxx: Fix n2n_ae flag to prevent dev_loss on PDB change (bsc#1084427).\n - qla2xxx: Fix NVMe entry_type for iocb packet on BE system\n (bsc#1043726,FATE#324770).\n - qla2xxx: Fix retry for PRLI RJT with reason of BUSY (bsc#1084427).\n - qla2xxx: Fixup locking for session deletion (bsc#1081681).\n - qla2xxx: Remove nvme_done_list (bsc#1084427).\n - qla2xxx: Remove unneeded message and minor cleanup for FC-NVMe\n (bsc#1084427).\n - qla2xxx: remove use of FC-specific error codes (bsc#1043726,FATE#324770).\n - qla2xxx: Restore ZIO threshold setting (bsc#1084427).\n - qla2xxx: Return busy if rport going away (bsc#1084427).\n - qla2xxx: Set IIDMA and fcport state before qla_nvme_register_remote()\n (bsc#1084427).\n - qla2xxx: Update driver version to 10.00.00.06-k (bsc#1084427).\n - qlcnic: fix deadlock bug (bnc#1012382).\n - r8152: fix the list rx_done may be used without initialization\n (bnc#1012382).\n - r8152: prevent the driver from transmitting packets with carrier off\n (bnc#1012382).\n - r8169: fix memory corruption on retrieval of hardware statistics\n (bnc#1012382).\n - r8169: fix RTL8168EP take too long to complete driver initialization\n (bnc#1012382).\n - raid5: Set R5_Expanded on parity devices as well as data (bnc#1012382).\n - ravb: Remove Rx overflow log messages (bnc#1012382).\n - rbd: set max_segments to USHRT_MAX (bnc#1012382).\n - RDMA/cma: Avoid triggering undefined behavior (bnc#1012382).\n - rdma/cma: Make sure that PSN is not over max allowed (bnc#1012382).\n - RDMA/i40iw: Remove MSS change support (bsc#1024376 FATE#321249).\n - rdma/uverbs: Protect from command mask overflow (bsc#1082979).\n - rds: Fix NULL pointer dereference in __rds_rdma_map (bnc#1012382).\n - RDS: Heap OOB write in rds_message_alloc_sgs() (bnc#1012382).\n - RDS: null pointer dereference in rds_atomic_free_op (bnc#1012382).\n - regulator: core: Rely on regulator_dev_release to free constraints\n (bsc#1074847).\n - regulator: da9063: Return an error code on probe failure (bsc#1074847).\n - regulator: pwm: Fix regulator ramp delay for continuous mode\n (bsc#1074847).\n - regulator: Try to resolve regulators supplies on registration\n (bsc#1074847).\n - reiserfs: avoid a -Wmaybe-uninitialized warning (bnc#1012382).\n - Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature"\n (bnc#1012382).\n - Revert "Bluetooth: btusb: fix QCA Rome suspend/resume" (bnc#1012382).\n - Revert "drm/armada: Fix compile fail" (bnc#1012382).\n - Revert "Enable DEBUG_RFI"\n - Revert "kaiser: vmstat show NR_KAISERTABLE as nr_overhead" (kabi).\n - Revert "lib/genalloc.c: make the avail variable an atomic_long_t" (kabi).\n - Revert "module: Add retpoline tag to VERMAGIC" (bnc#1012382 kabi).\n - Revert "module: Add retpoline tag to VERMAGIC" (kabi).\n - Revert "net: replace dst_cache ip6_tunnel implementation with the\n generic one" (kabi bnc#1082897).\n - Revert "ocfs2: should wait dio before inode lock in ocfs2_setattr()"\n (bnc#1012382).\n - Revert "power: bq27xxx_battery: Remove unneeded dependency in Kconfig"\n (bnc#1012382).\n - Revert "s390/kbuild: enable modversions for symbols exported from asm"\n (bnc#1012382).\n - Revert "sched/deadline: Use the revised wakeup rule for suspending\n constrained dl tasks" (kabi).\n - Revert "scsi: libsas: align sata_device's rps_resp on a cacheline"\n (kabi).\n - Revert "spi: SPI_FSL_DSPI should depend on HAS_DMA" (bnc#1012382).\n - Revert "userfaultfd: selftest: vm: allow to build in vm/ directory"\n (bnc#1012382).\n - Revert "x86/efi: Build our own page table structures" (bnc#1012382).\n - Revert "x86/efi: Hoist page table switching code into efi_call_virt()"\n (bnc#1012382).\n - Revert "x86/entry/64: Separate cpu_current_top_of_stack from TSS.sp0"\n - Revert "x86/entry/64: Use a per-CPU trampoline stack for IDT entries"\n - Revert "x86/mm/pat: Ensure cpa->pfn only contains page frame numbers"\n (bnc#1012382).\n - rfi-flush: Make DEBUG_RFI a CONFIG option (bsc#1068032, bsc#1075087).\n - rfi-flush: Move the logic to avoid a redo into the debugfs code\n (bsc#1068032, bsc#1075087).\n - rfi-flush: Switch to new linear fallback flush (bsc#1068032,\n bsc#1075087).\n - rhashtable: add rhashtable_lookup_get_insert_key() (bsc#1042286).\n - ring-buffer: Mask out the info bits when returning buffer page length\n (bnc#1012382).\n - route: also update fnhe_genid when updating a route cache (bnc#1012382).\n - route: update fnhe_expires for redirect when the fnhe exists\n (bnc#1012382).\n - rtc: cmos: Initialize hpet timer before irq is registered (bsc#1077592).\n - rtc-opal: Fix handling of firmware error codes, prevent busy loops\n (bnc#1012382).\n - rtc: pcf8563: fix output clock rate (bnc#1012382).\n - rtc: pl031: make interrupt optional (bnc#1012382).\n - rtc: set the alarm to the next expiring timer (bnc#1012382).\n - rtlwifi: fix gcc-6 indentation warning (bnc#1012382).\n - rtlwifi: rtl8821ae: Fix connection lost problem correctly (bnc#1012382).\n - s390: add no-execute support (FATE#324087, LTC#158827).\n - s390: always save and restore all registers on context switch\n (bnc#1012382).\n - s390/cpuinfo: show facilities as reported by stfle (bnc#1076847,\n LTC#163740).\n - s390/dasd: fix handling of internal requests (bsc#1080321).\n - s390/dasd: fix wrongly assigned configuration data (bnc#1012382).\n - s390/dasd: prevent prefix I/O error (bnc#1012382).\n - s390: fix compat system call table (bnc#1012382).\n - s390: fix handling of -1 in set{,fs}[gu]id16 syscalls (bnc#1012382).\n - s390: hypfs: Move diag implementation and data definitions (FATE#324070,\n LTC#158959).\n - s390: kvm: Cpu model support for msa6, msa7 and msa8 (FATE#324069,\n LTC#159031).\n - s390: Make cpc_name accessible (FATE#324070, LTC#158959).\n - s390: Make diag224 public (FATE#324070, LTC#158959).\n - s390/mem_detect: use unsigned longs (FATE#324071, LTC#158956).\n - s390/mm: align swapper_pg_dir to 16k (FATE#324087, LTC#158827).\n - s390/mm: always use PAGE_KERNEL when mapping pages (FATE#324087,\n LTC#158827).\n - s390/noexec: execute kexec datamover without DAT (FATE#324087,\n LTC#158827).\n - s390/oprofile: fix address range for asynchronous stack (bsc#1082979).\n - s390/pageattr: allow kernel page table splitting (FATE#324087,\n LTC#158827).\n - s390/pageattr: avoid unnecessary page table splitting (FATE#324087,\n LTC#158827).\n - s390/pageattr: handle numpages parameter correctly (FATE#324087,\n LTC#158827).\n - s390/pci_dma: improve lazy flush for unmap (bnc#1079886, LTC#163393).\n - s390/pci_dma: improve map_sg (bnc#1079886, LTC#163393).\n - s390/pci_dma: make lazy flush independent from the tlb_refresh bit\n (bnc#1079886, LTC#163393).\n - s390/pci_dma: remove dma address range check (bnc#1079886, LTC#163393).\n - s390/pci_dma: simplify dma address calculation (bnc#1079886, LTC#163393).\n - s390/pci_dma: split dma_update_trans (bnc#1079886, LTC#163393).\n - s390/pci: do not require AIS facility (bnc#1012382).\n - s390/pci: fix dma address calculation in map_sg (bnc#1079886,\n LTC#163393).\n - s390/pci: handle insufficient resources during dma tlb flush\n (bnc#1079886, LTC#163393).\n - s390/pgtable: introduce and use generic csp inline asm (FATE#324087,\n LTC#158827).\n - s390/pgtable: make pmd and pud helper functions available (FATE#324087,\n LTC#158827).\n - s390/qeth: fix underestimated count of buffer elements (bnc#1082089,\n LTC#164529).\n - s390/qeth: no ETH header for outbound AF_IUCV (LTC#156276 bnc#1012382\n bnc#1053472).\n - s390: report new vector facilities (FATE#324088, LTC#158828).\n - s390/runtime instrumentation: simplify task exit handling (bnc#1012382).\n - s390/sclp: Add hmfai field (FATE#324071, LTC#158956).\n - s390/vmem: align segment and region tables to 16k (FATE#324087,\n LTC#158827).\n - s390/vmem: introduce and use SEGMENT_KERNEL and REGION3_KERNEL\n (FATE#324087, LTC#158827).\n - s390/vmem: simplify vmem code for read-only mappings (FATE#324087,\n LTC#158827).\n - sch_dsmark: fix invalid skb_cow() usage (bnc#1012382).\n - sched/deadline: Make sure the replenishment timer fires in the next\n period (bnc#1012382).\n - sched/deadline: Throttle a constrained deadline task activated after the\n deadline (bnc#1012382).\n - sched/deadline: Use deadline instead of period when calculating overflow\n (bnc#1012382).\n - sched/deadline: Use the revised wakeup rule for suspending constrained\n dl tasks (bnc#1012382).\n - sched/deadline: Zero out positive runtime after throttling constrained\n tasks (git-fixes).\n - sched/rt: Up the root domain ref count when passing it around via IPIs\n (bnc#1012382).\n - sched/rt: Use container_of() to get root domain in\n rto_push_irq_work_func() (bnc#1012382).\n - scripts/kernel-doc: Do not fail with status != 0 if error encountered\n with -none (bnc#1012382).\n - scsi: aacraid: Fix hang in kdump (bsc#1022607, FATE#321673).\n - scsi: aacraid: Prevent crash in case of free interrupt during scsi EH\n path (bnc#1012382).\n - scsi: advansys: fix build warning for PCI=n (bnc#1012382).\n - scsi: advansys: fix uninitialized data access (bnc#1012382).\n - scsi: bfa: integer overflow in debugfs (bnc#1012382).\n - scsi: cxgb4i: fix Tx skb leak (bnc#1012382).\n - scsi: do not look for NULL devices handlers by name (bsc#1082373).\n - scsi: fas216: fix sense buffer initialization (bsc#1082979).\n - scsi: fdomain: drop fdomain_pci_tbl when built-in (bnc#1012382).\n - scsi: handle ABORTED_COMMAND on Fujitsu ETERNUS (bsc#1069138).\n - scsi: hisi_sas: directly attached disk LED feature for v2 hw\n (bsc#1083409).\n - scsi: hpsa: cleanup sas_phy structures in sysfs when unloading\n (bnc#1012382).\n - scsi: hpsa: destroy sas transport properties before scsi_host\n (bnc#1012382).\n - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info\n (bnc#1012382).\n - scsi: initio: remove duplicate module device table (bnc#1012382\n bsc#1082979).\n - scsi: initio: remove duplicate module device table (bsc#1082979).\n - scsi: libsas: align sata_device's rps_resp on a cacheline (bnc#1012382).\n - scsi: libsas: fix error when getting phy events (bsc#1082979).\n - scsi: libsas: fix memory leak in sas_smp_get_phy_events() (bsc#1082979).\n - scsi: lpfc: Add WQ Full Logic for NVME Target (bsc#1080656).\n - scsi: lpfc: Allow set of maximum outstanding SCSI cmd limit for a target\n (bsc#1080656).\n - scsi: lpfc: Beef up stat counters for debug (bsc#1076693).\n - scsi: lpfc: correct debug counters for abort (bsc#1080656).\n - scsi: lpfc: do not dereference localport before it has been null checked\n (bsc#1076693).\n - scsi: lpfc: Do not return internal MBXERR_ERROR code from probe function\n (bsc#1082979).\n - scsi: lpfc: fix a couple of minor indentation issues (bsc#1076693).\n - scsi: lpfc: Fix -EOVERFLOW behavior for NVMET and defer_rcv\n (bsc#1076693).\n - scsi: lpfc: Fix header inclusion in lpfc_nvmet (bsc#1080656).\n - scsi: lpfc: Fix infinite wait when driver unregisters a remote NVME port\n (bsc#1076693).\n - scsi: lpfc: Fix IO failure during hba reset testing with nvme io\n (bsc#1080656).\n - scsi: lpfc: Fix issue_lip if link is disabled (bsc#1080656).\n - scsi: lpfc: Fix issues connecting with nvme initiator (bsc#1076693).\n - scsi: lpfc: Fix nonrecovery of NVME controller after cable swap\n (bsc#1080656).\n - scsi: lpfc: Fix PRLI handling when topology type changes (bsc#1080656).\n - scsi: lpfc: Fix receive PRLI handling (bsc#1076693).\n - scsi: lpfc: Fix RQ empty firmware trap (bsc#1080656).\n - scsi: lpfc: Fix SCSI io host reset causing kernel crash (bsc#1080656).\n - scsi: lpfc: Fix SCSI LUN discovery when SCSI and NVME enabled\n (bsc#1076693).\n - scsi: lpfc: Fix soft lockup in lpfc worker thread during LIP testing\n (bsc#1080656).\n - scsi: lpfc: Increase CQ and WQ sizes for SCSI (bsc#1080656).\n - scsi: lpfc: Increase SCSI CQ and WQ sizes (bsc#1076693).\n - scsi: lpfc: Indicate CONF support in NVMe PRLI (bsc#1080656).\n - scsi: lpfc: move placement of target destroy on driver detach\n (bsc#1080656).\n - scsi: lpfc: Treat SCSI Write operation Underruns as an error\n (bsc#1080656).\n - scsi: lpfc: Update 11.4.0.7 modified files for 2018 Copyright\n (bsc#1080656).\n - scsi: lpfc: update driver version to 11.4.0.6 (bsc#1076693).\n - scsi: lpfc: update driver version to 11.4.0.7 (bsc#1080656).\n - scsi: lpfc: Use after free in lpfc_rq_buf_free() (bsc#1037838).\n - scsi: lpfc: Validate adapter support for SRIU option (bsc#1080656).\n - scsi: mpt3sas: Fix IO error occurs on pulling out a drive from RAID1\n volume created on two SATA drive (bnc#1012382).\n - scsi: mvumi: use __maybe_unused to hide pm functions (bnc#1012382).\n - scsi: qla2xxx: Ability to process multiple SGEs in Command SGL for CT\n passthrough commands (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Accelerate SCSI BUSY status generation in target mode\n (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Add ability to autodetect SFP type\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Add ability to send PRLO (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Add ability to use GPNFT/GNNFT for RSCN handling\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Add ATIO-Q processing for INTx mode\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Add boundary checks for exchanges to be offloaded\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Add command completion for error path\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Add debug knob for user control workload\n (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Add debug logging routine for qpair\n (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Added change to enable ZIO for FC-NVMe devices\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Add FC-NVMe command handling (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Add FC-NVMe F/W initialization and transport registration\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Add FC-NVMe port discovery and PRLI handling\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Add function call to qpair for door bell\n (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Add fw_started flags to qpair (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Add lock protection around host lookup\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Add LR distance support from nvram bit\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: add missing includes for qla_isr\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Add option for use reserve exch for ELS\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Add ql2xiniexchg parameter (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Add retry limit for fabric scan logic\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Add support for minimum link speed\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Add switch command to simplify fabric discovery\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Add timeout ability to wait_for_sess_deletion()\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Add XCB counters to debugfs (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Allow ABTS, PURX, RIDA on ATIOQ for ISP83XX/27XX\n (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Allow MBC_GET_PORT_DATABASE to query and save the port\n states (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Allow relogin and session creation after reset\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Allow SNS fabric login to be retried\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Allow target mode to accept PRLI in dual mode\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: avoid unused-function warning (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Change ha->wq max_active value to default\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Changes to support N2N logins (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Chip reset uses wrong lock during IO flush\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Cleanup FC-NVMe code (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Cleanup NPIV host in target mode during config teardown\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Clear fc4f_nvme flag (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Clear loop id after delete (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Combine Active command arrays (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Convert 32-bit LUN usage to 64-bit\n (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Defer processing of GS IOCB calls\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Delay loop id allocation at login\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Do not call abort handler function during chip reset\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Do not call dma_free_coherent with IRQ disabled\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: do not include <generated/utsrelease.h>\n (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Enable Async TMF processing (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Enable ATIO interrupt handshake for ISP27XX\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Enable Target Multi Queue (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Fix abort command deadlock due to spinlock (FATE#320146,\n bsc#966328).\n - scsi: qla2xxx: fix a bunch of typos and spelling mistakes\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix a locking imbalance in qlt_24xx_handle_els()\n (bsc#1082979).\n - scsi: qla2xxx: Fix compile warning (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Fix FC-NVMe LUN discovery (bsc#1083223).\n - scsi: qla2xxx: Fix Firmware dump size for Extended login and Exchange\n Offload (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix GPNFT/GNNFT error handling (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix gpnid error processing (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix incorrect handle for abort IOCB (bsc#1082979).\n - scsi: qla2xxx: Fix login state machine freeze (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix login state machine stuck at GPDB\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix logo flag for qlt_free_session_done()\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix mailbox failure while deleting Queue pairs\n (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Fix memory leak in dual/target mode\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix NPIV host cleanup in target mode\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix NPIV host enable after chip reset\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix NULL pointer access for fcport structure\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix NULL pointer crash due to active timer for ABTS\n (bsc#1082979).\n - scsi: qla2xxx: Fix NULL pointer crash due to probe failure\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix oops in qla2x00_probe_one error path\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix PRLI state check (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix queue ID for async abort with Multiqueue\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix recursion while sending terminate exchange\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix Relogin being triggered too fast\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix re-login for Nport Handle in use\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix remoteport disconnect for FC-NVMe\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix scan state field for fcport (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix session cleanup for N2N (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix slow mem alloc behind lock (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix smatch warning in qla25xx_delete_{rsp|req}_que\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: fix spelling mistake of variable sfp_additonal_info\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix system crash for Notify ack timeout handling\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix system crash in qlt_plogi_ack_unref\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix system crash while triggering FW dump\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix system panic due to pointer access problem\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix target multiqueue configuration\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix task mgmt handling for NPIV (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix warning during port_name debug print\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix warning for code intentation in\n __qla24xx_handle_gpdb_event() (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix warning in qla2x00_async_iocb_timeout()\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Fix WWPN/WWNN in debug message (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Handle PCIe error for driver (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Include Exchange offload/Extended Login into FW dump\n (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Increase ql2xmaxqdepth to 64 (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Increase verbosity of debug messages logged\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Migrate switch registration commands away from mailbox\n interface (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: move fields from qla_hw_data to qla_qpair\n (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Move function prototype to correct header\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Move logging default mask to execute once only\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Move session delete to driver work queue\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Move target stat counters from vha to qpair\n (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Move work element processing out of DPC thread\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Off by one in qlt_ctio_to_cmd() (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Preparation for Target MQ (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Prevent multiple active discovery commands per session\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Prevent relogin trigger from sending too many commands\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Prevent sp->free null/uninitialized pointer dereference\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Print correct mailbox registers in failed summary\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Properly extract ADISC error codes\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Protect access to qpair members with qpair->qp_lock\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Query FC4 type during RSCN processing\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Recheck session state after RSCN (bsc#1043726,FATE#324770)\n - scsi: qla2xxx: Reduce the use of terminate exchange\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Reduce trace noise for Async Events\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Reinstate module parameter ql2xenablemsix\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Relogin to target port on a cable swap\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Remove aborting ELS IOCB call issued as part of timeout\n (FATE#320146, bsc#966328).\n - scsi: qla2xxx: Remove an unused structure member\n (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Remove datasegs_per_cmd and datasegs_per_cont field\n (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Remove extra register read (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Remove extra register read (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Remove FC_NO_LOOP_ID for FCP and FC-NVMe Discovery\n (bsc#1084397).\n - scsi: qla2xxx: Remove potential macro parameter side-effect in\n ql_dump_regs() (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: remove redundant assignment of d\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: remove redundant null check on tgt\n (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Remove redundant wait when target is stopped\n (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Remove session creation redundant code\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Remove unused argument from\n qlt_schedule_sess_for_deletion() (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Remove unused irq_cmd_count field\n (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Remove unused tgt_enable_64bit_addr flag\n (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: remove writeq/readq function definitions\n (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Replace fcport alloc with qla2x00_alloc_fcport\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Replace GPDB with async ADISC command\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Reset the logo flag, after target re-login\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Retry switch command on time out\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Send FC4 type NVMe to the management server\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Serialize GPNID for multiple RSCN\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Serialize session deletion by using work_lock\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Serialize session free in qlt_free_session_done\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Simpify unregistration of FC-NVMe local/remote ports\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Skip IRQ affinity for Target QPairs\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Skip zero queue count entry during FW dump capture\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Suppress a kernel complaint in qla_init_base_qpair()\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Tweak resource count dump (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Update Driver version to 10.00.00.00-k\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Update driver version to 10.00.00.01-k\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Update driver version to 10.00.00.02-k\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Update driver version to 10.00.00.03-k\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Update driver version to 10.00.00.04-k\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Update driver version to 10.00.00.05-k (bsc#1081681).\n - scsi: qla2xxx: Update driver version to 9.01.00.00-k\n (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Update fw_started flags at qpair creation\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Use BIT_6 to acquire FAWWPN from switch\n (bsc#1043726,FATE#324770)\n - scsi: qla2xxx: Use chip reset to bring down laser on unload\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: use dma_mapping_error to check map errors\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Use FC-NVMe FC4 type for FDMI registration\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Use IOCB path to submit Control VP MBX command\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Use known NPort ID for Management Server login\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Use ql2xnvmeenable to enable Q-Pair for FC-NVMe\n (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: use shadow register for ISP27XX (bsc#1043725,FATE#324770).\n - scsi: qla2xxx: Use shadow register for ISP27XX (bsc#1043726,FATE#324770).\n - scsi: qla2xxx: Use sp->free instead of hard coded call\n (bsc#1043726,FATE#324770).\n - scsi: sd: change allow_restart to bool in sysfs interface (bnc#1012382).\n - scsi: sd: change manage_start_stop to bool in sysfs interface\n (bnc#1012382).\n - scsi: ses: do not get power status of SES device slot on probe\n (bsc#1082979).\n - scsi: sg: disable SET_FORCE_LOW_DMA (bnc#1012382).\n - scsi: sim710: fix build warning (bnc#1012382).\n - scsi: sr: wait for the medium to become ready (bsc#1048585).\n - scsi: sr: workaround VMware ESXi cdrom emulation bug (bsc#1080813).\n - scsi: storvsc: Fix scsi_cmd error assignments in storvsc_handle_error\n (bnc#1012382).\n - scsi: storvsc: remove unnecessary channel inbound lock (fate#315887,\n bsc#1082632).\n - scsi: sun_esp: fix device reference leaks (bsc#1082979).\n - scsi: tcm_qla2xxx: Do not allow aborted cmd to advance\n (bsc#1043725,FATE#324770).\n - scsi: ufs: ufshcd: fix potential NULL pointer dereference in\n ufshcd_config_vreg (bnc#1012382).\n - sctp: do not allow the v4 socket to bind a v4mapped v6 address\n (bnc#1012382).\n - sctp: do not free asoc when it is already dead in sctp_sendmsg\n (bnc#1012382).\n - sctp: make use of pre-calculated len (bnc#1012382).\n - sctp: Replace use of sockets_allocated with specified macro\n (bnc#1012382).\n - sctp: return error if the asoc has been peeled off in\n sctp_wait_for_sndbuf (bnc#1012382).\n - sctp: use the right sk after waking up from wait_buf sleep (bnc#1012382).\n - selftest/powerpc: Fix false failures for skipped tests (bnc#1012382).\n - selftests/x86: Add test_vsyscall (bnc#1012382).\n - selftests/x86/ldt_get: Add a few additional tests for limits\n (bnc#1012382).\n - selinux: ensure the context is NUL terminated in\n security_context_to_sid_core() (bnc#1012382).\n - selinux: general protection fault in sock_has_perm (bnc#1012382).\n - selinux: skip bounded transition processing if the policy isn't loaded\n (bnc#1012382).\n - serial: 8250_mid: fix broken DMA dependency (bnc#1012382).\n - serial: 8250_pci: Add Amazon PCI serial device ID (bnc#1012382).\n - serial: 8250: Preserve DLD[7:4] for PORT_XR17V35X (bnc#1012382).\n - serial: 8250_uniphier: fix error return code in uniphier_uart_probe()\n (bsc#1031717).\n - serial: imx: Only wakeup via RTSDEN bit if the system has RTS/CTS\n (bnc#1012382).\n - series.conf: disable qla2xxx patches (bsc#1043725)\n - series.conf: move core networking (including netfilter) into sorted\n section\n - series.conf: refresh Ran series_sort.py (no effect on expanded tree).\n - series.conf: whitespace cleanup\n - Set supported_modules_check 1 (bsc#1072163).\n - sfc: do not warn on successful change of MAC (bnc#1012382).\n - sget(): handle failures of register_shrinker() (bnc#1012382).\n - sh_eth: fix SH7757 GEther initialization (bnc#1012382).\n - sh_eth: fix TSU resource handling (bnc#1012382).\n - signal/openrisc: Fix do_unaligned_access to send the proper signal\n (bnc#1012382).\n - signal/sh: Ensure si_signo is initialized in do_divide_error\n (bnc#1012382).\n - sit: update frag_off info (bnc#1012382).\n - sock: free skb in skb_complete_tx_timestamp on error (bnc#1012382).\n - SolutionEngine771x: fix Ether platform data (bnc#1012382).\n - sparc64/mm: set fields in deferred pages (bnc#1012382).\n - spi: atmel: fixed spin_lock usage inside atmel_spi_remove (bnc#1012382).\n - spi: imx: do not access registers while clocks disabled (bnc#1012382).\n - spi_ks8995: fix "BUG: key accdaa28 not in .data!" (bnc#1012382).\n - spi: sh-msiof: Fix DMA transfer size check (bnc#1012382).\n - spi: sun4i: disable clocks in the remove function (bnc#1012382).\n - spi: xilinx: Detect stall with Unknown commands (bnc#1012382).\n - ssb: mark ssb_bus_register as __maybe_unused (bnc#1012382).\n - staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl\n (bnc#1012382).\n - staging: android: ashmem: Fix a race condition in pin ioctls\n (bnc#1012382).\n - staging: iio: adc: ad7192: fix external frequency setting (bnc#1012382).\n - staging: rtl8188eu: Fix incorrect response to SIOCGIWESSID (bnc#1012382).\n - staging: ste_rmi4: avoid unused function warnings (bnc#1012382).\n - staging: unisys: visorinput depends on INPUT (bnc#1012382).\n - staging: wilc1000: fix kbuild test robot error (bnc#1012382).\n - sunrpc: Allow connect to return EHOSTUNREACH (bnc#1012382).\n - sunrpc: Fix rpc_task_begin trace point (bnc#1012382).\n - sunxi-rsb: Include OF based modalias in device uevent (bnc#1012382).\n - sysfs/cpu: Add vulnerability folder (bnc#1012382).\n - sysfs/cpu: Fix typos in vulnerability documentation (bnc#1012382).\n - sysfs: spectre_v2, handle spec_ctrl (bsc#1075994 bsc#1075091).\n - sysrq : fix Show Regs call trace on ARM (bnc#1012382).\n - target: Add support for TMR percpu reference counting\n (bsc#1043726,FATE#324770).\n - target: Add TARGET_SCF_LOOKUP_LUN_FROM_TAG support for ABORT_TASK\n (bsc#1043726,FATE#324770).\n - target: Avoid early CMD_T_PRE_EXECUTE failures during ABORT_TASK\n (bnc#1012382).\n - target/file: Do not return error for UNMAP if length is zero\n (bnc#1012382).\n - target: fix ALUA transition timeout handling (bnc#1012382).\n - target:fix condition return in core_pr_dump_initiator_port()\n (bnc#1012382).\n - target: fix race during implicit transition work flushes (bnc#1012382).\n - target/iscsi: Fix a race condition in iscsit_add_reject_from_cmd()\n (bnc#1012382).\n - target: Use system workqueue for ALUA transitions (bnc#1012382).\n - tc1100-wmi: fix build warning when CONFIG_PM not enabled (bnc#1012382).\n - tc358743: fix register i2c_rd/wr function fix (git-fixes).\n - tc358743: fix register i2c_rd/wr functions (bnc#1012382).\n - tcp: correct memory barrier usage in tcp_check_space() (bnc#1012382).\n - tcp: do not set rtt_min to 1 (bsc#1042286).\n - tcp: fix under-evaluated ssthresh in TCP Vegas (bnc#1012382).\n - tcp md5sig: Use skb's saddr when replying to an incoming segment\n (bnc#1012382).\n - tcp: release sk_frag.page in tcp_disconnect (bnc#1012382).\n - tcp: __tcp_hdrlen() helper (bnc#1012382).\n - test_bpf: fix the dummy skb after dissector changes (bsc#1042286).\n - tg3: Add workaround to restrict 5762 MRRS to 2048 (bnc#1012382).\n - tg3: Enable PHY reset in MTU change path for 5720 (bnc#1012382).\n - tg3: Fix rx hang on MTU change with 5717/5719 (bnc#1012382).\n - thermal/drivers/step_wise: Fix temperature regulation misbehavior\n (bnc#1012382).\n - thermal: fix INTEL_SOC_DTS_IOSF_CORE dependencies (bnc#1012382).\n - thermal: hisilicon: Handle return value of clk_prepare_enable\n (bnc#1012382).\n - thermal: spear: use __maybe_unused for PM functions (bnc#1012382).\n - tipc: fix cleanup at module unload (bnc#1012382).\n - tipc: fix memory leak in tipc_accept_from_sock() (bnc#1012382).\n - tipc: improve link resiliency when rps is activated (bsc#1068038).\n - tlan: avoid unused label with PCI=n (bnc#1012382).\n - tools build: Add tools tree support for 'make -s' (bnc#1012382).\n - tpm-dev-common: Reject too short writes (bsc#1020645, git-fixes).\n - tpm: fix potential buffer overruns caused by bit glitches on the bus\n (bsc#1020645, git-fixes).\n - tpm_i2c_infineon: fix potential buffer overruns caused by bit glitches\n on the bus (bsc#1020645, git-fixes).\n - tpm_i2c_nuvoton: fix potential buffer overruns caused by bit glitches on\n the bus (bsc#1020645, git-fixes).\n - tpm: st33zp24: fix potential buffer overruns caused by bit glitches on\n the bus (bsc#1020645, git-fixes).\n - tpm_tis: fix potential buffer overruns caused by bit glitches on the bus\n (bsc#1020645, git-fixes).\n - tracing: Allocate mask_str buffer dynamically (bnc#1012382).\n - tracing: Fix converting enum's from the map in trace_event_eval_update()\n (bnc#1012382).\n - tracing: Fix crash when it fails to alloc ring buffer (bnc#1012382).\n - tracing: Fix possible double free on failure of allocating trace buffer\n (bnc#1012382).\n - tracing: Remove extra zeroing out of the ring buffer page (bnc#1012382).\n - tty: cyclades: cyz_interrupt is only used for PCI (bnc#1012382).\n - tty fix oops when rmmod 8250 (bnc#1012382).\n - tty: hvc_xen: hide xen_console_remove when unused (bnc#1012382).\n - tty: mxser: Remove ASYNC_CLOSING (bnc#1072363).\n - uas: Always apply US_FL_NO_ATA_1X quirk to Seagate devices (bnc#1012382).\n - uas: ignore UAS for Norelsys NS1068(X) chips (bnc#1012382).\n - ubi: block: Fix locking for idr_alloc/idr_remove (bnc#1012382).\n - udf: Avoid overflow when session starts at large offset (bnc#1012382).\n - udp: restore UDPlite many-cast delivery (bsc#1042286).\n - um: link vmlinux with -no-pie (bnc#1012382).\n - usb: Add device quirk for Logitech HD Pro Webcam C925e (bnc#1012382).\n - usb: add RESET_RESUME for ELSA MicroLink 56K (bnc#1012382).\n - usb: build drivers/usb/common/ when USB_SUPPORT is set (bnc#1012382).\n - usb: cdc-acm: Do not log urb submission errors on disconnect\n (bnc#1012382).\n - usb: cdc_subset: only build when one driver is enabled (bnc#1012382).\n - USB: core: Add type-specific length check of BOS descriptors\n (bnc#1012382).\n - USB: core: prevent malicious bNumInterfaces overflow (bnc#1012382).\n - USB: devio: Prevent integer overflow in proc_do_submiturb()\n (bnc#1012382).\n - usb: dwc3: gadget: Set maxpacket size for ep0 IN (bnc#1012382).\n - usb: f_fs: Prevent gadget unbind if it is already unbound (bnc#1012382).\n - USB: Fix off by one in type-specific length check of BOS SSP capability\n (git-fixes).\n - USB: fix usbmon BUG trigger (bnc#1012382).\n - usb: gadget: configs: plug memory leak (bnc#1012382).\n - usb: gadget: do not dereference g until after it has been null checked\n (bnc#1012382).\n - usb: gadget: ffs: Forbid usb_ep_alloc_request from sleeping\n (bnc#1012382).\n - usb: gadget: f_fs: Process all descriptors during bind (bnc#1012382).\n - USB: gadgetfs: Fix a potential memory leak in 'dev_config()'\n (bnc#1012382).\n - usb: gadget: f_uvc: Sanity check wMaxPacketSize for SuperSpeed\n (bnc#1012382).\n - usb: gadget: udc: remove pointer dereference after free (bnc#1012382).\n - usb: gadget: uvc: Missing files for configfs interface (bnc#1012382).\n - usb: hub: Cycle HUB power when initialization fails (bnc#1012382).\n - USB: Increase usbfs transfer limit (bnc#1012382).\n - usbip: fix 3eee23c3ec14 tcp_socket address still in the status file\n (bnc#1012382).\n - usbip: Fix implicit fallthrough warning (bnc#1012382).\n - usbip: Fix potential format overflow in userspace tools (bnc#1012382).\n - usbip: fix stub_rx: get_pipe() to validate endpoint number (bnc#1012382).\n - usbip: fix stub_rx: harden CMD_SUBMIT path to handle malicious input\n (bnc#1012382).\n - usbip: fix stub_send_ret_submit() vulnerability to null transfer_buffer\n (bnc#1012382).\n - usbip: fix usbip bind writing random string after command in match_busid\n (bnc#1012382).\n - usbip: keep usbip_device sockfd state in sync with tcp_socket\n (bnc#1012382).\n - usbip: list: do not list devices attached to vhci_hcd (bnc#1012382).\n - usbip: prevent bind loops on devices attached to vhci_hcd (bnc#1012382).\n - usbip: prevent leaking socket pointer address in messages (bnc#1012382).\n - usbip: prevent vhci_hcd driver from leaking a socket pointer address\n (bnc#1012382).\n - usbip: remove kernel addresses from usb device and urb debug msgs\n (bnc#1012382).\n - usbip: stub: stop printing kernel pointer addresses in messages\n (bnc#1012382).\n - usbip: vhci_hcd: clear just the USB_PORT_STAT_POWER bit (bnc#1012382).\n - usbip: vhci: stop printing kernel pointer addresses in messages\n (bnc#1012382).\n - usb: ldusb: add PIDs for new CASSY devices supported by this driver\n (bnc#1012382).\n - usb: misc: usb3503: make sure reset is low for at least 100us\n (bnc#1012382).\n - usb: musb: da8xx: fix babble condition handling (bnc#1012382).\n - usb: musb/ux500: remove duplicate check for dma_is_compatible\n (bnc#1012382).\n - usb: ohci: Proper handling of ed_rm_list to handle race condition\n between usb_kill_urb() and finish_unlinks() (bnc#1012382).\n - usb: option: Add support for FS040U modem (bnc#1012382).\n - usb: phy: isp1301: Add OF device ID table (bnc#1012382).\n - usb: phy: isp1301: Fix build warning when CONFIG_OF is disabled\n (git-fixes).\n - usb: phy: msm add regulator dependency (bnc#1012382).\n - usb: phy: tahvo: fix error handling in tahvo_usb_probe() (bnc#1012382).\n - usb: quirks: Add no-lpm quirk for KY-688 USB 3.1 Type-C Hub\n (bnc#1012382).\n - usb: renesas_usbhs: missed the "running" flag in usb_dmac with rx path\n (bnc#1012382).\n - USB: serial: cp210x: add IDs for LifeScan OneTouch Verio IQ\n (bnc#1012382).\n - USB: serial: cp210x: add new device ID ELV ALC 8xxx (bnc#1012382).\n - USB: serial: ftdi_sio: add id for Airbus DS P8GR (bnc#1012382).\n - usb: serial: io_edgeport: fix possible sleep-in-atomic (bnc#1012382).\n - USB: serial: option: adding support for YUGA CLM920-NC5 (bnc#1012382).\n - USB: serial: option: add Quectel BG96 id (bnc#1012382).\n - USB: serial: option: add support for Telit ME910 PID 0x1101\n (bnc#1012382).\n - usb: serial: pl2303: new device id for Chilitag (bnc#1012382).\n - USB: serial: qcserial: add Sierra Wireless EM7565 (bnc#1012382).\n - usb: serial: simple: add Motorola Tetra driver (bnc#1012382).\n - USB: uas and storage: Add US_FL_BROKEN_FUA for another JMicron JMS567 ID\n (bnc#1012382).\n - usb: uas: unconditionally bring back host after reset (bnc#1012382).\n - USB: usbfs: Filter flags passed in from user space (bnc#1012382).\n - usb: usbip: Fix possible deadlocks reported by lockdep (bnc#1012382).\n - usb: xhci: Add XHCI_TRUST_TX_LENGTH for Renesas uPD720201 (bnc#1012382).\n - usb: xhci: fix panic in xhci_free_virt_devices_depth_first (bnc#1012382).\n - userfaultfd: selftest: vm: allow to build in vm/ directory (bnc#1012382).\n - userfaultfd: shmem: __do_fault requires VM_FAULT_NOPAGE (bnc#1012382).\n - v4l: remove MEDIA_TUNER dependency for VIDEO_TUNER (bnc#1012382).\n - vb2: V4L2_BUF_FLAG_DONE is set after DQBUF (bnc#1012382).\n - vfs: do not do RCU lookup of empty pathnames (bnc#1012382).\n - vhost_net: stop device during reset owner (bnc#1012382).\n - video: fbdev: atmel_lcdfb: fix display-timings lookup (bnc#1012382).\n - video: fbdev: au1200fb: Release some resources if a memory allocation\n fails (bnc#1012382).\n - video: fbdev: au1200fb: Return an error code if a memory allocation\n fails (bnc#1012382).\n - video: fbdev/mmp: add MODULE_LICENSE (bnc#1012382).\n - video: fbdev: sis: remove unused variable (bnc#1012382).\n - video: fbdev: via: remove possibly unused variables (bnc#1012382).\n - video: Use bool instead int pointer for get_opt_bool() argument\n (bnc#1012382).\n - virtio_balloon: prevent uninitialized variable use (bnc#1012382).\n - virtio: release virtio index when fail to device_register (bnc#1012382).\n - vmbus: add per-channel sysfs info (fate#315887, bsc#1082632).\n - vmbus: add prefetch to ring buffer iterator (fate#315887, bsc#1082632).\n - vmbus: do not acquire the mutex in vmbus_hvsock_device_unregister()\n (fate#315887, bsc#1082632).\n - vmbus: drop unused ring_buffer_info elements (fate#315887, bsc#1082632).\n - vmbus: eliminate duplicate cached index (fate#315887, bsc#1082632).\n - vmbus: hvsock: add proper sync for vmbus_hvsock_device_unregister()\n (fate#315887, bsc#1082632).\n - vmbus: initialize reserved fields in messages (fate#315887, bsc#1082632).\n - vmbus: make channel_message table constant (fate#315887, bsc#1082632).\n - vmbus: more host signalling avoidance (fate#315887, bsc#1082632).\n - vmbus: refactor hv_signal_on_read (fate#315887, bsc#1082632).\n - vmbus: remove unused vmbus_sendpacket_ctl (fate#315887, bsc#1082632).\n - vmbus: remove unused vmbus_sendpacket_multipagebuffer (fate#315887,\n bsc#1082632).\n - vmbus: remove unused vmubs_sendpacket_pagebuffer_ctl (fate#315887,\n bsc#1082632).\n - vmbus: Reuse uuid_le_to_bin() helper (fate#315887, bsc#1082632).\n - vmbus: simplify hv_ringbuffer_read (fate#315887, bsc#1082632).\n - vmbus: unregister device_obj->channels_kset (fate#315887, bsc#1082632).\n - vmxnet3: prevent building with 64K pages (bnc#1012382).\n - vmxnet3: repair memory leak (bnc#1012382).\n - vsyscall: Fix permissions for emulate mode with KAISER/PTI (bnc#1012382).\n - vt6655: Fix a possible sleep-in-atomic bug in vt6655_suspend\n (bnc#1012382).\n - vti6: Do not report path MTU below IPV6_MIN_MTU (bnc#1012382).\n - vti6: fix device register to report IFLA_INFO_KIND (bnc#1012382).\n - vxlan: consolidate csum flag handling (bsc#1042286).\n - vxlan: consolidate output route calculation (bsc#1042286).\n - vxlan: consolidate vxlan_xmit_skb and vxlan6_xmit_skb (bsc#1042286).\n - vxlan: do not allow overwrite of config src addr (bsc#1042286).\n - watchdog: imx2_wdt: restore previous timeout after suspend+resume\n (bnc#1012382).\n - wireless: cw1200: use __maybe_unused to hide pm functions_ (bnc#1012382).\n - workqueue: trigger WARN if queue_delayed_work() is called with NULL @wq\n (bnc#1012382).\n - writeback: fix memory leak in wb_queue_work() (bnc#1012382).\n - X.509: fix buffer overflow detection in sprint_oid() (bsc#1075078).\n - X.509: reject invalid BIT STRING for subjectPublicKey (bnc#1012382).\n - x86/acpi: Handle SCI interrupts above legacy space gracefully\n (bsc#1068984).\n - x86/acpi: Reduce code duplication in mp_override_legacy_irq()\n (bsc#1068984).\n - x86: add MULTIUSER dependency for KVM (bnc#1012382).\n - x86/alternatives: Add missing '\\n' at end of ALTERNATIVE inline asm\n (bnc#1012382).\n - x86/alternatives: Fix optimize_nops() checking (bnc#1012382).\n - x86/apic/vector: Fix off by one in error path (bnc#1012382).\n - x86/asm/32: Make sync_core() handle missing CPUID on all 32-bit kernels\n (bnc#1012382).\n - x86/asm: Fix inline asm call constraints for GCC 4.4 (bnc#1012382).\n - x86/boot: Avoid warning for zero-filling .bss (bnc#1012382).\n - x86/boot: Fix early command-line parsing when matching at end\n (bsc#1068032).\n - x86: bpf_jit: small optimization in emit_bpf_tail_call() (bnc#1012382).\n - x86/bugs: Drop one "mitigation" from dmesg (bnc#1012382).\n - x86/build: Silence the build with "make -s" (bnc#1012382).\n - x86/cpu/bugs: Make retpoline module warning conditional (bnc#1012382).\n - x86/cpu: Change type of x86_cache_size variable to unsigned int\n (bnc#1012382).\n - x86/cpu: Factor out application of forced CPU caps (bnc#1012382).\n - x86/cpufeatures: Add X86_BUG_CPU_INSECURE (bnc#1012382).\n - x86/cpufeatures: Add X86_BUG_SPECTRE_V[12] (bnc#1012382).\n - x86/cpufeatures: Make CPU bugs sticky (bnc#1012382).\n - x86/cpu: Implement CPU vulnerabilites sysfs functions (bnc#1012382).\n - x86/cpu: Merge bugs.c and bugs_64.c (bnc#1012382).\n - x86/cpu: Rename Merrifield2 to Moorefield (bsc#985025).\n - x86/cpu: Rename "WESTMERE2" family to "NEHALEM_G" (bsc#985025).\n - x86/cpu, x86/pti: Do not enable PTI on AMD processors (bnc#1012382).\n - x86/Documentation: Add PTI description (bnc#1012382).\n - x86/efi: Build our own page table structures (fate#320512).\n - x86/efi: Hoist page table switching code into efi_call_virt()\n (fate#320512).\n - x86/entry/64: Separate cpu_current_top_of_stack from TSS.sp0\n (bsc#1077560).\n - x86/entry/64: Use a per-CPU trampoline stack for IDT entries\n (bsc#1077560).\n - x86/entry: Use SYSCALL_DEFINE() macros for sys_modify_ldt()\n (bnc#1012382).\n - x86: fix build warnign with 32-bit PAE (bnc#1012382).\n - x86/fpu/math-emu: Fix possible uninitialized variable use (bnc#1012382).\n - x86/hpet: Prevent might sleep splat on resume (bnc#1012382).\n - x86/hyperv: Implement hv_get_tsc_page() (fate#315887, bsc#1082632).\n - x86/hyper-v: include hyperv/ only when CONFIG_HYPERV is set\n (fate#315887, bsc#1082632).\n - x86/hyper-v: Introduce fast hypercall implementation (fate#315887,\n bsc#1082632).\n - x86/hyper-v: Make hv_do_hypercall() inline (fate#315887, bsc#1082632).\n - x86/hyperv: Move TSC reading method to asm/mshyperv.h (fate#315887,\n bsc#1082632).\n - x86/kaiser: fix build error with KASAN && !FUNCTION_GRAPH_TRACER\n (bnc#1012382).\n - x86/kasan: Clear kasan_zero_page after TLB flush (bnc#1012382).\n - x86/kasan: Write protect kasan zero shadow (bnc#1012382).\n - x86/kvm/vmx: do not use vm-exit instruction length for fast MMIO when\n running nested (bsc#1081431).\n - x86/mce: Pin the timer when modifying (bsc#1080851,1076282).\n - x86/microcode/AMD: Change load_microcode_amd()'s param to bool to fix\n preemptibility bug (bnc#1012382).\n - x86/microcode/AMD: Do not load when running on a hypervisor\n (bnc#1012382).\n - x86/microcode/AMD: Do not load when running on a hypervisor (bsc#1081436\n bsc#1081437).\n - x86/microcode: Do the family check first (bnc#1012382).\n - x86/microcode: Do the family check first (bsc#1081436 bsc#1081437).\n - x86/microcode/intel: Extend BDW late-loading further with LLC size check\n (bnc#1012382).\n - x86/microcode/intel: Extend BDW late-loading with a revision check\n (bnc#1012382).\n - x86/microcode/intel: Fix BDW late-loading revision check (bnc#1012382).\n - x86/mm/32: Move setup_clear_cpu_cap(X86_FEATURE_PCID) earlier\n (git-fixes).\n - x86/mm: Disable PCID on 32-bit kernels (bnc#1012382).\n - x86/mm/kmmio: Fix mmiotrace for page unaligned addresses (bnc#1012382).\n - x86/mm/pat: Ensure cpa->pfn only contains page frame numbers\n (fate#320588).\n - x86/mm/pkeys: Fix fill_sig_info_pkey (fate#321300).\n - x86/nospec: Fix header guards names (bnc#1012382).\n - x86/oprofile: Fix bogus GCC-8 warning in nmi_setup() (bnc#1012382).\n - x86/paravirt: Remove 'noreplace-paravirt' cmdline option (bnc#1012382).\n - x86/PCI: Make broadcom_postcore_init() check acpi_disabled (bnc#1012382).\n - x86/platform: Add PCI dependency for PUNIT_ATOM_DEBUG (bnc#1012382).\n - x86/platform/olpc: Fix resume handler build warning (bnc#1012382).\n - x86/pti: Document fix wrong index (bnc#1012382).\n - x86/pti/efi: broken conversion from efi to kernel page table\n (bnc#1012382).\n - x86/pti: Make unpoison of pgd for trusted boot work for real\n (bnc#1012382).\n - x86/pti: Rename BUG_CPU_INSECURE to BUG_CPU_MELTDOWN (bnc#1012382).\n - x86/ras/inject: Make it depend on X86_LOCAL_APIC=y (bnc#1012382).\n - x86/retpoline: Avoid retpolines for built-in __init functions\n (bnc#1012382).\n - x86/retpoline/hyperv: Convert assembler indirect jumps (fate#315887,\n bsc#1082632).\n - x86/retpoline: Remove the esp/rsp thunk (bnc#1012382).\n - x86/retpolines/spec_ctrl: disable IBRS on !SKL if retpolines are active\n (bsc#1068032).\n - x86/smpboot: Remove stale TLB flush invocations (bnc#1012382).\n - x86/spectre: Check CONFIG_RETPOLINE in command line parser (bnc#1012382).\n - x86/spectre: Fix an error message (git-fixes).\n - x86/spectre: Fix spelling mistake: "vunerable"-> "vulnerable"\n (bnc#1012382).\n - x86/spectre: Remove the out-of-tree RSB stuffing\n - x86/spectre: Simplify spectre_v2 command line parsing (bnc#1012382).\n - x86/spectre_v2: fix ordering in IBRS initialization (bsc#1075994\n bsc#1075091).\n - x86/spectre_v2: nospectre_v2 means nospec too (bsc#1075994 bsc#1075091).\n - x86/speculation: Fix typo IBRS_ATT, which should be IBRS_ALL\n (bnc#1012382).\n - x86/tlb: Drop the _GPL from the cpu_tlbstate export (bnc#1012382).\n - x86/vm86/32: Switch to flush_tlb_mm_range() in mark_screen_rdonly()\n (bnc#1012382).\n - x86/xen: Zero MSR_IA32_SPEC_CTRL before suspend (bnc#1065600).\n - xen: Fix trampoline stack loading issue on XEN PV.\n - xen/gntdev: Fix off-by-one error when unmapping with holes (bnc#1012382).\n - xen/gntdev: Fix partial gntdev_mmap() cleanup (bnc#1012382).\n - xen-netfront: avoid crashing on resume after a failure in\n talk_to_netback() (bnc#1012382).\n - xen-netfront: enable device after manual module load (bnc#1012382).\n - xen-netfront: Improve error handling during initialization (bnc#1012382).\n - xen-netfront: remove warning when unloading module (bnc#1012382).\n - xen: XEN_ACPI_PROCESSOR is Dom0-only (bnc#1012382).\n - xfrm: check id proto in validate_tmpl() (bnc#1012382).\n - xfrm: Copy policy family in clone_policy (bnc#1012382).\n - xfrm: Fix stack-out-of-bounds read on socket policy lookup (bnc#1012382).\n - xfrm: Fix stack-out-of-bounds with misconfigured transport mode policies\n (bnc#1012382).\n - xfrm_user: propagate sec ctx allocation errors (bsc#1042286).\n - xfs: add configurable error support to metadata buffers (bsc#1068569).\n - xfs: add configuration handlers for specific errors (bsc#1068569).\n - xfs: add configuration of error failure speed (bsc#1068569).\n - xfs: add "fail at unmount" error handling configuration (bsc#1068569).\n - xfs: Add infrastructure needed for error propagation during buffer IO\n failure (bsc#1068569).\n - xfs: address kabi for xfs buffer retry infrastructure (kabi).\n - xfs: configurable error behavior via sysfs (bsc#1068569).\n - xfs: do not chain ioends during writepage submission (bsc#1077285\n bsc#1043441).\n - xfs: factor mapping out of xfs_do_writepage (bsc#1077285 bsc#1043441).\n - xfs: fix incorrect extent state in xfs_bmap_add_extent_unwritten_real\n (bnc#1012382).\n - xfs: fix log block underflow during recovery cycle verification\n (bnc#1012382).\n - xfs: fix up inode32/64 (re)mount handling (bsc#1069160).\n - xfs: introduce metadata IO error class (bsc#1068569).\n - xfs: introduce table-based init for error behaviors (bsc#1068569).\n - xfs: Introduce writeback context for writepages (bsc#1077285\n bsc#1043441).\n - xfs: ioends require logically contiguous file offsets (bsc#1077285\n bsc#1043441).\n - xfs: Properly retry failed inode items in case of error during buffer\n writeback (bsc#1068569).\n - xfs: quota: check result of register_shrinker() (bnc#1012382).\n - xfs: quota: fix missed destroy of qi_tree_lock (bnc#1012382).\n - xfs: reinit btree pointer on attr tree inactivation walk (bsc#1078787).\n - xfs: remove nonblocking mode from xfs_vm_writepage (bsc#1077285\n bsc#1043441).\n - xfs: remove xfs_cancel_ioend (bsc#1077285 bsc#1043441).\n - xfs: remove xfs_trans_ail_delete_bulk (bsc#1068569).\n - xfs: stop searching for free slots in an inode chunk when there are none\n (bsc#1072739).\n - xfs: toggle readonly state around xfs_log_mount_finish (bsc#1073401).\n - xfs: ubsan fixes (bnc#1012382).\n - xfs: validate sb_logsunit is a multiple of the fs blocksize\n (bsc#1077513).\n - xfs: write unmount record for ro mounts (bsc#1073401).\n - xfs: xfs_cluster_write is redundant (bsc#1077285 bsc#1043441).\n - xhci: Do not add a virt_dev to the devs array before it's fully\n allocated (bnc#1012382).\n - xhci: Fix ring leak in failure path of xhci_alloc_virt_device()\n (bnc#1012382).\n - xhci: plat: Register shutdown for xhci_plat (bnc#1012382).\n - xtensa: fix futex_atomic_cmpxchg_inatomic (bnc#1012382).\n - zram: fix operator precedence to get offset (bsc#1082979).\n - zram: set physical queue limits to avoid array out of bounds accesses\n (bnc#1012382).\n\n", "cvss3": {}, "published": "2018-04-19T15:07:54", "type": "suse", "title": "Security update for the Linux Kernel (important)", "bulletinFamily": "unix", "cvss2": {}, "cvelist": ["CVE-2017-16913", "CVE-2018-1000004", "CVE-2018-5333", "CVE-2018-8087", "CVE-2017-17862", "CVE-2017-16912", "CVE-2017-15129", "CVE-2017-17975", "CVE-2017-17712", "CVE-2017-13166", "CVE-2017-18174", "CVE-2017-5715", "CVE-2017-15951", "CVE-2017-18208", "CVE-2018-5332", "CVE-2017-16644", "CVE-2017-18017", "CVE-2017-17864", "CVE-2018-1000026"], "modified": "2018-04-19T15:07:54", "id": "SUSE-SU-2018:0986-1", "href": "http://lists.opensuse.org/opensuse-security-announce/2018-04/msg00014.html", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "cve": [{"lastseen": "2022-03-23T15:04:19", "description": "The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in inet->hdrincl that leads to uninitialized stack pointer usage; this allows a local user to execute code and gain privileges.", "cvss3": {"exploitabilityScore": 1.0, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "baseScore": 7.0, "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2017-12-16T01:29:00", "type": "cve", "title": "CVE-2017-17712", "cwe": ["CWE-362"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 3.4, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 6.9, "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-17712"], "modified": "2018-04-04T01:29:00", "cpe": ["cpe:/o:linux:linux_kernel:4.14.6"], "id": "CVE-2017-17712", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-17712", "cvss": {"score": 6.9, "vector": "AV:L/AC:M/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:o:linux:linux_kernel:4.14.6:*:*:*:*:*:*:*"]}], "ubuntucve": [{"lastseen": "2021-11-22T21:39:13", "description": "The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through\n4.14.6 has a race condition in inet->hdrincl that leads to uninitialized\nstack pointer usage; this allows a local user to execute code and gain\nprivileges.\n\n#### Notes\n\nAuthor| Note \n---|--- \n[seth-arnold](<https://launchpad.net/~seth-arnold>) | I haven't tested the exploit; 'high' may or may not be appropriate for our kernels. Please feel free to re-adjust.\n", "cvss3": {"exploitabilityScore": 1.0, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 7.0, "privilegesRequired": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2017-12-15T00:00:00", "type": "ubuntucve", "title": "CVE-2017-17712", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 3.4, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 6.9, "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-17712"], "modified": "2017-12-15T00:00:00", "id": "UB:CVE-2017-17712", "href": "https://ubuntu.com/security/CVE-2017-17712", "cvss": {"score": 6.9, "vector": "AV:L/AC:M/Au:N/C:C/I:C/A:C"}}], "redhatcve": [{"lastseen": "2022-06-08T05:20:49", "description": "A flaw was found in the Linux kernel's implementation of raw_sendmsg allowing a local attacker to panic the kernel or possibly leak kernel addresses. A local attacker, with the privilege of creating raw sockets, can abuse a possible race condition when setting the socket option to allow the kernel to automatically create ip header values and thus potentially escalate their privileges.\n", "cvss3": {"exploitabilityScore": 1.0, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "baseScore": 7.0, "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2017-12-18T08:49:24", "type": "redhatcve", "title": "CVE-2017-17712", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 3.4, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 6.9, "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-17712"], "modified": "2022-06-08T04:00:23", "id": "RH:CVE-2017-17712", "href": "https://access.redhat.com/security/cve/cve-2017-17712", "cvss": {"score": 6.9, "vector": "AV:L/AC:M/Au:N/C:C/I:C/A:C"}}], "openvas": [{"lastseen": "2019-05-29T18:34:48", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2017-12-22T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2017-f7cb245861", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2017-17712"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310873945", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310873945", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2017_f7cb245861_kernel_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2017-f7cb245861\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2017 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.873945\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2017-12-22 07:56:28 +0100 (Fri, 22 Dec 2017)\");\n script_cve_id(\"CVE-2017-17712\");\n script_tag(name:\"cvss_base\", value:\"6.9\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2017-f7cb245861\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n script_xref(name:\"FEDORA\", value:\"2017-f7cb245861\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3HNCVU3TTRBJVWKUD6AZRQEF6RE7MV6C\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2017 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.14.7~300.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 6.9, "vector": "AV:L/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:34:47", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2017-12-25T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2017-7810b7c59f", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2017-17741", "CVE-2017-17712"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310873947", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310873947", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2017_7810b7c59f_kernel_fc26.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2017-7810b7c59f\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2017 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.873947\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2017-12-25 08:13:53 +0100 (Mon, 25 Dec 2017)\");\n script_cve_id(\"CVE-2017-17741\", \"CVE-2017-17712\");\n script_tag(name:\"cvss_base\", value:\"6.9\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2017-7810b7c59f\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 26\");\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n script_xref(name:\"FEDORA\", value:\"2017-7810b7c59f\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKXFEQRRYYTEGHXOQISCQEV73MNUUVYI\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2017 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC26\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC26\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.14.8~200.fc26\", rls:\"FC26\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 6.9, "vector": "AV:L/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:33:24", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-02-23T00:00:00", "type": "openvas", "title": "Ubuntu Update for linux-raspi2 USN-3581-3", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2017-15115", "CVE-2017-17712", "CVE-2017-8824"], "modified": "2019-03-13T00:00:00", "id": "OPENVAS:1361412562310843460", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310843460", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_ubuntu_USN_3581_3.nasl 14140 2019-03-13 12:26:09Z cfischer $\n#\n# Ubuntu Update for linux-raspi2 USN-3581-3\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.843460\");\n script_version(\"$Revision: 14140 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-13 13:26:09 +0100 (Wed, 13 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-02-23 09:05:45 +0100 (Fri, 23 Feb 2018)\");\n script_cve_id(\"CVE-2017-17712\", \"CVE-2017-15115\", \"CVE-2017-8824\");\n script_tag(name:\"cvss_base\", value:\"7.2\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Ubuntu Update for linux-raspi2 USN-3581-3\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'linux-raspi2'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"insight\", value:\"Mohamed Ghannam discovered that the IPv4 raw\n socket implementation in the Linux kernel contained a race condition leading to\n uninitialized pointer usage. A local attacker could use this to cause a denial\n of service or possibly execute arbitrary code. (CVE-2017-17712) ChunYu Wang\n discovered that a use-after-free vulnerability existed in the SCTP protocol\n implementation in the Linux kernel. A local attacker could use this to cause a\n denial of service (system crash) or possibly execute arbitrary code,\n (CVE-2017-15115) Mohamed Ghannam discovered a use-after-free vulnerability in\n the DCCP protocol implementation in the Linux kernel. A local attacker could use\n this to cause a denial of service (system crash) or possibly execute arbitrary\n code. (CVE-2017-8824)\");\n script_tag(name:\"affected\", value:\"linux-raspi2 on Ubuntu 17.10\");\n script_tag(name:\"solution\", value:\"Please Install the Updated Packages.\");\n\n script_xref(name:\"USN\", value:\"3581-3\");\n script_xref(name:\"URL\", value:\"http://www.ubuntu.com/usn/usn-3581-3/\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Ubuntu Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/ubuntu_linux\", \"ssh/login/packages\", re:\"ssh/login/release=UBUNTU17\\.10\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nrelease = dpkg_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"UBUNTU17.10\")\n{\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.13.0-1014-raspi2\", ver:\"4.13.0-1014.15\", rls:\"UBUNTU17.10\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-raspi2\", ver:\"4.13.0.1014.12\", rls:\"UBUNTU17.10\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:33:20", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-02-22T00:00:00", "type": "openvas", "title": "Ubuntu Update for linux-azure USN-3581-2", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2017-15115", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-5715"], "modified": "2019-03-13T00:00:00", "id": "OPENVAS:1361412562310843457", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310843457", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_ubuntu_USN_3581_2.nasl 14140 2019-03-13 12:26:09Z cfischer $\n#\n# Ubuntu Update for linux-azure USN-3581-2\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.843457\");\n script_version(\"$Revision: 14140 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-13 13:26:09 +0100 (Wed, 13 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-02-22 15:56:33 +0100 (Thu, 22 Feb 2018)\");\n script_cve_id(\"CVE-2017-17712\", \"CVE-2017-15115\", \"CVE-2017-8824\", \"CVE-2017-5715\");\n script_tag(name:\"cvss_base\", value:\"7.2\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Ubuntu Update for linux-azure USN-3581-2\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'linux-azure'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"insight\", value:\"USN-3581-1 fixed vulnerabilities in the\n Linux kernel for Ubuntu 17.10. This update provides the corresponding updates\n for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.10 for Ubuntu\n 16.04 LTS. Mohamed Ghannam discovered that the IPv4 raw socket implementation in\n the Linux kernel contained a race condition leading to uninitialized pointer\n usage. A local attacker could use this to cause a denial of service or possibly\n execute arbitrary code. (CVE-2017-17712) ChunYu Wang discovered that a\n use-after-free vulnerability existed in the SCTP protocol implementation in the\n Linux kernel. A local attacker could use this to cause a denial of service\n (system crash) or possibly execute arbitrary code, (CVE-2017-15115) Mohamed\n Ghannam discovered a use-after-free vulnerability in the DCCP protocol\n implementation in the Linux kernel. A local attacker could use this to cause a\n denial of service (system crash) or possibly execute arbitrary code.\n (CVE-2017-8824) USN-3541-2 mitigated CVE-2017-5715 (Spectre Variant 2) for the\n amd64 architecture in Ubuntu 16.04 LTS. This update provides the compiler-based\n retpoline kernel mitigation for the amd64 and i386 architectures. Original\n advisory details: Jann Horn discovered that microprocessors utilizing\n speculative execution and branch prediction may allow unauthorized memory reads\n via sidechannel attacks. This flaw is known as Spectre. A local attacker could\n use this to expose sensitive information, including kernel memory.\n (CVE-2017-5715)\");\n script_tag(name:\"affected\", value:\"linux-azure on Ubuntu 16.04 LTS\");\n script_tag(name:\"solution\", value:\"Please Install the Updated Packages.\");\n\n script_xref(name:\"USN\", value:\"3581-2\");\n script_xref(name:\"URL\", value:\"http://www.ubuntu.com/usn/usn-3581-2/\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Ubuntu Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/ubuntu_linux\", \"ssh/login/packages\", re:\"ssh/login/release=UBUNTU16\\.04 LTS\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nrelease = dpkg_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"UBUNTU16.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.13.0-1011-azure\", ver:\"4.13.0-1011.14\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.13.0-1011-gcp\", ver:\"4.13.0-1011.15\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.13.0-1021-oem\", ver:\"4.13.0-1021.23\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.13.0-36-generic\", ver:\"4.13.0-36.40~16.04.1\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.13.0-36-generic-lpae\", ver:\"4.13.0-36.40~16.04.1\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.13.0-36-lowlatency\", ver:\"4.13.0-36.40~16.04.1\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-azure\", ver:\"4.13.0.1011.12\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-gcp\", ver:\"4.13.0.1011.13\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-generic-hwe-16.04\", ver:\"4.13.0.36.55\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-generic-lpae-hwe-16.04\", ver:\"4.13.0.36.55\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-gke\", ver:\"4.13.0.1011.13\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-lowlatency-hwe-16.04\", ver:\"4.13.0.36.55\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-oem\", ver:\"4.13.0.1021.25\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:33:23", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-02-22T00:00:00", "type": "openvas", "title": "Ubuntu Update for linux USN-3581-1", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2017-15115", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-5715"], "modified": "2019-03-13T00:00:00", "id": "OPENVAS:1361412562310843458", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310843458", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_ubuntu_USN_3581_1.nasl 14140 2019-03-13 12:26:09Z cfischer $\n#\n# Ubuntu Update for linux USN-3581-1\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.843458\");\n script_version(\"$Revision: 14140 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-13 13:26:09 +0100 (Wed, 13 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-02-22 15:56:45 +0100 (Thu, 22 Feb 2018)\");\n script_cve_id(\"CVE-2017-17712\", \"CVE-2017-15115\", \"CVE-2017-8824\", \"CVE-2017-5715\");\n script_tag(name:\"cvss_base\", value:\"7.2\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Ubuntu Update for linux USN-3581-1\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'linux'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"insight\", value:\"Mohamed Ghannam discovered that the IPv4 raw\n socket implementation in the Linux kernel contained a race condition leading to\n uninitialized pointer usage. A local attacker could use this to cause a denial\n of service or possibly execute arbitrary code. (CVE-2017-17712) ChunYu Wang\n discovered that a use-after-free vulnerability existed in the SCTP protocol\n implementation in the Linux kernel. A local attacker could use this to cause a\n denial of service (system crash) or possibly execute arbitrary code,\n (CVE-2017-15115) Mohamed Ghannam discovered a use-after-free vulnerability in\n the DCCP protocol implementation in the Linux kernel. A local attacker could use\n this to cause a denial of service (system crash) or possibly execute arbitrary\n code. (CVE-2017-8824) USN-3541-1 mitigated CVE-2017-5715 (Spectre Variant 2) for\n the amd64 architecture in Ubuntu 17.10. This update provides the compiler-based\n retpoline kernel mitigation for the amd64 and i386 architectures. Original\n advisory details: Jann Horn discovered that microprocessors utilizing\n speculative execution and branch prediction may allow unauthorized memory reads\n via sidechannel attacks. This flaw is known as Spectre. A local attacker could\n use this to expose sensitive information, including kernel memory.\n (CVE-2017-5715)\");\n script_tag(name:\"affected\", value:\"linux on Ubuntu 17.10\");\n script_tag(name:\"solution\", value:\"Please Install the Updated Packages.\");\n\n script_xref(name:\"USN\", value:\"3581-1\");\n script_xref(name:\"URL\", value:\"http://www.ubuntu.com/usn/usn-3581-1/\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Ubuntu Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/ubuntu_linux\", \"ssh/login/packages\", re:\"ssh/login/release=UBUNTU17\\.10\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nrelease = dpkg_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"UBUNTU17.10\")\n{\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.13.0-36-generic\", ver:\"4.13.0-36.40\", rls:\"UBUNTU17.10\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.13.0-36-generic-lpae\", ver:\"4.13.0-36.40\", rls:\"UBUNTU17.10\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.13.0-36-lowlatency\", ver:\"4.13.0-36.40\", rls:\"UBUNTU17.10\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-generic\", ver:\"4.13.0.36.38\", rls:\"UBUNTU17.10\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-generic-lpae\", ver:\"4.13.0.36.38\", rls:\"UBUNTU17.10\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-lowlatency\", ver:\"4.13.0.36.38\", rls:\"UBUNTU17.10\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:33:22", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-02-22T00:00:00", "type": "openvas", "title": "Ubuntu Update for linux USN-3582-1", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2015-8952", "CVE-2017-15115", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-5715", "CVE-2017-12190"], "modified": "2019-03-13T00:00:00", "id": "OPENVAS:1361412562310843455", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310843455", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_ubuntu_USN_3582_1.nasl 14140 2019-03-13 12:26:09Z cfischer $\n#\n# Ubuntu Update for linux USN-3582-1\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.843455\");\n script_version(\"$Revision: 14140 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-13 13:26:09 +0100 (Wed, 13 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-02-22 15:56:09 +0100 (Thu, 22 Feb 2018)\");\n script_cve_id(\"CVE-2017-17712\", \"CVE-2015-8952\", \"CVE-2017-12190\", \"CVE-2017-15115\",\n \"CVE-2017-8824\", \"CVE-2017-5715\");\n script_tag(name:\"cvss_base\", value:\"7.2\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Ubuntu Update for linux USN-3582-1\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'linux'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"insight\", value:\"Mohamed Ghannam discovered that the IPv4 raw\n socket implementation in the Linux kernel contained a race condition leading to\n uninitialized pointer usage. A local attacker could use this to cause a denial\n of service or possibly execute arbitrary code. (CVE-2017-17712) Laurent Guerby\n discovered that the mbcache feature in the ext2 and ext4 filesystems in the\n Linux kernel improperly handled xattr block caching. A local attacker could use\n this to cause a denial of service. (CVE-2015-8952) Vitaly Mayatskikh discovered\n that the SCSI subsystem in the Linux kernel did not properly track reference\n counts when merging buffers. A local attacker could use this to cause a denial\n of service (memory exhaustion). (CVE-2017-12190) ChunYu Wang discovered that a\n use-after-free vulnerability existed in the SCTP protocol implementation in the\n Linux kernel. A local attacker could use this to cause a denial of service\n (system crash) or possibly execute arbitrary code, (CVE-2017-15115) Mohamed\n Ghannam discovered a use-after-free vulnerability in the DCCP protocol\n implementation in the Linux kernel. A local attacker could use this to cause a\n denial of service (system crash) or possibly execute arbitrary code.\n (CVE-2017-8824) USN-3540-1 mitigated CVE-2017-5715 (Spectre Variant 2) for the\n amd64 architecture in Ubuntu 16.04 LTS. This update provides the compiler-based\n retpoline kernel mitigation for the amd64 and i386 architectures. Original\n advisory details: Jann Horn discovered that microprocessors utilizing\n speculative execution and branch prediction may allow unauthorized memory reads\n via sidechannel attacks. This flaw is known as Spectre. A local attacker could\n use this to expose sensitive information, including kernel memory.\n (CVE-2017-5715)\");\n script_tag(name:\"affected\", value:\"linux on Ubuntu 16.04 LTS\");\n script_tag(name:\"solution\", value:\"Please Install the Updated Packages.\");\n\n script_xref(name:\"USN\", value:\"3582-1\");\n script_xref(name:\"URL\", value:\"http://www.ubuntu.com/usn/usn-3582-1/\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Ubuntu Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/ubuntu_linux\", \"ssh/login/packages\", re:\"ssh/login/release=UBUNTU16\\.04 LTS\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nrelease = dpkg_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"UBUNTU16.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-1019-kvm\", ver:\"4.4.0-1019.24\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-1052-aws\", ver:\"4.4.0-1052.61\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-1085-raspi2\", ver:\"4.4.0-1085.93\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-1087-snapdragon\", ver:\"4.4.0-1087.92\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-116-generic\", ver:\"4.4.0-116.140\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-116-generic-lpae\", ver:\"4.4.0-116.140\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-116-lowlatency\", ver:\"4.4.0-116.140\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-116-powerpc-e500mc\", ver:\"4.4.0-116.140\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-116-powerpc-smp\", ver:\"4.4.0-116.140\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-116-powerpc64-emb\", ver:\"4.4.0-116.140\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-116-powerpc64-smp\", ver:\"4.4.0-116.140\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-aws\", ver:\"4.4.0.1052.54\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-generic\", ver:\"4.4.0.116.122\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-generic-lpae\", ver:\"4.4.0.116.122\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-kvm\", ver:\"4.4.0.1019.18\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-lowlatency\", ver:\"4.4.0.116.122\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-powerpc-e500mc\", ver:\"4.4.0.116.122\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-powerpc-smp\", ver:\"4.4.0.116.122\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-powerpc64-emb\", ver:\"4.4.0.116.122\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-powerpc64-smp\", ver:\"4.4.0.116.122\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-raspi2\", ver:\"4.4.0.1085.85\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-snapdragon\", ver:\"4.4.0.1087.79\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:33:22", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-02-22T00:00:00", "type": "openvas", "title": "Ubuntu Update for linux-aws USN-3582-2", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2015-8952", "CVE-2017-15115", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-5715", "CVE-2017-12190"], "modified": "2019-03-13T00:00:00", "id": "OPENVAS:1361412562310843459", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310843459", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_ubuntu_USN_3582_2.nasl 14140 2019-03-13 12:26:09Z cfischer $\n#\n# Ubuntu Update for linux-aws USN-3582-2\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.843459\");\n script_version(\"$Revision: 14140 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-13 13:26:09 +0100 (Wed, 13 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-02-22 15:56:55 +0100 (Thu, 22 Feb 2018)\");\n script_cve_id(\"CVE-2017-17712\", \"CVE-2015-8952\", \"CVE-2017-12190\", \"CVE-2017-15115\",\n \"CVE-2017-8824\", \"CVE-2017-5715\");\n script_tag(name:\"cvss_base\", value:\"7.2\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Ubuntu Update for linux-aws USN-3582-2\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'linux-aws'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"insight\", value:\"USN-3582-1 fixed vulnerabilities in the\n Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding\n updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for\n Ubuntu 14.04 LTS. Mohamed Ghannam discovered that the IPv4 raw socket\n implementation in the Linux kernel contained a race condition leading to\n uninitialized pointer usage. A local attacker could use this to cause a denial\n of service or possibly execute arbitrary code. (CVE-2017-17712) Laurent Guerby\n discovered that the mbcache feature in the ext2 and ext4 filesystems in the\n Linux kernel improperly handled xattr block caching. A local attacker could use\n this to cause a denial of service. (CVE-2015-8952) Vitaly Mayatskikh discovered\n that the SCSI subsystem in the Linux kernel did not properly track reference\n counts when merging buffers. A local attacker could use this to cause a denial\n of service (memory exhaustion). (CVE-2017-12190) ChunYu Wang discovered that a\n use-after-free vulnerability existed in the SCTP protocol implementation in the\n Linux kernel. A local attacker could use this to cause a denial of service\n (system crash) or possibly execute arbitrary code, (CVE-2017-15115) Mohamed\n Ghannam discovered a use-after-free vulnerability in the DCCP protocol\n implementation in the Linux kernel. A local attacker could use this to cause a\n denial of service (system crash) or possibly execute arbitrary code.\n (CVE-2017-8824) USN-3540-2 mitigated CVE-2017-5715 (Spectre Variant 2) for the\n amd64 architecture in Ubuntu 14.04 LTS. This update provides the compiler-based\n retpoline kernel mitigation for the amd64 and i386 architectures. Original\n advisory details: Jann Horn discovered that microprocessors utilizing\n speculative execution and branch prediction may allow unauthorized memory reads\n via sidechannel attacks. This flaw is known as Spectre. A local attacker could\n use this to expose sensitive information, including kernel memory.\n (CVE-2017-5715)\");\n script_tag(name:\"affected\", value:\"linux-aws on Ubuntu 14.04 LTS\");\n script_tag(name:\"solution\", value:\"Please Install the Updated Packages.\");\n\n script_xref(name:\"USN\", value:\"3582-2\");\n script_xref(name:\"URL\", value:\"http://www.ubuntu.com/usn/usn-3582-2/\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Ubuntu Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/ubuntu_linux\", \"ssh/login/packages\", re:\"ssh/login/release=UBUNTU14\\.04 LTS\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nrelease = dpkg_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"UBUNTU14.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-1014-aws\", ver:\"4.4.0-1014.14\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-116-generic\", ver:\"4.4.0-116.140~14.04.1\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-116-generic-lpae\", ver:\"4.4.0-116.140~14.04.1\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-116-lowlatency\", ver:\"4.4.0-116.140~14.04.1\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-116-powerpc-e500mc\", ver:\"4.4.0-116.140~14.04.1\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-116-powerpc-smp\", ver:\"4.4.0-116.140~14.04.1\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-116-powerpc64-emb\", ver:\"4.4.0-116.140~14.04.1\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-4.4.0-116-powerpc64-smp\", ver:\"4.4.0-116.140~14.04.1\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-aws\", ver:\"4.4.0.1014.14\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-generic-lpae-lts-xenial\", ver:\"4.4.0.116.98\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-generic-lts-xenial\", ver:\"4.4.0.116.98\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-lowlatency-lts-xenial\", ver:\"4.4.0.116.98\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-powerpc-e500mc-lts-xenial\", ver:\"4.4.0.116.98\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-powerpc-smp-lts-xenial\", ver:\"4.4.0.116.98\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-powerpc64-emb-lts-xenial\", ver:\"4.4.0.116.98\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isdpkgvuln(pkg:\"linux-image-powerpc64-smp-lts-xenial\", ver:\"4.4.0.116.98\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-01-31T17:38:36", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-02-10T00:00:00", "type": "openvas", "title": "openSUSE: Security Advisory for kernel (openSUSE-SU-2018:0408-1)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17862", "CVE-2017-15129", "CVE-2017-17712", "CVE-2017-5715", "CVE-2018-5332", "CVE-2017-18017", "CVE-2017-17864"], "modified": "2020-01-31T00:00:00", "id": "OPENVAS:1361412562310851698", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310851698", "sourceData": "# Copyright (C) 2018 Greenbone Networks GmbH\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) of their respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.851698\");\n script_version(\"2020-01-31T08:23:39+0000\");\n script_tag(name:\"last_modification\", value:\"2020-01-31 08:23:39 +0000 (Fri, 31 Jan 2020)\");\n script_tag(name:\"creation_date\", value:\"2018-02-10 07:54:04 +0100 (Sat, 10 Feb 2018)\");\n script_cve_id(\"CVE-2017-15129\", \"CVE-2017-17712\", \"CVE-2017-17862\", \"CVE-2017-17864\",\n \"CVE-2017-18017\", \"CVE-2017-5715\", \"CVE-2018-1000004\", \"CVE-2018-5332\",\n \"CVE-2018-5333\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"openSUSE: Security Advisory for kernel (openSUSE-SU-2018:0408-1)\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"The openSUSE Leap 42.3 kernel was updated to 4.4.114 to receive various\n security and bugfixes.\n\n The following security bugs were fixed:\n\n - CVE-2017-5715: Systems with microprocessors utilizing speculative\n execution and indirect branch prediction may allow unauthorized\n disclosure\n of information to an attacker with local user access via a side-channel\n analysis (bnc#1068032).\n\n The previous fix using CPU Microcode has been complemented by building\n the Linux Kernel with return trampolines aka 'retpolines'.\n\n - CVE-2018-5333: In the Linux kernel the rds_cmsg_atomic function in\n net/rds/rdma.c mishandled cases where page pinning fails or an invalid\n address is supplied, leading to an rds_atomic_free_op NULL pointer\n dereference (bnc#1075617).\n\n - CVE-2018-5332: In the Linux kernel the rds_message_alloc_sgs() function\n did not validate a value that is used during DMA page allocation,\n leading to a heap-based out-of-bounds write (related to the\n rds_rdma_extra_size function in net/rds/rdma.c) (bnc#1075621).\n\n - CVE-2017-17862: kernel/bpf/verifier.c in the Linux kernel ignores\n unreachable code, even though it would still be processed by JIT\n compilers. This behavior, also considered an improper branch-pruning\n logic issue, could possibly be used by local users for denial of service\n (bnc#1073928).\n\n - CVE-2017-17864: kernel/bpf/verifier.c in the Linux kernel mishandled\n states_equal comparisons between the pointer data type and the\n UNKNOWN_VALUE data type, which allowed local users to obtain potentially\n sensitive address information, aka a 'pointer leak (bnc#1073928).\n\n - CVE-2017-17712: The raw_sendmsg() function in net/ipv4/raw.c in the\n Linux kernel had a race condition in inet- hdrincl that lead to\n uninitialized stack pointer usage this allowed a local user to execute\n code and gain privileges (bnc#1073229 1073230).\n\n - CVE-2017-15129: A use-after-free vulnerability was found in network\n namespaces code affecting the Linux kernel The function\n get_net_ns_by_id() in net/core/net_namespace.c did not check for the\n net::count value after it has found a peer network in netns_ids idr,\n which could lead to double free and memory corruption. This\n vulnerability could allow an unprivileged local user to induce kernel\n memory corruption on the system, leading to a crash. Due to the nature\n of the flaw, privilege escalation cannot be fully ruled out, although it\n is thought to be unlikely (bnc#1074839).\n\n - CVE-2017-18017: The tcpmss_mangle_packet function in\n net/netfilter/xt_TCPMSS.c in the Linux kernel allowed remote attackers\n to cause a denial of s ...\n\n Description truncated, please see the referenced URL(s) for more information.\");\n\n script_tag(name:\"affected\", value:\"Kernel on openSUSE Leap 42.3\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_xref(name:\"openSUSE-SU\", value:\"2018:0408-1\");\n script_xref(name:\"URL\", value:\"https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00013.html\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"SuSE Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/suse\", \"ssh/login/rpms\", re:\"ssh/login/release=openSUSELeap42\\.3\");\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\nreport = \"\";\n\nif(release == \"openSUSELeap42.3\") {\n if(!isnull(res = isrpmvuln(pkg:\"kernel-debug\", rpm:\"kernel-debug~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-debug-base\", rpm:\"kernel-debug-base~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-debug-base-debuginfo\", rpm:\"kernel-debug-base-debuginfo~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-debug-debuginfo\", rpm:\"kernel-debug-debuginfo~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-debug-debugsource\", rpm:\"kernel-debug-debugsource~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-debug-devel\", rpm:\"kernel-debug-devel~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-debug-devel-debuginfo\", rpm:\"kernel-debug-devel-debuginfo~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-default\", rpm:\"kernel-default~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-default-base\", rpm:\"kernel-default-base~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-default-base-debuginfo\", rpm:\"kernel-default-base-debuginfo~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-default-debuginfo\", rpm:\"kernel-default-debuginfo~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-default-debugsource\", rpm:\"kernel-default-debugsource~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-default-devel\", rpm:\"kernel-default-devel~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-obs-build\", rpm:\"kernel-obs-build~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-obs-build-debugsource\", rpm:\"kernel-obs-build-debugsource~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-obs-qa\", rpm:\"kernel-obs-qa~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-syms\", rpm:\"kernel-syms~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-vanilla\", rpm:\"kernel-vanilla~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-vanilla-base\", rpm:\"kernel-vanilla-base~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-vanilla-base-debuginfo\", rpm:\"kernel-vanilla-base-debuginfo~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-vanilla-debuginfo\", rpm:\"kernel-vanilla-debuginfo~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-vanilla-debugsource\", rpm:\"kernel-vanilla-debugsource~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-vanilla-devel\", rpm:\"kernel-vanilla-devel~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kselftests-kmp-debug\", rpm:\"kselftests-kmp-debug~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kselftests-kmp-debug-debuginfo\", rpm:\"kselftests-kmp-debug-debuginfo~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kselftests-kmp-default\", rpm:\"kselftests-kmp-default~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kselftests-kmp-default-debuginfo\", rpm:\"kselftests-kmp-default-debuginfo~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kselftests-kmp-vanilla\", rpm:\"kselftests-kmp-vanilla~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kselftests-kmp-vanilla-debuginfo\", rpm:\"kselftests-kmp-vanilla-debuginfo~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-devel\", rpm:\"kernel-devel~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-docs\", rpm:\"kernel-docs~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-docs-html\", rpm:\"kernel-docs-html~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-docs-pdf\", rpm:\"kernel-docs-pdf~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-macros\", rpm:\"kernel-macros~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-source\", rpm:\"kernel-source~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-source-vanilla\", rpm:\"kernel-source-vanilla~4.4.114~42.1\", rls:\"openSUSELeap42.3\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if(__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nexit(0);\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-07-04T19:02:19", "description": "Several vulnerabilities have been discovered in the Linux kernel that\nmay lead to a privilege escalation, denial of service or information\nleaks.\n\nCVE-2017-8824Mohamed Ghannam discovered that the DCCP implementation did not\ncorrectly manage resources when a socket is disconnected and\nreconnected, potentially leading to a use-after-free. A local\nuser could use this for denial of service (crash or data\ncorruption) or possibly for privilege escalation. On systems that\ndo not already have the dccp module loaded, this can be mitigated\nby disabling it:\necho>> /etc/modprobe.d/disable-dccp.conf install dccp falseCVE-2017-16538\nAndrey Konovalov reported that the dvb-usb-lmedm04 media driver\ndid not correctly handle some error conditions during\ninitialisation. A physically present user with a specially\ndesigned USB device can use this to cause a denial of service\n(crash).\n\nDescription truncated. Please see the references for more information.", "cvss3": {}, "published": "2017-12-23T00:00:00", "type": "openvas", "title": "Debian Security Advisory DSA 4073-1 (linux - security update)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2017-17863", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17741", "CVE-2017-17862", "CVE-2017-17805", "CVE-2017-16995", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2017-1000407", "CVE-2017-1000410", "CVE-2017-17449", "CVE-2017-16538", "CVE-2017-17807", "CVE-2017-16644", "CVE-2017-17864", "CVE-2017-17806"], "modified": "2019-07-04T00:00:00", "id": "OPENVAS:1361412562310704073", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310704073", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Auto-generated from advisory DSA 4073-1 using nvtgen 1.0\n# Script version: 1.0\n#\n# Author:\n# Greenbone Networks\n#\n# Copyright:\n# Copyright (c) 2017 Greenbone Networks GmbH http://greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License as published by\n# the Free Software Foundation; either version 2 of the License, or\n# (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.704073\");\n script_version(\"2019-07-04T09:25:28+0000\");\n script_cve_id(\"CVE-2017-1000407\", \"CVE-2017-1000410\", \"CVE-2017-16538\", \"CVE-2017-16644\", \"CVE-2017-16995\", \"CVE-2017-17448\", \"CVE-2017-17449\", \"CVE-2017-17450\", \"CVE-2017-17558\", \"CVE-2017-17712\", \"CVE-2017-17741\", \"CVE-2017-17805\", \"CVE-2017-17806\", \"CVE-2017-17807\", \"CVE-2017-17862\", \"CVE-2017-17863\", \"CVE-2017-17864\", \"CVE-2017-8824\");\n script_name(\"Debian Security Advisory DSA 4073-1 (linux - security update)\");\n script_tag(name:\"last_modification\", value:\"2019-07-04 09:25:28 +0000 (Thu, 04 Jul 2019)\");\n script_tag(name:\"creation_date\", value:\"2017-12-23 00:00:00 +0100 (Sat, 23 Dec 2017)\");\n script_tag(name:\"cvss_base\", value:\"7.2\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n script_xref(name:\"URL\", value:\"https://www.debian.org/security/2017/dsa-4073.html\");\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2017 Greenbone Networks GmbH http://greenbone.net\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\", re:\"ssh/login/release=DEB9\");\n script_tag(name:\"affected\", value:\"linux on Debian Linux\");\n script_tag(name:\"solution\", value:\"For the stable distribution (stretch), these problems have been fixed in\nversion 4.9.65-3+deb9u1.\n\nWe recommend that you upgrade your linux packages.\");\n\n script_xref(name:\"URL\", value:\"https://security-tracker.debian.org/tracker/linux\");\n script_tag(name:\"summary\", value:\"Several vulnerabilities have been discovered in the Linux kernel that\nmay lead to a privilege escalation, denial of service or information\nleaks.\n\nCVE-2017-8824Mohamed Ghannam discovered that the DCCP implementation did not\ncorrectly manage resources when a socket is disconnected and\nreconnected, potentially leading to a use-after-free. A local\nuser could use this for denial of service (crash or data\ncorruption) or possibly for privilege escalation. On systems that\ndo not already have the dccp module loaded, this can be mitigated\nby disabling it:\necho>> /etc/modprobe.d/disable-dccp.conf install dccp falseCVE-2017-16538\nAndrey Konovalov reported that the dvb-usb-lmedm04 media driver\ndid not correctly handle some error conditions during\ninitialisation. A physically present user with a specially\ndesigned USB device can use this to cause a denial of service\n(crash).\n\nDescription truncated. Please see the references for more information.\");\n script_tag(name:\"vuldetect\", value:\"This check tests the installed software version using the apt package manager.\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif(!isnull(res = isdpkgvuln(pkg:\"hyperv-daemons\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"libcpupower-dev\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"libcpupower1\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"libusbip-dev\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-compiler-gcc-6-arm\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-compiler-gcc-6-s390\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-compiler-gcc-6-x86\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-cpupower\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-doc-4.9\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-4kc-malta\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-5kc-malta\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-686\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-686-pae\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-all\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-all-amd64\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-all-arm64\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-all-armel\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-all-armhf\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-all-i386\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-all-mips\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-all-mips64el\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-all-mipsel\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-all-ppc64el\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-all-s390x\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-amd64\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-arm64\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-armmp\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-armmp-lpae\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-common\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-common-rt\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-loongson-3\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-marvell\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-octeon\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-powerpc64le\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-rt-686-pae\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-rt-amd64\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-3-s390x\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-4kc-malta\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-5kc-malta\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-686\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-686-pae\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-all\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-all-amd64\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-all-arm64\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-all-armel\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-all-armhf\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-all-i386\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-all-mips\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-all-mips64el\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-all-mipsel\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-all-ppc64el\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-all-s390x\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-amd64\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-arm64\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-armmp\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-armmp-lpae\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-common\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-common-rt\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-loongson-3\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-marvell\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-octeon\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-powerpc64le\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-rt-686-pae\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-rt-amd64\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-headers-4.9.0-4-s390x\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-4kc-malta\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-4kc-malta-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-5kc-malta\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-5kc-malta-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-686\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-686-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-686-pae\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-686-pae-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-amd64\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-amd64-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-arm64\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-arm64-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-armmp\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-armmp-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-armmp-lpae\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-armmp-lpae-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-loongson-3\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-loongson-3-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-marvell\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-marvell-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-octeon\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-octeon-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-powerpc64le\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-powerpc64le-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-rt-686-pae\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-rt-686-pae-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-rt-amd64\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-rt-amd64-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-s390x\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-3-s390x-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-4kc-malta\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-4kc-malta-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-5kc-malta\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-5kc-malta-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-686\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-686-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-686-pae\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-686-pae-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-amd64\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-amd64-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-arm64\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-arm64-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-armmp\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-armmp-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-armmp-lpae\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-armmp-lpae-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-loongson-3\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-loongson-3-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-marvell\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-marvell-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-octeon\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-octeon-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-powerpc64le\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-powerpc64le-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-rt-686-pae\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-rt-686-pae-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-rt-amd64\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-rt-amd64-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-s390x\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-image-4.9.0-4-s390x-dbg\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-kbuild-4.9\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-libc-dev\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-manual-4.9\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-perf-4.9\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-source-4.9\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-support-4.9.0-3\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"linux-support-4.9.0-4\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"usbip\", ver:\"4.9.65-3+deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\n\nif(report != \"\") {\n security_message(data:report);\n} else if(__pkg_match) {\n exit(99);\n}", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-02-05T16:43:54", "description": "The remote host is missing an update for the Huawei EulerOS\n ", "cvss3": {}, "published": "2020-01-23T00:00:00", "type": "openvas", "title": "Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1519)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2014-3182", "CVE-2017-2584", "CVE-2018-13096", "CVE-2015-4178", "CVE-2016-7911", "CVE-2015-1328", "CVE-2016-0723", "CVE-2014-8173", "CVE-2017-17712", "CVE-2014-9895", "CVE-2018-1091", "CVE-2018-10322", "CVE-2019-3701", "CVE-2013-4350", "CVE-2017-7187", "CVE-2015-5157", "CVE-2017-8890", "CVE-2016-4998", "CVE-2015-2042"], "modified": "2020-02-05T00:00:00", "id": "OPENVAS:1361412562311220191519", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562311220191519", "sourceData": "# Copyright (C) 2020 Greenbone Networks GmbH\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) the respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.1.2.2019.1519\");\n script_version(\"2020-02-05T08:56:28+0000\");\n script_cve_id(\"CVE-2013-4350\", \"CVE-2014-3182\", \"CVE-2014-8173\", \"CVE-2014-9895\", \"CVE-2015-1328\", \"CVE-2015-2042\", \"CVE-2015-4178\", \"CVE-2015-5157\", \"CVE-2016-0723\", \"CVE-2016-4998\", \"CVE-2016-7911\", \"CVE-2017-17712\", \"CVE-2017-2584\", \"CVE-2017-7187\", \"CVE-2017-8890\", \"CVE-2018-10021\", \"CVE-2018-10322\", \"CVE-2018-1091\", \"CVE-2018-13096\", \"CVE-2019-3701\");\n script_tag(name:\"cvss_base\", value:\"9.3\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"2020-02-05 08:56:28 +0000 (Wed, 05 Feb 2020)\");\n script_tag(name:\"creation_date\", value:\"2020-01-23 12:02:41 +0000 (Thu, 23 Jan 2020)\");\n script_name(\"Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1519)\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2020 Greenbone Networks GmbH\");\n script_family(\"Huawei EulerOS Local Security Checks\");\n script_dependencies(\"gb_huawei_euleros_consolidation.nasl\");\n script_mandatory_keys(\"ssh/login/euleros\", \"ssh/login/rpms\", re:\"ssh/login/release=EULEROSVIRTARM64-3\\.0\\.1\\.0\");\n\n script_xref(name:\"EulerOS-SA\", value:\"2019-1519\");\n script_xref(name:\"URL\", value:\"https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2019-1519\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the Huawei EulerOS\n 'kernel' package(s) announced via the EulerOS-SA-2019-1519 advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"The IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data structures and function calls that do not trigger an intended configuration of IPsec encryption, which allows remote attackers to obtain sensitive information by sniffing the network.(CVE-2013-4350)\n\nThe sg_ioctl function in drivers/scsi/sg.c in the Linux kernel allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impacts via a large command size in an SG_NEXT_CMD_LEN ioctl call, leading to out-of-bounds write access in the sg_write function.(CVE-2017-7187)\n\nAn issue was discovered in can_can_gw_rcv in net/can/gw.c in the Linux kernel through 4.19.13. The CAN frame modification rules allow bitwise logical operations that can be also applied to the can_dlc field. Because of a missing check, the CAN drivers may write arbitrary content beyond the data registers in the CAN controller's I/O memory when processing can-gw manipulated outgoing frames. This is related to cgw_csum_xor_rel. An unprivileged user can trigger a system crash (general protection fault).(CVE-2019-3701)\n\nnet/rds/sysctl.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local users to obtain potentially sensitive information from kernel memory or possibly have unspecified other impact by accessing a sysctl entry.(CVE-2015-2042)\n\nThe inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel allows attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call. An unprivileged local user could use this flaw to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely.(CVE-2017-8890)\n\nThe overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory, which allows local users to obtain root access by leveraging a configuration in which overlayfs is permitted in an arbitrary mount namespace.(CVE-2015-1328)\n\nThe xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereference) via a crafted xfs image.(CVE-2018-10322)\n\nIn the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel ...\n\n Description truncated. Please see the references for more information.\");\n\n script_tag(name:\"affected\", value:\"'kernel' package(s) on Huawei EulerOS Virtualization for ARM 64 3.0.1.0.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\nreport = \"\";\n\nif(release == \"EULEROSVIRTARM64-3.0.1.0\") {\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.19.28~1.2.117\", rls:\"EULEROSVIRTARM64-3.0.1.0\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-devel\", rpm:\"kernel-devel~4.19.28~1.2.117\", rls:\"EULEROSVIRTARM64-3.0.1.0\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-headers\", rpm:\"kernel-headers~4.19.28~1.2.117\", rls:\"EULEROSVIRTARM64-3.0.1.0\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-tools\", rpm:\"kernel-tools~4.19.28~1.2.117\", rls:\"EULEROSVIRTARM64-3.0.1.0\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-tools-libs\", rpm:\"kernel-tools-libs~4.19.28~1.2.117\", rls:\"EULEROSVIRTARM64-3.0.1.0\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"kernel-tools-libs-devel\", rpm:\"kernel-tools-libs-devel~4.19.28~1.2.117\", rls:\"EULEROSVIRTARM64-3.0.1.0\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"perf\", rpm:\"perf~4.19.28~1.2.117\", rls:\"EULEROSVIRTARM64-3.0.1.0\"))) {\n report += res;\n }\n\n if(!isnull(res = isrpmvuln(pkg:\"python-perf\", rpm:\"python-perf~4.19.28~1.2.117\", rls:\"EULEROSVIRTARM64-3.0.1.0\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if (__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nexit(0);\n", "cvss": {"score": 9.3, "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:32:59", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-04-18T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-1e033dc308", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2018-8043", "CVE-2017-17863", "CVE-2017-17450", "CVE-2017-17558", "CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17741", "CVE-2017-12193", "CVE-2017-17862", "CVE-2017-17852", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2017-17853", "CVE-2018-7757", "CVE-2017-15115", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-16647", "CVE-2018-5332", "CVE-2017-17449", "CVE-2017-16650", "CVE-2018-7995", "CVE-2018-5750", "CVE-2017-16538", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-16644", "CVE-2017-17864", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2017-17856"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310874366", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874366", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_1e033dc308_kernel_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-1e033dc308\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874366\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-04-18 08:57:51 +0200 (Wed, 18 Apr 2018)\");\n script_cve_id(\"CVE-2018-10021\", \"CVE-2017-18232\", \"CVE-2018-7995\", \"CVE-2018-8043\",\n \"CVE-2018-7757\", \"CVE-2018-5803\", \"CVE-2018-1065\", \"CVE-2018-1000026\",\n \"CVE-2018-5750\", \"CVE-2018-1000004\", \"CVE-2018-5344\", \"CVE-2018-5332\",\n \"CVE-2018-5333\", \"CVE-2017-17862\", \"CVE-2017-17863\", \"CVE-2017-17864\",\n \"CVE-2017-17852\", \"CVE-2017-17853\", \"CVE-2017-17854\", \"CVE-2017-17855\",\n \"CVE-2017-17856\", \"CVE-2017-17857\", \"CVE-2017-17741\", \"CVE-2017-17712\",\n \"CVE-2017-17449\", \"CVE-2017-17450\", \"CVE-2017-17448\", \"CVE-2017-17558\",\n \"CVE-2017-8824\", \"CVE-2017-1000405\", \"CVE-2017-16649\", \"CVE-2017-16650\",\n \"CVE-2017-16644\", \"CVE-2017-16647\", \"CVE-2017-15115\", \"CVE-2017-16532\",\n \"CVE-2017-16538\", \"CVE-2017-12193\");\n script_tag(name:\"cvss_base\", value:\"7.2\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-1e033dc308\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_xref(name:\"FEDORA\", value:\"2018-1e033dc308\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SKS5SHENFBKZBNJZ5A6BMP6JNTK5D4QC\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.15.17~300.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:33:08", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-05-02T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-e71875c4aa", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2018-8043", "CVE-2017-17863", "CVE-2017-17450", "CVE-2018-1108", "CVE-2017-17558", "CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17741", "CVE-2017-12193", "CVE-2017-17862", "CVE-2017-17852", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2017-17853", "CVE-2018-7757", "CVE-2017-15115", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-16647", "CVE-2018-5332", "CVE-2017-17449", "CVE-2017-16650", "CVE-2018-7995", "CVE-2018-5750", "CVE-2017-16538", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-16644", "CVE-2017-17864", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2017-17856"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310874400", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874400", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_e71875c4aa_kernel_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-e71875c4aa\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874400\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-05-02 16:59:02 +0530 (Wed, 02 May 2018)\");\n script_cve_id(\"CVE-2018-10021\", \"CVE-2017-18232\", \"CVE-2018-7995\", \"CVE-2018-8043\",\n \"CVE-2018-7757\", \"CVE-2018-5803\", \"CVE-2018-1065\", \"CVE-2018-1000026\",\n \"CVE-2018-5750\", \"CVE-2018-1000004\", \"CVE-2018-5344\", \"CVE-2018-5332\",\n \"CVE-2018-5333\", \"CVE-2017-17862\", \"CVE-2017-17863\", \"CVE-2017-17864\",\n \"CVE-2017-17852\", \"CVE-2017-17853\", \"CVE-2017-17854\", \"CVE-2017-17855\",\n \"CVE-2017-17856\", \"CVE-2017-17857\", \"CVE-2017-17741\", \"CVE-2017-17712\",\n \"CVE-2017-17449\", \"CVE-2017-17450\", \"CVE-2017-17448\", \"CVE-2017-17558\",\n \"CVE-2017-8824\", \"CVE-2017-1000405\", \"CVE-2017-16649\", \"CVE-2017-16650\",\n \"CVE-2017-16644\", \"CVE-2017-16647\", \"CVE-2017-15115\", \"CVE-2017-16532\",\n \"CVE-2017-16538\", \"CVE-2017-12193\", \"CVE-2018-1108\");\n script_tag(name:\"cvss_base\", value:\"7.2\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-e71875c4aa\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_xref(name:\"FEDORA\", value:\"2018-e71875c4aa\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/23BZYWCPCFYSPRRRVNCK6UFYCODGX6GB\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.16.4~200.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:32:59", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-06-06T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-e8f793bbfc", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2018-8043", "CVE-2017-17863", "CVE-2017-17450", "CVE-2018-1108", "CVE-2017-17558", "CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17741", "CVE-2018-10840", "CVE-2017-12193", "CVE-2017-17862", "CVE-2018-11506", "CVE-2017-17852", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2017-17853", "CVE-2018-7757", "CVE-2017-15115", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2018-1120", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-16647", "CVE-2018-5332", "CVE-2017-17449", "CVE-2018-10322", "CVE-2017-16650", "CVE-2018-10323", "CVE-2018-7995", "CVE-2018-5750", "CVE-2017-16538", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-16644", "CVE-2017-17864", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2018-3639", "CVE-2017-17856"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310874647", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874647", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_e8f793bbfc_kernel_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-e8f793bbfc\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874647\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-06-06 10:21:31 +0200 (Wed, 06 Jun 2018)\");\n script_cve_id(\"CVE-2018-11506\", \"CVE-2018-10840\", \"CVE-2018-3639\", \"CVE-2018-1120\",\n \"CVE-2018-10322\", \"CVE-2018-10323\", \"CVE-2018-1108\", \"CVE-2018-10021\",\n \"CVE-2017-18232\", \"CVE-2018-7995\", \"CVE-2018-8043\", \"CVE-2018-7757\",\n \"CVE-2018-5803\", \"CVE-2018-1065\", \"CVE-2018-1000026\", \"CVE-2018-5750\",\n \"CVE-2018-1000004\", \"CVE-2018-5344\", \"CVE-2018-5332\", \"CVE-2018-5333\",\n \"CVE-2017-17862\", \"CVE-2017-17863\", \"CVE-2017-17864\", \"CVE-2017-17852\",\n \"CVE-2017-17853\", \"CVE-2017-17854\", \"CVE-2017-17855\", \"CVE-2017-17856\",\n \"CVE-2017-17857\", \"CVE-2017-17741\", \"CVE-2017-17712\", \"CVE-2017-17449\",\n \"CVE-2017-17450\", \"CVE-2017-17448\", \"CVE-2017-17558\", \"CVE-2017-8824\",\n \"CVE-2017-1000405\", \"CVE-2017-16649\", \"CVE-2017-16650\", \"CVE-2017-16644\",\n \"CVE-2017-16647\", \"CVE-2017-15115\", \"CVE-2017-16532\", \"CVE-2017-16538\",\n \"CVE-2017-12193\");\n script_tag(name:\"cvss_base\", value:\"7.2\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-e8f793bbfc\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\non the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"FEDORA\", value:\"2018-e8f793bbfc\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F32LED4G6QF446ZM5G7MOPFDAP4VB6M2\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.16.13~200.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:33:11", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-05-26T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-93c2e74446", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2018-8043", "CVE-2017-17863", "CVE-2017-17450", "CVE-2018-1108", "CVE-2017-17558", "CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17741", "CVE-2017-12193", "CVE-2017-17862", "CVE-2017-17852", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2017-17853", "CVE-2018-7757", "CVE-2017-15115", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2018-1120", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-16647", "CVE-2018-5332", "CVE-2017-17449", "CVE-2018-10322", "CVE-2017-16650", "CVE-2018-10323", "CVE-2018-7995", "CVE-2018-5750", "CVE-2017-16538", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-16644", "CVE-2017-17864", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2018-3639", "CVE-2017-17856"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310874606", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874606", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_93c2e74446_kernel_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-93c2e74446\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874606\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-05-26 05:55:13 +0200 (Sat, 26 May 2018)\");\n script_cve_id(\"CVE-2018-3639\", \"CVE-2018-1120\", \"CVE-2018-10322\", \"CVE-2018-10323\",\n \"CVE-2018-1108\", \"CVE-2018-10021\", \"CVE-2017-18232\", \"CVE-2018-7995\",\n \"CVE-2018-8043\", \"CVE-2018-7757\", \"CVE-2018-5803\", \"CVE-2018-1065\",\n \"CVE-2018-1000026\", \"CVE-2018-5750\", \"CVE-2018-1000004\", \"CVE-2018-5344\",\n \"CVE-2018-5332\", \"CVE-2018-5333\", \"CVE-2017-17862\", \"CVE-2017-17863\",\n \"CVE-2017-17864\", \"CVE-2017-17852\", \"CVE-2017-17853\", \"CVE-2017-17854\",\n \"CVE-2017-17855\", \"CVE-2017-17856\", \"CVE-2017-17857\", \"CVE-2017-17741\",\n \"CVE-2017-17712\", \"CVE-2017-17449\", \"CVE-2017-17450\", \"CVE-2017-17448\",\n \"CVE-2017-17558\", \"CVE-2017-8824\", \"CVE-2017-1000405\", \"CVE-2017-16649\",\n \"CVE-2017-16650\", \"CVE-2017-16644\", \"CVE-2017-16647\", \"CVE-2017-15115\",\n \"CVE-2017-16532\", \"CVE-2017-16538\", \"CVE-2017-12193\");\n script_tag(name:\"cvss_base\", value:\"7.2\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-93c2e74446\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\non the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"FEDORA\", value:\"2018-93c2e74446\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y4XJ6WFI3BA27DJD66OHZX644RGQ7EBV\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.16.11~200.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:33:11", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-05-30T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-9d0e4e40b5", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2018-8043", "CVE-2017-17863", "CVE-2017-17450", "CVE-2018-1108", "CVE-2017-17558", "CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17741", "CVE-2018-10840", "CVE-2017-12193", "CVE-2017-17862", "CVE-2017-17852", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2017-17853", "CVE-2018-7757", "CVE-2017-15115", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2018-1120", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-16647", "CVE-2018-5332", "CVE-2017-17449", "CVE-2018-10322", "CVE-2017-16650", "CVE-2018-10323", "CVE-2018-7995", "CVE-2018-5750", "CVE-2017-16538", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-16644", "CVE-2017-17864", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2018-3639", "CVE-2017-17856"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310874623", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874623", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_9d0e4e40b5_kernel_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-9d0e4e40b5\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874623\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-05-30 06:02:06 +0200 (Wed, 30 May 2018)\");\n script_cve_id(\"CVE-2018-10840\", \"CVE-2018-3639\", \"CVE-2018-1120\", \"CVE-2018-10322\",\n \"CVE-2018-10323\", \"CVE-2018-1108\", \"CVE-2018-10021\", \"CVE-2017-18232\",\n \"CVE-2018-7995\", \"CVE-2018-8043\", \"CVE-2018-7757\", \"CVE-2018-5803\",\n \"CVE-2018-1065\", \"CVE-2018-1000026\", \"CVE-2018-5750\", \"CVE-2018-1000004\",\n \"CVE-2018-5344\", \"CVE-2018-5332\", \"CVE-2018-5333\", \"CVE-2017-17862\",\n \"CVE-2017-17863\", \"CVE-2017-17864\", \"CVE-2017-17852\", \"CVE-2017-17853\",\n \"CVE-2017-17854\", \"CVE-2017-17855\", \"CVE-2017-17856\", \"CVE-2017-17857\",\n \"CVE-2017-17741\", \"CVE-2017-17712\", \"CVE-2017-17449\", \"CVE-2017-17450\",\n \"CVE-2017-17448\", \"CVE-2017-17558\", \"CVE-2017-8824\", \"CVE-2017-1000405\",\n \"CVE-2017-16649\", \"CVE-2017-16650\", \"CVE-2017-16644\", \"CVE-2017-16647\",\n \"CVE-2017-15115\", \"CVE-2017-16532\", \"CVE-2017-16538\", \"CVE-2017-12193\");\n script_tag(name:\"cvss_base\", value:\"7.2\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-9d0e4e40b5\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\non the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"FEDORA\", value:\"2018-9d0e4e40b5\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YAUGR47M3LDUN54S6SH2OQ3U6U2LS7HA\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.16.12~200.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:33:06", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-06-23T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-c449dc1c9c", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2018-8043", "CVE-2017-17863", "CVE-2017-17450", "CVE-2018-1108", "CVE-2017-17558", "CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17741", "CVE-2018-10840", "CVE-2017-12193", "CVE-2017-17862", "CVE-2018-11506", "CVE-2018-12232", "CVE-2017-17852", "CVE-2018-10853", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2017-17853", "CVE-2018-7757", "CVE-2017-15115", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2018-1120", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-16647", "CVE-2018-5332", "CVE-2017-17449", "CVE-2018-10322", "CVE-2017-16650", "CVE-2018-10323", "CVE-2018-7995", "CVE-2018-5750", "CVE-2017-16538", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-16644", "CVE-2017-17864", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2018-3639", "CVE-2017-17856"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310874721", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874721", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_c449dc1c9c_kernel_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-c449dc1c9c\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874721\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-06-23 06:16:07 +0200 (Sat, 23 Jun 2018)\");\n script_cve_id(\"CVE-2018-12232\", \"CVE-2018-10853\", \"CVE-2018-11506\", \"CVE-2018-10840\",\n \"CVE-2018-3639\", \"CVE-2018-1120\", \"CVE-2018-10322\", \"CVE-2018-10323\",\n \"CVE-2018-1108\", \"CVE-2018-10021\", \"CVE-2017-18232\", \"CVE-2018-7995\",\n \"CVE-2018-8043\", \"CVE-2018-7757\", \"CVE-2018-5803\", \"CVE-2018-1065\",\n \"CVE-2018-1000026\", \"CVE-2018-5750\", \"CVE-2018-1000004\", \"CVE-2018-5344\",\n \"CVE-2018-5332\", \"CVE-2018-5333\", \"CVE-2017-17862\", \"CVE-2017-17863\",\n \"CVE-2017-17864\", \"CVE-2017-17852\", \"CVE-2017-17853\", \"CVE-2017-17854\",\n \"CVE-2017-17855\", \"CVE-2017-17856\", \"CVE-2017-17857\", \"CVE-2017-17741\",\n \"CVE-2017-17712\", \"CVE-2017-17449\", \"CVE-2017-17450\", \"CVE-2017-17448\",\n \"CVE-2017-17558\", \"CVE-2017-8824\", \"CVE-2017-1000405\", \"CVE-2017-16649\",\n \"CVE-2017-16650\", \"CVE-2017-16644\", \"CVE-2017-16647\", \"CVE-2017-15115\",\n \"CVE-2017-16532\", \"CVE-2017-16538\", \"CVE-2017-12193\");\n script_tag(name:\"cvss_base\", value:\"7.2\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-c449dc1c9c\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\non the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"FEDORA\", value:\"2018-c449dc1c9c\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y5RAP5M7DMT24XOVYRAYT7GRQE5OWLU3\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.16.16~200.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:33:03", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-06-18T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-b57db4753c", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2018-8043", "CVE-2017-17863", "CVE-2017-17450", "CVE-2018-1108", "CVE-2017-17558", "CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17741", "CVE-2018-10840", "CVE-2017-12193", "CVE-2017-17862", "CVE-2018-11506", "CVE-2017-17852", "CVE-2018-10853", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2017-17853", "CVE-2018-7757", "CVE-2017-15115", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2018-1120", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-16647", "CVE-2018-5332", "CVE-2017-17449", "CVE-2018-10322", "CVE-2017-16650", "CVE-2018-10323", "CVE-2018-7995", "CVE-2018-5750", "CVE-2017-16538", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-16644", "CVE-2017-17864", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2018-3639", "CVE-2017-17856"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310874695", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874695", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_b57db4753c_kernel_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-b57db4753c\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874695\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-06-18 06:02:23 +0200 (Mon, 18 Jun 2018)\");\n script_cve_id(\"CVE-2018-10853\", \"CVE-2018-11506\", \"CVE-2018-10840\", \"CVE-2018-3639\",\n \"CVE-2018-1120\", \"CVE-2018-10322\", \"CVE-2018-10323\", \"CVE-2018-1108\",\n \"CVE-2018-10021\", \"CVE-2017-18232\", \"CVE-2018-7995\", \"CVE-2018-8043\",\n \"CVE-2018-7757\", \"CVE-2018-5803\", \"CVE-2018-1065\", \"CVE-2018-1000026\",\n \"CVE-2018-5750\", \"CVE-2018-1000004\", \"CVE-2018-5344\", \"CVE-2018-5332\",\n \"CVE-2018-5333\", \"CVE-2017-17862\", \"CVE-2017-17863\", \"CVE-2017-17864\",\n \"CVE-2017-17852\", \"CVE-2017-17853\", \"CVE-2017-17854\", \"CVE-2017-17855\",\n \"CVE-2017-17856\", \"CVE-2017-17857\", \"CVE-2017-17741\", \"CVE-2017-17712\",\n \"CVE-2017-17449\", \"CVE-2017-17450\", \"CVE-2017-17448\", \"CVE-2017-17558\",\n \"CVE-2017-8824\", \"CVE-2017-1000405\", \"CVE-2017-16649\", \"CVE-2017-16650\",\n \"CVE-2017-16644\", \"CVE-2017-16647\", \"CVE-2017-15115\", \"CVE-2017-16532\",\n \"CVE-2017-16538\", \"CVE-2017-12193\");\n script_tag(name:\"cvss_base\", value:\"7.2\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-b57db4753c\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\non the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"FEDORA\", value:\"2018-b57db4753c\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22G4FPLZ4Y2WCMKTQG2WQFPR36Y3V4U4\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.16.15~200.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:33:01", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-07-03T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-2a0f8b2c9d", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2018-8043", "CVE-2017-17863", "CVE-2017-17450", "CVE-2018-1108", "CVE-2017-17558", "CVE-2018-12633", "CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17741", "CVE-2018-10840", "CVE-2017-12193", "CVE-2017-17862", "CVE-2018-11506", "CVE-2018-12232", "CVE-2017-17852", "CVE-2018-10853", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2017-17853", "CVE-2018-7757", "CVE-2017-15115", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2018-1120", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-16647", "CVE-2018-5332", "CVE-2017-17449", "CVE-2018-10322", "CVE-2017-16650", "CVE-2018-10323", "CVE-2018-7995", "CVE-2018-5750", "CVE-2017-16538", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-16644", "CVE-2017-17864", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2018-3639", "CVE-2017-17856"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310874761", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874761", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_2a0f8b2c9d_kernel_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-2a0f8b2c9d\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874761\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-07-03 06:02:18 +0200 (Tue, 03 Jul 2018)\");\n script_cve_id(\"CVE-2018-12633\", \"CVE-2018-12232\", \"CVE-2018-10853\", \"CVE-2018-11506\",\n \"CVE-2018-10840\", \"CVE-2018-3639\", \"CVE-2018-1120\", \"CVE-2018-10322\",\n \"CVE-2018-10323\", \"CVE-2018-1108\", \"CVE-2018-10021\", \"CVE-2017-18232\",\n \"CVE-2018-7995\", \"CVE-2018-8043\", \"CVE-2018-7757\", \"CVE-2018-5803\",\n \"CVE-2018-1065\", \"CVE-2018-1000026\", \"CVE-2018-5750\", \"CVE-2018-1000004\",\n \"CVE-2018-5344\", \"CVE-2018-5332\", \"CVE-2018-5333\", \"CVE-2017-17862\",\n \"CVE-2017-17863\", \"CVE-2017-17864\", \"CVE-2017-17852\", \"CVE-2017-17853\",\n \"CVE-2017-17854\", \"CVE-2017-17855\", \"CVE-2017-17856\", \"CVE-2017-17857\",\n \"CVE-2017-17741\", \"CVE-2017-17712\", \"CVE-2017-17449\", \"CVE-2017-17450\",\n \"CVE-2017-17448\", \"CVE-2017-17558\", \"CVE-2017-8824\", \"CVE-2017-1000405\",\n \"CVE-2017-16649\", \"CVE-2017-16650\", \"CVE-2017-16644\", \"CVE-2017-16647\",\n \"CVE-2017-15115\", \"CVE-2017-16532\", \"CVE-2017-16538\", \"CVE-2017-12193\");\n script_tag(name:\"cvss_base\", value:\"7.2\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-2a0f8b2c9d\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\non the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"FEDORA\", value:\"2018-2a0f8b2c9d\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGVBVYZZR6UYWHRCMCVLU3DVJMBOYBLP\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.17.3~100.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:33:01", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-06-29T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-b997780dca", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2018-8043", "CVE-2017-17863", "CVE-2017-17450", "CVE-2018-1108", "CVE-2017-17558", "CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17741", "CVE-2018-10840", "CVE-2017-12193", "CVE-2017-17862", "CVE-2018-12904", "CVE-2018-11506", "CVE-2018-12232", "CVE-2017-17852", "CVE-2018-10853", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2017-17853", "CVE-2018-7757", "CVE-2017-15115", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2018-1120", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-16647", "CVE-2018-5332", "CVE-2017-17449", "CVE-2018-10322", "CVE-2017-16650", "CVE-2018-10323", "CVE-2018-7995", "CVE-2018-5750", "CVE-2017-16538", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-16644", "CVE-2017-17864", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2018-3639", "CVE-2017-17856"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310874751", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874751", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_b997780dca_kernel_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-b997780dca\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874751\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-06-29 10:57:08 +0200 (Fri, 29 Jun 2018)\");\n script_cve_id(\"CVE-2018-12232\", \"CVE-2018-10853\", \"CVE-2018-11506\", \"CVE-2018-10840\",\n \"CVE-2018-3639\", \"CVE-2018-1120\", \"CVE-2018-10322\", \"CVE-2018-10323\",\n \"CVE-2018-1108\", \"CVE-2018-10021\", \"CVE-2017-18232\", \"CVE-2018-7995\",\n \"CVE-2018-8043\", \"CVE-2018-7757\", \"CVE-2018-5803\", \"CVE-2018-1065\",\n \"CVE-2018-1000026\", \"CVE-2018-5750\", \"CVE-2018-1000004\", \"CVE-2018-5344\",\n \"CVE-2018-5332\", \"CVE-2018-5333\", \"CVE-2017-17862\", \"CVE-2017-17863\",\n \"CVE-2017-17864\", \"CVE-2017-17852\", \"CVE-2017-17853\", \"CVE-2017-17854\",\n \"CVE-2017-17855\", \"CVE-2017-17856\", \"CVE-2017-17857\", \"CVE-2017-17741\",\n \"CVE-2017-17712\", \"CVE-2017-17449\", \"CVE-2017-17450\", \"CVE-2017-17448\",\n \"CVE-2017-17558\", \"CVE-2017-8824\", \"CVE-2017-1000405\", \"CVE-2017-16649\",\n \"CVE-2017-16650\", \"CVE-2017-16644\", \"CVE-2017-16647\", \"CVE-2017-15115\",\n \"CVE-2017-16532\", \"CVE-2017-16538\", \"CVE-2017-12193\", \"CVE-2018-12904\");\n script_tag(name:\"cvss_base\", value:\"7.2\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-b997780dca\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\non the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"FEDORA\", value:\"2018-b997780dca\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2V7GQIYQYXQJNRX5DEJNNO6YKOHQC42\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.17.2~100.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:33:07", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-08-26T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-79d7c3d2df", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2018-8043", "CVE-2017-17863", "CVE-2018-13053", "CVE-2017-17450", "CVE-2018-1108", "CVE-2017-17558", "CVE-2018-12633", "CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17741", "CVE-2018-10840", "CVE-2018-13405", "CVE-2018-13095", "CVE-2017-12193", "CVE-2017-17862", "CVE-2018-12714", "CVE-2018-11506", "CVE-2018-12232", "CVE-2017-17852", "CVE-2018-10853", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2018-13093", "CVE-2017-17853", "CVE-2018-7757", "CVE-2017-15115", "CVE-2018-14734", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2018-3646", "CVE-2018-1120", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-16647", "CVE-2018-5332", "CVE-2018-3620", "CVE-2017-17449", "CVE-2018-10322", "CVE-2018-15471", "CVE-2017-16650", "CVE-2018-10323", "CVE-2018-7995", "CVE-2018-14678", "CVE-2018-5750", "CVE-2017-16538", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-16644", "CVE-2017-17864", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2018-3639", "CVE-2017-17856", "CVE-2018-12896", "CVE-2018-13094"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310874998", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874998", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_79d7c3d2df_kernel_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-79d7c3d2df\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874998\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-08-26 07:09:43 +0200 (Sun, 26 Aug 2018)\");\n script_cve_id(\"CVE-2018-15471\", \"CVE-2018-3620\", \"CVE-2018-3646\", \"CVE-2018-14734\",\n \"CVE-2018-14678\", \"CVE-2018-13405\", \"CVE-2018-13053\", \"CVE-2018-12896\",\n \"CVE-2018-13093\", \"CVE-2018-13094\", \"CVE-2018-13095\", \"CVE-2018-12714\",\n \"CVE-2018-12633\", \"CVE-2018-12232\", \"CVE-2018-10853\", \"CVE-2018-11506\",\n \"CVE-2018-10840\", \"CVE-2018-3639\", \"CVE-2018-1120\", \"CVE-2018-10322\",\n \"CVE-2018-10323\", \"CVE-2018-1108\", \"CVE-2018-10021\", \"CVE-2017-18232\",\n \"CVE-2018-7995\", \"CVE-2018-8043\", \"CVE-2018-7757\", \"CVE-2018-5803\",\n \"CVE-2018-1065\", \"CVE-2018-1000026\", \"CVE-2018-5750\", \"CVE-2018-1000004\",\n \"CVE-2018-5344\", \"CVE-2018-5332\", \"CVE-2018-5333\", \"CVE-2017-17862\",\n \"CVE-2017-17863\", \"CVE-2017-17864\", \"CVE-2017-17852\", \"CVE-2017-17853\",\n \"CVE-2017-17854\", \"CVE-2017-17855\", \"CVE-2017-17856\", \"CVE-2017-17857\",\n \"CVE-2017-17741\", \"CVE-2017-17712\", \"CVE-2017-17449\", \"CVE-2017-17450\",\n \"CVE-2017-17448\", \"CVE-2017-17558\", \"CVE-2017-8824\", \"CVE-2017-1000405\",\n \"CVE-2017-16649\", \"CVE-2017-16650\", \"CVE-2017-16644\", \"CVE-2017-16647\",\n \"CVE-2017-15115\", \"CVE-2017-16532\", \"CVE-2017-16538\", \"CVE-2017-12193\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-79d7c3d2df\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"FEDORA\", value:\"2018-79d7c3d2df\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2PWPRVELTRP4X6YB4R6SW3K356ROV3BE\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.17.17~100.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:33:09", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-08-19T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-1c80fea1cd", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2018-8043", "CVE-2017-17863", "CVE-2018-13053", "CVE-2017-17450", "CVE-2018-1108", "CVE-2017-17558", "CVE-2018-12633", "CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17741", "CVE-2018-10840", "CVE-2018-13405", "CVE-2018-13095", "CVE-2017-12193", "CVE-2017-17862", "CVE-2018-12714", "CVE-2018-11506", "CVE-2018-12232", "CVE-2017-17852", "CVE-2018-10853", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2018-13093", "CVE-2017-17853", "CVE-2018-7757", "CVE-2017-15115", "CVE-2018-14734", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2018-3646", "CVE-2018-1120", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-16647", "CVE-2018-5332", "CVE-2018-3620", "CVE-2017-17449", "CVE-2018-10322", "CVE-2017-16650", "CVE-2018-10323", "CVE-2018-7995", "CVE-2018-14678", "CVE-2018-5750", "CVE-2017-16538", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-16644", "CVE-2017-17864", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2018-3639", "CVE-2017-17856", "CVE-2018-12896", "CVE-2018-13094"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310874964", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874964", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_1c80fea1cd_kernel_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-1c80fea1cd\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874964\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-08-19 06:42:42 +0200 (Sun, 19 Aug 2018)\");\n script_cve_id(\"CVE-2018-3620\", \"CVE-2018-3646\", \"CVE-2018-14734\", \"CVE-2018-14678\",\n \"CVE-2018-13405\", \"CVE-2018-13053\", \"CVE-2018-12896\", \"CVE-2018-13093\",\n \"CVE-2018-13094\", \"CVE-2018-13095\", \"CVE-2018-12714\", \"CVE-2018-12633\",\n \"CVE-2018-12232\", \"CVE-2018-10853\", \"CVE-2018-11506\", \"CVE-2018-10840\",\n \"CVE-2018-3639\", \"CVE-2018-1120\", \"CVE-2018-10322\", \"CVE-2018-10323\",\n \"CVE-2018-1108\", \"CVE-2018-10021\", \"CVE-2017-18232\", \"CVE-2018-7995\",\n \"CVE-2018-8043\", \"CVE-2018-7757\", \"CVE-2018-5803\", \"CVE-2018-1065\",\n \"CVE-2018-1000026\", \"CVE-2018-5750\", \"CVE-2018-1000004\", \"CVE-2018-5344\",\n \"CVE-2018-5332\", \"CVE-2018-5333\", \"CVE-2017-17862\", \"CVE-2017-17863\",\n \"CVE-2017-17864\", \"CVE-2017-17852\", \"CVE-2017-17853\", \"CVE-2017-17854\",\n \"CVE-2017-17855\", \"CVE-2017-17856\", \"CVE-2017-17857\", \"CVE-2017-17741\",\n \"CVE-2017-17712\", \"CVE-2017-17449\", \"CVE-2017-17450\", \"CVE-2017-17448\",\n \"CVE-2017-17558\", \"CVE-2017-8824\", \"CVE-2017-1000405\", \"CVE-2017-16649\",\n \"CVE-2017-16650\", \"CVE-2017-16644\", \"CVE-2017-16647\", \"CVE-2017-15115\",\n \"CVE-2017-16532\", \"CVE-2017-16538\", \"CVE-2017-12193\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-1c80fea1cd\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\non the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"FEDORA\", value:\"2018-1c80fea1cd\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XRFKQWYV2H4BV75CUNGCGE5TNVQCLBGZ\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.17.14~102.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-06-04T17:06:35", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-05-12T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-884a105c04", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2017-14051", "CVE-2018-8043", "CVE-2017-17863", "CVE-2017-17450", "CVE-2017-5123", "CVE-2018-1108", "CVE-2017-17558", "CVE-2017-13695", "CVE-2018-1000004", "CVE-2017-1000111", "CVE-2018-5333", "CVE-2017-15265", "CVE-2017-17741", "CVE-2017-13694", "CVE-2017-12193", "CVE-2017-17862", "CVE-2017-13693", "CVE-2017-17852", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2017-17853", "CVE-2017-10810", "CVE-2018-7757", "CVE-2017-7533", "CVE-2017-15115", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2017-1000251", "CVE-2017-1000112", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-7558", "CVE-2017-16647", "CVE-2018-5332", "CVE-2017-17449", "CVE-2017-1000255", "CVE-2017-16650", "CVE-2017-12134", "CVE-2017-12153", "CVE-2018-7995", "CVE-2018-5750", "CVE-2017-14497", "CVE-2017-16538", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-14954", "CVE-2017-16644", "CVE-2017-17864", "CVE-2017-12154", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2017-12190", "CVE-2017-17856"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310874427", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874427", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_884a105c04_kernel_fc26.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-884a105c04\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874427\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-05-12 06:00:51 +0200 (Sat, 12 May 2018)\");\n script_cve_id(\"CVE-2018-1108\", \"CVE-2018-10021\", \"CVE-2017-18232\", \"CVE-2018-7995\",\n \"CVE-2018-8043\", \"CVE-2018-7757\", \"CVE-2018-5803\", \"CVE-2018-1065\",\n \"CVE-2018-1000026\", \"CVE-2018-5750\", \"CVE-2018-1000004\", \"CVE-2018-5344\",\n \"CVE-2018-5332\", \"CVE-2018-5333\", \"CVE-2017-17862\", \"CVE-2017-17863\",\n \"CVE-2017-17864\", \"CVE-2017-17852\", \"CVE-2017-17853\", \"CVE-2017-17854\",\n \"CVE-2017-17855\", \"CVE-2017-17856\", \"CVE-2017-17857\", \"CVE-2017-17741\",\n \"CVE-2017-17712\", \"CVE-2017-17449\", \"CVE-2017-17450\", \"CVE-2017-17448\",\n \"CVE-2017-17558\", \"CVE-2017-8824\", \"CVE-2017-1000405\", \"CVE-2017-16649\",\n \"CVE-2017-16650\", \"CVE-2017-16644\", \"CVE-2017-16647\", \"CVE-2017-15115\",\n \"CVE-2017-16532\", \"CVE-2017-16538\", \"CVE-2017-12193\", \"CVE-2017-12190\",\n \"CVE-2017-5123\", \"CVE-2017-15265\", \"CVE-2017-1000255\", \"CVE-2017-14954\",\n \"CVE-2017-14497\", \"CVE-2017-12154\", \"CVE-2017-12153\", \"CVE-2017-1000251\",\n \"CVE-2017-14051\", \"CVE-2017-13693\", \"CVE-2017-13694\", \"CVE-2017-13695\",\n \"CVE-2017-7558\", \"CVE-2017-12134\", \"CVE-2017-1000111\", \"CVE-2017-1000112\",\n \"CVE-2017-7533\", \"CVE-2017-10810\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-884a105c04\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\non the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 26\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"FEDORA\", value:\"2018-884a105c04\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HM3JVAHYMEV65VTITHNUM7JTHTN7Q53I\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC26\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC26\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.16.7~100.fc26\", rls:\"FC26\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.8, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C"}}, {"lastseen": "2019-05-29T18:33:03", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-07-15T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-8484550fff", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2018-8043", "CVE-2017-17863", "CVE-2018-13053", "CVE-2017-17450", "CVE-2018-1108", "CVE-2017-17558", "CVE-2018-12633", "CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17741", "CVE-2018-10840", "CVE-2018-13405", "CVE-2018-13095", "CVE-2017-12193", "CVE-2017-17862", "CVE-2018-12714", "CVE-2018-13406", "CVE-2018-11506", "CVE-2018-12232", "CVE-2017-17852", "CVE-2018-10853", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2018-13093", "CVE-2017-17853", "CVE-2018-7757", "CVE-2017-15115", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2018-1120", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-16647", "CVE-2018-5332", "CVE-2017-17449", "CVE-2018-10322", "CVE-2017-16650", "CVE-2018-10323", "CVE-2018-7995", "CVE-2018-5750", "CVE-2017-16538", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-16644", "CVE-2017-17864", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2018-3639", "CVE-2017-17856", "CVE-2018-12896", "CVE-2018-13094"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310874813", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874813", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_8484550fff_kernel_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-8484550fff\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874813\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-07-15 06:04:39 +0200 (Sun, 15 Jul 2018)\");\n script_cve_id(\"CVE-2018-13405\", \"CVE-2018-13053\", \"CVE-2018-12896\", \"CVE-2018-13093\",\n \"CVE-2018-13094\", \"CVE-2018-13095\", \"CVE-2018-12714\", \"CVE-2018-12633\",\n \"CVE-2018-12232\", \"CVE-2018-10853\", \"CVE-2018-11506\", \"CVE-2018-10840\",\n \"CVE-2018-3639\", \"CVE-2018-1120\", \"CVE-2018-10322\", \"CVE-2018-10323\",\n \"CVE-2018-1108\", \"CVE-2018-10021\", \"CVE-2017-18232\", \"CVE-2018-7995\",\n \"CVE-2018-8043\", \"CVE-2018-7757\", \"CVE-2018-5803\", \"CVE-2018-1065\",\n \"CVE-2018-1000026\", \"CVE-2018-5750\", \"CVE-2018-1000004\", \"CVE-2018-5344\",\n \"CVE-2018-5332\", \"CVE-2018-5333\", \"CVE-2017-17862\", \"CVE-2017-17863\",\n \"CVE-2017-17864\", \"CVE-2017-17852\", \"CVE-2017-17853\", \"CVE-2017-17854\",\n \"CVE-2017-17855\", \"CVE-2017-17856\", \"CVE-2017-17857\", \"CVE-2017-17741\",\n \"CVE-2017-17712\", \"CVE-2017-17449\", \"CVE-2017-17450\", \"CVE-2017-17448\",\n \"CVE-2017-17558\", \"CVE-2017-8824\", \"CVE-2017-1000405\", \"CVE-2017-16649\",\n \"CVE-2017-16650\", \"CVE-2017-16644\", \"CVE-2017-16647\", \"CVE-2017-15115\",\n \"CVE-2017-16532\", \"CVE-2017-16538\", \"CVE-2017-12193\", \"CVE-2018-13406\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-8484550fff\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\non the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"FEDORA\", value:\"2018-8484550fff\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOZHI2THAILWJPPQV3NONSSGW7WEZHWA\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.17.5~100.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-06-04T17:01:11", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-04-18T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-4ca01704a2", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2017-14051", "CVE-2018-8043", "CVE-2017-17863", "CVE-2017-17450", "CVE-2017-5123", "CVE-2017-17558", "CVE-2017-13695", "CVE-2018-1000004", "CVE-2017-1000111", "CVE-2018-5333", "CVE-2017-15265", "CVE-2017-17741", "CVE-2017-13694", "CVE-2017-12193", "CVE-2017-17862", "CVE-2017-13693", "CVE-2017-17852", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2017-17853", "CVE-2017-10810", "CVE-2018-7757", "CVE-2017-7533", "CVE-2017-15115", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2017-1000251", "CVE-2017-1000112", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-7558", "CVE-2017-16647", "CVE-2018-5332", "CVE-2017-17449", "CVE-2017-1000255", "CVE-2017-16650", "CVE-2017-12134", "CVE-2017-12153", "CVE-2018-7995", "CVE-2018-5750", "CVE-2017-14497", "CVE-2017-16538", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-14954", "CVE-2017-16644", "CVE-2017-17864", "CVE-2017-12154", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2017-12190", "CVE-2017-17856"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310874365", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874365", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_4ca01704a2_kernel_fc26.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-4ca01704a2\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874365\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-04-18 08:54:26 +0200 (Wed, 18 Apr 2018)\");\n script_cve_id(\"CVE-2018-10021\", \"CVE-2017-18232\", \"CVE-2018-7995\", \"CVE-2018-8043\",\n \"CVE-2018-7757\", \"CVE-2018-5803\", \"CVE-2018-1065\", \"CVE-2018-1000026\",\n \"CVE-2018-5750\", \"CVE-2018-1000004\", \"CVE-2018-5344\", \"CVE-2018-5332\",\n \"CVE-2018-5333\", \"CVE-2017-17862\", \"CVE-2017-17863\", \"CVE-2017-17864\",\n \"CVE-2017-17852\", \"CVE-2017-17853\", \"CVE-2017-17854\", \"CVE-2017-17855\",\n \"CVE-2017-17856\", \"CVE-2017-17857\", \"CVE-2017-17741\", \"CVE-2017-17712\",\n \"CVE-2017-17449\", \"CVE-2017-17450\", \"CVE-2017-17448\", \"CVE-2017-17558\",\n \"CVE-2017-8824\", \"CVE-2017-1000405\", \"CVE-2017-16649\", \"CVE-2017-16650\",\n \"CVE-2017-16644\", \"CVE-2017-16647\", \"CVE-2017-15115\", \"CVE-2017-16532\",\n \"CVE-2017-16538\", \"CVE-2017-12193\", \"CVE-2017-12190\", \"CVE-2017-5123\",\n \"CVE-2017-15265\", \"CVE-2017-1000255\", \"CVE-2017-14954\", \"CVE-2017-14497\",\n \"CVE-2017-12154\", \"CVE-2017-12153\", \"CVE-2017-1000251\", \"CVE-2017-14051\",\n \"CVE-2017-13693\", \"CVE-2017-13694\", \"CVE-2017-13695\", \"CVE-2017-7558\",\n \"CVE-2017-12134\", \"CVE-2017-1000111\", \"CVE-2017-1000112\", \"CVE-2017-7533\",\n \"CVE-2017-10810\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-4ca01704a2\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 26\");\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_xref(name:\"FEDORA\", value:\"2018-4ca01704a2\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3MAKT7ZDC6T4B52QFNRBYKWU75JMUX5C\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC26\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC26\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.15.17~200.fc26\", rls:\"FC26\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.8, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C"}}, {"lastseen": "2019-05-29T18:33:08", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-08-04T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-49bda79bd5", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2018-8043", "CVE-2017-17863", "CVE-2018-13053", "CVE-2017-17450", "CVE-2018-1108", "CVE-2017-17558", "CVE-2018-12633", "CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17741", "CVE-2018-10840", "CVE-2018-13405", "CVE-2018-13095", "CVE-2017-12193", "CVE-2017-17862", "CVE-2018-12714", "CVE-2018-11506", "CVE-2018-12232", "CVE-2017-17852", "CVE-2018-10853", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2018-13093", "CVE-2017-17853", "CVE-2018-7757", "CVE-2017-15115", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2018-1120", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-16647", "CVE-2018-5332", "CVE-2017-17449", "CVE-2018-10322", "CVE-2017-16650", "CVE-2018-10323", "CVE-2018-7995", "CVE-2018-14678", "CVE-2018-5750", "CVE-2017-16538", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-16644", "CVE-2017-17864", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2018-3639", "CVE-2017-17856", "CVE-2018-12896", "CVE-2018-13094"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310874890", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874890", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_49bda79bd5_kernel_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-49bda79bd5\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874890\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-08-04 06:04:25 +0200 (Sat, 04 Aug 2018)\");\n script_cve_id(\"CVE-2018-14678\", \"CVE-2018-13405\", \"CVE-2018-13053\", \"CVE-2018-12896\",\n \"CVE-2018-13093\", \"CVE-2018-13094\", \"CVE-2018-13095\", \"CVE-2018-12714\",\n \"CVE-2018-12633\", \"CVE-2018-12232\", \"CVE-2018-10853\", \"CVE-2018-11506\",\n \"CVE-2018-10840\", \"CVE-2018-3639\", \"CVE-2018-1120\", \"CVE-2018-10322\",\n \"CVE-2018-10323\", \"CVE-2018-1108\", \"CVE-2018-10021\", \"CVE-2017-18232\",\n \"CVE-2018-7995\", \"CVE-2018-8043\", \"CVE-2018-7757\", \"CVE-2018-5803\",\n \"CVE-2018-1065\", \"CVE-2018-1000026\", \"CVE-2018-5750\", \"CVE-2018-1000004\",\n \"CVE-2018-5344\", \"CVE-2018-5332\", \"CVE-2018-5333\", \"CVE-2017-17862\",\n \"CVE-2017-17863\", \"CVE-2017-17864\", \"CVE-2017-17852\", \"CVE-2017-17853\",\n \"CVE-2017-17854\", \"CVE-2017-17855\", \"CVE-2017-17856\", \"CVE-2017-17857\",\n \"CVE-2017-17741\", \"CVE-2017-17712\", \"CVE-2017-17449\", \"CVE-2017-17450\",\n \"CVE-2017-17448\", \"CVE-2017-17558\", \"CVE-2017-8824\", \"CVE-2017-1000405\",\n \"CVE-2017-16649\", \"CVE-2017-16650\", \"CVE-2017-16644\", \"CVE-2017-16647\",\n \"CVE-2017-15115\", \"CVE-2017-16532\", \"CVE-2017-16538\", \"CVE-2017-12193\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-49bda79bd5\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\non the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"FEDORA\", value:\"2018-49bda79bd5\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3AQDHJH4EQZ2WK343QWMUIUUHBY6PQ4\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.17.11~100.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:32:55", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-08-10T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-2f6df9abfb", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2018-8043", "CVE-2017-17863", "CVE-2018-13053", "CVE-2017-17450", "CVE-2018-1108", "CVE-2017-17558", "CVE-2018-12633", "CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17741", "CVE-2018-10840", "CVE-2018-13405", "CVE-2018-13095", "CVE-2017-12193", "CVE-2017-17862", "CVE-2018-12714", "CVE-2018-11506", "CVE-2018-12232", "CVE-2017-17852", "CVE-2018-10853", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2018-13093", "CVE-2017-17853", "CVE-2018-7757", "CVE-2017-15115", "CVE-2018-14734", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2018-1120", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-16647", "CVE-2018-5332", "CVE-2017-17449", "CVE-2018-10322", "CVE-2017-16650", "CVE-2018-10323", "CVE-2018-7995", "CVE-2018-14678", "CVE-2018-5750", "CVE-2017-16538", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-16644", "CVE-2017-17864", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2018-3639", "CVE-2017-17856", "CVE-2018-12896", "CVE-2018-13094"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310874919", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874919", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_2f6df9abfb_kernel_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-2f6df9abfb\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874919\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-08-10 06:22:46 +0200 (Fri, 10 Aug 2018)\");\n script_cve_id(\"CVE-2018-14734\", \"CVE-2018-14678\", \"CVE-2018-13405\", \"CVE-2018-13053\",\n \"CVE-2018-12896\", \"CVE-2018-13093\", \"CVE-2018-13094\", \"CVE-2018-13095\",\n \"CVE-2018-12714\", \"CVE-2018-12633\", \"CVE-2018-12232\", \"CVE-2018-10853\",\n \"CVE-2018-11506\", \"CVE-2018-10840\", \"CVE-2018-3639\", \"CVE-2018-1120\",\n \"CVE-2018-10322\", \"CVE-2018-10323\", \"CVE-2018-1108\", \"CVE-2018-10021\",\n \"CVE-2017-18232\", \"CVE-2018-7995\", \"CVE-2018-8043\", \"CVE-2018-7757\",\n \"CVE-2018-5803\", \"CVE-2018-1065\", \"CVE-2018-1000026\", \"CVE-2018-5750\",\n \"CVE-2018-1000004\", \"CVE-2018-5344\", \"CVE-2018-5332\", \"CVE-2018-5333\",\n \"CVE-2017-17862\", \"CVE-2017-17863\", \"CVE-2017-17864\", \"CVE-2017-17852\",\n \"CVE-2017-17853\", \"CVE-2017-17854\", \"CVE-2017-17855\", \"CVE-2017-17856\",\n \"CVE-2017-17857\", \"CVE-2017-17741\", \"CVE-2017-17712\", \"CVE-2017-17449\",\n \"CVE-2017-17450\", \"CVE-2017-17448\", \"CVE-2017-17558\", \"CVE-2017-8824\",\n \"CVE-2017-1000405\", \"CVE-2017-16649\", \"CVE-2017-16650\", \"CVE-2017-16644\",\n \"CVE-2017-16647\", \"CVE-2017-15115\", \"CVE-2017-16532\", \"CVE-2017-16538\",\n \"CVE-2017-12193\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-2f6df9abfb\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"FEDORA\", value:\"2018-2f6df9abfb\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2UJZBTWLH7WHZLJ6CMPDARHBP5OQRHT\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.17.12~100.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:32:58", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-10-11T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-94315e9a6b", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2018-8043", "CVE-2017-17863", "CVE-2018-13053", "CVE-2017-17450", "CVE-2018-1108", "CVE-2017-17558", "CVE-2018-12633", "CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17741", "CVE-2018-10840", "CVE-2018-13405", "CVE-2018-13095", "CVE-2017-12193", "CVE-2017-17862", "CVE-2018-12714", "CVE-2018-11506", "CVE-2018-12232", "CVE-2017-17852", "CVE-2018-10853", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2018-13093", "CVE-2017-17853", "CVE-2018-17182", "CVE-2018-7757", "CVE-2017-15115", "CVE-2018-14734", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2018-3646", "CVE-2018-18021", "CVE-2018-1120", "CVE-2018-5391", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-16647", "CVE-2018-5332", "CVE-2018-3620", "CVE-2017-17449", "CVE-2018-10322", "CVE-2018-15471", "CVE-2017-16650", "CVE-2018-10323", "CVE-2018-7995", "CVE-2018-14678", "CVE-2018-5750", "CVE-2017-16538", "CVE-2017-17855", "CVE-2018-14633", "CVE-2017-17857", "CVE-2017-16644", "CVE-2017-17864", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2018-3639", "CVE-2017-17856", "CVE-2018-12896", "CVE-2018-13094"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310875170", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310875170", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_94315e9a6b_kernel_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-94315e9a6b\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.875170\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-10-11 08:44:29 +0200 (Thu, 11 Oct 2018)\");\n script_cve_id(\"CVE-2018-14633\", \"CVE-2018-17182\", \"CVE-2018-5391\", \"CVE-2018-15471\",\n \"CVE-2018-3620\", \"CVE-2018-3646\", \"CVE-2018-14734\", \"CVE-2018-14678\",\n \"CVE-2018-13405\", \"CVE-2018-13053\", \"CVE-2018-12896\", \"CVE-2018-13093\",\n \"CVE-2018-13094\", \"CVE-2018-13095\", \"CVE-2018-12714\", \"CVE-2018-12633\",\n \"CVE-2018-12232\", \"CVE-2018-10853\", \"CVE-2018-11506\", \"CVE-2018-10840\",\n \"CVE-2018-3639\", \"CVE-2018-1120\", \"CVE-2018-10322\", \"CVE-2018-10323\",\n \"CVE-2018-1108\", \"CVE-2018-10021\", \"CVE-2017-18232\", \"CVE-2018-7995\",\n \"CVE-2018-8043\", \"CVE-2018-7757\", \"CVE-2018-5803\", \"CVE-2018-1065\",\n \"CVE-2018-1000026\", \"CVE-2018-5750\", \"CVE-2018-1000004\", \"CVE-2018-5344\",\n \"CVE-2018-5332\", \"CVE-2018-5333\", \"CVE-2017-17862\", \"CVE-2017-17863\",\n \"CVE-2017-17864\", \"CVE-2017-17852\", \"CVE-2017-17853\", \"CVE-2017-17854\",\n \"CVE-2017-17855\", \"CVE-2017-17856\", \"CVE-2017-17857\", \"CVE-2017-17741\",\n \"CVE-2017-17712\", \"CVE-2017-17449\", \"CVE-2017-17450\", \"CVE-2017-17448\",\n \"CVE-2017-17558\", \"CVE-2017-8824\", \"CVE-2017-1000405\", \"CVE-2017-16649\",\n \"CVE-2017-16650\", \"CVE-2017-16644\", \"CVE-2017-16647\", \"CVE-2017-15115\",\n \"CVE-2017-16532\", \"CVE-2017-16538\", \"CVE-2017-12193\", \"CVE-2018-18021\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-94315e9a6b\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\n on the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"FEDORA\", value:\"2018-94315e9a6b\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKOLTEPUDYGM4MZIFXROKL3WL6JRMXZE\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.18.12~100.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:33:08", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-09-27T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-d77cc41f35", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2018-8043", "CVE-2017-17863", "CVE-2018-13053", "CVE-2017-17450", "CVE-2018-1108", "CVE-2017-17558", "CVE-2018-12633", "CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17741", "CVE-2018-10840", "CVE-2018-13405", "CVE-2018-13095", "CVE-2017-12193", "CVE-2017-17862", "CVE-2018-12714", "CVE-2018-11506", "CVE-2018-12232", "CVE-2017-17852", "CVE-2018-10853", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2018-13093", "CVE-2017-17853", "CVE-2018-17182", "CVE-2018-7757", "CVE-2017-15115", "CVE-2018-14734", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2018-3646", "CVE-2018-1120", "CVE-2018-5391", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-16647", "CVE-2018-5332", "CVE-2018-3620", "CVE-2017-17449", "CVE-2018-10322", "CVE-2018-15471", "CVE-2017-16650", "CVE-2018-10323", "CVE-2018-7995", "CVE-2018-14678", "CVE-2018-5750", "CVE-2017-16538", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-16644", "CVE-2017-17864", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2018-3639", "CVE-2017-17856", "CVE-2018-12896", "CVE-2018-13094"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310875099", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310875099", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_d77cc41f35_kernel_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-d77cc41f35\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.875099\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-09-27 08:31:40 +0200 (Thu, 27 Sep 2018)\");\n script_cve_id(\"CVE-2018-5391\", \"CVE-2018-15471\", \"CVE-2018-3620\", \"CVE-2018-3646\",\n \"CVE-2018-14734\", \"CVE-2018-14678\", \"CVE-2018-13405\", \"CVE-2018-13053\",\n \"CVE-2018-12896\", \"CVE-2018-13093\", \"CVE-2018-13094\", \"CVE-2018-13095\",\n \"CVE-2018-12714\", \"CVE-2018-12633\", \"CVE-2018-12232\", \"CVE-2018-10853\",\n \"CVE-2018-11506\", \"CVE-2018-10840\", \"CVE-2018-3639\", \"CVE-2018-1120\",\n \"CVE-2018-10322\", \"CVE-2018-10323\", \"CVE-2018-1108\", \"CVE-2018-10021\",\n \"CVE-2017-18232\", \"CVE-2018-7995\", \"CVE-2018-8043\", \"CVE-2018-7757\",\n \"CVE-2018-5803\", \"CVE-2018-1065\", \"CVE-2018-1000026\", \"CVE-2018-5750\",\n \"CVE-2018-1000004\", \"CVE-2018-5344\", \"CVE-2018-5332\", \"CVE-2018-5333\",\n \"CVE-2017-17862\", \"CVE-2017-17863\", \"CVE-2017-17864\", \"CVE-2017-17852\",\n \"CVE-2017-17853\", \"CVE-2017-17854\", \"CVE-2017-17855\", \"CVE-2017-17856\",\n \"CVE-2017-17857\", \"CVE-2017-17741\", \"CVE-2017-17712\", \"CVE-2017-17449\",\n \"CVE-2017-17450\", \"CVE-2017-17448\", \"CVE-2017-17558\", \"CVE-2017-8824\",\n \"CVE-2017-1000405\", \"CVE-2017-16649\", \"CVE-2017-16650\", \"CVE-2017-16644\",\n \"CVE-2017-16647\", \"CVE-2017-15115\", \"CVE-2017-16532\", \"CVE-2017-16538\",\n \"CVE-2017-12193\", \"CVE-2018-17182\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-d77cc41f35\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\n on the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"FEDORA\", value:\"2018-d77cc41f35\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKESRJO5EIBN6QFG4PO463OGQRU6HFOF\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.18.9~100.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:32:56", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-10-02T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-c0a1284064", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2018-8043", "CVE-2017-17863", "CVE-2018-13053", "CVE-2017-17450", "CVE-2018-1108", "CVE-2017-17558", "CVE-2018-12633", "CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17741", "CVE-2018-10840", "CVE-2018-13405", "CVE-2018-13095", "CVE-2017-12193", "CVE-2017-17862", "CVE-2018-12714", "CVE-2018-11506", "CVE-2018-12232", "CVE-2017-17852", "CVE-2018-10853", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2018-13093", "CVE-2017-17853", "CVE-2018-17182", "CVE-2018-7757", "CVE-2017-15115", "CVE-2018-14734", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2018-3646", "CVE-2018-1120", "CVE-2018-5391", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-16647", "CVE-2018-5332", "CVE-2018-3620", "CVE-2017-17449", "CVE-2018-10322", "CVE-2018-15471", "CVE-2017-16650", "CVE-2018-10323", "CVE-2018-7995", "CVE-2018-14678", "CVE-2018-5750", "CVE-2017-16538", "CVE-2017-17855", "CVE-2018-14633", "CVE-2017-17857", "CVE-2017-16644", "CVE-2017-17864", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2018-3639", "CVE-2017-17856", "CVE-2018-12896", "CVE-2018-13094"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310875128", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310875128", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_c0a1284064_kernel_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-c0a1284064\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.875128\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-10-02 08:30:25 +0200 (Tue, 02 Oct 2018)\");\n script_cve_id(\"CVE-2018-14633\", \"CVE-2018-17182\", \"CVE-2018-5391\", \"CVE-2018-15471\",\n \"CVE-2018-3620\", \"CVE-2018-3646\", \"CVE-2018-14734\", \"CVE-2018-14678\",\n \"CVE-2018-13405\", \"CVE-2018-13053\", \"CVE-2018-12896\", \"CVE-2018-13093\",\n \"CVE-2018-13094\", \"CVE-2018-13095\", \"CVE-2018-12714\", \"CVE-2018-12633\",\n \"CVE-2018-12232\", \"CVE-2018-10853\", \"CVE-2018-11506\", \"CVE-2018-10840\",\n \"CVE-2018-3639\", \"CVE-2018-1120\", \"CVE-2018-10322\", \"CVE-2018-10323\",\n \"CVE-2018-1108\", \"CVE-2018-10021\", \"CVE-2017-18232\", \"CVE-2018-7995\",\n \"CVE-2018-8043\", \"CVE-2018-7757\", \"CVE-2018-5803\", \"CVE-2018-1065\",\n \"CVE-2018-1000026\", \"CVE-2018-5750\", \"CVE-2018-1000004\", \"CVE-2018-5344\",\n \"CVE-2018-5332\", \"CVE-2018-5333\", \"CVE-2017-17862\", \"CVE-2017-17863\",\n \"CVE-2017-17864\", \"CVE-2017-17852\", \"CVE-2017-17853\", \"CVE-2017-17854\",\n \"CVE-2017-17855\", \"CVE-2017-17856\", \"CVE-2017-17857\", \"CVE-2017-17741\",\n \"CVE-2017-17712\", \"CVE-2017-17449\", \"CVE-2017-17450\", \"CVE-2017-17448\",\n \"CVE-2017-17558\", \"CVE-2017-8824\", \"CVE-2017-1000405\", \"CVE-2017-16649\",\n \"CVE-2017-16650\", \"CVE-2017-16644\", \"CVE-2017-16647\", \"CVE-2017-15115\",\n \"CVE-2017-16532\", \"CVE-2017-16538\", \"CVE-2017-12193\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-c0a1284064\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\n on the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"FEDORA\", value:\"2018-c0a1284064\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3KRIRC4X5WWFMPBCO7YX3WEQQGQBGTNO\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.18.10~100.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:33:04", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-10-17T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-2ee3411cb8", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2018-8043", "CVE-2017-17863", "CVE-2018-13053", "CVE-2017-17450", "CVE-2018-1108", "CVE-2017-17558", "CVE-2018-12633", "CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17741", "CVE-2018-10840", "CVE-2018-13405", "CVE-2018-13095", "CVE-2017-12193", "CVE-2017-17862", "CVE-2018-12714", "CVE-2018-11506", "CVE-2018-12232", "CVE-2017-17852", "CVE-2018-10853", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2018-13093", "CVE-2017-17853", "CVE-2018-17182", "CVE-2018-7757", "CVE-2017-15115", "CVE-2018-14734", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2018-3646", "CVE-2018-1120", "CVE-2018-5391", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-16647", "CVE-2018-5332", "CVE-2018-3620", "CVE-2017-17449", "CVE-2018-10322", "CVE-2018-15471", "CVE-2017-16650", "CVE-2018-17972", "CVE-2018-10323", "CVE-2018-7995", "CVE-2018-14678", "CVE-2018-5750", "CVE-2017-16538", "CVE-2017-17855", "CVE-2018-14633", "CVE-2017-17857", "CVE-2017-16644", "CVE-2017-17864", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2018-3639", "CVE-2017-17856", "CVE-2018-12896", "CVE-2018-13094"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310875201", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310875201", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_2ee3411cb8_kernel_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-2ee3411cb8\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.875201\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-10-17 06:39:38 +0200 (Wed, 17 Oct 2018)\");\n script_cve_id(\"CVE-2018-14633\", \"CVE-2018-17182\", \"CVE-2018-5391\", \"CVE-2018-15471\",\n \"CVE-2018-3620\", \"CVE-2018-3646\", \"CVE-2018-14734\", \"CVE-2018-14678\",\n \"CVE-2018-13405\", \"CVE-2018-13053\", \"CVE-2018-12896\", \"CVE-2018-13093\",\n \"CVE-2018-13094\", \"CVE-2018-13095\", \"CVE-2018-12714\", \"CVE-2018-12633\",\n \"CVE-2018-12232\", \"CVE-2018-10853\", \"CVE-2018-11506\", \"CVE-2018-10840\",\n \"CVE-2018-3639\", \"CVE-2018-1120\", \"CVE-2018-10322\", \"CVE-2018-10323\",\n \"CVE-2018-1108\", \"CVE-2018-10021\", \"CVE-2017-18232\", \"CVE-2018-7995\",\n \"CVE-2018-8043\", \"CVE-2018-7757\", \"CVE-2018-5803\", \"CVE-2018-1065\",\n \"CVE-2018-1000026\", \"CVE-2018-5750\", \"CVE-2018-1000004\", \"CVE-2018-5344\",\n \"CVE-2018-5332\", \"CVE-2018-5333\", \"CVE-2017-17862\", \"CVE-2017-17863\",\n \"CVE-2017-17864\", \"CVE-2017-17852\", \"CVE-2017-17853\", \"CVE-2017-17854\",\n \"CVE-2017-17855\", \"CVE-2017-17856\", \"CVE-2017-17857\", \"CVE-2017-17741\",\n \"CVE-2017-17712\", \"CVE-2017-17449\", \"CVE-2017-17450\", \"CVE-2017-17448\",\n \"CVE-2017-17558\", \"CVE-2017-8824\", \"CVE-2017-1000405\", \"CVE-2017-16649\",\n \"CVE-2017-16650\", \"CVE-2017-16644\", \"CVE-2017-16647\", \"CVE-2017-15115\",\n \"CVE-2017-16532\", \"CVE-2017-16538\", \"CVE-2017-12193\", \"CVE-2018-17972\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-2ee3411cb8\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\n on the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"FEDORA\", value:\"2018-2ee3411cb8\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACX4WW5ZZ3PNMAEPZVJGMZ2D2BYHVMUD\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.18.13~100.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-06-04T17:06:26", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-05-30T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-6367a17aa3", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2017-14051", "CVE-2018-8043", "CVE-2017-17863", "CVE-2017-17450", "CVE-2017-5123", "CVE-2018-1108", "CVE-2017-17558", "CVE-2017-13695", "CVE-2018-1000004", "CVE-2017-1000111", "CVE-2018-5333", "CVE-2017-15265", "CVE-2017-17741", "CVE-2017-13694", "CVE-2017-12193", "CVE-2017-17862", "CVE-2017-13693", "CVE-2017-17852", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2017-17853", "CVE-2017-10810", "CVE-2018-7757", "CVE-2017-7533", "CVE-2017-15115", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2017-1000251", "CVE-2018-1120", "CVE-2017-1000112", "CVE-2018-1065", "CVE-2017-18232", "CVE-2017-7558", "CVE-2017-16647", "CVE-2018-5332", "CVE-2017-17449", "CVE-2017-1000255", "CVE-2018-10322", "CVE-2017-16650", "CVE-2017-12134", "CVE-2018-10323", "CVE-2017-12153", "CVE-2018-7995", "CVE-2018-5750", "CVE-2017-14497", "CVE-2017-16538", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-14954", "CVE-2017-16644", "CVE-2017-17864", "CVE-2017-12154", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2017-12190", "CVE-2018-3639", "CVE-2017-17856"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310874619", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874619", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_6367a17aa3_kernel_fc26.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-6367a17aa3\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874619\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-05-30 05:57:30 +0200 (Wed, 30 May 2018)\");\n script_cve_id(\"CVE-2018-3639\", \"CVE-2018-1120\", \"CVE-2018-10322\", \"CVE-2018-10323\",\n \"CVE-2018-1108\", \"CVE-2018-10021\", \"CVE-2017-18232\", \"CVE-2018-7995\",\n \"CVE-2018-8043\", \"CVE-2018-7757\", \"CVE-2018-5803\", \"CVE-2018-1065\",\n \"CVE-2018-1000026\", \"CVE-2018-5750\", \"CVE-2018-1000004\", \"CVE-2018-5344\",\n \"CVE-2018-5332\", \"CVE-2018-5333\", \"CVE-2017-17862\", \"CVE-2017-17863\",\n \"CVE-2017-17864\", \"CVE-2017-17852\", \"CVE-2017-17853\", \"CVE-2017-17854\",\n \"CVE-2017-17855\", \"CVE-2017-17856\", \"CVE-2017-17857\", \"CVE-2017-17741\",\n \"CVE-2017-17712\", \"CVE-2017-17449\", \"CVE-2017-17450\", \"CVE-2017-17448\",\n \"CVE-2017-17558\", \"CVE-2017-8824\", \"CVE-2017-1000405\", \"CVE-2017-16649\",\n \"CVE-2017-16650\", \"CVE-2017-16644\", \"CVE-2017-16647\", \"CVE-2017-15115\",\n \"CVE-2017-16532\", \"CVE-2017-16538\", \"CVE-2017-12193\", \"CVE-2017-12190\",\n \"CVE-2017-5123\", \"CVE-2017-15265\", \"CVE-2017-1000255\", \"CVE-2017-14954\",\n \"CVE-2017-14497\", \"CVE-2017-12154\", \"CVE-2017-12153\", \"CVE-2017-1000251\",\n \"CVE-2017-14051\", \"CVE-2017-13693\", \"CVE-2017-13694\", \"CVE-2017-13695\",\n \"CVE-2017-7558\", \"CVE-2017-12134\", \"CVE-2017-1000111\", \"CVE-2017-1000112\",\n \"CVE-2017-7533\", \"CVE-2017-10810\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for kernel FEDORA-2018-6367a17aa3\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present\non the target host.\");\n script_tag(name:\"affected\", value:\"kernel on Fedora 26\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n\n script_xref(name:\"FEDORA\", value:\"2018-6367a17aa3\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6U7NCPMTQKKHLC4ZHQCTLYN4LCP2JQ4C\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC26\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC26\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.16.11~100.fc26\", rls:\"FC26\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.8, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C"}}, {"lastseen": "2019-05-29T18:33:00", "description": "The remote host is missing an update for the ", "cvss3": {}, "published": "2018-12-04T00:00:00", "type": "openvas", "title": "Fedora Update for kernel FEDORA-2018-b68776e5b0", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2018-10021", "CVE-2018-8043", "CVE-2017-17863", "CVE-2018-13053", "CVE-2017-17450", "CVE-2018-1108", "CVE-2017-17558", "CVE-2018-12633", "CVE-2018-1000004", "CVE-2018-5333", "CVE-2017-17741", "CVE-2018-10840", "CVE-2018-13405", "CVE-2018-13095", "CVE-2017-12193", "CVE-2017-17862", "CVE-2018-12714", "CVE-2018-11506", "CVE-2018-12232", "CVE-2017-17852", "CVE-2018-10853", "CVE-2017-16532", "CVE-2017-16649", "CVE-2018-5344", "CVE-2017-17854", "CVE-2018-13093", "CVE-2017-17853", "CVE-2018-17182", "CVE-2018-7757", "CVE-2017-15115", "CVE-2018-14734", "CVE-2017-17712", "CVE-2017-8824", "CVE-2017-17448", "CVE-2018-3646", "CVE-2018-1120", "CVE-2018-5391", "CVE-2018-1065", "CVE-2017-18232", "CVE-2018-18710", "CVE-2017-16647", "CVE-2018-5332", "CVE-2018-3620", "CVE-2017-17449", "CVE-2018-10322", "CVE-2018-15471", "CVE-2017-16650", "CVE-2018-10323", "CVE-2018-7995", "CVE-2018-14678", "CVE-2018-5750", "CVE-2017-16538", "CVE-2017-17855", "CVE-2018-14633", "CVE-2017-17857", "CVE-2017-16644", "CVE-2017-17864", "CVE-2018-5803", "CVE-2017-1000405", "CVE-2018-1000026", "CVE-2018-3639", "CVE-2017-17856", "CVE-2018-12896", "CVE-2018-13094"], "modified": "2019-03-15T00:00:00", "id": "OPENVAS:1361412562310875334", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310875334", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_b68776e5b0_kernel_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for kernel FEDORA-2018-b68776e5b0\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.875334\");\n script_version(\"$Revision: 14223 $\");\n script_cve_id(\"CVE-2018-18710\", \"CVE-2018-14633\", \"CVE-2018-17182\", \"CVE-2018-5391\", \"CVE-2018-15471\", \"CVE-2018-3620\", \"CVE-2018-3646\", \"CVE-2018-14734\", \"CVE-2018-14678\", \"CVE-2018-13405\", \"CVE-2018-13053\", \"CVE-2018-12896\", \"CVE-2018-13093\", \"CVE-2018-13094\", \"CVE-2018-13095\", \"CVE-2018-12714\", \"CVE-2018-12633\", \"CVE-2018-12232\", \"CVE-2018-10853\", \"CVE-2018-11506\", \"CVE-2018-10840\", \"CVE-2018-3639\", \"CVE-2018-1120\", \"CVE-2018-10322\", \"CVE-2018-10323\", \"CVE-2018-1108\", \"CVE-2018-10021\", \"CVE-2017-18232\", \"CVE-2018-7995\", \"CVE-2018-8043\", \"CVE-2018-7757\", \"CVE-2018-5803\", \"CVE-2018-1065\", \"CVE-2018-1000026\", \"CVE-2018-5750\", \"CVE-2018-1000004\", \"CVE-2018-5344\", \"CVE-2018-5332\", \"CVE-2018-5333\", \"CVE-2017-17862\", \"CVE-2017-17863\", \"CVE-2017-17864\", \"CVE-2017-17852\", \"CVE-2017-17853\", \"CVE-2017-17854\", \"CVE-2017-17855\", \"CVE-2017-17856\", \"CVE-2017-17857\", \"CVE-2017-17741\", \"CVE-2017-17712\", \"CVE-2017-17449\", \"CVE-2017-17450\", \"CVE-2017-17448\", \"CVE-2017-17558\", \"CVE-2017-8824\", \"CVE-2017-1000405\", \"CVE-2017-16649\", \"CVE-2017-16650\", \"CVE-2017-16644\", \"CVE-2017-16647\", \"CVE-2017-15115\", \"CVE-2017-16532\", \"CVE-2017-16538\", \"CVE-2017-12193\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-12-04 08:34:37 +0100 (Tue, 04 Dec 2018)\");\n script_name(\"Fedora Update for kernel FEDORA-2018-b68776e5b0\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n script_xref(name:\"FEDORA\", value:\"2018-b68776e5b0\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OZHJB75FAIL6GZIEXPM735EW43TAV37\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'kernel'\n package(s) announced via the FEDORA-2018-b68776e5b0 advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"affected\", value:\"kernel on Fedora 27.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"kernel\", rpm:\"kernel~4.18.19~100.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "fedora": [{"lastseen": "2020-12-21T08:17:54", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 1.0, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 7.0, "privilegesRequired": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2017-12-21T19:03:39", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: kernel-4.14.7-300.fc27", "bulletinFamily": "unix", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 3.4, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 6.9, "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-17712"], "modified": "2017-12-21T19:03:39", "id": "FEDORA:4B78C604AF8C", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/3HNCVU3TTRBJVWKUD6AZRQEF6RE7MV6C/", "cvss": {"score": 6.9, "vector": "AV:L/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-12-21T08:17:54", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 1.0, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "HIGH", "scope": "UNCHANGED", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 7.0, "privilegesRequired": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2017-12-24T20:56:26", "type": "fedora", "title": "[SECURITY] Fedora 26 Update: kernel-4.14.8-200.fc26", "bulletinFamily": "unix", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 3.4, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 6.9, "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-17712", "CVE-2017-17741"], "modified": "2017-12-24T20:56:26", "id": "FEDORA:23E0D6075B51", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/CKXFEQRRYYTEGHXOQISCQEV73MNUUVYI/", "cvss": {"score": 6.9, "vector": "AV:L/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-12-21T08:17:54", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 1.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 7.8, "privilegesRequired": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-04-18T01:31:51", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: kernel-4.15.17-300.fc27", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 3.9, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.2, "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000405", "CVE-2017-12193", "CVE-2017-15115", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-1065", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-04-18T01:31:51", "id": "FEDORA:74245604D4DA", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/SKS5SHENFBKZBNJZ5A6BMP6JNTK5D4QC/", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-12-21T08:17:54", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 1.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 7.8, "privilegesRequired": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-04-29T05:16:13", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: kernel-4.16.4-200.fc27", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 3.9, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.2, "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000405", "CVE-2017-12193", "CVE-2017-15115", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-1065", "CVE-2018-1108", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-04-29T05:16:13", "id": "FEDORA:AB52460321C9", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/23BZYWCPCFYSPRRRVNCK6UFYCODGX6GB/", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-12-21T08:17:54", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 1.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 7.8, "privilegesRequired": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-05-25T15:46:24", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: kernel-4.16.11-200.fc27", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 3.9, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.2, "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000405", "CVE-2017-12193", "CVE-2017-15115", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-10322", "CVE-2018-10323", "CVE-2018-1065", "CVE-2018-1108", "CVE-2018-1120", "CVE-2018-3639", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-05-25T15:46:24", "id": "FEDORA:08D3760E6566", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/Y4XJ6WFI3BA27DJD66OHZX644RGQ7EBV/", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-12-21T08:17:54", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 1.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 7.8, "privilegesRequired": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-05-29T11:50:44", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: kernel-4.16.12-200.fc27", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 3.9, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.2, "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000405", "CVE-2017-12193", "CVE-2017-15115", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-10322", "CVE-2018-10323", "CVE-2018-1065", "CVE-2018-10840", "CVE-2018-1108", "CVE-2018-1120", "CVE-2018-3639", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-05-29T11:50:44", "id": "FEDORA:E6F08605DCE7", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/YAUGR47M3LDUN54S6SH2OQ3U6U2LS7HA/", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-12-21T08:17:54", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 1.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 7.8, "privilegesRequired": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-06-05T14:11:50", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: kernel-4.16.13-200.fc27", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 3.9, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.2, "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000405", "CVE-2017-12193", "CVE-2017-15115", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-10322", "CVE-2018-10323", "CVE-2018-1065", "CVE-2018-10840", "CVE-2018-1108", "CVE-2018-1120", "CVE-2018-11506", "CVE-2018-3639", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-06-05T14:11:50", "id": "FEDORA:4832F6079717", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/F32LED4G6QF446ZM5G7MOPFDAP4VB6M2/", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-12-21T08:17:54", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 1.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 7.8, "privilegesRequired": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-06-17T19:45:35", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: kernel-4.16.15-200.fc27", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 3.9, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.2, "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000405", "CVE-2017-12193", "CVE-2017-15115", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-10322", "CVE-2018-10323", "CVE-2018-1065", "CVE-2018-10840", "CVE-2018-10853", "CVE-2018-1108", "CVE-2018-1120", "CVE-2018-11506", "CVE-2018-3639", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-06-17T19:45:35", "id": "FEDORA:DF5176048167", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/22G4FPLZ4Y2WCMKTQG2WQFPR36Y3V4U4/", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-12-21T08:17:54", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 1.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 7.8, "privilegesRequired": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-06-22T14:12:17", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: kernel-4.16.16-200.fc27", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 3.9, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.2, "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000405", "CVE-2017-12193", "CVE-2017-15115", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-10322", "CVE-2018-10323", "CVE-2018-1065", "CVE-2018-10840", "CVE-2018-10853", "CVE-2018-1108", "CVE-2018-1120", "CVE-2018-11506", "CVE-2018-12232", "CVE-2018-3639", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-06-22T14:12:17", "id": "FEDORA:10F7D6255145", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/Y5RAP5M7DMT24XOVYRAYT7GRQE5OWLU3/", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-12-21T08:17:54", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 1.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 7.8, "privilegesRequired": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-06-28T13:35:42", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: kernel-4.17.2-100.fc27", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 3.9, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.2, "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000405", "CVE-2017-12193", "CVE-2017-15115", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-10322", "CVE-2018-10323", "CVE-2018-1065", "CVE-2018-10840", "CVE-2018-10853", "CVE-2018-1108", "CVE-2018-1120", "CVE-2018-11506", "CVE-2018-12232", "CVE-2018-12904", "CVE-2018-3639", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-06-28T13:35:42", "id": "FEDORA:25BDD6190ECF", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/S2V7GQIYQYXQJNRX5DEJNNO6YKOHQC42/", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-12-21T08:17:54", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 1.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 7.8, "privilegesRequired": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-07-01T01:37:15", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: kernel-4.17.3-100.fc27", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 3.9, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.2, "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000405", "CVE-2017-12193", "CVE-2017-15115", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-10322", "CVE-2018-10323", "CVE-2018-1065", "CVE-2018-10840", "CVE-2018-10853", "CVE-2018-1108", "CVE-2018-1120", "CVE-2018-11506", "CVE-2018-12232", "CVE-2018-12633", "CVE-2018-3639", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-07-01T01:37:15", "id": "FEDORA:909D360491BF", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/QGVBVYZZR6UYWHRCMCVLU3DVJMBOYBLP/", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-12-21T08:17:54", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-07-13T16:38:23", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: kernel-4.17.5-100.fc27", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000405", "CVE-2017-12193", "CVE-2017-15115", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-10322", "CVE-2018-10323", "CVE-2018-1065", "CVE-2018-10840", "CVE-2018-10853", "CVE-2018-1108", "CVE-2018-1120", "CVE-2018-11506", "CVE-2018-12232", "CVE-2018-12633", "CVE-2018-12714", "CVE-2018-12896", "CVE-2018-13053", "CVE-2018-13093", "CVE-2018-13094", "CVE-2018-13095", "CVE-2018-13405", "CVE-2018-13406", "CVE-2018-3639", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-07-13T16:38:23", "id": "FEDORA:29FCE65ECD33", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/VOZHI2THAILWJPPQV3NONSSGW7WEZHWA/", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-07-28T14:46:50", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-08-03T19:58:28", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: kernel-4.17.11-100.fc27", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000405", "CVE-2017-12193", "CVE-2017-15115", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-10322", "CVE-2018-10323", "CVE-2018-1065", "CVE-2018-10840", "CVE-2018-10853", "CVE-2018-1108", "CVE-2018-1120", "CVE-2018-11506", "CVE-2018-12232", "CVE-2018-12633", "CVE-2018-12714", "CVE-2018-12896", "CVE-2018-13053", "CVE-2018-13093", "CVE-2018-13094", "CVE-2018-13095", "CVE-2018-13405", "CVE-2018-14678", "CVE-2018-3639", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-08-03T19:58:28", "id": "FEDORA:B54D264CBCAC", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/K3AQDHJH4EQZ2WK343QWMUIUUHBY6PQ4/", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-07-28T14:46:50", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-09-26T20:18:44", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: kernel-4.18.9-100.fc27", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000405", "CVE-2017-12193", "CVE-2017-15115", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-10322", "CVE-2018-10323", "CVE-2018-1065", "CVE-2018-10840", "CVE-2018-10853", "CVE-2018-1108", "CVE-2018-1120", "CVE-2018-11506", "CVE-2018-12232", "CVE-2018-12633", "CVE-2018-12714", "CVE-2018-12896", "CVE-2018-13053", "CVE-2018-13093", "CVE-2018-13094", "CVE-2018-13095", "CVE-2018-13405", "CVE-2018-14678", "CVE-2018-14734", "CVE-2018-15471", "CVE-2018-17182", "CVE-2018-3620", "CVE-2018-3639", "CVE-2018-3646", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5391", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-09-26T20:18:44", "id": "FEDORA:87BD56087904", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/DKESRJO5EIBN6QFG4PO463OGQRU6HFOF/", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-12-21T08:17:54", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "NONE", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "NONE", "baseScore": 7.5, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 3.6}, "published": "2018-04-18T01:07:00", "type": "fedora", "title": "[SECURITY] Fedora 26 Update: kernel-4.15.17-200.fc26", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "NONE", "availabilityImpact": "COMPLETE", "integrityImpact": "NONE", "baseScore": 7.8, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000111", "CVE-2017-1000112", "CVE-2017-1000251", "CVE-2017-1000255", "CVE-2017-1000405", "CVE-2017-10810", "CVE-2017-12134", "CVE-2017-12153", "CVE-2017-12154", "CVE-2017-12190", "CVE-2017-12193", "CVE-2017-13693", "CVE-2017-13694", "CVE-2017-13695", "CVE-2017-14051", "CVE-2017-14497", "CVE-2017-14954", "CVE-2017-15115", "CVE-2017-15265", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-5123", "CVE-2017-7533", "CVE-2017-7558", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-1065", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-04-18T01:07:00", "id": "FEDORA:6F1BC604D0C1", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/3MAKT7ZDC6T4B52QFNRBYKWU75JMUX5C/", "cvss": {"score": 7.8, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C"}}, {"lastseen": "2020-12-21T08:17:54", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "NONE", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "NONE", "baseScore": 7.5, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 3.6}, "published": "2018-05-11T17:46:05", "type": "fedora", "title": "[SECURITY] Fedora 26 Update: kernel-4.16.7-100.fc26", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "NONE", "availabilityImpact": "COMPLETE", "integrityImpact": "NONE", "baseScore": 7.8, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000111", "CVE-2017-1000112", "CVE-2017-1000251", "CVE-2017-1000255", "CVE-2017-1000405", "CVE-2017-10810", "CVE-2017-12134", "CVE-2017-12153", "CVE-2017-12154", "CVE-2017-12190", "CVE-2017-12193", "CVE-2017-13693", "CVE-2017-13694", "CVE-2017-13695", "CVE-2017-14051", "CVE-2017-14497", "CVE-2017-14954", "CVE-2017-15115", "CVE-2017-15265", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-5123", "CVE-2017-7533", "CVE-2017-7558", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-1065", "CVE-2018-1108", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-05-11T17:46:05", "id": "FEDORA:648496077DD1", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/HM3JVAHYMEV65VTITHNUM7JTHTN7Q53I/", "cvss": {"score": 7.8, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C"}}, {"lastseen": "2020-12-21T08:17:54", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "NONE", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "NONE", "baseScore": 7.5, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 3.6}, "published": "2018-05-29T11:10:03", "type": "fedora", "title": "[SECURITY] Fedora 26 Update: kernel-4.16.11-100.fc26", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "NONE", "availabilityImpact": "COMPLETE", "integrityImpact": "NONE", "baseScore": 7.8, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000111", "CVE-2017-1000112", "CVE-2017-1000251", "CVE-2017-1000255", "CVE-2017-1000405", "CVE-2017-10810", "CVE-2017-12134", "CVE-2017-12153", "CVE-2017-12154", "CVE-2017-12190", "CVE-2017-12193", "CVE-2017-13693", "CVE-2017-13694", "CVE-2017-13695", "CVE-2017-14051", "CVE-2017-14497", "CVE-2017-14954", "CVE-2017-15115", "CVE-2017-15265", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-5123", "CVE-2017-7533", "CVE-2017-7558", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-10322", "CVE-2018-10323", "CVE-2018-1065", "CVE-2018-1108", "CVE-2018-1120", "CVE-2018-3639", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-05-29T11:10:03", "id": "FEDORA:44065605602A", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/6U7NCPMTQKKHLC4ZHQCTLYN4LCP2JQ4C/", "cvss": {"score": 7.8, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C"}}, {"lastseen": "2021-07-28T14:46:50", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-08-09T16:53:05", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: kernel-4.17.12-100.fc27", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000405", "CVE-2017-12193", "CVE-2017-15115", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-10322", "CVE-2018-10323", "CVE-2018-1065", "CVE-2018-10840", "CVE-2018-10853", "CVE-2018-1108", "CVE-2018-1120", "CVE-2018-11506", "CVE-2018-12232", "CVE-2018-12633", "CVE-2018-12714", "CVE-2018-12896", "CVE-2018-13053", "CVE-2018-13093", "CVE-2018-13094", "CVE-2018-13095", "CVE-2018-13405", "CVE-2018-14678", "CVE-2018-14734", "CVE-2018-3639", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-08-09T16:53:05", "id": "FEDORA:6EC6360BEA04", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/E2UJZBTWLH7WHZLJ6CMPDARHBP5OQRHT/", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-07-28T14:46:50", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-08-16T07:24:55", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: kernel-4.17.14-102.fc27", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000405", "CVE-2017-12193", "CVE-2017-15115", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-10322", "CVE-2018-10323", "CVE-2018-1065", "CVE-2018-10840", "CVE-2018-10853", "CVE-2018-1108", "CVE-2018-1120", "CVE-2018-11506", "CVE-2018-12232", "CVE-2018-12633", "CVE-2018-12714", "CVE-2018-12896", "CVE-2018-13053", "CVE-2018-13093", "CVE-2018-13094", "CVE-2018-13095", "CVE-2018-13405", "CVE-2018-14678", "CVE-2018-14734", "CVE-2018-3620", "CVE-2018-3639", "CVE-2018-3646", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-08-16T07:24:55", "id": "FEDORA:7640C641CB61", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/XRFKQWYV2H4BV75CUNGCGE5TNVQCLBGZ/", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-07-28T14:46:50", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-08-24T07:16:18", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: kernel-4.17.17-100.fc27", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000405", "CVE-2017-12193", "CVE-2017-15115", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-10322", "CVE-2018-10323", "CVE-2018-1065", "CVE-2018-10840", "CVE-2018-10853", "CVE-2018-1108", "CVE-2018-1120", "CVE-2018-11506", "CVE-2018-12232", "CVE-2018-12633", "CVE-2018-12714", "CVE-2018-12896", "CVE-2018-13053", "CVE-2018-13093", "CVE-2018-13094", "CVE-2018-13095", "CVE-2018-13405", "CVE-2018-14678", "CVE-2018-14734", "CVE-2018-15471", "CVE-2018-3620", "CVE-2018-3639", "CVE-2018-3646", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-08-24T07:16:18", "id": "FEDORA:5D742610B071", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/2PWPRVELTRP4X6YB4R6SW3K356ROV3BE/", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-07-28T14:46:50", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-10-01T01:23:43", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: kernel-4.18.10-100.fc27", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000405", "CVE-2017-12193", "CVE-2017-15115", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-10322", "CVE-2018-10323", "CVE-2018-1065", "CVE-2018-10840", "CVE-2018-10853", "CVE-2018-1108", "CVE-2018-1120", "CVE-2018-11506", "CVE-2018-12232", "CVE-2018-12633", "CVE-2018-12714", "CVE-2018-12896", "CVE-2018-13053", "CVE-2018-13093", "CVE-2018-13094", "CVE-2018-13095", "CVE-2018-13405", "CVE-2018-14633", "CVE-2018-14678", "CVE-2018-14734", "CVE-2018-15471", "CVE-2018-17182", "CVE-2018-3620", "CVE-2018-3639", "CVE-2018-3646", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5391", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-10-01T01:23:43", "id": "FEDORA:8F974604E846", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/3KRIRC4X5WWFMPBCO7YX3WEQQGQBGTNO/", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-07-28T14:46:50", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-10-10T21:55:37", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: kernel-4.18.12-100.fc27", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000405", "CVE-2017-12193", "CVE-2017-15115", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-10322", "CVE-2018-10323", "CVE-2018-1065", "CVE-2018-10840", "CVE-2018-10853", "CVE-2018-1108", "CVE-2018-1120", "CVE-2018-11506", "CVE-2018-12232", "CVE-2018-12633", "CVE-2018-12714", "CVE-2018-12896", "CVE-2018-13053", "CVE-2018-13093", "CVE-2018-13094", "CVE-2018-13095", "CVE-2018-13405", "CVE-2018-14633", "CVE-2018-14678", "CVE-2018-14734", "CVE-2018-15471", "CVE-2018-17182", "CVE-2018-18021", "CVE-2018-3620", "CVE-2018-3639", "CVE-2018-3646", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5391", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-10-10T21:55:37", "id": "FEDORA:D6F86601E6D9", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/RKOLTEPUDYGM4MZIFXROKL3WL6JRMXZE/", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-07-28T14:46:50", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-10-16T12:10:24", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: kernel-4.18.13-100.fc27", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000405", "CVE-2017-12193", "CVE-2017-15115", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-10322", "CVE-2018-10323", "CVE-2018-1065", "CVE-2018-10840", "CVE-2018-10853", "CVE-2018-1108", "CVE-2018-1120", "CVE-2018-11506", "CVE-2018-12232", "CVE-2018-12633", "CVE-2018-12714", "CVE-2018-12896", "CVE-2018-13053", "CVE-2018-13093", "CVE-2018-13094", "CVE-2018-13095", "CVE-2018-13405", "CVE-2018-14633", "CVE-2018-14678", "CVE-2018-14734", "CVE-2018-15471", "CVE-2018-17182", "CVE-2018-17972", "CVE-2018-3620", "CVE-2018-3639", "CVE-2018-3646", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5391", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-10-16T12:10:24", "id": "FEDORA:29049600CFF3", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/ACX4WW5ZZ3PNMAEPZVJGMZ2D2BYHVMUD/", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-07-28T14:46:50", "description": "The kernel meta package ", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-11-27T03:13:40", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: kernel-4.18.19-100.fc27", "bulletinFamily": "unix", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 10.0, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2017-1000405", "CVE-2017-12193", "CVE-2017-15115", "CVE-2017-16532", "CVE-2017-16538", "CVE-2017-16644", "CVE-2017-16647", "CVE-2017-16649", "CVE-2017-16650", "CVE-2017-17448", "CVE-2017-17449", "CVE-2017-17450", "CVE-2017-17558", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-17852", "CVE-2017-17853", "CVE-2017-17854", "CVE-2017-17855", "CVE-2017-17857", "CVE-2017-17862", "CVE-2017-17863", "CVE-2017-17864", "CVE-2017-18232", "CVE-2017-8824", "CVE-2018-1000004", "CVE-2018-1000026", "CVE-2018-10021", "CVE-2018-10322", "CVE-2018-10323", "CVE-2018-1065", "CVE-2018-10840", "CVE-2018-10853", "CVE-2018-1108", "CVE-2018-1120", "CVE-2018-11506", "CVE-2018-12232", "CVE-2018-12633", "CVE-2018-12714", "CVE-2018-12896", "CVE-2018-13053", "CVE-2018-13093", "CVE-2018-13094", "CVE-2018-13095", "CVE-2018-13405", "CVE-2018-14633", "CVE-2018-14678", "CVE-2018-14734", "CVE-2018-15471", "CVE-2018-17182", "CVE-2018-18710", "CVE-2018-3620", "CVE-2018-3639", "CVE-2018-3646", "CVE-2018-5332", "CVE-2018-5333", "CVE-2018-5344", "CVE-2018-5391", "CVE-2018-5750", "CVE-2018-5803", "CVE-2018-7757", "CVE-2018-7995", "CVE-2018-8043"], "modified": "2018-11-27T03:13:40", "id": "FEDORA:B395E6087A9D", "href": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/2OZHJB75FAIL6GZIEXPM735EW43TAV37/", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "nessus": [{"lastseen": "2021-08-19T12:34:20", "description": "The 4.14.7 stable kernel update contains a number of important fixes across the tree.\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "cvss3": {"score": 7, "vector": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-01-15T00:00:00", "type": "nessus", "title": "Fedora 27 : kernel (2017-f7cb245861)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2017-17712"], "modified": "2021-01-06T00:00:00", "cpe": ["p-cpe:/a:fedoraproject:fedora:kernel", "cpe:/o:fedoraproject:fedora:27"], "id": "FEDORA_2017-F7CB245861.NASL", "href": "https://www.tenable.com/plugins/nessus/106010", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory FEDORA-2017-f7cb245861.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(106010);\n script_version(\"1.6\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\"CVE-2017-17712\");\n script_xref(name:\"FEDORA\", value:\"2017-f7cb245861\");\n\n script_name(english:\"Fedora 27 : kernel (2017-f7cb245861)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The 4.14.7 stable kernel update contains a number of important fixes\nacross the tree.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as\npossible without introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bodhi.fedoraproject.org/updates/FEDORA-2017-f7cb245861\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected kernel package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:kernel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:27\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2017/12/16\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/12/21\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/01/15\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\", \"linux_alt_patch_detect.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\ninclude(\"ksplice.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = pregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^27([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 27\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\nif (get_one_kb_item(\"Host/ksplice/kernel-cves\"))\n{\n rm_kb_item(name:\"Host/uptrack-uname-r\");\n cve_list = make_list(\"CVE-2017-17712\");\n if (ksplice_cves_check(cve_list))\n {\n audit(AUDIT_PATCH_INSTALLED, \"KSplice hotfix for FEDORA-2017-f7cb245861\");\n }\n else\n {\n __rpm_report = ksplice_reporting_text();\n }\n}\n\nflag = 0;\nif (rpm_check(release:\"FC27\", reference:\"kernel-4.14.7-300.fc27\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"kernel\");\n}\n", "cvss": {"score": 6.9, "vector": "AV:L/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-08-19T12:34:18", "description": "The 4.14.8 stable kernel update contains a number of important fixes across the tree.\n\n----\n\nThe 4.14.7 stable kernel update contains a number of important fixes across the tree.\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "cvss3": {"score": 7, "vector": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "published": "2017-12-26T00:00:00", "type": "nessus", "title": "Fedora 26 : kernel (2017-7810b7c59f)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2017-17712", "CVE-2017-17741"], "modified": "2021-01-06T00:00:00", "cpe": ["p-cpe:/a:fedoraproject:fedora:kernel", "cpe:/o:fedoraproject:fedora:26"], "id": "FEDORA_2017-7810B7C59F.NASL", "href": "https://www.tenable.com/plugins/nessus/105447", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory FEDORA-2017-7810b7c59f.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(105447);\n script_version(\"3.7\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\"CVE-2017-17712\", \"CVE-2017-17741\");\n script_xref(name:\"FEDORA\", value:\"2017-7810b7c59f\");\n\n script_name(english:\"Fedora 26 : kernel (2017-7810b7c59f)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The 4.14.8 stable kernel update contains a number of important fixes\nacross the tree.\n\n----\n\nThe 4.14.7 stable kernel update contains a number of important fixes\nacross the tree.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as\npossible without introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bodhi.fedoraproject.org/updates/FEDORA-2017-7810b7c59f\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected kernel package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:kernel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:26\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2017/12/16\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2017/12/24\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2017/12/26\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2017-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\", \"linux_alt_patch_detect.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\ninclude(\"ksplice.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = pregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^26([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 26\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\nif (get_one_kb_item(\"Host/ksplice/kernel-cves\"))\n{\n rm_kb_item(name:\"Host/uptrack-uname-r\");\n cve_list = make_list(\"CVE-2017-17712\", \"CVE-2017-17741\");\n if (ksplice_cves_check(cve_list))\n {\n audit(AUDIT_PATCH_INSTALLED, \"KSplice hotfix for FEDORA-2017-7810b7c59f\");\n }\n else\n {\n __rpm_report = ksplice_reporting_text();\n }\n}\n\nflag = 0;\nif (rpm_check(release:\"FC26\", reference:\"kernel-4.14.8-200.fc26\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"kernel\");\n}\n", "cvss": {"score": 6.9, "vector": "AV:L/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-08-19T12:33:48", "description": "Mohamed Ghannam discovered that the IPv4 raw socket implementation in the Linux kernel contained a race condition leading to uninitialized pointer usage. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2017-17712)\n\nChunYu Wang discovered that a use-after-free vulnerability existed in the SCTP protocol implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code, (CVE-2017-15115)\n\nMohamed Ghannam discovered a use-after-free vulnerability in the DCCP protocol implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-8824).\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "cvss3": {"score": 7.8, "vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-02-23T00:00:00", "type": "nessus", "title": "Ubuntu 17.10 : linux-raspi2 vulnerabilities (USN-3581-3)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2017-15115", "CVE-2017-17712", "CVE-2017-8824"], "modified": "2019-09-18T00:00:00", "cpe": ["p-cpe:/a:canonical:ubuntu_linux:linux-image-4.13-raspi2", "p-cpe:/a:canonical:ubuntu_linux:linux-image-raspi2", "cpe:/o:canonical:ubuntu_linux:17.10"], "id": "UBUNTU_USN-3581-3.NASL", "href": "https://www.tenable.com/plugins/nessus/106971", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Ubuntu Security Notice USN-3581-3. The text \n# itself is copyright (C) Canonical, Inc. See \n# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered \n# trademark of Canonical, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(106971);\n script_version(\"3.7\");\n script_cvs_date(\"Date: 2019/09/18 12:31:48\");\n\n script_cve_id(\"CVE-2017-15115\", \"CVE-2017-17712\", \"CVE-2017-8824\");\n script_xref(name:\"USN\", value:\"3581-3\");\n\n script_name(english:\"Ubuntu 17.10 : linux-raspi2 vulnerabilities (USN-3581-3)\");\n script_summary(english:\"Checks dpkg output for updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Ubuntu host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Mohamed Ghannam discovered that the IPv4 raw socket implementation in\nthe Linux kernel contained a race condition leading to uninitialized\npointer usage. A local attacker could use this to cause a denial of\nservice or possibly execute arbitrary code. (CVE-2017-17712)\n\nChunYu Wang discovered that a use-after-free vulnerability existed in\nthe SCTP protocol implementation in the Linux kernel. A local attacker\ncould use this to cause a denial of service (system crash) or possibly\nexecute arbitrary code, (CVE-2017-15115)\n\nMohamed Ghannam discovered a use-after-free vulnerability in the DCCP\nprotocol implementation in the Linux kernel. A local attacker could\nuse this to cause a denial of service (system crash) or possibly\nexecute arbitrary code. (CVE-2017-8824).\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://usn.ubuntu.com/3581-3/\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"Update the affected linux-image-4.13-raspi2 and / or\nlinux-image-raspi2 packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:P/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.13-raspi2\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-raspi2\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:17.10\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2017/11/15\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/02/23\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/02/23\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"Ubuntu Security Notice (C) 2018-2019 Canonical, Inc. / NASL script (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Ubuntu Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\", \"linux_alt_patch_detect.nasl\");\n script_require_keys(\"Host/cpu\", \"Host/Ubuntu\", \"Host/Ubuntu/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"ubuntu.inc\");\ninclude(\"ksplice.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Ubuntu/release\");\nif ( isnull(release) ) audit(AUDIT_OS_NOT, \"Ubuntu\");\nrelease = chomp(release);\nif (! preg(pattern:\"^(17\\.10)$\", string:release)) audit(AUDIT_OS_NOT, \"Ubuntu 17.10\", \"Ubuntu \" + release);\nif ( ! get_kb_item(\"Host/Debian/dpkg-l\") ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Ubuntu\", cpu);\n\nif (get_one_kb_item(\"Host/ksplice/kernel-cves\"))\n{\n rm_kb_item(name:\"Host/uptrack-uname-r\");\n cve_list = make_list(\"CVE-2017-15115\", \"CVE-2017-17712\", \"CVE-2017-8824\");\n if (ksplice_cves_check(cve_list))\n {\n audit(AUDIT_PATCH_INSTALLED, \"KSplice hotfix for USN-3581-3\");\n }\n else\n {\n _ubuntu_report = ksplice_reporting_text();\n }\n}\n\nflag = 0;\n\nif (ubuntu_check(osver:\"17.10\", pkgname:\"linux-image-4.13.0-1014-raspi2\", pkgver:\"4.13.0-1014.15\")) flag++;\nif (ubuntu_check(osver:\"17.10\", pkgname:\"linux-image-raspi2\", pkgver:\"4.13.0.1014.12\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : ubuntu_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = ubuntu_pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"linux-image-4.13-raspi2 / linux-image-raspi2\");\n}\n", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2022-06-16T16:13:10", "description": "Mohamed Ghannam discovered that the IPv4 raw socket implementation in the Linux kernel contained a race condition leading to uninitialized pointer usage. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2017-17712)\n\nChunYu Wang discovered that a use-after-free vulnerability existed in the SCTP protocol implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code, (CVE-2017-15115)\n\nMohamed Ghannam discovered a use-after-free vulnerability in the DCCP protocol implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-8824)\n\nUSN-3541-1 mitigated CVE-2017-5715 (Spectre Variant 2) for the amd64 architecture in Ubuntu 17.10. This update provides the compiler-based retpoline kernel mitigation for the amd64 and i386 architectures. \n\nJann Horn discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Spectre. A local attacker could use this to expose sensitive information, including kernel memory. (CVE-2017-5715).\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "cvss3": {"score": 7.8, "vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-02-23T00:00:00", "type": "nessus", "title": "Ubuntu 17.10 : linux vulnerabilities (USN-3581-1) (Spectre)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2017-15115", "CVE-2017-17712", "CVE-2017-5715", "CVE-2017-8824"], "modified": "2019-09-18T00:00:00", "cpe": ["p-cpe:/a:canonical:ubuntu_linux:linux-image-4.13-generic", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.13-generic-lpae", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.13-lowlatency", "p-cpe:/a:canonical:ubuntu_linux:linux-image-generic", "p-cpe:/a:canonical:ubuntu_linux:linux-image-generic-lpae", "p-cpe:/a:canonical:ubuntu_linux:linux-image-lowlatency", "cpe:/o:canonical:ubuntu_linux:17.10"], "id": "UBUNTU_USN-3581-1.NASL", "href": "https://www.tenable.com/plugins/nessus/106969", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Ubuntu Security Notice USN-3581-1. The text \n# itself is copyright (C) Canonical, Inc. See \n# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered \n# trademark of Canonical, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(106969);\n script_version(\"3.10\");\n script_cvs_date(\"Date: 2019/09/18 12:31:48\");\n\n script_cve_id(\"CVE-2017-15115\", \"CVE-2017-17712\", \"CVE-2017-5715\", \"CVE-2017-8824\");\n script_xref(name:\"USN\", value:\"3581-1\");\n script_xref(name:\"IAVA\", value:\"2018-A-0020\");\n\n script_name(english:\"Ubuntu 17.10 : linux vulnerabilities (USN-3581-1) (Spectre)\");\n script_summary(english:\"Checks dpkg output for updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Ubuntu host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Mohamed Ghannam discovered that the IPv4 raw socket implementation in\nthe Linux kernel contained a race condition leading to uninitialized\npointer usage. A local attacker could use this to cause a denial of\nservice or possibly execute arbitrary code. (CVE-2017-17712)\n\nChunYu Wang discovered that a use-after-free vulnerability existed in\nthe SCTP protocol implementation in the Linux kernel. A local attacker\ncould use this to cause a denial of service (system crash) or possibly\nexecute arbitrary code, (CVE-2017-15115)\n\nMohamed Ghannam discovered a use-after-free vulnerability in the DCCP\nprotocol implementation in the Linux kernel. A local attacker could\nuse this to cause a denial of service (system crash) or possibly\nexecute arbitrary code. (CVE-2017-8824)\n\nUSN-3541-1 mitigated CVE-2017-5715 (Spectre Variant 2) for the amd64\narchitecture in Ubuntu 17.10. This update provides the compiler-based\nretpoline kernel mitigation for the amd64 and i386 architectures. \n\nJann Horn discovered that microprocessors utilizing speculative\nexecution and branch prediction may allow unauthorized memory reads\nvia sidechannel attacks. This flaw is known as Spectre. A local\nattacker could use this to expose sensitive information, including\nkernel memory. (CVE-2017-5715).\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://usn.ubuntu.com/3581-1/\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.13-generic\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.13-generic-lpae\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.13-lowlatency\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-generic\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-generic-lpae\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-lowlatency\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:17.10\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2017/11/15\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/02/22\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/02/23\");\n script_set_attribute(attribute:\"in_the_news\", value:\"true\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_set_attribute(attribute:\"stig_severity\", value:\"I\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"Ubuntu Security Notice (C) 2018-2019 Canonical, Inc. / NASL script (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Ubuntu Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\", \"linux_alt_patch_detect.nasl\");\n script_require_keys(\"Host/cpu\", \"Host/Ubuntu\", \"Host/Ubuntu/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"ubuntu.inc\");\ninclude(\"ksplice.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Ubuntu/release\");\nif ( isnull(release) ) audit(AUDIT_OS_NOT, \"Ubuntu\");\nrelease = chomp(release);\nif (! preg(pattern:\"^(17\\.10)$\", string:release)) audit(AUDIT_OS_NOT, \"Ubuntu 17.10\", \"Ubuntu \" + release);\nif ( ! get_kb_item(\"Host/Debian/dpkg-l\") ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Ubuntu\", cpu);\n\nif (get_one_kb_item(\"Host/ksplice/kernel-cves\"))\n{\n rm_kb_item(name:\"Host/uptrack-uname-r\");\n cve_list = make_list(\"CVE-2017-15115\", \"CVE-2017-17712\", \"CVE-2017-5715\", \"CVE-2017-8824\");\n if (ksplice_cves_check(cve_list))\n {\n audit(AUDIT_PATCH_INSTALLED, \"KSplice hotfix for USN-3581-1\");\n }\n else\n {\n _ubuntu_report = ksplice_reporting_text();\n }\n}\n\nflag = 0;\n\nif (ubuntu_check(osver:\"17.10\", pkgname:\"linux-image-4.13.0-36-generic\", pkgver:\"4.13.0-36.40\")) flag++;\nif (ubuntu_check(osver:\"17.10\", pkgname:\"linux-image-4.13.0-36-generic-lpae\", pkgver:\"4.13.0-36.40\")) flag++;\nif (ubuntu_check(osver:\"17.10\", pkgname:\"linux-image-4.13.0-36-lowlatency\", pkgver:\"4.13.0-36.40\")) flag++;\nif (ubuntu_check(osver:\"17.10\", pkgname:\"linux-image-generic\", pkgver:\"4.13.0.36.38\")) flag++;\nif (ubuntu_check(osver:\"17.10\", pkgname:\"linux-image-generic-lpae\", pkgver:\"4.13.0.36.38\")) flag++;\nif (ubuntu_check(osver:\"17.10\", pkgname:\"linux-image-lowlatency\", pkgver:\"4.13.0.36.38\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : ubuntu_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = ubuntu_pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"linux-image-4.13-generic / linux-image-4.13-generic-lpae / etc\");\n}\n", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2022-06-16T16:12:52", "description": "USN-3581-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.10.\nThis update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.10 for Ubuntu 16.04 LTS.\n\nMohamed Ghannam discovered that the IPv4 raw socket implementation in the Linux kernel contained a race condition leading to uninitialized pointer usage. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2017-17712)\n\nChunYu Wang discovered that a use-after-free vulnerability existed in the SCTP protocol implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code, (CVE-2017-15115)\n\nMohamed Ghannam discovered a use-after-free vulnerability in the DCCP protocol implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-8824)\n\nUSN-3541-2 mitigated CVE-2017-5715 (Spectre Variant 2) for the amd64 architecture in Ubuntu 16.04 LTS. This update provides the compiler-based retpoline kernel mitigation for the amd64 and i386 architectures. \n\nJann Horn discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Spectre. A local attacker could use this to expose sensitive information, including kernel memory. (CVE-2017-5715).\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "cvss3": {"score": 7.8, "vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-02-23T00:00:00", "type": "nessus", "title": "Ubuntu 16.04 LTS : linux-hwe, linux-azure, linux-gcp, linux-oem vulnerabilities (USN-3581-2) (Spectre)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2017-15115", "CVE-2017-17712", "CVE-2017-5715", "CVE-2017-8824"], "modified": "2019-09-18T00:00:00", "cpe": ["p-cpe:/a:canonical:ubuntu_linux:linux-image-4.13-azure", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.13-gcp", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.13-generic", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.13-generic-lpae", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.13-lowlatency", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.13-oem", "p-cpe:/a:canonical:ubuntu_linux:linux-image-azure", "p-cpe:/a:canonical:ubuntu_linux:linux-image-gcp", "p-cpe:/a:canonical:ubuntu_linux:linux-image-generic-hwe-16.04", "p-cpe:/a:canonical:ubuntu_linux:linux-image-generic-lpae-hwe-16.04", "p-cpe:/a:canonical:ubuntu_linux:linux-image-gke", "p-cpe:/a:canonical:ubuntu_linux:linux-image-lowlatency-hwe-16.04", "p-cpe:/a:canonical:ubuntu_linux:linux-image-oem", "cpe:/o:canonical:ubuntu_linux:16.04"], "id": "UBUNTU_USN-3581-2.NASL", "href": "https://www.tenable.com/plugins/nessus/106970", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Ubuntu Security Notice USN-3581-2. The text \n# itself is copyright (C) Canonical, Inc. See \n# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered \n# trademark of Canonical, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(106970);\n script_version(\"3.10\");\n script_cvs_date(\"Date: 2019/09/18 12:31:48\");\n\n script_cve_id(\"CVE-2017-15115\", \"CVE-2017-17712\", \"CVE-2017-5715\", \"CVE-2017-8824\");\n script_xref(name:\"USN\", value:\"3581-2\");\n script_xref(name:\"IAVA\", value:\"2018-A-0020\");\n\n script_name(english:\"Ubuntu 16.04 LTS : linux-hwe, linux-azure, linux-gcp, linux-oem vulnerabilities (USN-3581-2) (Spectre)\");\n script_summary(english:\"Checks dpkg output for updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Ubuntu host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"USN-3581-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.10.\nThis update provides the corresponding updates for the Linux Hardware\nEnablement (HWE) kernel from Ubuntu 17.10 for Ubuntu 16.04 LTS.\n\nMohamed Ghannam discovered that the IPv4 raw socket implementation in\nthe Linux kernel contained a race condition leading to uninitialized\npointer usage. A local attacker could use this to cause a denial of\nservice or possibly execute arbitrary code. (CVE-2017-17712)\n\nChunYu Wang discovered that a use-after-free vulnerability existed in\nthe SCTP protocol implementation in the Linux kernel. A local attacker\ncould use this to cause a denial of service (system crash) or possibly\nexecute arbitrary code, (CVE-2017-15115)\n\nMohamed Ghannam discovered a use-after-free vulnerability in the DCCP\nprotocol implementation in the Linux kernel. A local attacker could\nuse this to cause a denial of service (system crash) or possibly\nexecute arbitrary code. (CVE-2017-8824)\n\nUSN-3541-2 mitigated CVE-2017-5715 (Spectre Variant 2) for the amd64\narchitecture in Ubuntu 16.04 LTS. This update provides the\ncompiler-based retpoline kernel mitigation for the amd64 and i386\narchitectures. \n\nJann Horn discovered that microprocessors utilizing speculative\nexecution and branch prediction may allow unauthorized memory reads\nvia sidechannel attacks. This flaw is known as Spectre. A local\nattacker could use this to expose sensitive information, including\nkernel memory. (CVE-2017-5715).\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://usn.ubuntu.com/3581-2/\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.13-azure\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.13-gcp\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.13-generic\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.13-generic-lpae\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.13-lowlatency\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.13-oem\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-azure\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-gcp\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-generic-hwe-16.04\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-generic-lpae-hwe-16.04\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-gke\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-lowlatency-hwe-16.04\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-oem\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:16.04\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2017/11/15\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/02/22\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/02/23\");\n script_set_attribute(attribute:\"in_the_news\", value:\"true\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_set_attribute(attribute:\"stig_severity\", value:\"I\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"Ubuntu Security Notice (C) 2018-2019 Canonical, Inc. / NASL script (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Ubuntu Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\", \"linux_alt_patch_detect.nasl\");\n script_require_keys(\"Host/cpu\", \"Host/Ubuntu\", \"Host/Ubuntu/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"ubuntu.inc\");\ninclude(\"ksplice.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Ubuntu/release\");\nif ( isnull(release) ) audit(AUDIT_OS_NOT, \"Ubuntu\");\nrelease = chomp(release);\nif (! preg(pattern:\"^(16\\.04)$\", string:release)) audit(AUDIT_OS_NOT, \"Ubuntu 16.04\", \"Ubuntu \" + release);\nif ( ! get_kb_item(\"Host/Debian/dpkg-l\") ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Ubuntu\", cpu);\n\nif (get_one_kb_item(\"Host/ksplice/kernel-cves\"))\n{\n rm_kb_item(name:\"Host/uptrack-uname-r\");\n cve_list = make_list(\"CVE-2017-15115\", \"CVE-2017-17712\", \"CVE-2017-5715\", \"CVE-2017-8824\");\n if (ksplice_cves_check(cve_list))\n {\n audit(AUDIT_PATCH_INSTALLED, \"KSplice hotfix for USN-3581-2\");\n }\n else\n {\n _ubuntu_report = ksplice_reporting_text();\n }\n}\n\nflag = 0;\n\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-4.13.0-1011-azure\", pkgver:\"4.13.0-1011.14\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-4.13.0-1011-gcp\", pkgver:\"4.13.0-1011.15\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-4.13.0-1021-oem\", pkgver:\"4.13.0-1021.23\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-4.13.0-36-generic\", pkgver:\"4.13.0-36.40~16.04.1\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-4.13.0-36-generic-lpae\", pkgver:\"4.13.0-36.40~16.04.1\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-4.13.0-36-lowlatency\", pkgver:\"4.13.0-36.40~16.04.1\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-azure\", pkgver:\"4.13.0.1011.12\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-gcp\", pkgver:\"4.13.0.1011.13\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-generic-hwe-16.04\", pkgver:\"4.13.0.36.55\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-generic-lpae-hwe-16.04\", pkgver:\"4.13.0.36.55\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-gke\", pkgver:\"4.13.0.1011.13\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-lowlatency-hwe-16.04\", pkgver:\"4.13.0.36.55\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-oem\", pkgver:\"4.13.0.1021.25\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : ubuntu_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = ubuntu_pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"linux-image-4.13-azure / linux-image-4.13-gcp / etc\");\n}\n", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2021-10-16T01:00:06", "description": "Race condition in raw_sendmsg function allows denial-of-service or kernel addresses leak\n\nA flaw was found in the Linux kernel's implementation of raw_sendmsg allowing a local attacker to panic the kernel or possibly leak kernel addresses. A local attacker, with the privilege of creating raw sockets, can abuse a possible race condition when setting the socket option to allow the kernel to automatically create ip header values and thus potentially escalate their privileges. (CVE-2017-17712)\n\nUse-after-free vulnerability in DCCP socket\n\nA use-after-free vulnerability was found in DCCP socket code affecting the Linux kernel since 2.6.16. This vulnerability could allow an attacker to their escalate privileges. (CVE-2017-8824)\n\nStack-based out-of-bounds read via vmcall instruction\n\nLinux kernel compiled with the KVM virtualization (CONFIG_KVM) support is vulnerable to an out-of-bounds read access issue. It could occur when emulating vmcall instructions invoked by a guest. A guest user/process could use this flaw to disclose kernel memory bytes.\n(CVE-2017-17741)\n\nUnchecked capabilities in net/netfilter/xt_osf.c allows for unprivileged modification to systemwide fingerprint list\n\nnet/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces. (CVE-2017-17450)\n\nMissing capabilities check in net/netfilter/nfnetlink_cthelper.c allows for unprivileged access to systemwide nfnl_cthelper_list structure\n\nnet/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all net namespaces. (CVE-2017-17448)", "cvss3": {"score": 7.8, "vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-01-19T00:00:00", "type": "nessus", "title": "Amazon Linux AMI : kernel (ALAS-2018-944)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2017-17448", "CVE-2017-17450", "CVE-2017-17712", "CVE-2017-17741", "CVE-2017-8824"], "modified": "2019-04-05T00:00:00", "cpe": ["p-cpe:/a:amazon:linux:kernel", "p-cpe:/a:amazon:linux:kernel-debuginfo", "p-cpe:/a:amazon:linux:kernel-debuginfo-common-i686", "p-cpe:/a:amazon:linux:kernel-debuginfo-common-x86_64", "p-cpe:/a:amazon:linux:kernel-devel", "p-cpe:/a:amazon:linux:kernel-doc", "p-cpe:/a:amazon:linux:kernel-headers", "p-cpe:/a:amazon:linux:kernel-tools", "p-cpe:/a:amazon:linux:kernel-tools-debuginfo", "p-cpe:/a:amazon:linux:kernel-tools-devel", "p-cpe:/a:amazon:linux:perf", "p-cpe:/a:amazon:linux:perf-debuginfo", "cpe:/o:amazon:linux"], "id": "ALA_ALAS-2018-944.NASL", "href": "https://www.tenable.com/plugins/nessus/106171", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Amazon Linux AMI Security Advisory ALAS-2018-944.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(106171);\n script_version(\"3.4\");\n script_cvs_date(\"Date: 2019/04/05 23:25:05\");\n\n script_cve_id(\"CVE-2017-17448\", \"CVE-2017-17450\", \"CVE-2017-17712\", \"CVE-2017-17741\", \"CVE-2017-8824\");\n script_xref(name:\"ALAS\", value:\"2018-944\");\n\n script_name(english:\"Amazon Linux AMI : kernel (ALAS-2018-944)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Amazon Linux AMI host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Race condition in raw_sendmsg function allows denial-of-service or\nkernel addresses leak\n\nA flaw was found in the Linux kernel's implementation of raw_sendmsg\nallowing a local attacker to panic the kernel or possibly leak kernel\naddresses. A local attacker, with the privilege of creating raw\nsockets, can abuse a possible race condition when setting the socket\noption to allow the kernel to automatically create ip header values\nand thus potentially escalate their privileges. (CVE-2017-17712)\n\nUse-after-free vulnerability in DCCP socket\n\nA use-after-free vulnerability was found in DCCP socket code affecting\nthe Linux kernel since 2.6.16. This vulnerability could allow an\nattacker to their escalate privileges. (CVE-2017-8824)\n\nStack-based out-of-bounds read via vmcall instruction\n\nLinux kernel compiled with the KVM virtualization (CONFIG_KVM) support\nis vulnerable to an out-of-bounds read access issue. It could occur\nwhen emulating vmcall instructions invoked by a guest. A guest\nuser/process could use this flaw to disclose kernel memory bytes.\n(CVE-2017-17741)\n\nUnchecked capabilities in net/netfilter/xt_osf.c allows for\nunprivileged modification to systemwide fingerprint list\n\nnet/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not\nrequire the CAP_NET_ADMIN capability for add_callback and\nremove_callback operations, which allows local users to bypass\nintended access restrictions because the xt_osf_fingers data structure\nis shared across all net namespaces. (CVE-2017-17450)\n\nMissing capabilities check in net/netfilter/nfnetlink_cthelper.c\nallows for unprivileged access to systemwide nfnl_cthelper_list\nstructure\n\nnet/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4\ndoes not require the CAP_NET_ADMIN capability for new, get, and del\noperations, which allows local users to bypass intended access\nrestrictions because the nfnl_cthelper_list data structure is shared\nacross all net namespaces. (CVE-2017-17448)\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://alas.aws.amazon.com/ALAS-2018-944.html\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"Run 'yum update kernel' to update your system. You will need to reboot\nyour system in order for the new kernel to be running.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:P/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:kernel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:kernel-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:kernel-debuginfo-common-i686\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:kernel-debuginfo-common-x86_64\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:kernel-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:kernel-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:kernel-headers\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:kernel-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:kernel-tools-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:kernel-tools-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:perf\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:amazon:linux:perf-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:amazon:linux\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/01/18\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/01/19\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Amazon Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/AmazonLinux/release\", \"Host/AmazonLinux/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\n\nrelease = get_kb_item(\"Host/AmazonLinux/release\");\nif (isnull(release) || !strlen(release)) audit(AUDIT_OS_NOT, \"Amazon Linux\");\nos_ver = pregmatch(pattern: \"^AL(A|\\d)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Amazon Linux\");\nos_ver = os_ver[1];\nif (os_ver != \"A\")\n{\n if (os_ver == 'A') os_ver = 'AMI';\n audit(AUDIT_OS_NOT, \"Amazon Linux AMI\", \"Amazon Linux \" + os_ver);\n}\n\nif (!get_kb_item(\"Host/AmazonLinux/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\nif (rpm_check(release:\"ALA\", reference:\"kernel-4.9.77-31.58.amzn1\")) flag++;\nif (rpm_check(release:\"ALA\", reference:\"kernel-debuginfo-4.9.77-31.58.amzn1\")) flag++;\nif (rpm_check(release:\"ALA\", cpu:\"i686\", reference:\"kernel-debuginfo-common-i686-4.9.77-31.58.amzn1\")) flag++;\nif (rpm_check(release:\"ALA\", cpu:\"x86_64\", reference:\"kernel-debuginfo-common-x86_64-4.9.77-31.58.amzn1\")) flag++;\nif (rpm_check(release:\"ALA\", reference:\"kernel-devel-4.9.77-31.58.amzn1\")) flag++;\nif (rpm_check(release:\"ALA\", reference:\"kernel-doc-4.9.77-31.58.amzn1\")) flag++;\nif (rpm_check(release:\"ALA\", reference:\"kernel-headers-4.9.77-31.58.amzn1\")) flag++;\nif (rpm_check(release:\"ALA\", reference:\"kernel-tools-4.9.77-31.58.amzn1\")) flag++;\nif (rpm_check(release:\"ALA\", reference:\"kernel-tools-debuginfo-4.9.77-31.58.amzn1\")) flag++;\nif (rpm_check(release:\"ALA\", reference:\"kernel-tools-devel-4.9.77-31.58.amzn1\")) flag++;\nif (rpm_check(release:\"ALA\", reference:\"perf-4.9.77-31.58.amzn1\")) flag++;\nif (rpm_check(release:\"ALA\", reference:\"perf-debuginfo-4.9.77-31.58.amzn1\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"kernel / kernel-debuginfo / kernel-debuginfo-common-i686 / etc\");\n}\n", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2022-06-16T16:12:10", "description": "Mohamed Ghannam discovered that the IPv4 raw socket implementation in the Linux kernel contained a race condition leading to uninitialized pointer usage. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2017-17712)\n\nLaurent Guerby discovered that the mbcache feature in the ext2 and ext4 filesystems in the Linux kernel improperly handled xattr block caching. A local attacker could use this to cause a denial of service.\n(CVE-2015-8952)\n\nVitaly Mayatskikh discovered that the SCSI subsystem in the Linux kernel did not properly track reference counts when merging buffers. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2017-12190)\n\nChunYu Wang discovered that a use-after-free vulnerability existed in the SCTP protocol implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code, (CVE-2017-15115)\n\nMohamed Ghannam discovered a use-after-free vulnerability in the DCCP protocol implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-8824)\n\nUSN-3540-1 mitigated CVE-2017-5715 (Spectre Variant 2) for the amd64 architecture in Ubuntu 16.04 LTS. This update provides the compiler-based retpoline kernel mitigation for the amd64 and i386 architectures. \n\nJann Horn discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Spectre. A local attacker could use this to expose sensitive information, including kernel memory. (CVE-2017-5715).\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "cvss3": {"score": 7.8, "vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-02-23T00:00:00", "type": "nessus", "title": "Ubuntu 16.04 LTS : linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities (USN-3582-1) (Spectre)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2015-8952", "CVE-2017-12190", "CVE-2017-15115", "CVE-2017-17712", "CVE-2017-5715", "CVE-2017-8824"], "modified": "2019-09-18T00:00:00", "cpe": ["p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-aws", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-generic", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-generic-lpae", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-kvm", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-lowlatency", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-raspi2", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-snapdragon", "p-cpe:/a:canonical:ubuntu_linux:linux-image-aws", "p-cpe:/a:canonical:ubuntu_linux:linux-image-generic", "p-cpe:/a:canonical:ubuntu_linux:linux-image-generic-lpae", "p-cpe:/a:canonical:ubuntu_linux:linux-image-kvm", "p-cpe:/a:canonical:ubuntu_linux:linux-image-lowlatency", "p-cpe:/a:canonical:ubuntu_linux:linux-image-raspi2", "p-cpe:/a:canonical:ubuntu_linux:linux-image-snapdragon", "cpe:/o:canonical:ubuntu_linux:16.04"], "id": "UBUNTU_USN-3582-1.NASL", "href": "https://www.tenable.com/plugins/nessus/106972", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Ubuntu Security Notice USN-3582-1. The text \n# itself is copyright (C) Canonical, Inc. See \n# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered \n# trademark of Canonical, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(106972);\n script_version(\"3.10\");\n script_cvs_date(\"Date: 2019/09/18 12:31:48\");\n\n script_cve_id(\"CVE-2015-8952\", \"CVE-2017-12190\", \"CVE-2017-15115\", \"CVE-2017-17712\", \"CVE-2017-5715\", \"CVE-2017-8824\");\n script_xref(name:\"USN\", value:\"3582-1\");\n script_xref(name:\"IAVA\", value:\"2018-A-0020\");\n\n script_name(english:\"Ubuntu 16.04 LTS : linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities (USN-3582-1) (Spectre)\");\n script_summary(english:\"Checks dpkg output for updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Ubuntu host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Mohamed Ghannam discovered that the IPv4 raw socket implementation in\nthe Linux kernel contained a race condition leading to uninitialized\npointer usage. A local attacker could use this to cause a denial of\nservice or possibly execute arbitrary code. (CVE-2017-17712)\n\nLaurent Guerby discovered that the mbcache feature in the ext2 and\next4 filesystems in the Linux kernel improperly handled xattr block\ncaching. A local attacker could use this to cause a denial of service.\n(CVE-2015-8952)\n\nVitaly Mayatskikh discovered that the SCSI subsystem in the Linux\nkernel did not properly track reference counts when merging buffers. A\nlocal attacker could use this to cause a denial of service (memory\nexhaustion). (CVE-2017-12190)\n\nChunYu Wang discovered that a use-after-free vulnerability existed in\nthe SCTP protocol implementation in the Linux kernel. A local attacker\ncould use this to cause a denial of service (system crash) or possibly\nexecute arbitrary code, (CVE-2017-15115)\n\nMohamed Ghannam discovered a use-after-free vulnerability in the DCCP\nprotocol implementation in the Linux kernel. A local attacker could\nuse this to cause a denial of service (system crash) or possibly\nexecute arbitrary code. (CVE-2017-8824)\n\nUSN-3540-1 mitigated CVE-2017-5715 (Spectre Variant 2) for the amd64\narchitecture in Ubuntu 16.04 LTS. This update provides the\ncompiler-based retpoline kernel mitigation for the amd64 and i386\narchitectures. \n\nJann Horn discovered that microprocessors utilizing speculative\nexecution and branch prediction may allow unauthorized memory reads\nvia sidechannel attacks. This flaw is known as Spectre. A local\nattacker could use this to expose sensitive information, including\nkernel memory. (CVE-2017-5715).\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://usn.ubuntu.com/3582-1/\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-aws\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-generic\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-generic-lpae\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-kvm\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-lowlatency\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-raspi2\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-snapdragon\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-aws\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-generic\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-generic-lpae\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-kvm\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-lowlatency\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-raspi2\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-snapdragon\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:16.04\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2016/10/16\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/02/22\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/02/23\");\n script_set_attribute(attribute:\"in_the_news\", value:\"true\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_set_attribute(attribute:\"stig_severity\", value:\"I\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"Ubuntu Security Notice (C) 2018-2019 Canonical, Inc. / NASL script (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Ubuntu Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\", \"linux_alt_patch_detect.nasl\");\n script_require_keys(\"Host/cpu\", \"Host/Ubuntu\", \"Host/Ubuntu/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"ubuntu.inc\");\ninclude(\"ksplice.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Ubuntu/release\");\nif ( isnull(release) ) audit(AUDIT_OS_NOT, \"Ubuntu\");\nrelease = chomp(release);\nif (! preg(pattern:\"^(16\\.04)$\", string:release)) audit(AUDIT_OS_NOT, \"Ubuntu 16.04\", \"Ubuntu \" + release);\nif ( ! get_kb_item(\"Host/Debian/dpkg-l\") ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Ubuntu\", cpu);\n\nif (get_one_kb_item(\"Host/ksplice/kernel-cves\"))\n{\n rm_kb_item(name:\"Host/uptrack-uname-r\");\n cve_list = make_list(\"CVE-2015-8952\", \"CVE-2017-12190\", \"CVE-2017-15115\", \"CVE-2017-17712\", \"CVE-2017-5715\", \"CVE-2017-8824\");\n if (ksplice_cves_check(cve_list))\n {\n audit(AUDIT_PATCH_INSTALLED, \"KSplice hotfix for USN-3582-1\");\n }\n else\n {\n _ubuntu_report = ksplice_reporting_text();\n }\n}\n\nflag = 0;\n\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-4.4.0-1019-kvm\", pkgver:\"4.4.0-1019.24\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-4.4.0-1052-aws\", pkgver:\"4.4.0-1052.61\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-4.4.0-1085-raspi2\", pkgver:\"4.4.0-1085.93\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-4.4.0-1087-snapdragon\", pkgver:\"4.4.0-1087.92\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-4.4.0-116-generic\", pkgver:\"4.4.0-116.140\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-4.4.0-116-generic-lpae\", pkgver:\"4.4.0-116.140\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-4.4.0-116-lowlatency\", pkgver:\"4.4.0-116.140\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-aws\", pkgver:\"4.4.0.1052.54\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-generic\", pkgver:\"4.4.0.116.122\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-generic-lpae\", pkgver:\"4.4.0.116.122\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-kvm\", pkgver:\"4.4.0.1019.18\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-lowlatency\", pkgver:\"4.4.0.116.122\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-raspi2\", pkgver:\"4.4.0.1085.85\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"linux-image-snapdragon\", pkgver:\"4.4.0.1087.79\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : ubuntu_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = ubuntu_pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"linux-image-4.4-aws / linux-image-4.4-generic / etc\");\n}\n", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2022-06-16T16:13:06", "description": "USN-3582-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS.\n\nMohamed Ghannam discovered that the IPv4 raw socket implementation in the Linux kernel contained a race condition leading to uninitialized pointer usage. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2017-17712)\n\nLaurent Guerby discovered that the mbcache feature in the ext2 and ext4 filesystems in the Linux kernel improperly handled xattr block caching. A local attacker could use this to cause a denial of service.\n(CVE-2015-8952)\n\nVitaly Mayatskikh discovered that the SCSI subsystem in the Linux kernel did not properly track reference counts when merging buffers. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2017-12190)\n\nChunYu Wang discovered that a use-after-free vulnerability existed in the SCTP protocol implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code, (CVE-2017-15115)\n\nMohamed Ghannam discovered a use-after-free vulnerability in the DCCP protocol implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-8824)\n\nUSN-3540-2 mitigated CVE-2017-5715 (Spectre Variant 2) for the amd64 architecture in Ubuntu 14.04 LTS. This update provides the compiler-based retpoline kernel mitigation for the amd64 and i386 architectures. \n\nJann Horn discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Spectre. A local attacker could use this to expose sensitive information, including kernel memory. (CVE-2017-5715).\n\nNote that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.", "cvss3": {"score": 7.8, "vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-02-23T00:00:00", "type": "nessus", "title": "Ubuntu 14.04 LTS : linux-lts-xenial, linux-aws vulnerabilities (USN-3582-2) (Spectre)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2015-8952", "CVE-2017-12190", "CVE-2017-15115", "CVE-2017-17712", "CVE-2017-5715", "CVE-2017-8824"], "modified": "2019-09-18T00:00:00", "cpe": ["p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-aws", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-generic", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-generic-lpae", "p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-lowlatency", "p-cpe:/a:canonical:ubuntu_linux:linux-image-aws", "p-cpe:/a:canonical:ubuntu_linux:linux-image-generic-lpae-lts-xenial", "p-cpe:/a:canonical:ubuntu_linux:linux-image-generic-lts-xenial", "p-cpe:/a:canonical:ubuntu_linux:linux-image-lowlatency-lts-xenial", "cpe:/o:canonical:ubuntu_linux:14.04"], "id": "UBUNTU_USN-3582-2.NASL", "href": "https://www.tenable.com/plugins/nessus/106973", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Ubuntu Security Notice USN-3582-2. The text \n# itself is copyright (C) Canonical, Inc. See \n# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered \n# trademark of Canonical, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(106973);\n script_version(\"3.10\");\n script_cvs_date(\"Date: 2019/09/18 12:31:48\");\n\n script_cve_id(\"CVE-2015-8952\", \"CVE-2017-12190\", \"CVE-2017-15115\", \"CVE-2017-17712\", \"CVE-2017-5715\", \"CVE-2017-8824\");\n script_xref(name:\"USN\", value:\"3582-2\");\n script_xref(name:\"IAVA\", value:\"2018-A-0020\");\n\n script_name(english:\"Ubuntu 14.04 LTS : linux-lts-xenial, linux-aws vulnerabilities (USN-3582-2) (Spectre)\");\n script_summary(english:\"Checks dpkg output for updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Ubuntu host is missing one or more security-related\npatches.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"USN-3582-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04\nLTS. This update provides the corresponding updates for the Linux\nHardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu\n14.04 LTS.\n\nMohamed Ghannam discovered that the IPv4 raw socket implementation in\nthe Linux kernel contained a race condition leading to uninitialized\npointer usage. A local attacker could use this to cause a denial of\nservice or possibly execute arbitrary code. (CVE-2017-17712)\n\nLaurent Guerby discovered that the mbcache feature in the ext2 and\next4 filesystems in the Linux kernel improperly handled xattr block\ncaching. A local attacker could use this to cause a denial of service.\n(CVE-2015-8952)\n\nVitaly Mayatskikh discovered that the SCSI subsystem in the Linux\nkernel did not properly track reference counts when merging buffers. A\nlocal attacker could use this to cause a denial of service (memory\nexhaustion). (CVE-2017-12190)\n\nChunYu Wang discovered that a use-after-free vulnerability existed in\nthe SCTP protocol implementation in the Linux kernel. A local attacker\ncould use this to cause a denial of service (system crash) or possibly\nexecute arbitrary code, (CVE-2017-15115)\n\nMohamed Ghannam discovered a use-after-free vulnerability in the DCCP\nprotocol implementation in the Linux kernel. A local attacker could\nuse this to cause a denial of service (system crash) or possibly\nexecute arbitrary code. (CVE-2017-8824)\n\nUSN-3540-2 mitigated CVE-2017-5715 (Spectre Variant 2) for the amd64\narchitecture in Ubuntu 14.04 LTS. This update provides the\ncompiler-based retpoline kernel mitigation for the amd64 and i386\narchitectures. \n\nJann Horn discovered that microprocessors utilizing speculative\nexecution and branch prediction may allow unauthorized memory reads\nvia sidechannel attacks. This flaw is known as Spectre. A local\nattacker could use this to expose sensitive information, including\nkernel memory. (CVE-2017-5715).\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://usn.ubuntu.com/3582-2/\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-aws\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-generic\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-generic-lpae\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4-lowlatency\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-aws\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-generic-lpae-lts-xenial\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-generic-lts-xenial\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:linux-image-lowlatency-lts-xenial\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:14.04\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2016/10/16\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/02/22\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/02/23\");\n script_set_attribute(attribute:\"in_the_news\", value:\"true\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_set_attribute(attribute:\"stig_severity\", value:\"I\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"Ubuntu Security Notice (C) 2018-2019 Canonical, Inc. / NASL script (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Ubuntu Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\", \"linux_alt_patch_detect.nasl\");\n script_require_keys(\"Host/cpu\", \"Host/Ubuntu\", \"Host/Ubuntu/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"ubuntu.inc\");\ninclude(\"ksplice.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Ubuntu/release\");\nif ( isnull(release) ) audit(AUDIT_OS_NOT, \"Ubuntu\");\nrelease = chomp(release);\nif (! preg(pattern:\"^(14\\.04)$\", string:release)) audit(AUDIT_OS_NOT, \"Ubuntu 14.04\", \"Ubuntu \" + release);\nif ( ! get_kb_item(\"Host/Debian/dpkg-l\") ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Ubuntu\", cpu);\n\nif (get_one_kb_item(\"Host/ksplice/kernel-cves\"))\n{\n rm_kb_item(name:\"Host/uptrack-uname-r\");\n cve_list = make_list(\"CVE-2015-8952\", \"CVE-2017-12190\", \"CVE-2017-15115\", \"CVE-2017-17712\", \"CVE-2017-5715\", \"CVE-2017-8824\");\n if (ksplice_cves_check(cve_list))\n {\n audit(AUDIT_PATCH_INSTALLED, \"KSplice hotfix for USN-3582-2\");\n }\n else\n {\n _ubuntu_report = ksplice_reporting_text();\n }\n}\n\nflag = 0;\n\nif (ubuntu_check(osver:\"14.04\", pkgname:\"linux-image-4.4.0-1014-aws\", pkgver:\"4.4.0-1014.14\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"linux-image-4.4.0-116-generic\", pkgver:\"4.4.0-116.140~14.04.1\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"linux-image-4.4.0-116-generic-lpae\", pkgver:\"4.4.0-116.140~14.04.1\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"linux-image-4.4.0-116-lowlatency\", pkgver:\"4.4.0-116.140~14.04.1\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"linux-image-aws\", pkgver:\"4.4.0.1014.14\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"linux-image-generic-lpae-lts-xenial\", pkgver:\"4.4.0.116.98\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"linux-image-generic-lts-xenial\", pkgver:\"4.4.0.116.98\")) flag++;\nif (ubuntu_check(osver:\"14.04\", pkgname:\"linux-image-lowlatency-lts-xenial\", pkgver:\"4.4.0.116.98\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : ubuntu_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = ubuntu_pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"linux-image-4.4-aws / linux-image-4.4-generic / etc\");\n}\n", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2022-06-16T16:13:31", "description": "The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4025 advisory.\n\n - Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache. (CVE-2017-5754)\n\n - The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users to cause a denial of service (NULL pointer dereference and panic) via a crafted application, as demonstrated by the keyring key type, and key addition and link creation operations. (CVE-2017-12193)\n\n - The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state. (CVE-2017-8824)\n\n - Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors. (CVE-2017-0861)\n\n - The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls.\n (CVE-2017-15115)\n\n - The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in inet->hdrincl that leads to uninitialized stack pointer usage; this allows a local user to execute code and gain privileges. (CVE-2017-17712)\n\n - The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the effective uid of the target process, enabling a local attacker to learn the memory layout of a setuid executable despite ASLR. (CVE-2017-14140)\n\nNote that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.", "cvss3": {"score": 7.8, "vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-02-08T00:00:00", "type": "nessus", "title": "Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4025)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2017-0861", "CVE-2017-12193", "CVE-2017-14140", "CVE-2017-15115", "CVE-2017-17712", "CVE-2017-5754", "CVE-2017-8824"], "modified": "2021-09-08T00:00:00", "cpe": ["cpe:/o:oracle:linux:6", "cpe:/o:oracle:linux:7", "p-cpe:/a:oracle:linux:kernel-uek", "p-cpe:/a:oracle:linux:kernel-uek-debug", "p-cpe:/a:oracle:linux:kernel-uek-debug-devel", "p-cpe:/a:oracle:linux:kernel-uek-devel", "p-cpe:/a:oracle:linux:kernel-uek-doc", "p-cpe:/a:oracle:linux:kernel-uek-firmware"], "id": "ORACLELINUX_ELSA-2018-4025.NASL", "href": "https://www.tenable.com/plugins/nessus/106670", "sourceData": "#%NASL_MIN_LEVEL 70300\n##\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Oracle Linux Security Advisory ELSA-2018-4025.\n##\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(106670);\n script_version(\"3.13\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/09/08\");\n\n script_cve_id(\n \"CVE-2017-0861\",\n \"CVE-2017-5754\",\n \"CVE-2017-8824\",\n \"CVE-2017-12193\",\n \"CVE-2017-14140\",\n \"CVE-2017-15115\",\n \"CVE-2017-17712\"\n );\n script_xref(name:\"IAVA\", value:\"2018-A-0019\");\n script_xref(name:\"IAVA\", value:\"2018-A-0022-S\");\n script_xref(name:\"IAVA\", value:\"2018-A-0017\");\n\n script_name(english:\"Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4025)\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Oracle Linux host is missing one or more security updates.\");\n script_set_attribute(attribute:\"description\", value:\n\"The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in\nthe ELSA-2018-4025 advisory.\n\n - Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow\n unauthorized disclosure of information to an attacker with local user access via a side-channel analysis\n of the data cache. (CVE-2017-5754)\n\n - The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11\n mishandles node splitting, which allows local users to cause a denial of service (NULL pointer dereference\n and panic) via a crafted application, as demonstrated by the keyring key type, and key addition and link\n creation operations. (CVE-2017-12193)\n\n - The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to\n gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during\n the DCCP_LISTEN state. (CVE-2017-8824)\n\n - Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows\n attackers to gain privileges via unspecified vectors. (CVE-2017-0861)\n\n - The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether\n the intended netns is used in a peel-off action, which allows local users to cause a denial of service\n (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls.\n (CVE-2017-15115)\n\n - The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in\n inet->hdrincl that leads to uninitialized stack pointer usage; this allows a local user to execute code\n and gain privileges. (CVE-2017-17712)\n\n - The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the effective\n uid of the target process, enabling a local attacker to learn the memory layout of a setuid executable\n despite ASLR. (CVE-2017-14140)\n\nNote that Nessus has not tested for this issue but has instead relied only on the application's self-reported version\nnumber.\");\n script_set_attribute(attribute:\"see_also\", value:\"https://linux.oracle.com/errata/ELSA-2018-4025.html\");\n script_set_attribute(attribute:\"solution\", value:\n\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:H/RL:O/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2017-8824\");\n\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_set_attribute(attribute:\"exploited_by_malware\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2017/09/05\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/02/07\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/02/08\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:linux:6\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:linux:7\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:kernel-uek\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:kernel-uek-debug\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:kernel-uek-debug-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:kernel-uek-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:kernel-uek-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:kernel-uek-firmware\");\n script_set_attribute(attribute:\"stig_severity\", value:\"I\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Oracle Linux Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2018-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"linux_alt_patch_detect.nasl\", \"ssh_get_info.nasl\");\n script_require_keys(\"Host/OracleLinux\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/local_checks_enabled\");\n\n exit(0);\n}\n\n\ninclude('audit.inc');\ninclude('global_settings.inc');\ninclude('ksplice.inc');\ninclude('rpm.inc');\n\nif (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item('Host/OracleLinux')) audit(AUDIT_OS_NOT, 'Oracle Linux');\nvar release = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || !pregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux)\", string:release)) audit(AUDIT_OS_NOT, 'Oracle Linux');\nvar os_ver = pregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, 'Oracle Linux');\nvar os_ver = os_ver[1];\nif (! preg(pattern:\"^(6|7)([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, 'Oracle Linux 6 / 7', 'Oracle Linux ' + os_ver);\n\nif (!get_kb_item('Host/RedHat/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);\n\nvar cpu = get_kb_item('Host/cpu');\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif ('x86_64' >!< cpu && cpu !~ \"^i[3-6]86$\" && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Oracle Linux', cpu);\nif ('x86_64' >!< cpu) audit(AUDIT_ARCH_NOT, 'x86_64', cpu);\n\nvar machine_uptrack_level = get_one_kb_item('Host/uptrack-uname-r');\nif (machine_uptrack_level)\n{\n var trimmed_uptrack_level = ereg_replace(string:machine_uptrack_level, pattern:\"\\.(x86_64|i[3-6]86|aarch64)$\", replace:'');\n var fixed_uptrack_levels = ['4.1.12-112.14.14.el6uek', '4.1.12-112.14.14.el7uek'];\n foreach var fixed_uptrack_level ( fixed_uptrack_levels ) {\n if (rpm_spec_vers_cmp(a:trimmed_uptrack_level, b:fixed_uptrack_level) >= 0)\n {\n audit(AUDIT_PATCH_INSTALLED, 'KSplice hotfix for ELSA-2018-4025');\n }\n }\n __rpm_report = 'Running KSplice level of ' + trimmed_uptrack_level + ' does not meet the minimum fixed level of ' + join(fixed_uptrack_levels, sep:' / ') + ' for this advisory.\\n\\n';\n}\n\nvar kernel_major_minor = get_kb_item('Host/uname/major_minor');\nif (empty_or_null(kernel_major_minor)) exit(1, 'Unable to determine kernel major-minor level.');\nvar expected_kernel_major_minor = '4.1';\nif (kernel_major_minor != expected_kernel_major_minor)\n audit(AUDIT_OS_NOT, 'running kernel level ' + expected_kernel_major_minor + ', it is running kernel level ' + kernel_major_minor);\n\nvar pkgs = [\n {'reference':'kernel-uek-4.1.12-112.14.14.el6uek', 'cpu':'x86_64', 'release':'6', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-4.1.12'},\n {'reference':'kernel-uek-debug-4.1.12-112.14.14.el6uek', 'cpu':'x86_64', 'release':'6', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-4.1.12'},\n {'reference':'kernel-uek-debug-devel-4.1.12-112.14.14.el6uek', 'cpu':'x86_64', 'release':'6', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-devel-4.1.12'},\n {'reference':'kernel-uek-devel-4.1.12-112.14.14.el6uek', 'cpu':'x86_64', 'release':'6', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-devel-4.1.12'},\n {'reference':'kernel-uek-doc-4.1.12-112.14.14.el6uek', 'release':'6', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-doc-4.1.12'},\n {'reference':'kernel-uek-firmware-4.1.12-112.14.14.el6uek', 'release':'6', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-firmware-4.1.12'},\n {'reference':'kernel-uek-4.1.12-112.14.14.el7uek', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-4.1.12'},\n {'reference':'kernel-uek-debug-4.1.12-112.14.14.el7uek', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-4.1.12'},\n {'reference':'kernel-uek-debug-devel-4.1.12-112.14.14.el7uek', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-devel-4.1.12'},\n {'reference':'kernel-uek-devel-4.1.12-112.14.14.el7uek', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-devel-4.1.12'},\n {'reference':'kernel-uek-doc-4.1.12-112.14.14.el7uek', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-doc-4.1.12'},\n {'reference':'kernel-uek-firmware-4.1.12-112.14.14.el7uek', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-firmware-4.1.12'}\n];\n\nvar flag = 0;\nforeach var package_array ( pkgs ) {\n var reference = NULL;\n var release = NULL;\n var sp = NULL;\n var cpu = NULL;\n var el_string = NULL;\n var rpm_spec_vers_cmp = NULL;\n var epoch = NULL;\n var allowmaj = NULL;\n var exists_check = NULL;\n if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];\n if (!empty_or_null(package_array['release'])) release = 'EL' + package_array['release'];\n if (!empty_or_null(package_array['sp'])) sp = package_array['sp'];\n if (!empty_or_null(package_array['cpu'])) cpu = package_array['cpu'];\n if (!empty_or_null(package_array['el_string'])) el_string = package_array['el_string'];\n if (!empty_or_null(package_array['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = package_array['rpm_spec_vers_cmp'];\n if (!empty_or_null(package_array['epoch'])) epoch = package_array['epoch'];\n if (!empty_or_null(package_array['allowmaj'])) allowmaj = package_array['allowmaj'];\n if (!empty_or_null(package_array['exists_check'])) exists_check = package_array['exists_check'];\n if (reference && release) {\n if (exists_check) {\n if (rpm_exists(release:release, rpm:exists_check) && rpm_check(release:release, sp:sp, cpu:cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj)) flag++;\n } else {\n if (rpm_check(release:release, sp:sp, cpu:cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj)) flag++;\n }\n }\n}\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n var tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'kernel-uek / kernel-uek-debug / kernel-uek-debug-devel / etc');\n}\n", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2022-06-16T16:13:33", "description": "The remote OracleVM system is missing necessary patches to address critical security updates :\n\n - drivers/char/mem.c: deny access in open operation when securelevel is set (Ethan Zhao) [Orabug: 27234850] [Orabug: 27234850]\n\n - hugetlb: fix nr_pmds accounting with shared page tables (Kirill A. Shutemov) [Orabug: 26988581]\n\n - x86/IBRS: Drop unnecessary WRITE_ONCE (Boris Ostrovsky) [Orabug: 27416198]\n\n - x86/IBRS: Don't try to change IBRS mode if IBRS is not available (Boris Ostrovsky) [Orabug: 27416198]\n\n - x86/IBRS: Remove support for IBRS_ENABLED_USER mode (Boris Ostrovsky) \n\n - x86: Include linux/device.h in bugs_64.c (Boris Ostrovsky) [Orabug: 27418896]\n\n - x86/spectre: Drop the warning about ibrs being obsolete.\n (Konrad Rzeszutek Wilk)\n\n - x86/spec: Don't print the Missing arguments for option spectre_v2. (Konrad Rzeszutek Wilk)\n\n - x86/spec: Also print IBRS if IBPB is disabled. (Konrad Rzeszutek Wilk)\n\n - x86/IBPB: Provide debugfs interface for changing IBPB mode (Boris Ostrovsky) [Orabug: 27449065]\n\n - xen: Make PV Dom0 Linux kernel NUMA aware (Elena Ufimtseva)\n\n - net/rds: Fix incorrect error handling (Hå kon Bugge) [Orabug: 26848729]\n\n - net/rds: use multiple sge than buddy allocation in congestion code (Wei Lin Guay) [Orabug: 26848729]\n\n - Revert 'RDS: fix the sg allocation based on actual message size' (Wei Lin Guay) [Orabug: 26848729]\n\n - Revert 'RDS: avoid large pages for sg allocation for TCP transport' (Wei Lin Guay) [Orabug: 26848729]\n\n - Revert 'net/rds: Reduce memory footprint in rds_sendmsg' (Wei Lin Guay) [Orabug: 26848729]\n\n - net/rds: reduce memory footprint during ib_post_recv in IB transport (Wei Lin Guay) [Orabug: 26848729]\n\n - net/rds: reduce memory footprint during rds_sendmsg with IB transport (Wei Lin Guay) [Orabug: 26848729]\n\n - net/rds: set the rds_ib_init_frag based on supported sge (Wei Lin Guay) [Orabug: 26848729]\n\n - bnxt_en: Fix possible corrupted NVRAM parameters from firmware response. (Michael Chan) [Orabug: 27199588]\n\n - x86, kasan: Fix build failure on KASAN=y && KMEMCHECK=y kernels (Andrey Ryabinin) [Orabug: 27255122]\n\n - x86, efi, kasan: Fix build failure on !KASAN && KMEMCHECK=y kernels (Andrey Ryabinin) [Orabug: 27255122]\n\n - x86, efi, kasan: #undef memset/memcpy/memmove per arch (Andrey Ryabinin) [Orabug: 27255122]\n\n - Revert 'Makefile: Build with -Werror=date-time if the compiler supports it' (Gayatri Vasudevan) [Orabug:\n 27255122]\n\n - dccp: CVE-2017-8824: use-after-free in DCCP code (Mohamed Ghannam) [Orabug: 27290300] (CVE-2017-8824)\n\n - x86/efi: Initialize and display UEFI secure boot state a bit later during init (Daniel Kiper) [Orabug: 27309477]\n\n - x86/espfix: Init espfix on the boot CPU side (Zhu Guihua) [Orabug: 27344552]\n\n - x86/espfix: Add 'cpu' parameter to init_espfix_ap (Zhu Guihua) \n\n - ALSA: pcm: prevent UAF in snd_pcm_info (Robb Glasser) [Orabug: 27344841] (CVE-2017-0861) (CVE-2017-0861)\n\n - fs/ocfs2: remove page cache for converted direct write (Wengang Wang)\n\n - Revert 'ocfs2: code clean up for direct io' (Wengang Wang)\n\n - assoc_array: Fix a buggy node-splitting case (David Howells) [Orabug: 27364592] (CVE-2017-12193) (CVE-2017-12193)\n\n - Sanitize 'move_pages' permission checks (Linus Torvalds) [Orabug: 27364690] (CVE-2017-14140)\n\n - pti: compile fix for when PTI is disabled (Pavel Tatashin) [Orabug: 27383147] (CVE-2017-5754)\n\n - sctp: do not peel off an assoc from one netns to another one (Xin Long) [Orabug: 27386999] (CVE-2017-15115)\n\n - net: ipv4: fix for a race condition in raw_sendmsg (Mohamed Ghannam) [Orabug: 27390682] (CVE-2017-17712)\n\n - mlx4: add mstflint secure boot access kernel support (Qing Huang) \n\n - x86: Move STUFF_RSB in to the idt macro (Konrad Rzeszutek Wilk)\n\n - x86/spec: STUFF_RSB _before_ ENABLE_IBRS (Konrad Rzeszutek Wilk)\n\n - x86: Move ENABLE_IBRS in the interrupt macro. (Konrad Rzeszutek Wilk)", "cvss3": {"score": 7.8, "vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-02-09T00:00:00", "type": "nessus", "title": "OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0017) (Meltdown)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2017-0861", "CVE-2017-12193", "CVE-2017-14140", "CVE-2017-15115", "CVE-2017-17712", "CVE-2017-5754", "CVE-2017-8824"], "modified": "2019-09-27T00:00:00", "cpe": ["p-cpe:/a:oracle:vm:kernel-uek", "p-cpe:/a:oracle:vm:kernel-uek-firmware", "cpe:/o:oracle:vm_server:3.4"], "id": "ORACLEVM_OVMSA-2018-0017.NASL", "href": "https://www.tenable.com/plugins/nessus/106706", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The package checks in this plugin were extracted from OracleVM\n# Security Advisory OVMSA-2018-0017.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(106706);\n script_version(\"3.4\");\n script_cvs_date(\"Date: 2019/09/27 13:00:35\");\n\n script_cve_id(\"CVE-2017-0861\", \"CVE-2017-12193\", \"CVE-2017-14140\", \"CVE-2017-15115\", \"CVE-2017-17712\", \"CVE-2017-5754\", \"CVE-2017-8824\");\n script_xref(name:\"IAVA\", value:\"2018-A-0019\");\n\n script_name(english:\"OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0017) (Meltdown)\");\n script_summary(english:\"Checks the RPM output for the updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote OracleVM host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The remote OracleVM system is missing necessary patches to address\ncritical security updates :\n\n - drivers/char/mem.c: deny access in open operation when\n securelevel is set (Ethan Zhao) [Orabug: 27234850]\n [Orabug: 27234850]\n\n - hugetlb: fix nr_pmds accounting with shared page tables\n (Kirill A. Shutemov) [Orabug: 26988581]\n\n - x86/IBRS: Drop unnecessary WRITE_ONCE (Boris Ostrovsky)\n [Orabug: 27416198]\n\n - x86/IBRS: Don't try to change IBRS mode if IBRS is not\n available (Boris Ostrovsky) [Orabug: 27416198]\n\n - x86/IBRS: Remove support for IBRS_ENABLED_USER mode\n (Boris Ostrovsky) \n\n - x86: Include linux/device.h in bugs_64.c (Boris\n Ostrovsky) [Orabug: 27418896]\n\n - x86/spectre: Drop the warning about ibrs being obsolete.\n (Konrad Rzeszutek Wilk)\n\n - x86/spec: Don't print the Missing arguments for option\n spectre_v2. (Konrad Rzeszutek Wilk)\n\n - x86/spec: Also print IBRS if IBPB is disabled. (Konrad\n Rzeszutek Wilk)\n\n - x86/IBPB: Provide debugfs interface for changing IBPB\n mode (Boris Ostrovsky) [Orabug: 27449065]\n\n - xen: Make PV Dom0 Linux kernel NUMA aware (Elena\n Ufimtseva)\n\n - net/rds: Fix incorrect error handling (Hå kon\n Bugge) [Orabug: 26848729]\n\n - net/rds: use multiple sge than buddy allocation in\n congestion code (Wei Lin Guay) [Orabug: 26848729]\n\n - Revert 'RDS: fix the sg allocation based on actual\n message size' (Wei Lin Guay) [Orabug: 26848729]\n\n - Revert 'RDS: avoid large pages for sg allocation for TCP\n transport' (Wei Lin Guay) [Orabug: 26848729]\n\n - Revert 'net/rds: Reduce memory footprint in rds_sendmsg'\n (Wei Lin Guay) [Orabug: 26848729]\n\n - net/rds: reduce memory footprint during ib_post_recv in\n IB transport (Wei Lin Guay) [Orabug: 26848729]\n\n - net/rds: reduce memory footprint during rds_sendmsg with\n IB transport (Wei Lin Guay) [Orabug: 26848729]\n\n - net/rds: set the rds_ib_init_frag based on supported sge\n (Wei Lin Guay) [Orabug: 26848729]\n\n - bnxt_en: Fix possible corrupted NVRAM parameters from\n firmware response. (Michael Chan) [Orabug: 27199588]\n\n - x86, kasan: Fix build failure on KASAN=y && KMEMCHECK=y\n kernels (Andrey Ryabinin) [Orabug: 27255122]\n\n - x86, efi, kasan: Fix build failure on !KASAN &&\n KMEMCHECK=y kernels (Andrey Ryabinin) [Orabug: 27255122]\n\n - x86, efi, kasan: #undef memset/memcpy/memmove per arch\n (Andrey Ryabinin) [Orabug: 27255122]\n\n - Revert 'Makefile: Build with -Werror=date-time if the\n compiler supports it' (Gayatri Vasudevan) [Orabug:\n 27255122]\n\n - dccp: CVE-2017-8824: use-after-free in DCCP code\n (Mohamed Ghannam) [Orabug: 27290300] (CVE-2017-8824)\n\n - x86/efi: Initialize and display UEFI secure boot state a\n bit later during init (Daniel Kiper) [Orabug: 27309477]\n\n - x86/espfix: Init espfix on the boot CPU side (Zhu\n Guihua) [Orabug: 27344552]\n\n - x86/espfix: Add 'cpu' parameter to init_espfix_ap (Zhu\n Guihua) \n\n - ALSA: pcm: prevent UAF in snd_pcm_info (Robb Glasser)\n [Orabug: 27344841] (CVE-2017-0861) (CVE-2017-0861)\n\n - fs/ocfs2: remove page cache for converted direct write\n (Wengang Wang)\n\n - Revert 'ocfs2: code clean up for direct io' (Wengang\n Wang)\n\n - assoc_array: Fix a buggy node-splitting case (David\n Howells) [Orabug: 27364592] (CVE-2017-12193)\n (CVE-2017-12193)\n\n - Sanitize 'move_pages' permission check
CVE-2017-17712
