Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:1374-1 Final 1 1 2018-05-22T13:21:02Z current 2018-05-22T13:21:02Z 2018-05-22T13:21:02Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 12 GA LTSS kernel was updated to receive several security fixes. The following security bugs were fixed: - CVE-2018-3639: Information leaks using 'Memory Disambiguation' feature in modern CPUs were mitigated, aka 'Spectre Variant 4' (bnc#1087082). A new boot commandline option was introduced, 'spec_store_bypass_disable', which can have following values: - auto: Kernel detects whether your CPU model contains an implementation of Speculative Store Bypass and picks the most appropriate mitigation. - on: disable Speculative Store Bypass - off: enable Speculative Store Bypass - prctl: Control Speculative Store Bypass per thread via prctl. Speculative Store Bypass is enabled for a process by default. The state of the control is inherited on fork. - seccomp: Same as 'prctl' above, but all seccomp threads will disable SSB unless they explicitly opt out. The default is 'seccomp', meaning programs need explicit opt-in into the mitigation. Status can be queried via the /sys/devices/system/cpu/vulnerabilities/spec_store_bypass file, containing: - 'Vulnerable' - 'Mitigation: Speculative Store Bypass disabled' - 'Mitigation: Speculative Store Bypass disabled via prctl' - 'Mitigation: Speculative Store Bypass disabled via prctl and seccomp' - CVE-2018-1000199: An address corruption flaw was discovered while modifying a h/w breakpoint via 'modify_user_hw_breakpoint' routine, an unprivileged user/process could use this flaw to crash the system kernel resulting in DoS OR to potentially escalate privileges on a the system. (bsc#1089895) - CVE-2018-10675: The do_get_mempolicy function in mm/mempolicy.c allowed local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls (bnc#1091755). The following non-security bugs were fixed: - x86/bugs: Make sure that _TIF_SSBD does not end up in _TIF_ALLWORK_MASK (bsc#1093215). - x86/bugs: correctly force-disable IBRS on !SKL systems (bsc#1092497). - x86/cpu/intel: Introduce macros for Intel family numbers (bsc#985025). - x86/cpu/intel: Introduce macros for Intel family numbers (bsc985025). - x86/speculation: Remove Skylake C2 from Speculation Control microcode blacklist (bsc#1087845). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-Module-Public-Cloud-12-2018-959,SUSE-SLE-SERVER-12-2018-959 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20181374-1/ Link for SUSE-SU-2018:1374-1 https://lists.suse.com/pipermail/sle-security-updates/2018-May/004076.html E-Mail link for SUSE-SU-2018:1374-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1087845 SUSE Bug 1087845 https://bugzilla.suse.com/1089895 SUSE Bug 1089895 https://bugzilla.suse.com/1091755 SUSE Bug 1091755 https://bugzilla.suse.com/1092497 SUSE Bug 1092497 https://bugzilla.suse.com/1093215 SUSE Bug 1093215 https://bugzilla.suse.com/1094019 SUSE Bug 1094019 https://bugzilla.suse.com/985025 SUSE Bug 985025 https://www.suse.com/security/cve/CVE-2018-1000199/ SUSE CVE CVE-2018-1000199 page https://www.suse.com/security/cve/CVE-2018-10675/ SUSE CVE CVE-2018-10675 page https://www.suse.com/security/cve/CVE-2018-3639/ SUSE CVE CVE-2018-3639 page SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12-LTSS kernel-ec2-3.12.61-52.133.1 kernel-ec2-devel-3.12.61-52.133.1 kernel-ec2-extra-3.12.61-52.133.1 kernel-default-3.12.61-52.133.1 kernel-default-base-3.12.61-52.133.1 kernel-default-devel-3.12.61-52.133.1 kernel-default-man-3.12.61-52.133.1 kernel-devel-3.12.61-52.133.1 kernel-macros-3.12.61-52.133.1 kernel-source-3.12.61-52.133.1 kernel-syms-3.12.61-52.133.1 kernel-xen-3.12.61-52.133.1 kernel-xen-base-3.12.61-52.133.1 kernel-xen-devel-3.12.61-52.133.1 kgraft-patch-3_12_61-52_133-default-1-1.5.1 kgraft-patch-3_12_61-52_133-xen-1-1.5.1 kernel-ec2-3.12.61-52.133.1 as a component of SUSE Linux Enterprise Module for Public Cloud 12 kernel-ec2-devel-3.12.61-52.133.1 as a component of SUSE Linux Enterprise Module for Public Cloud 12 kernel-ec2-extra-3.12.61-52.133.1 as a component of SUSE Linux Enterprise Module for Public Cloud 12 kernel-default-3.12.61-52.133.1 as a component of SUSE Linux Enterprise Server 12-LTSS kernel-default-base-3.12.61-52.133.1 as a component of SUSE Linux Enterprise Server 12-LTSS kernel-default-devel-3.12.61-52.133.1 as a component of SUSE Linux Enterprise Server 12-LTSS kernel-default-man-3.12.61-52.133.1 as a component of SUSE Linux Enterprise Server 12-LTSS kernel-devel-3.12.61-52.133.1 as a component of SUSE Linux Enterprise Server 12-LTSS kernel-macros-3.12.61-52.133.1 as a component of SUSE Linux Enterprise Server 12-LTSS kernel-source-3.12.61-52.133.1 as a component of SUSE Linux Enterprise Server 12-LTSS kernel-syms-3.12.61-52.133.1 as a component of SUSE Linux Enterprise Server 12-LTSS kernel-xen-3.12.61-52.133.1 as a component of SUSE Linux Enterprise Server 12-LTSS kernel-xen-base-3.12.61-52.133.1 as a component of SUSE Linux Enterprise Server 12-LTSS kernel-xen-devel-3.12.61-52.133.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_133-default-1-1.5.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_133-xen-1-1.5.1 as a component of SUSE Linux Enterprise Server 12-LTSS The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f. CVE-2018-1000199 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.61-52.133.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.61-52.133.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-default-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-default-base-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-default-devel-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-default-man-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-devel-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-macros-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-source-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-syms-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-xen-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-xen-base-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-xen-devel-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_133-default-1-1.5.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_133-xen-1-1.5.1 important 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181374-1/ https://www.suse.com/security/cve/CVE-2018-1000199.html CVE-2018-1000199 https://bugzilla.suse.com/1089895 SUSE Bug 1089895 https://bugzilla.suse.com/1090036 SUSE Bug 1090036 The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls. CVE-2018-10675 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.61-52.133.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.61-52.133.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-default-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-default-base-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-default-devel-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-default-man-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-devel-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-macros-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-source-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-syms-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-xen-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-xen-base-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-xen-devel-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_133-default-1-1.5.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_133-xen-1-1.5.1 moderate 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181374-1/ https://www.suse.com/security/cve/CVE-2018-10675.html CVE-2018-10675 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1091755 SUSE Bug 1091755 https://bugzilla.suse.com/1115893 SUSE Bug 1115893 Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4. CVE-2018-3639 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.61-52.133.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.61-52.133.1 SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-default-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-default-base-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-default-devel-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-default-man-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-devel-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-macros-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-source-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-syms-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-xen-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-xen-base-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kernel-xen-devel-3.12.61-52.133.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_133-default-1-1.5.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_133-xen-1-1.5.1 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181374-1/ https://www.suse.com/security/cve/CVE-2018-3639.html CVE-2018-3639 https://bugzilla.suse.com/1074701 SUSE Bug 1074701 https://bugzilla.suse.com/1085235 SUSE Bug 1085235 https://bugzilla.suse.com/1085308 SUSE Bug 1085308 https://bugzilla.suse.com/1087078 SUSE Bug 1087078 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1092631 SUSE Bug 1092631 https://bugzilla.suse.com/1092885 SUSE Bug 1092885 https://bugzilla.suse.com/1094912 SUSE Bug 1094912 https://bugzilla.suse.com/1098813 SUSE Bug 1098813 https://bugzilla.suse.com/1100394 SUSE Bug 1100394 https://bugzilla.suse.com/1102640 SUSE Bug 1102640 https://bugzilla.suse.com/1105412 SUSE Bug 1105412 https://bugzilla.suse.com/1111963 SUSE Bug 1111963 https://bugzilla.suse.com/1172781 SUSE Bug 1172781 https://bugzilla.suse.com/1172782 SUSE Bug 1172782 https://bugzilla.suse.com/1172783 SUSE Bug 1172783 https://bugzilla.suse.com/1173489 SUSE Bug 1173489 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 https://bugzilla.suse.com/1215674 SUSE Bug 1215674