Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP1) SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:3772-1 Final 1 1 2018-11-15T13:19:04Z current 2018-11-15T13:19:04Z 2018-11-15T13:19:04Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP1) This update for the Linux Kernel 3.12.74-60_64_104 fixes one issue. The following security issue was fixed: - CVE-2018-18386: The drivers/tty/n_tty.c allowed local attackers (who are able to access pseudo terminals) to hang/block further usage of any pseudo terminal devices due to an EXTPROC versus ICANON confusion in TIOCINQ (bsc#1112039). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-SERVER-12-2018-2666,SUSE-SLE-SERVER-12-2018-2667,SUSE-SLE-SERVER-12-2018-2668,SUSE-SLE-SERVER-12-2018-2671,SUSE-SLE-SERVER-12-2018-2672,SUSE-SLE-SERVER-12-2018-2673,SUSE-SLE-SERVER-12-2018-2674,SUSE-SLE-SERVER-12-2018-2675,SUSE-SLE-SERVER-12-2018-2676,SUSE-SLE-SERVER-12-2018-2677,SUSE-SLE-SERVER-12-SP1-2018-2664,SUSE-SLE-SERVER-12-SP1-2018-2665,SUSE-SLE-SERVER-12-SP1-2018-2669,SUSE-SLE-SERVER-12-SP1-2018-2670,SUSE-SLE-SERVER-12-SP1-2018-2678,SUSE-SLE-SERVER-12-SP1-2018-2679,SUSE-SLE-SERVER-12-SP1-2018-2680,SUSE-SLE-SERVER-12-SP1-2018-2681,SUSE-SLE-SERVER-12-SP1-2018-2682,SUSE-SLE-SERVER-12-SP1-2018-2683 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20183772-1/ Link for SUSE-SU-2018:3772-1 https://lists.suse.com/pipermail/sle-security-updates/2018-November/004854.html E-Mail link for SUSE-SU-2018:3772-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1112039 SUSE Bug 1112039 https://www.suse.com/security/cve/CVE-2018-18386/ SUSE CVE CVE-2018-18386 page SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_136-default-6-2.1 kgraft-patch-3_12_61-52_136-xen-6-2.1 kgraft-patch-3_12_61-52_128-default-7-2.1 kgraft-patch-3_12_61-52_128-xen-7-2.1 kgraft-patch-3_12_61-52_141-default-5-2.1 kgraft-patch-3_12_61-52_141-xen-5-2.1 kgraft-patch-3_12_61-52_106-default-11-2.1 kgraft-patch-3_12_61-52_106-xen-11-2.1 kgraft-patch-3_12_61-52_133-default-6-2.1 kgraft-patch-3_12_61-52_133-xen-6-2.1 kgraft-patch-3_12_61-52_122-default-10-2.1 kgraft-patch-3_12_61-52_122-xen-10-2.1 kgraft-patch-3_12_61-52_125-default-9-2.1 kgraft-patch-3_12_61-52_125-xen-9-2.1 kgraft-patch-3_12_61-52_111-default-10-2.1 kgraft-patch-3_12_61-52_111-xen-10-2.1 kgraft-patch-3_12_61-52_119-default-10-2.1 kgraft-patch-3_12_61-52_119-xen-10-2.1 kgraft-patch-3_12_61-52_146-default-3-2.1 kgraft-patch-3_12_61-52_146-xen-3-2.1 kgraft-patch-3_12_74-60_64_88-default-7-2.1 kgraft-patch-3_12_74-60_64_88-xen-7-2.1 kgraft-patch-3_12_74-60_64_85-default-9-2.1 kgraft-patch-3_12_74-60_64_85-xen-9-2.1 kgraft-patch-3_12_74-60_64_96-default-6-2.1 kgraft-patch-3_12_74-60_64_96-xen-6-2.1 kgraft-patch-3_12_74-60_64_93-default-6-2.1 kgraft-patch-3_12_74-60_64_93-xen-6-2.1 kgraft-patch-3_12_74-60_64_82-default-9-2.1 kgraft-patch-3_12_74-60_64_82-xen-9-2.1 kgraft-patch-3_12_74-60_64_99-default-5-2.1 kgraft-patch-3_12_74-60_64_99-xen-5-2.1 kgraft-patch-3_12_74-60_64_66-default-10-2.1 kgraft-patch-3_12_74-60_64_66-xen-10-2.1 kgraft-patch-3_12_74-60_64_69-default-9-2.1 kgraft-patch-3_12_74-60_64_69-xen-9-2.1 kgraft-patch-3_12_74-60_64_107-default-3-2.1 kgraft-patch-3_12_74-60_64_107-xen-3-2.1 kgraft-patch-3_12_74-60_64_104-default-3-2.1 kgraft-patch-3_12_74-60_64_104-xen-3-2.1 kgraft-patch-3_12_74-60_64_88-default-7-2.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_88-xen-7-2.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_85-default-9-2.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_85-xen-9-2.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_96-default-6-2.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_96-xen-6-2.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_93-default-6-2.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_93-xen-6-2.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_82-default-9-2.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_82-xen-9-2.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_99-default-5-2.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_99-xen-5-2.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_66-default-10-2.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_66-xen-10-2.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_69-default-9-2.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_69-xen-9-2.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_107-default-3-2.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_107-xen-3-2.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_104-default-3-2.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_74-60_64_104-xen-3-2.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS kgraft-patch-3_12_61-52_136-default-6-2.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_136-xen-6-2.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_128-default-7-2.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_128-xen-7-2.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_141-default-5-2.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_141-xen-5-2.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_106-default-11-2.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_106-xen-11-2.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_133-default-6-2.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_133-xen-6-2.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_122-default-10-2.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_122-xen-10-2.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_125-default-9-2.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_125-xen-9-2.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_111-default-10-2.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_111-xen-10-2.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_119-default-10-2.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_119-xen-10-2.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_146-default-3-2.1 as a component of SUSE Linux Enterprise Server 12-LTSS kgraft-patch-3_12_61-52_146-xen-3-2.1 as a component of SUSE Linux Enterprise Server 12-LTSS drivers/tty/n_tty.c in the Linux kernel before 4.14.11 allows local attackers (who are able to access pseudo terminals) to hang/block further usage of any pseudo terminal devices due to an EXTPROC versus ICANON confusion in TIOCINQ. CVE-2018-18386 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_104-default-3-2.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_104-xen-3-2.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_107-default-3-2.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_107-xen-3-2.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_66-default-10-2.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_66-xen-10-2.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_69-default-9-2.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_69-xen-9-2.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_82-default-9-2.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_82-xen-9-2.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_85-default-9-2.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_85-xen-9-2.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_88-default-7-2.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_88-xen-7-2.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_93-default-6-2.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_93-xen-6-2.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_96-default-6-2.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_96-xen-6-2.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_99-default-5-2.1 SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_99-xen-5-2.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_106-default-11-2.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_106-xen-11-2.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_111-default-10-2.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_111-xen-10-2.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_119-default-10-2.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_119-xen-10-2.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_122-default-10-2.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_122-xen-10-2.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_125-default-9-2.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_125-xen-9-2.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_128-default-7-2.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_128-xen-7-2.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_133-default-6-2.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_133-xen-6-2.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_136-default-6-2.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_136-xen-6-2.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_141-default-5-2.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_141-xen-5-2.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_146-default-3-2.1 SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_146-xen-3-2.1 moderate 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20183772-1/ https://www.suse.com/security/cve/CVE-2018-18386.html CVE-2018-18386 https://bugzilla.suse.com/1094825 SUSE Bug 1094825 https://bugzilla.suse.com/1112039 SUSE Bug 1112039