The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.136 to receive various security and bugfixes. The following security bugs were fixed :

  - CVE-2018-5848: In the function wmi_set_ie(), the length     validation code did not handle unsigned integer overflow     properly. As a result, a large value of the 'ie_len'     argument could have caused a buffer overflow     (bnc#1097356).

  - CVE-2017-18249: The add_free_nid function did not     properly track an allocated nid, which allowed local     users to cause a denial of service (race condition) or     possibly have unspecified other impact via concurrent     threads (bnc#1087036).

  - CVE-2018-3665: Prevent disclosure of FPU registers     (including XMM and AVX registers) between processes.
    These registers might contain encryption keys when doing     SSE accelerated AES enc/decryption (bsc#1087086).

  - CVE-2017-18241: Prevent a NULL pointer dereference by     using a noflush_merge option that triggers a NULL value     for a flush_cmd_control data structure (bnc#1086400).

  - CVE-2017-17741: The KVM implementation in the Linux     kernel allowed attackers to obtain potentially sensitive     information from kernel memory, aka a write_mmio     stack-based out-of-bounds read (bnc#1073311).

  - CVE-2018-12233: In the ea_get function in     fs/jfs/xattr.c, a memory corruption bug in JFS can be     triggered by calling setxattr twice with two different     extended attribute names on the same file. This     vulnerability can be triggered by an unprivileged user     with the ability to create files and execute programs. A     kmalloc call is incorrect, leading to slab-out-of-bounds     in jfs_xattr (bnc#1097234).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2018:1772-1)

high Nessus Plugin ID 110660

Version 1.7