Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 481
Alerts This Week
Warning Icon 1 481

SUSE: 2018:0051-1 Important Kernel-Firmware Security Issue

suse
Calendar Grey January 9, 2018
Scroller Suse
This crucial SUSE patch for kernel-firmware addresses CVE-2021-34527 to safeguard against potential data exposure.
An update that fixes one vulnerability is now available.

Summary

This update for kernel-firmware fixes the following issues: - Add microcode_amd_fam17h.bin (bsc#1068032 CVE-2017-5715) This new firmware enables the Indirect Branch Control (IBC) feature on AMD family 17h processor to mitigate an attack on the branch predictor that could lead to information disclosure from e.g. kernel memory (bsc#1068032 CVE-2017-5715). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-2018-37=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 12-LTSS (noarch): kernel-firmware-20140807git-5.3.1 ucode-amd-20140807git-5.3.1

Topics%20covered

Topics Covered

security advisory important information disclosure SUSE Linux Enterprise kernel-firmware CVE-2017-5715

References

#1068032

Cross- CVE-2017-5715

Affected Products:

SUSE Linux Enterprise Server 12-LTSS

https://www.suse.com/security/cve/CVE-2017-5715.html

https://bugzilla.suse.com/1068032

--

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2018:0051-1
Rating: important

Topics%20covered

Topics Covered

security advisory important information disclosure SUSE Linux Enterprise kernel-firmware CVE-2017-5715

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.