Alerts This Week
Warning Icon 1 684
Alerts This Week
Warning Icon 1 684

SUSE: 2018:1375-1 Important: Linux Kernel Security Update for DoS

suse
Calendar Grey May 23, 2018
Dist Suse Esm H88
SUSE has issued a critical security update targeting three vulnerabilities within the Linux Kernel, providing essential patches and resolutions.
An update that solves three vulnerabilities and has 5 fixes is now available

Summary

The SUSE Linux Enterprise 12 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-3639: Information leaks using "Memory Disambiguation" feature in modern CPUs were mitigated, aka "Spectre Variant 4" (bnc#1087082). A new boot commandline option was introduced, "spec_store_bypass_disable", which can have following values: - auto: Kernel detects whether your CPU model contains an implementation of Speculative Store Bypass and picks the most appropriate mitigation. - on: disable Speculative Store Bypass - off: enable Speculative Store Bypass - prctl: Control Speculative Store Bypass per thread via prctl. Speculative Store Bypass is enabled for a process by default. The state of the control is inherited on fork.

References

#1087082 #1087845 #1089895 #1091755 #1092497

#1093215 #1094019 #985025

Cross- CVE-2018-1000199 CVE-2018-10675 CVE-2018-3639

Affected Products:

SUSE Linux Enterprise Server for SAP 12-SP1

SUSE Linux Enterprise Server 12-SP1-LTSS

SUSE Linux Enterprise Module for Public Cloud 12

https://www.suse.com/security/cve/CVE-2018-1000199.html

https://www.suse.com/security/cve/CVE-2018-10675.html

https://www.suse.com/security/cve/CVE-2018-3639.html

https://bugzilla.suse.com/1087082

https://bugzilla.suse.com/1087845

https://bugzilla.suse.com/1089895

https://bugzilla.suse.com/1091755

https://bugzilla.suse.com/1092497

https://bugzilla.suse.com/1093215

https://bugzilla.suse.com/1094019

https://bugzilla.suse.com/985025

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2018:1375-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here