Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 536
Alerts This Week
Warning Icon 1 536

SUSE: 2018:2389-1 Important: Kernel Patch 20 Critical Issues

suse
Calendar Grey August 16, 2018
Scroller Suse
Ubuntu Security Patch for the Kernel resolves significant vulnerabilities in SAP 14-SP3 Hotfix 15. Refer to the guidelines for update procedures.
An update that fixes two vulnerabilities is now available

Summary

This update for the Linux Kernel 4.4.120-92_70 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present in the L1 Datacache used by other hyperthreads on the same CPU core, potentially leaking sensitive data, even from other virtual machines or the host system (bsc#1099306). - CVE-2018-10853: A flaw was found in kvm. In which certain instructions such as sgdt/sidt call segmented_write_std didn't propagate access correctly. As such, during userspace induced exception, the guest can incorrectly assume that the exception happened in the kernel and panic. (bsc#1097108). Patch Instructions:

Topics%20covered

Topics Covered

security advisory vulnerability patch important linux kernel

References

#1097108 #1099306

Cross- CVE-2018-10853 CVE-2018-3646

Affected Products:

SUSE Linux Enterprise Server for SAP 12-SP2

SUSE Linux Enterprise Server 12-SP2-LTSS

https://www.suse.com/security/cve/CVE-2018-10853.html

https://www.suse.com/security/cve/CVE-2018-3646.html

https://bugzilla.suse.com/1097108

https://bugzilla.suse.com/1099306

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2018:2389-1
Rating: important

Topics%20covered

Topics Covered

security advisory vulnerability patch important linux kernel

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.