Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

SUSE: 2023:6789-1 Critical: Kernel Vulnerability Patch

suse
Calendar Grey August 20, 2018
Scroller Suse Esm H88
A critical Ubuntu patch for the OS Kernel tackles 10 vulnerabilities, reinforcing protection and reliability for its users.
An update that solves 12 vulnerabilities and has 88 fixes is now available

Summary

The SUSE Linux Enterprise 15 azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-5391: A remote attacker even with relatively low bandwidth could have caused lots of CPU usage by triggering the worst case scenario during fragment reassembly (bsc#1103097) - CVE-2018-3620, CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present in the L1 Datacache used by other hyperthreads on the same CPU core, potentially leaking sensitive data, even from other virtual machines or the host system. (bnc#1089343, bsc#1087081). - CVE-2018-10882: A local user could have caused an out-of-bound write, leading to denial of service and a system crash by unmounting a crafted

References

#1051510 #1051979 #1065600 #1066110 #1077761

#1081917 #1083647 #1086274 #1086288 #1086314

#1086315 #1086317 #1086327 #1086331 #1086906

#1087081 #1087092 #1089343 #1090888 #1097104

#1097577 #1097808 #1099811 #1099813 #1099844

#1099845 #1099846 #1099849 #1099858 #1099863

#1099864 #1100132 #1101116 #1101331 #1101669

#1101822 #1101828 #1101832 #1101833 #1101837

#1101839 #1101841 #1101843 #1101844 #1101845

#1101847 #1101852 #1101853 #1101867 #1101872

#1101874 #1101875 #1101882 #1101883 #1101885

#1101887 #1101890 #1101891 #1101893 #1101895

#1101896 #1101900 #1101902 #1101903 #1102633

#1102658 #1103097 #1103269 #1103277 #1103356

#1103363 #1103421 #1103445 #1103517 #1103723

#1103724 #110...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2018:2450-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.